E*****m
发帖数: 25615 | 1 看看強者怎麼做的。
http://www.theregister.co.uk/2013/01/16/developer_oursources_jo
Security audit finds dev OUTSOURCED his JOB to China to goof off at work
Cunning scheme netted him 'best in company' awards
By Iain Thomson in San Francisco • Get more from this author
Posted in Business, 16th January 2013 01:29 GMT
A security audit of a US critical infrastructure company last year revealed
that its star developer had outsourced his own job to a Chinese
subcontractor and was spending all his work time playing around on the
internet.
The firm's telecommunications supplier Verizon was called in after the
company set up a basic VPN system with two-factor authentication so staff
could work at home. The VPN traffic logs showed a regular series of logins
to the company's main server from Shenyang, China, using the credentials of
the firm's top programmer, "Bob".
"The company's IT personnel were sure that the issue had to do with some
kind of zero day malware that was able to initiate VPN connections from Bob'
s desktop workstation via external proxy and then route that VPN traffic to
China, only to be routed back to their concentrator," said Verizon. "Yes, it
is a bit of a convoluted theory, and like most convoluted theories, an
incorrect one."
After getting permission to study Bob's computer habits, Verizon
investigators found that he had hired a software consultancy in Shenyang to
do his programming work for him, and had FedExed them his two-factor
authentication token so they could log into his account. He was paying them
a fifth of his six-figure salary to do the work and spent the rest of his
time on other activities.
The analysis of his workstation found hundreds of PDF invoices from the
Chinese contractors and determined that Bob's typical work day consisted of:
9:00 a.m. – Arrive and surf Reddit for a couple of hours. Watch cat videos
11:30 a.m. – Take lunch
1:00 p.m. – Ebay time
2:00-ish p.m – Facebook updates, LinkedIn
4:30 p.m. – End-of-day update e-mail to management
5:00 p.m. – Go home
The scheme worked very well for Bob. In his performance assessments by the
firm's human resources department, he was the firm's top coder for many
quarters and was considered expert in C, C++, Perl, Java, Ruby, PHP, and
Python.
Further investigation found that the enterprising Bob had actually taken
jobs with other firms and had outsourced that work too, netting him hundreds
of thousands of dollars in profit as well as lots of time to hang around on
internet messaging boards and checking out the latest Detective Mittens
video.
Bob is no longer employed by the firm. ® |
d****n
发帖数: 1637 | 2 真是当老板的好料子。
这公司会不会把沈阳那个小伙招来？ |
E*****m
发帖数: 25615 | 3
Reddit 上齊聲讚揚這老兄， 他管理 contractor 的工夫一流，
顯然他在公司內可以報告詳細進度以及問題， 比大部份
manager 都強。 他還可以給其他公司做，不是一般的強！
瀋陽那頭恐怕不是一個人而已。
【在 d****n 的大作中提到】
: 真是当老板的好料子。
: 这公司会不会把沈阳那个小伙招来？
|
d****n
发帖数: 1637 | 4 我估计是得罪admin了，然后人家翻出他的log，给整下水了。
教训是：一定要和admin搞好关系。 |
r*g
发帖数: 3159 | 5 而且有魄力。肯花好几万。境界高。
【在 E*****m 的大作中提到】
:
: Reddit 上齊聲讚揚這老兄， 他管理 contractor 的工夫一流，
: 顯然他在公司內可以報告詳細進度以及問題， 比大部份
: manager 都強。 他還可以給其他公司做，不是一般的強！
: 瀋陽那頭恐怕不是一個人而已。
|
m********5
发帖数: 17667 | 6 Probably they r going to fire most programmer and outsource everything to
that company. I think firing this guy is a stupid decision: they r going to
need him for QA :p
【在 d****n 的大作中提到】
: 真是当老板的好料子。
: 这公司会不会把沈阳那个小伙招来？
|
m********5
发帖数: 17667 | 7 He is really good, I think he might start his own company.
【在 E*****m 的大作中提到】
:
: Reddit 上齊聲讚揚這老兄， 他管理 contractor 的工夫一流，
: 顯然他在公司內可以報告詳細進度以及問題， 比大部份
: manager 都強。 他還可以給其他公司做，不是一般的強！
: 瀋陽那頭恐怕不是一個人而已。
|
m*******l
发帖数: 12782 | 8 true
【在 m********5 的大作中提到】
: He is really good, I think he might start his own company.
|
N*****m
发帖数: 42603 | 9 靠，搞个consulting轻而易举，还不用w2
不知道为啥要到verizon上班
【在 m********5 的大作中提到】
: He is really good, I think he might start his own company.
|
r****y
发帖数: 26819 | 10 Verizon只是负责调查这个公司的网络事件，出事的公司并不是VZ。
【在 N*****m 的大作中提到】
: 靠，搞个consulting轻而易举，还不用w2
: 不知道为啥要到verizon上班
|
|
|
N*****m
发帖数: 42603 | 11 分特，看岔了
【在 r****y 的大作中提到】
: Verizon只是负责调查这个公司的网络事件，出事的公司并不是VZ。
|
D*******a
发帖数: 3688 | 12 he should really setup an reverse tunnel
revealed
【在 E*****m 的大作中提到】
: 看看強者怎麼做的。
: http://www.theregister.co.uk/2013/01/16/developer_oursources_jo
: Security audit finds dev OUTSOURCED his JOB to China to goof off at work
:
: Cunning scheme netted him 'best in company' awards
: By Iain Thomson in San Francisco • Get more from this author
: Posted in Business, 16th January 2013 01:29 GMT
: A security audit of a US critical infrastructure company last year revealed
: that its star developer had outsourced his own job to a Chinese
: subcontractor and was spending all his work time playing around on the
|
N*****m
发帖数: 42603 | 13 老是连中国，那也不行吧
【在 D*******a 的大作中提到】
: he should really setup an reverse tunnel
:
: revealed
|
D*******a
发帖数: 3688 | 14 tunnel to home, and from home tunnel to china :D
【在 N*****m 的大作中提到】
: 老是连中国，那也不行吧
|
E*****m
发帖数: 25615 | 15 前人的失誤正好告訴你哪個漏洞該補上。
【在 D*******a 的大作中提到】
: tunnel to home, and from home tunnel to china :D
|
l*********s
发帖数: 5409 | |
n*w
发帖数: 3393 | |
h***s
发帖数: 1716 | 18 SUMMARY
"
Bob is no longer employed by the firm. ®
"
revealed
【在 E*****m 的大作中提到】
: 看看強者怎麼做的。
: http://www.theregister.co.uk/2013/01/16/developer_oursources_jo
: Security audit finds dev OUTSOURCED his JOB to China to goof off at work
:
: Cunning scheme netted him 'best in company' awards
: By Iain Thomson in San Francisco • Get more from this author
: Posted in Business, 16th January 2013 01:29 GMT
: A security audit of a US critical infrastructure company last year revealed
: that its star developer had outsourced his own job to a Chinese
: subcontractor and was spending all his work time playing around on the
|
E*****m
发帖数: 25615 | 19 你恐怕沒有得到它
【在 h***s 的大作中提到】
: SUMMARY
: "
: Bob is no longer employed by the firm. ®
: "
:
: revealed
|
h***s
发帖数: 1716 | 20 Everyone's gotcha is just a matter of opinions, although the fact is still
the same.
My opinion is: this guy got nothing better to do even if he "managed" a few
contractors, which was unsuccessful in the end.
What did he get paid? Just the net salary from his firm. It only matters
whether the thing converted to $$$, no matter how cool the trick is. It's
not because he is talented, but because he is lazy... ha! Look at his
favorite daily activities: facebook, browsing internet... nice!
【在 E*****m 的大作中提到】
: 你恐怕沒有得到它
|
|
|
N*****m
发帖数: 42603 | 21 问题是他这样干能干几份兼职，总和还是比他只干这一份工作多多了
few
【在 h***s 的大作中提到】
: Everyone's gotcha is just a matter of opinions, although the fact is still
: the same.
: My opinion is: this guy got nothing better to do even if he "managed" a few
: contractors, which was unsuccessful in the end.
: What did he get paid? Just the net salary from his firm. It only matters
: whether the thing converted to $$$, no matter how cool the trick is. It's
: not because he is talented, but because he is lazy... ha! Look at his
: favorite daily activities: facebook, browsing internet... nice!
|
d**********x
发帖数: 4083 | 22 人家享受了生活
比就知道$$$的屌丝强多了
still
s
【在 N*****m 的大作中提到】
: 问题是他这样干能干几份兼职，总和还是比他只干这一份工作多多了
:
: few
|
r****y
发帖数: 26819 | 23 人家的幸福生活都是沈阳小伙子们的辛勤劳动创造的。
【在 d**********x 的大作中提到】
: 人家享受了生活
: 比就知道$$$的屌丝强多了
:
: still
: s
|
N*****m
发帖数: 42603 | 24 其实一般了
不如我那每天打高球的老板
【在 d**********x 的大作中提到】
: 人家享受了生活
: 比就知道$$$的屌丝强多了
:
: still
: s
|
r****y
发帖数: 26819 | 25 风险不一样。如果Bob不是直接让沈阳小伙子们上VPN，而是自己在家搭个环境让人家用
，风险就很小了。
【在 N*****m 的大作中提到】
: 其实一般了
: 不如我那每天打高球的老板
|
h***s
发帖数: 1716 | 26 That won't go too much far. Basically he was doing the fraud, stealing the
firm's resource to his personal benefit. No business corporate is that
stupid to live with that very long.
I guess - that guy probably have to start his own business from now on,
which means he could not facebooking much any more... ha!
【在 N*****m 的大作中提到】
: 问题是他这样干能干几份兼职，总和还是比他只干这一份工作多多了
:
: few
|
N*****m
发帖数: 42603 | 27 说明业务还是不精啊
【在 r****y 的大作中提到】
: 风险不一样。如果Bob不是直接让沈阳小伙子们上VPN，而是自己在家搭个环境让人家用
: ，风险就很小了。
|
m*******l
发帖数: 12782 | 28 ???
文科生?
【在 h***s 的大作中提到】
: That won't go too much far. Basically he was doing the fraud, stealing the
: firm's resource to his personal benefit. No business corporate is that
: stupid to live with that very long.
: I guess - that guy probably have to start his own business from now on,
: which means he could not facebooking much any more... ha!
|
N*****m
发帖数: 42603 | 29 facebooking算个球
我每天打高球的老板情何以堪
【在 h***s 的大作中提到】
: That won't go too much far. Basically he was doing the fraud, stealing the
: firm's resource to his personal benefit. No business corporate is that
: stupid to live with that very long.
: I guess - that guy probably have to start his own business from now on,
: which means he could not facebooking much any more... ha!
|
d**********x
发帖数: 4083 | 30 宅男的乐趣你们永远不懂
【在 N*****m 的大作中提到】
: facebooking算个球
: 我每天打高球的老板情何以堪
|
|
|
h***s
发帖数: 1716 | 31 I guess I should say "Congrat to him" now... I can do that!
【在 d**********x 的大作中提到】
: 人家享受了生活
: 比就知道$$$的屌丝强多了
:
: still
: s
|
E*****m
发帖数: 25615 | 32 有個評論說得好， 對這Bob 覺得氣憤的都是因為自己沒先想到這主意，
或者沒這膽去做。
你覺得碼工就該腳踏實地自己碼是吧？ Bill Gates 自己碼 DOS 的話，
現在不知道有沒有人聽過他。
【在 h***s 的大作中提到】
: That won't go too much far. Basically he was doing the fraud, stealing the
: firm's resource to his personal benefit. No business corporate is that
: stupid to live with that very long.
: I guess - that guy probably have to start his own business from now on,
: which means he could not facebooking much any more... ha!
|
h***s
发帖数: 1716 | 33 对这个宝贝不是气氛，是看不起。他不过是个有点小聪明而已。
他和BILL GATES比不了的，人BILLL GATES年轻时候对于花点时间看电视都认为是糟蹋
自己的生命，哪可能象他这么成天非死不可的“享受”生活呐？有人喜欢他也不奇怪，
就像有那么多吃撑的喜欢FB一样。
【在 E*****m 的大作中提到】
: 有個評論說得好， 對這Bob 覺得氣憤的都是因為自己沒先想到這主意，
: 或者沒這膽去做。
: 你覺得碼工就該腳踏實地自己碼是吧？ Bill Gates 自己碼 DOS 的話，
: 現在不知道有沒有人聽過他。
|
d***q
发帖数: 1119 | 34
bill gates也是写过程序的。dos上面的basic解析器好像就是他写的
【在 h***s 的大作中提到】
: 对这个宝贝不是气氛，是看不起。他不过是个有点小聪明而已。
: 他和BILL GATES比不了的，人BILLL GATES年轻时候对于花点时间看电视都认为是糟蹋
: 自己的生命，哪可能象他这么成天非死不可的“享受”生活呐？有人喜欢他也不奇怪，
: 就像有那么多吃撑的喜欢FB一样。
|
n******t
发帖数: 4406 | 35 其实这个人干的就是大部分project manager干的事，
而且不会去烦别人开发人员和打小报告，我看好的很。
【在 h***s 的大作中提到】
: 对这个宝贝不是气氛，是看不起。他不过是个有点小聪明而已。
: 他和BILL GATES比不了的，人BILLL GATES年轻时候对于花点时间看电视都认为是糟蹋
: 自己的生命，哪可能象他这么成天非死不可的“享受”生活呐？有人喜欢他也不奇怪，
: 就像有那么多吃撑的喜欢FB一样。
|
