My friend Bernard at ACSOL remembered that I’m retired after making a career in Information Technology. He sent a link to a ‘how to rob your employer’ tutorial by Vauhini Vara in yesterday’s WSJ.
The column provides specific instructions on how to steal employee time, CPU cycles, bandwidth, HDD space, proprietary information, and more. Her ideas are a little repulsive for my senses (I’ll explain below) but let me first admit that Ms. Vara is stationed in San Francisco, home of Nancy Pelosi and Diane Feinstein, so she may feel that slurping from the corporate trough is her solemn duty. She’s also quiet young, so a heavy dose of moral naiveté may be in play as well.
Here’s a snippet of how they view corporate theft on the Left Coast.
Ten Things Your IT Department Won’t Tell YouAdmit it: For many of us, our work computer is a home away from home.
It seems only fair, since our home computer is typically an office away from the office. So in between typing up reports and poring over spreadsheets, we use our office PCs to keep up with our lives. We do birthday shopping, check out funny clips on YouTube and catch up with friends by email or instant message.
{…}
There’s only one problem with what we’re doing: Our employers sometimes don’t like it. Partly, they want us to work while we’re at work. And partly, they’re afraid that what we’re doing compromises the company’s computer network — putting the company at risk in a host of ways. So they’ve asked their information-technology departments to block us from bringing our home to work.
End of story? Not so fast. To find out whether it’s possible to get around the IT departments, we asked Web experts for some advice. Specifically, we asked them to find the top 10 secrets our IT departments don’t want us to know. How to surf to blocked sites without leaving any traces, for instance, or carry on instant-message chats without having to download software.
{…}
Why are those seemly petty acts perplexing and injurious to my sensibilities? Well, frankly Ms. Vara’s article is amusing to some extent but, in my humble opinion, she goes beyond the pale to describe real ways to steal. Her schemes strike a bad chord on two levels:
1.) She describes, and obviously condones, organized and premeditated larceny.
2.) She gives the impression that offenders can cover their tracks and not be caught, which is a flagrant lie notwithstanding her references to “experts” who fed her such superficial claptrap. Such conduct could easily result in people being fired, or even being prosecuted, and that’s very disturbing to me.
Ms. Vara achieved one thing with her article: If, for any reason, you’re maintaining a list of IT “experts,” and if she is properly relating their advice, go to your list immediately and strike off all the names Ms. Vara relied on to teach users how to hide browsing and illicit program execution. If such IT-lites were on my payroll, I’d fire them immediately because they don’t know what the hell they’re talking about.
There’s not enough space here — and neither am I inclined — to explain the deficiencies of Ms. Vara’s sources but I’ll leave a few hints.
I) There’s no way to use a computer to view Web sites without downloading the data to be viewed into your computer, FIRST. Every smidgen of info must travel the downlink into the user’s machine. YOU CANNOT USE OR VIEW INFO AT A REMOTE SITE.
II) A worthy IT department would never rely on the O/S (Windows, Mac, Unix, Linux, etc.) in the user’s machine to capture data and metadata needed by IT sleuths to monitor user activity. Ms. Vara’s suggestions for thieves to erase their wayward tracks are silly. Once the info has traveled the downlink (see “1.”) into the user’s machine, all sorts of secret programs planted beneath the O/S by capable IT dicks can store and save every scrap of outlawed data. AND that saved data can be protected so that ordinary means cannot be used to overwrite, delete or erase it.
“I” and “II” are gross over-simplifications of what’s possible. Don’t even get me started on how user monitoring can be done on the fly by wireless remote.
My alternative to Ms. Vara’s instructions on how to cheat or do great harm to your employer: Don’t do that.







