|
Two and a half weeks ago, I was asked to upgrade one of our core software packages to the latest version. I contacted our supplier and they said, (because of security), they would need to white-list us to allow access to their download website. It took just over a week for that to happen.
As soon as it was done, I pointed my browser at their download website and got "Website blocked". Yep! Our security was not letting me out - because, (they claimed), it was a non-business related site. So I then had to request our security to white-list our supplier's site. That, again, took over a week.
This morning, I finally got access and logged into the download site. I clicked on the .zip file to download it - and...
... Nope! I'm not allowed to download that type of file.
Back to security!
Yes, I understand that we can't just leave the doors open - because there are bad people out there. But bricking them up and needing to get the builders in to let you in and out seems a 'little' impractical.
Seriously doing my head in!  
|
|
|
|
|
I understand the frustration - but blame the people who created your security concept, not the need of security.
|
|
|
|
|
Rage wrote: blame the people who created your security concept
Yes! I absolutely do. If they want to lock everything down - fine. But they have to be able to deal with exceptions quickly and easily. Not put this through a 'Change Control' process that needs the approval of 5 or 6 people - and then go to a weekly Change Board Meeting, for the consideration of a dozen people who know sod all about it.
The Baddies have won, because security have reached a level of paranoia that has created paralysis by process.
|
|
|
|
|
Change control boards have nothing to do with security and everything to do with the non-technical Six Sigma crowd moving into the cybersecurity field.
Those people are, of course, the actual baddies.
"Never attribute to malice that which can be explained by stupidity."
- Hanlon's Razor
|
|
|
|
|
I'm convinced that were it ever to be studied honestly, we'd find out that 95% of the world's current problems were either caused or exacerbated by process honks trying to shoehorn trendy methodologies in everywhere.
I also think that, sooner or later, some process monkey is going to figure out a way to position 6 Sigma, Agile, Business of Management, and open source in to a single super-methodology, which will cause the universe to BSOD.
|
|
|
|
|
5teveH wrote: Yes, I understand that we can't just leave the doors open -
You don't need to... Microsoft and other suppliers do that job for you 
M.D.V. 
If something has a solution... Why do we have to worry about?. If it has no solution... For what reason do we have to worry about?
Help me to understand what I'm saying, and I'll explain it better to you
Rating helpful answers is nice, but saying thanks can be even nicer.
|
|
|
|
|
At this point I would have been notifying my CEO that due to our corporate bureaucracy that the version we're on, with all it's known vulnerabilities, is the last version we can get.
|
|
|
|
|
go home. Download it. Then upload with a different extension or put on USB drive.
Be sure and change the extension. Until you copy it to your computer at work then copy it back.
old employer had this same issues. took at least a week to work around. each issue. Wound up many times going home downloading then changing the extension then bringing into work.
WHICH IS MORE OF A SECURITY HOLE! but it worked.
To err is human to really elephant it up you need a computer
|
|
|
|
|
They have disabled USB on our laptops too! Otherwise, I would have.
|
|
|
|
|
email it to myself as an attachment with a different extension?
To err is human to really elephant it up you need a computer
|
|
|
|
|
|
And you wonder why people go home and download it a USB drive.
I've had this issue with my customer's IT department. Sure, the firewall blocks all of the porn and what have you, but there are many commercial sites that get blocked. I used to just say elephant it and go home to get the files I need, but I discovered VPN  Completely circumvents their firewall. Ponder that. Don't worry, I'm the good guy, but it does make me wonder.
Charlie Gilley
<italic>Stuck in a dysfunctional matrix from which I must escape...
"Where liberty dwells, there is my country." B. Franklin, 1783
“They who can give up essential liberty to obtain a little temporary safety deserve neither liberty nor safety.” BF, 1759
|
|
|
|
|
No different than letting a stranger into your house (the zip file). At least your company knows who opened the door (and can close it again).
It was only in wine that he laid down no limit for himself, but he did not allow himself to be confused by it.
― Confucian Analects: Rules of Confucius about his food
|
|
|
|
|
5teveH wrote: Two and a half weeks
Bloody hell your people move like lightening, I went through the same process and it took 2 MONTHS before I was able to get the data and that was only after a senior manager wanted to drag my ass over the carpet because a project was months behind schedule. Even he had trouble getting the permissions through security.
Never underestimate the power of human stupidity -
RAH
I'm old. I know stuff - JSOP
|
|
|
|
|
Just change the URL to
…/file.zip?fake.html
Works almost never!
|
|
|
|
|
Be careful when you eat at Sam & Ella's diner!
The less you need, the more you have.
Why is there a "Highway to Hell" and only a "Stairway to Heaven"? A prediction of the expected traffic load?
JaxCoder.com
|
|
|
|
|
Just so long as they don't feed you Sam & Ella...
Freedom is the freedom to say that two plus two make four. If that is granted, all else follows.
-- 6079 Smith W.
|
|
|
|
|
Don't order the Salmon-Ella's way!
|
|
|
|
|
I think you're right that would spawn problems.
The less you need, the more you have.
Why is there a "Highway to Hell" and only a "Stairway to Heaven"? A prediction of the expected traffic load?
JaxCoder.com
|
|
|
|
|
I didn't get it until 1/2 through my coffee. I'm sending you the monitor cleaning bill
Charlie Gilley
<italic>Stuck in a dysfunctional matrix from which I must escape...
"Where liberty dwells, there is my country." B. Franklin, 1783
“They who can give up essential liberty to obtain a little temporary safety deserve neither liberty nor safety.” BF, 1759
|
|
|
|
|
Checks in the mail.
The less you need, the more you have.
Why is there a "Highway to Hell" and only a "Stairway to Heaven"? A prediction of the expected traffic load?
JaxCoder.com
|
|
|
|
|
Boring book preoccupied with detail (5)
"I didn't mention the bats - he'd see them soon enough" - Hunter S Thompson - RIP
|
|
|
|
|
BANAL!
"I have no idea what I did, but I'm taking full credit for it." - ThisOldTony
"Common sense is so rare these days, it should be classified as a super power" - Random T-shirt
AntiTwitter: @DalekDave is now a follower!
|
|
|
|
|
Well done
"I didn't mention the bats - he'd see them soon enough" - Hunter S Thompson - RIP
|
|
|
|
|
It appears we need a detailed explanation! 
|
|
|
|
General 
News 
Suggestion 
Question 
Bug 
Answer 
Joke 
Praise 
Rant 
Admin 
Submit an article or tip
