Linux nerd and consultant. Sci-fi, comedy, and podcast author. Former Katsucon president, former roller derby bouncer. http://punkwalrus.net

  • 0 Posts
  • 21 Comments
Joined 1 year ago
cake
Cake day: June 22nd, 2023

help-circle
  • Probably HR (or the NCS equivalent) never told the right people. I am not saying this is actually what happened, but a lot of IT bemoan the fact they are never told some rando employee was fired because HR neglects to inform them. Sometimes it takes months to discover, and even with a 90 day password/login lockout, some halfway decent admin could get around this by secretly building a back door, and using the messed up communication and politics between departments to hide this. Even in the 1990s, I saw people put in “time bombs” in their code that “if such and such is not updated in 6 months, run destructo-script A.”

    But imagine someone like Kandula Nagaraju here. Worked in QA, probably did a great jobs with some skills, but had the personality of swallowing broken glass. He was terminated in October 2022 due to “poor work performance,” which could mean anything. “Not a team player.” Or maybe he really was an idiot: I mean, a smart person would have a conniption, but get employed elsewhere and then slam his former company at parties. “Those NCS folks didn’t know what they had with me!” But this guy was probably someone with some anger management issues, probably a jerk, and possibly stupid. He might have had revenge fantasies, and set up a small virtual server posing as a backup code mirror. But outside the audits, it allowed ssh from the outside, and hid it through a knockd daemon. Or maybe only launched ssh at certain hours before shutting it down again. Silently working away in a sea of virtual servers with little to no updated documentation. He gets in, has internal access, and runs a script with admin credentials because they don’t rotate their AWS keys/secrets quickly enough. Or didn’t even know he was let go.

    After Kandula’s contract was terminated and he arrived back in India, he used his laptop to gain unauthorised access to the system using the administrator login credentials. He did so on six occasions between Jan 6 and Jan 17, 2023.

    That’s embarrassing to the company. Not only did he get in, but SIX TIMES after he was let go. he probably knew what order to run the delete commands (like, say, an aws “terminate-instances” cli command from a primary node), and did so one by one, probably during hours with the least amount of supervision, where the first few alerts would take hours to get someone in the monitoring chain to wake an admin. Given his last day was in November, and he got back in January, the admins probably thought their 90 access credential rotation was “good enough,” but he got in on his 80th day or whatever.

    I know this because I have had to do triage when a former contractor did this to a company I worked for. But instead of wiping out instances, he opened a new set of cloud accounts from the master account, put them in an unmonitored region (in this case, Asia), and spun up thousands of instances to run bitcoin mining. Only because AWS notified us of “unusual traffic” were we made aware at all, and this guy knew his shit and covered his tracks very well. He did it at a speed that could have only been automated. Thankfully, AWS did not charge us the seven figure amount that this activity amassed in just three days.


  • Punkie@lemmy.worldtoNo Stupid Questions@lemmy.worldXXX
    link
    fedilink
    arrow-up
    2
    arrow-down
    2
    ·
    4 months ago

    I can see that being very possible. You see this when taxes are levied to “improve something” and then that money doesn’t go to that something in a directly helpful way. And then the budget that is the main staple of survivability of that something is kept static because of the “new influx.”

    For example, say that you have a toll road increase to help the infrastructure of your roads. Say your Annual Budget for Transportation is $50mil for 2021. In 2022, you requested $60mil. You decide to implement tolls in new ways and increase tolls in other ways (like fines, mileage taxes, and so on) to make up that shortfall. This brings in an additional $10mil, let’s say, in 2022. The revenue is forwarded to 2023. But in 2023, you actually need $80mil because of the two years of shortfalls where it stayed at $50mil, yet costs continued to increase. That $10mil from 2022 now puts you $10 mil behind in 2023. The fact that the previous budget needed steady increases were ignored because “well, we’ll just make things more expensive to make up 2022’s shortfalls of the $60mil request.”

    That’s IF that $10mil isn’t siphoned for other things. Fresh money brings fresh ways to spend it. Grifters via backroom contracts to “fix roads” that go over budget with nothing to show for it. So these new fees and increases actually made things worse due to no oversight.

    So yeah, I could totally see UBI being siphoned off by similar things.


  • Not just LinkedIn profiles: there was a case out here near DC a while ago where a well known company leased out their function space for training meetings. Using a compromised company account, a set of scammers set up some fake recruitment profiles, leased out the meeting space for “software training,” and did some “mass hiring” where 30 individuals had their credentials scanned and duplicated. The effect was someone from the recruiting company was contacting you, you had a face-to-face where you got offered an in-person, you showed up to their offices, and got a “job offer pending a background check,” with a date of hire in official-looking emails. You sent in your SSN, copies of your passport and driver’s licence, and after a few weeks, they tell you to show up for orientation. Only, the day these people showed up, the company was confused and had never heard of you. The people you supposedly spoke to had never heard of you. And your identity was stolen, and huge loans and charges started showing up in your credit report.

    Yikes.




  • In my rare cases, it’s been one of those issues where I didn’t know they were keeping it from someone BUT it’s something that should be obvious if you thought about it for a second, OR, they claim they told me it was a secret, but it was not obvious. And I have to say, “At no point did you tell me this was a secret.” Which, you know, makes them look WORSE because now it looks like it was not only a secret, but they were intentionally covering it up as well. And then somehow that’s my fault. It becomes a game of “he said, she said,” and I lost some friends over that over the decades. Was I right? Yeah, but that’s not the point.

    The problem is people lie all the time. I do my best, but sometimes I don’t get those clues. And sometimes? I have had people lie FOR ME when there was no need to begin with. Like someone tried to “cover up” where I was some evening from my wife, when my wife knew where I was (a goth club). But then he claimed I was with him, and I wasn’t. So that started a whole mess. I had to explain, “I was still at the goth club, he thinks I was with him, because he thought you weren’t supposed to know I was at the goth club, and ‘was doing me a solid’ for no reason.” It got to the point I told everyone, “Never lie for me. Either I can stand on my own actions, or I deserve to get caught for being stupid. I am not someone who can keep track of things that actually happened, much less lies.” Lies make me panicky because, well, like I said earlier, I have accidentally exposed people.

    I try not to. But I make mistakes.


  • I rarely get angry at anyone, which, sadly, means I didn’t gain the skills to deal with it very well. Thus, if someone DOES make me angry, it can linger for YEARS. The record so far is some 50 years with my parents’ abuse, followed by a few friends’ betrayal as a teen (separate incidents). I have about half a dozen incidents where I have been seriously fucked over by people I trusted, and hate my continued anger over it more than I hate the event itself.

    I found, however, patience has its own reward. If you’re the type of person who really fucks me over, and it’s definitely not my fault, eventually your behavior will fuck yourself in other ways. I don’t “get revenge” like some cartoon, but years later, I’ll find out, “Yeah, that asshole? After her did that thing to you that took you years to get over, his super-special kid went to jail, his wife left him, his business tanked, and last anyone heard, he’s living with him mom (whom he despised) in his 50s with zero prospects for his future.” If you fucked me over, but it’s partially or wholly my fault, then, well, I deserved it. Sometimes I make mistakes, like screw someone’s lie over by revealing a secret I didn’t know was a secret. I try super super super hard not to do that, even if I hate their guts, or the lie needs to be told for some esoteric moral bullshit (like cheating on his wife I didn’t know he had). But I try to keep my nose clean. I try not to gossip when I can help it. This also helps to know “I did my best, given what I knew.”




  • I grew up with pretentiousness like this. Lot of upper middle class twits who wanted to be upper class. I used to get their goat with a kind of backhand kindness.

    “You know about ABC?” Where ABC is a question about a topic he claims to be an expert in.

    “If you don’t know how to ABC, you aren’t very educated.”

    “Ah, I see you don’t know either.”

    “I never SAID that! But I have neither the time nor patience to explain it to you.”

    “Let me ask around, and we can find the answer together.”

    “I KNOW the answer!!!”

    “Not well enough to explain it, though. But that’s okay, we can learn that, too. Let’s ask this guy. Hey, my colleague and I were wondering if you could explain ABC…”

    Oh my god, this makes their pompousness positively FUME with rage.





  • Because we made too much (over minimum wage, dual income household). I was making $13k as a sales manager, my wife was making $8k as an assistant manager, and minimum wage was $3.35/hr or just under $7k/year back then. After taxes, we made about $1200/mo, and our rent was $650 for a single bedroom apartment. No car, we took the bus, barely had enough for food and utilities.

    But we were considered way too over the “poverty line,” which was I think less than $6k/year then. We had been using birth control but when they say some form of birth control is 99% effective, the DO mean 1% failed. I have no regrets our son was born, because it turned out we couldn’t have kids later when we tried. And then later my wife died when he was 22, so if we had kids later, I would have been a widow with younger kids.

    I feel awful he grew up poor with us until he was about 10, though.


  • I can answer this: my son was born in 1990. We were extremely poor.

    We had midwives help us out as best they could, to the tune of about $3200 at the time. The birth got complicated due to a variety of health factors, and both my son and wife almost died (not because of the midwives). Luckily the midwives had a direct line to Georgetown Hospital, and the cesarean was done there. The total hospital bill was $58,000, or $138k in today’s money, although hospital costs have rose much higher vs inflation, so maybe it would be in the $200k range now. She was in the ICU for a week, hospital for another week, our son for about 3 weeks.

    My wife job didn’t have health insurance, because it wasn’t required back then. Because she was gone a week, her job fired her for an unexcused absence. Oddly enough, this made her unemployed and Washington DC had some law (or rule or something) that immediately dropped the hospital bills because of her unemployment. In the end, we had to pay $15k to about two dozen practices who individually sued us, which took 7 years to pay off and a lot of court visits and wage garnishments. It financially ruined us, pretty much. Both suffered a lot afterwards because we just couldn’t afford minimal care. It was hellish. I can’t imagine how much worse it would be today. We got evicted from our apartment, and lived in government housing for six years.

    So, yeah. Don’t have a baby in America unless you can guarantee it will be healthy and you have a lot of money. Most of my friends don’t have kids, they simply can’t afford it and look at it like the previous generation looked at concepts like summer homes and yachts. Nice luxuries, but way out of affordabilty.


  • Punkie@lemmy.worldto196@lemmy.blahaj.zonefurry rule
    link
    fedilink
    arrow-up
    17
    ·
    9 months ago

    I work at furry cons, and have done security at Bronycon. There is far more money in that fandom than people realize. A lot of it is IT of course, but you’d be surprised how many young and attractive women are in those suits with real professional careers in law, business, and medical. Furry fandom lets them be themselves.