Home Mail MemberMap Chat (0) Wallpapers
Go Back   ChiefsPlanet > The Ed & Dave Lounge

Reply
 
Thread Tools Display Modes
Old 01-17-2013, 11:17 PM  
teedubya teedubya is offline
Waiting Until Next Year!
 
teedubya's Avatar
 
Join Date: Oct 2003
Casino cash: $6858
How a "model" employee outsourced his $250k/yr job to China for $50k/yr

GENIUS.

http://www.theglobeandmail.com/techn...rticle7409256/

Bob was his company’s best software developer, got glowing performance reviews and earned more than $250,000 a year.

Then one day last spring, Bob’s employer, an American infrastructure company, thought its computer network had been attacked by a virus.

The ensuing forensic probe revealed that Bob’s software code had in fact been the handiwork of a Chinese subcontractor.

Bob was paying a Chinese firm about $50,000 a year to do his work, then spent the day surfing the web, watching cat videos and updating his Facebook page.

“This particular case was pretty unique,” computer security investigator Andrew Valentine, who helped uncover Bob’s scheme, said in an e-mail to The Globe and Mail. “We thought it was actually pretty clever.”

Mr. Valentine made Bob’s tale public in a blog post on Monday and it has since been the talk of tech websites.

“While the large-scale data breaches make the headlines and are widely discussed among security professionals, often the small and unknown cases are the ones that are remembered as being the most interesting,” Mr. Valentine wrote in his blog.

He said the creative but deceitful programmer, whom he called by the pseudonym “Bob,” was a family man and long-time employee in his 40s, “inoffensive and quiet. Someone you wouldn’t look at twice in an elevator.”

Mr. Valentine, who works for the global communications company Verizon, wouldn’t identify Bob’s employer except to say that it was a private “critical infrastructure company” in the United States.

For the past two years, the firm had increasingly been getting employees to telecommute or work from home.

To connect remotely to the company computer system, staffers needed a personal identification number, which changed at regular intervals. Employees were issued security tokens, small devices that updated them with the latest generated PIN.

Last spring, the company grew concerned about computer security breaches and asked its IT department to inspect more closely its remote-access logs, looking for unusual patterns of activity.

To their surprise, they saw that someone connected into their network every day from Shenyang, a city in the historical Manchurian north of China, near the Korean peninsula.

More interestingly, the Chinese intruder was logged in using Bob’s PIN and credentials, “yet the employee is right there, sitting at his desk, staring into his monitor,” Mr. Valentine wrote.

“Based on what information they had obtained, the company initially suspected some kind of unknown malware that was able [to] route traffic from a trusted internal connection to China, and then back. This was the only way they could intellectually resolve the authentication issue. What other explanation could there be?”

Verizon investigators were contacted. They inspected Bob’s workstation, trying to find whether he had unintentionally downloaded a virus.

Instead, the cyber-sleuths discovered hundreds of invoices from a software developer in Shenyang.

The investigation revealed that Bob had outsourced his job. To get around the changing PINs, he couriered his security tokens to the Shenyang subcontractor.

It wasn’t clear how long Bob’s scheme had been running because log records only dated back to six months.

While Bob physically reported to the company that hired Verizon to investigate him, he also padded his income as a contract worker for other local firms, for which he also relied on his Chinese outsourcing arrangement.

Looking at his web browsing history, investigators found that Bob spent his workday checking sites such as Reddit, Ebay, Facebook and LinkedIn and watching cat videos. Then he would type an e-mail at the end of the day to update management about his “work” and left at 5 p.m.

Bob was fired for violating internal company policy, Mr. Valentine said in his e-mail to The Globe and Mail.

By all accounts, the Chinese contractor did an excellent job and until then it reflected well on Bob.

“His code was clean, well-written, and submitted in a timely fashion,” Mr. Valentine noted. “Quarter after quarter, his performance review noted him as the best developer in the building.”

Work Smarter, Not Harder?
Posts: 8,156
teedubya is obviously part of the inner Circle.teedubya is obviously part of the inner Circle.teedubya is obviously part of the inner Circle.teedubya is obviously part of the inner Circle.teedubya is obviously part of the inner Circle.teedubya is obviously part of the inner Circle.teedubya is obviously part of the inner Circle.teedubya is obviously part of the inner Circle.teedubya is obviously part of the inner Circle.teedubya is obviously part of the inner Circle.teedubya is obviously part of the inner Circle.
  Reply With Quote
Old 01-18-2013, 07:57 AM   #16
wazu wazu is offline
...
 
wazu's Avatar
 

Join Date: May 2002
Casino cash: $6417
VARSITY
Quote:
Originally Posted by bevischief View Post
How many times is this going to posted? This is at least the 3rd time.
Nope, this is the first. I see no credible evidence to the contrary.
Posts: 12,095
wazu Forgot to Remove His Claytex and Got Toxic Shock Syndrome.wazu Forgot to Remove His Claytex and Got Toxic Shock Syndrome.wazu Forgot to Remove His Claytex and Got Toxic Shock Syndrome.wazu Forgot to Remove His Claytex and Got Toxic Shock Syndrome.wazu Forgot to Remove His Claytex and Got Toxic Shock Syndrome.wazu Forgot to Remove His Claytex and Got Toxic Shock Syndrome.wazu Forgot to Remove His Claytex and Got Toxic Shock Syndrome.wazu Forgot to Remove His Claytex and Got Toxic Shock Syndrome.wazu Forgot to Remove His Claytex and Got Toxic Shock Syndrome.wazu Forgot to Remove His Claytex and Got Toxic Shock Syndrome.wazu Forgot to Remove His Claytex and Got Toxic Shock Syndrome.
  Reply With Quote
Old 01-18-2013, 09:12 AM   #17
teedubya teedubya is offline
Waiting Until Next Year!
 
teedubya's Avatar
 

Join Date: Oct 2003
Casino cash: $6858
I didn't see it... So you 'Q'ueers can eat a bag of dicks. :-P
Posts: 8,156
teedubya is obviously part of the inner Circle.teedubya is obviously part of the inner Circle.teedubya is obviously part of the inner Circle.teedubya is obviously part of the inner Circle.teedubya is obviously part of the inner Circle.teedubya is obviously part of the inner Circle.teedubya is obviously part of the inner Circle.teedubya is obviously part of the inner Circle.teedubya is obviously part of the inner Circle.teedubya is obviously part of the inner Circle.teedubya is obviously part of the inner Circle.
  Reply With Quote
Old 01-18-2013, 09:21 AM   #18
morphius morphius is offline
World's finest morphius
 
morphius's Avatar
 

Join Date: Aug 2000
Casino cash: $5700
Quote:
Originally Posted by big nasty kcnut View Post
why is this bad as long as his Asian bitches did the work why are they firing him.
For starters, there are a lot of pieces within telephony that you are not allowed to grant access to anyone that is not a citizen.
__________________
Herm Edwards neutering offenses one QB at a time.
Posts: 24,577
morphius would the whole thing.morphius would the whole thing.morphius would the whole thing.morphius would the whole thing.morphius would the whole thing.morphius would the whole thing.morphius would the whole thing.morphius would the whole thing.morphius would the whole thing.morphius would the whole thing.morphius would the whole thing.
  Reply With Quote
Old 01-18-2013, 09:33 AM   #19
kepp kepp is offline
MVP
 
kepp's Avatar
 

Join Date: Aug 2005
Location: KCMO
Casino cash: $6232
Quote:
Originally Posted by Garcia Bronco View Post
Lol...he should resell the software service, his mistake? Doing it at work. He does that shit at home and he probably doesn't get caught.
I thought he was working from home. He should have set up a tunnel through his home workstation.
Posts: 9,620
kepp Forgot to Remove His Claytex and Got Toxic Shock Syndrome.kepp Forgot to Remove His Claytex and Got Toxic Shock Syndrome.kepp Forgot to Remove His Claytex and Got Toxic Shock Syndrome.kepp Forgot to Remove His Claytex and Got Toxic Shock Syndrome.kepp Forgot to Remove His Claytex and Got Toxic Shock Syndrome.kepp Forgot to Remove His Claytex and Got Toxic Shock Syndrome.kepp Forgot to Remove His Claytex and Got Toxic Shock Syndrome.kepp Forgot to Remove His Claytex and Got Toxic Shock Syndrome.kepp Forgot to Remove His Claytex and Got Toxic Shock Syndrome.kepp Forgot to Remove His Claytex and Got Toxic Shock Syndrome.kepp Forgot to Remove His Claytex and Got Toxic Shock Syndrome.
  Reply With Quote
Old 01-18-2013, 09:40 AM   #20
splatbass splatbass is offline
MVP
 

Join Date: Apr 2001
Location: Honolulu, HI
Casino cash: $6456
Quote:
Originally Posted by big nasty kcnut View Post
why is this bad as long as his Asian bitches did the work why are they firing him.
Sending your token to an unknown person in China - the source of most hacking attacks on US businesses - is enough. He gave the Chinese an unobstructed path to their server, and a lot of damage could have been done. The fact that none was done doesn't change that.

It is no different than giving your ID and PIN to someone outside your company and allowing them to come and go in the building as much as they want.

He should have been fired.

Last edited by splatbass; 01-18-2013 at 09:45 AM..
Posts: 5,713
splatbass 's adopt a chief was Sabby Piscitellisplatbass 's adopt a chief was Sabby Piscitellisplatbass 's adopt a chief was Sabby Piscitellisplatbass 's adopt a chief was Sabby Piscitellisplatbass 's adopt a chief was Sabby Piscitellisplatbass 's adopt a chief was Sabby Piscitellisplatbass 's adopt a chief was Sabby Piscitellisplatbass 's adopt a chief was Sabby Piscitellisplatbass 's adopt a chief was Sabby Piscitellisplatbass 's adopt a chief was Sabby Piscitellisplatbass 's adopt a chief was Sabby Piscitelli
  Reply With Quote
Old 01-18-2013, 09:54 AM   #21
Reerun_KC Reerun_KC is offline
Rock Chalk Jayhawks! KU!!!
 
Reerun_KC's Avatar
 

Join Date: Aug 2005
Location: Kansas Jayhawks
Casino cash: $8353
Quote:
Originally Posted by Saulbadguy View Post
I was more surprised at 50K for a Chinese programmer. That's pretty expensive.
This! Holy crap he is getting robbed....
Posts: 44,863
Reerun_KC 's phone was tapped by Scott Pioli.Reerun_KC 's phone was tapped by Scott Pioli.Reerun_KC 's phone was tapped by Scott Pioli.Reerun_KC 's phone was tapped by Scott Pioli.Reerun_KC 's phone was tapped by Scott Pioli.Reerun_KC 's phone was tapped by Scott Pioli.Reerun_KC 's phone was tapped by Scott Pioli.Reerun_KC 's phone was tapped by Scott Pioli.Reerun_KC 's phone was tapped by Scott Pioli.Reerun_KC 's phone was tapped by Scott Pioli.Reerun_KC 's phone was tapped by Scott Pioli.
  Reply With Quote
Old 01-18-2013, 09:55 AM   #22
mcaj22 mcaj22 is offline
MVP
 
mcaj22's Avatar
 

Join Date: Feb 2010
Location: Pennsylvania
Casino cash: $5912
how an R outsourced Q to P for his OST
Posts: 8,534
mcaj22 Forgot to Remove His Claytex and Got Toxic Shock Syndrome.mcaj22 Forgot to Remove His Claytex and Got Toxic Shock Syndrome.mcaj22 Forgot to Remove His Claytex and Got Toxic Shock Syndrome.mcaj22 Forgot to Remove His Claytex and Got Toxic Shock Syndrome.mcaj22 Forgot to Remove His Claytex and Got Toxic Shock Syndrome.mcaj22 Forgot to Remove His Claytex and Got Toxic Shock Syndrome.mcaj22 Forgot to Remove His Claytex and Got Toxic Shock Syndrome.mcaj22 Forgot to Remove His Claytex and Got Toxic Shock Syndrome.mcaj22 Forgot to Remove His Claytex and Got Toxic Shock Syndrome.mcaj22 Forgot to Remove His Claytex and Got Toxic Shock Syndrome.mcaj22 Forgot to Remove His Claytex and Got Toxic Shock Syndrome.
  Reply With Quote
Old 01-18-2013, 09:56 AM   #23
Reerun_KC Reerun_KC is offline
Rock Chalk Jayhawks! KU!!!
 
Reerun_KC's Avatar
 

Join Date: Aug 2005
Location: Kansas Jayhawks
Casino cash: $8353
Quote:
Originally Posted by mcaj22 View Post
how an R outsourced Q to P for his OST
Let me check with your mom....
Posts: 44,863
Reerun_KC 's phone was tapped by Scott Pioli.Reerun_KC 's phone was tapped by Scott Pioli.Reerun_KC 's phone was tapped by Scott Pioli.Reerun_KC 's phone was tapped by Scott Pioli.Reerun_KC 's phone was tapped by Scott Pioli.Reerun_KC 's phone was tapped by Scott Pioli.Reerun_KC 's phone was tapped by Scott Pioli.Reerun_KC 's phone was tapped by Scott Pioli.Reerun_KC 's phone was tapped by Scott Pioli.Reerun_KC 's phone was tapped by Scott Pioli.Reerun_KC 's phone was tapped by Scott Pioli.
  Reply With Quote
Old 01-18-2013, 09:59 AM   #24
mcaj22 mcaj22 is offline
MVP
 
mcaj22's Avatar
 

Join Date: Feb 2010
Location: Pennsylvania
Casino cash: $5912
Quote:
Originally Posted by Reerun_KC View Post
Let me check with your mom....
you want to check with her for a rqpost?
Posts: 8,534
mcaj22 Forgot to Remove His Claytex and Got Toxic Shock Syndrome.mcaj22 Forgot to Remove His Claytex and Got Toxic Shock Syndrome.mcaj22 Forgot to Remove His Claytex and Got Toxic Shock Syndrome.mcaj22 Forgot to Remove His Claytex and Got Toxic Shock Syndrome.mcaj22 Forgot to Remove His Claytex and Got Toxic Shock Syndrome.mcaj22 Forgot to Remove His Claytex and Got Toxic Shock Syndrome.mcaj22 Forgot to Remove His Claytex and Got Toxic Shock Syndrome.mcaj22 Forgot to Remove His Claytex and Got Toxic Shock Syndrome.mcaj22 Forgot to Remove His Claytex and Got Toxic Shock Syndrome.mcaj22 Forgot to Remove His Claytex and Got Toxic Shock Syndrome.mcaj22 Forgot to Remove His Claytex and Got Toxic Shock Syndrome.
  Reply With Quote
Reply

Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is On

Forum Jump




All times are GMT -6. The time now is 04:42 AM.


Powered by vBulletin® Version 3.8.0
Copyright ©2000 - 2014, Jelsoft Enterprises Ltd.