1009
top 50 comments
sorted by: hot top controversial new old
[-] AnonymousLlama@kbin.social 79 points 2 years ago* (last edited 2 years ago)

Need the opposite costume, the overly eager sys admin.

  • wants to force password changes once a month for security
  • constantly changing security policies to reflect the flavor of the month
  • constantly sends out phishing emails tests, wonders why no one replies to any of his emails
[-] RarePossum@programming.dev 18 points 2 years ago

My fucking uni is trying to move to passwordless, but you will always need a password to log onto any lab device, and to the wifi, so why?

[-] newIdentity@sh.itjust.works 8 points 2 years ago

I mean you don't actually need a password for that when it's implemented the right way

[-] Pyrux@programming.dev 10 points 2 years ago

Then they have you make it some 12 character length minimum string with mixed case and special characters and dictionary lookup so it isn't some common phrase but you're also logging in through a telnet instance onto a Unix system.

[-] MaxVerstappen@lemmy.world 8 points 2 years ago

As someone in the InfoSec field, I also hate those people.

[-] magic_lobster_party@kbin.social 5 points 2 years ago* (last edited 2 years ago)

Sysadmin: “A clear indication of phishing email is the sense of urgency. We would never send out any email regarding urgent updates that needs immediate action.”

Also sysadmin: “URGENT!!! You must update your system now before Friday!!! Click link here for instructions! Otherwise you will be locked out!”

[-] AnonymousLlama@kbin.social 3 points 2 years ago

Spot on. We're changing XYZ policy and we need everyone to do this training within the week. Wait, why's no one opening my emails

load more comments (1 replies)
[-] HairHeel@programming.dev 58 points 2 years ago
  • Installs antivirus on servers that wrecks application performance
  • installs content filtering proxy that prevents developers from reading “hacking materials” like OWASP documentation
  • won’t let developers install anything on their own machines without filing a ticket and waiting 6 weeks
  • pushes unannounced antivirus updates that pop up OS security dialogs like “Netscan Antivirus would like to monitor all network traffic. Enter your password to approve”, and is surprised when users don’t enter their passwords.

Your corporate IT guy

[-] Wojwo@lemmy.ml 10 points 2 years ago

Sigh. Their hearts are in the right places...

[-] senicar@social.cyb3r.dog 2 points 2 years ago

They usually don't have a choice. They know this stuff is bad, but they need it to demonstrate compliance with XYZ framework so they can fill out the marketing copy so sales can land a contract with some big customer that wants to know why $competitor has better security than you.

[-] kd45@lemm.ee 10 points 2 years ago

We might work at the same company lmao. My laptop is borderline unusable due to all the monitoring garbage despite having really fast hardware

[-] Judgy_McJudgerson@lemm.ee 41 points 2 years ago

“What do you mean this password is too short? I use it for everything!”

[-] Lepsea@sh.itjust.works 9 points 2 years ago

"how many times do i have to tell you that your name + your birthday date js not a good password!"

[-] reverie@lemmy.world 6 points 2 years ago

Needs a special character?

Password123!

[-] geekworking@lemmy.world 38 points 2 years ago

Even worse is the CEO.

He needs access to everything and he's far too important to waste time with security.

[-] Noughmad@programming.dev 11 points 2 years ago

This is the reason why those scams are so successful:

"Hi this is the CEO, wire $10000 to this account right now, we need it there yesterday. I don't have time to talk, just do it. Bye"

[-] wholeofthemoon@lemmy.world 28 points 2 years ago

"My files are highly confidential"

password is suburb+suburbpostcode

[-] Dubious_Fart@lemmy.ml 19 points 2 years ago

I bet he also picks up USB sticks from the parking lot and plugs them into his work computer.

[-] DragonAce@lemmy.world 18 points 2 years ago

I used to have a lady I worked with who was like this. She had the common sense of a fucking carrot and was dumb as shit. What was weird is she was highly skilled in the one job she was hired for, the rest of the time she would click on everything and I would had to fix her computer multiple times a week. One time I tried to walk her thru something on the phone and I told her to click on an icon, her response was "Whats an icon?"

[-] Saigonauticon@voltage.vn 17 points 2 years ago

On the other side of things, don't you love systems that return "invalid password: password is not unique"?

[-] Nfntordr@lemmy.world 13 points 2 years ago

The cybersecurity email tests I get at work are so transparent - Hi user, You have an unpaid invoice, please follow link to pay immediately.

I wish I could I could reply no I don't fuck off but I'd probably get in trouble lol

[-] magic_lobster_party@kbin.social 13 points 2 years ago

At my work the company wanted to show some gratitude and sent out email with free ice cream vouchers to everybody. Many suspected this was just another one of these cybersecurity email tests, so the company had to clarify it’s all real.

I think it’s hilarious the thought about hackers using ice cream as bait. Maybe that would work?

[-] flashgnash@lemm.ee 4 points 2 years ago

Evidently not at your company

[-] Nfntordr@lemmy.world 4 points 2 years ago

Well, I guess it's good that people were being vigilant. But yes, I guess anything could work

[-] nekomusumeninaritai 1 points 2 years ago

I imagine it'd be satisfying to reply “fuck off”, but it'd let the attacker know it is a live address for a more targeted spear phfishing attack, so it is the right call not to respond imho.

[-] oshitwaddup@lemmy.antemeridiem.xyz 12 points 2 years ago

Clicks on everything or is too scared to click on anything and never learns how to use the software

[-] kkard2@lemmy.ml 9 points 2 years ago

wait untill you hear "if i remember correctly my email password was {name} {surname} something @ gmail.com... what do you mean that's not it? why do i even need a password?"...

[-] yeather@lemmy.ca 5 points 2 years ago

Fuck my email is (first name)(last initial)(birthday and month)@gmail.com

[-] zerkrazus@kbin.social 7 points 2 years ago

Searches for things online by typing it as a post on social media instead of using a search engine as in: "Google what is the weather like today near me?"

[-] nekomusumeninaritai 2 points 2 years ago

You must know my parents 😅

[-] Crackhappy@lemmy.world 4 points 2 years ago

Hey. Password123 is progress, right?

[-] sik0fewl@kbin.social 9 points 2 years ago

They made me change it, so it's Password124 now.

[-] Cirom@sh.itjust.works 5 points 2 years ago

... And then 2 months later, "why can't I log in"

load more comments
view more: next ›
this post was submitted on 24 Jul 2023
1009 points (100.0% liked)

Programmer Humor

36902 readers
105 users here now

Post funny things about programming here! (Or just rant about your favourite programming language.)

Rules:

founded 5 years ago
MODERATORS