@punkwalrus@lemmy.world cover
@punkwalrus@lemmy.world avatar

punkwalrus

@[email protected]

Linux nerd and consultant. Sci-fi, comedy, and podcast author. Former Katsucon president, former roller derby bouncer. punkwalrus.net

This profile is from a federated server and may be incomplete. View on remote instance

punkwalrus ,
@punkwalrus@lemmy.world avatar

"Decline."

Working in IT, I have learned that a lot of meetings are by people who gain "respect and notoriety" by having large meetings. It doesn't matter who shows up, it's the number, that makes them seem popular. "Get the engineers in here, this is serious business!" You begin to learn which PMs do this, and can respond (or not) accordingly. If they ping you "where are you?" you can say, "I am in an [client] audit call. I cannot leave this call while the audit is taking place." Or whatever your industry equivalent is. YMMV, some toxic environments I have been in, this was not possible.

I remember one PM was frozen in indecision. I had to tell him, "I can fix the problem, or having a meeting about it. Pick one."

"Well, both--"

"No. I can fix the problem, or having a meeting about it. Pick one or the other."

"I need you in this meeting!"

"When we explain to the customer that the fix was delayed by an hour, I can use YOUR name, as having a meeting about it instead of fixing it, correct?"

"The meeting is to be about fixing it!"

"No. I can fix the problem, or having a meeting about it. Pick one or the other."

"... we can have the meeting in your office, then."

Eventually, my boss shooed him away.

punkwalrus ,
@punkwalrus@lemmy.world avatar

Probably HR (or the NCS equivalent) never told the right people. I am not saying this is actually what happened, but a lot of IT bemoan the fact they are never told some rando employee was fired because HR neglects to inform them. Sometimes it takes months to discover, and even with a 90 day password/login lockout, some halfway decent admin could get around this by secretly building a back door, and using the messed up communication and politics between departments to hide this. Even in the 1990s, I saw people put in "time bombs" in their code that "if such and such is not updated in 6 months, run destructo-script A."

But imagine someone like Kandula Nagaraju here. Worked in QA, probably did a great jobs with some skills, but had the personality of swallowing broken glass. He was terminated in October 2022 due to "poor work performance," which could mean anything. "Not a team player." Or maybe he really was an idiot: I mean, a smart person would have a conniption, but get employed elsewhere and then slam his former company at parties. "Those NCS folks didn't know what they had with me!" But this guy was probably someone with some anger management issues, probably a jerk, and possibly stupid. He might have had revenge fantasies, and set up a small virtual server posing as a backup code mirror. But outside the audits, it allowed ssh from the outside, and hid it through a knockd daemon. Or maybe only launched ssh at certain hours before shutting it down again. Silently working away in a sea of virtual servers with little to no updated documentation. He gets in, has internal access, and runs a script with admin credentials because they don't rotate their AWS keys/secrets quickly enough. Or didn't even know he was let go.

After Kandula's contract was terminated and he arrived back in India, he used his laptop to gain unauthorised access to the system using the administrator login credentials. He did so on six occasions between Jan 6 and Jan 17, 2023.

That's embarrassing to the company. Not only did he get in, but SIX TIMES after he was let go. he probably knew what order to run the delete commands (like, say, an aws "terminate-instances" cli command from a primary node), and did so one by one, probably during hours with the least amount of supervision, where the first few alerts would take hours to get someone in the monitoring chain to wake an admin. Given his last day was in November, and he got back in January, the admins probably thought their 90 access credential rotation was "good enough," but he got in on his 80th day or whatever.

I know this because I have had to do triage when a former contractor did this to a company I worked for. But instead of wiping out instances, he opened a new set of cloud accounts from the master account, put them in an unmonitored region (in this case, Asia), and spun up thousands of instances to run bitcoin mining. Only because AWS notified us of "unusual traffic" were we made aware at all, and this guy knew his shit and covered his tracks very well. He did it at a speed that could have only been automated. Thankfully, AWS did not charge us the seven figure amount that this activity amassed in just three days.

punkwalrus ,
@punkwalrus@lemmy.world avatar

I remember hearing that some Hollywood contracts require that if you sign up for some studio, you must make X amount of films. Big stars get to chose those films to some degree, but once in a while, they have to do "a stinker" to end the contract as "X amount of films done, okay?" or something. Contractual Obligation and all. This film feels like a dumping ground of a lot of those contractual obligation hires from the trailer alone.

punkwalrus ,
@punkwalrus@lemmy.world avatar

Having bridged both worlds, here's how they are viewed as described by a few people that stuck with me all these years.

The first one I "go to thought" was more than one person is "awkward." Some even describing them "out of step, socially." Imagine a clock that is running fast or slow, but you have mentally compensated because generally, you can adapt depending on other clues. But they are always off, and you might have to warn others ahead of time.

Another comment was how autistic personalities are in that "uncanny valley of behavior" where people notice something is off, and it can be frightening but they are not sure why. Since autism is a spectrum of behaviors, which approach depends subjectively on the viewer. Kids, for example, can target autistic kids, and because they are developing socially, will group in "us" and "not us." Autistic kids are "not us," and the target of bullying. A lot of teachers know autistic kids just by how they are treated by others. "You're too weird," was something a lot of kids might say with developing language skills. The may not know WHY they hate a certain kid, but know that they DO. And "something is wrong."

Personally, I see autism as some kind of evolutionary response to a civilization that is growing faster that humans can compensate. In order to get actual insight, one has to be "out of step," lest they just end up trapped in the normal static of everyday compulsion. Like any other evolutionary advance, nature is "trying out" various things. Most will lead to dead ends. A few will adapt in other ways, and some will flourish in a new niche with new types of diversity. I have no proof of this, but I think it's more than "well, we define autism differently now." Yes, there were always people who were "touched by fae" or whatever convention was explained back in the day, but something has really changed. I personally think this and gender fluidity is a positive sign of things to come.

  • All
  • Subscribed
  • Moderated
  • Favorites
  • kbinchat
  • All magazines