Forums - General Discussion - Security audit finds dev Outsourced his job to China.

Tagged games:

Cunning scheme netted him 'best in company' awards
By Iain Thomson in San Francisco • Get more from this author

A security audit of a US critical infrastructure company last year revealed that its star developer had outsourced his own job to a Chinese subcontractor and was spending all his work time playing around on the internet.

The firm's telecommunications supplier Verizon was called in after the company set up a basic VPN system with two-factor authentication so staff could work at home. The VPN traffic logs showed a regular series of logins to the company's main server from Shenyang, China, using the credentials of the firm's top programmer, "Bob".

"The company's IT personnel were sure that the issue had to do with some kind of zero day malware that was able to initiate VPN connections from Bob's desktop workstation via external proxy and then route that VPN traffic to China, only to be routed back to their concentrator," said Verizon. "Yes, it is a bit of a convoluted theory, and like most convoluted theories, an incorrect one."

After getting permission to study Bob's computer habits, Verizon investigators found that he had hired a software consultancy in Shenyang to do his programming work for him, and had FedExed them his two-factor authentication token so they could log into his account. He was paying them a fifth of his six-figure salary to do the work and spent the rest of his time on other activities.

The analysis of his workstation found hundreds of PDF invoices from the Chinese contractors and determined that Bob's typical work day consisted of:

9:00 a.m. – Arrive and surf Reddit for a couple of hours. Watch cat videos. ()

11:30 a.m. – Take lunch

1:00 p.m. – Ebay time

2:00-ish p.m – Facebook updates, LinkedIn

4:30 p.m. – End-of-day update e-mail to management

5:00 p.m. – Go home


The scheme worked very well for Bob. In his performance assessments by the firm's human resources department, he was the firm's top coder for many quarters and was considered expert in C, C++, Perl, Java, Ruby, PHP, and Python.

Further investigation found that the enterprising Bob had actually taken jobs with other firms and had outsourced that work too, netting him hundreds of thousands of dollars in profit as well as lots of time to hang around on internet messaging boards and checking out the latest Detective Mittens video.

Bob is no longer employed by the firm.

Source: http://www.theregister.co.uk/2013/01/16/developer_oursources_job_china/

So basically guy came to work and spent time surfing web and watching cat videos. Good thing he was not a vgcharter as that would have brought some negative spotlight on us. I found the story hilarious despite the actions of the person. In a way he is a genius and on the hand he is a fraud. 



Around the Network
Guy had a good gig going on until he got busted.


i7 4770k, GTX 770, Sabertooth asus z87, samsung 840 256 GB ssd, two 7200 rpm 1 TB HD, Corsair 500r case, 16 GB 2400 mhz ram.  EsportsTT posiedon cherry brown gaming keyboard, Zowie EC1 EVO gaming mouse, Asus 24" 60 hz monitor, 

 

Shakarak on Wii U and 3DS (ask for friend code).  Shakarak on Steam.  Currently playing Pikmin 3, Bayonetta 1&2, Counter Strike Global offensive, Fire Emblem Awakening, Super Smash Bros 3ds.

I'm surprised they fired him. Isn't that what USA is all about now? Outsourcing?

And it's pretty funny that the article put his name in quotes, as if Bob wasn't his real name.

Carl is a Piplup hater and deserves to be punished eternally.

I mean his actions are of course quite questionable but when a CEO does that and moves entire project overseas. He gets salary bonus and cocktail party at exclusive clubs. Here is random joe who did the same thing while increasing productivity for his firm. He gets fired. If he did that on a much larger scale i am sure hollywood would love to make a movie on it.

Sort of like Catch me if you can.

It's funny how life imitates art:
http://www.youtube.com/watch?v=4IVTMgeYEKc

Around the Network
NintendoPie said:
I'm surprised they fired him. Isn't that what USA is all about now? Outsourcing?

And it's pretty funny that the article put his name in quotes, as if Bob wasn't his real name.


It's not his real name XD  They're using a fake name to protect his identity.  Notice how they didn't mention the name of the developer, either?



Could I trouble you for some maple syrup to go with the plate of roffles you just served up?

Tag, courtesy of fkusumot: "Why do most of the PS3 fanboys have avatars that looks totally pissed?"
"Ok, girl's trapped in the elevator, and the power's off.  I swear, if a zombie comes around the next corner..."
My friend does that! Haha I guess it isn't that rare.

Tease.

NintendoPie said:
I'm surprised they fired him. Isn't that what USA is all about now? Outsourcing?

And it's pretty funny that the article put his name in quotes, as if Bob wasn't his real name.


He got fired not because of the outsourcing, but more because he was allowing others to use his login credentials and breaking security as well as many other internal company standards.

I've told my boss many times that I wanted to sub-contract an intern to do my work.



lol, I thought companies liked outsourcing.

I LOVE ICELAND!

Around the Network
thekitchensink said:
NintendoPie said:
I'm surprised they fired him. Isn't that what USA is all about now? Outsourcing?

And it's pretty funny that the article put his name in quotes, as if Bob wasn't his real name.


It's not his real name XD  They're using a fake name to protect his identity.  Notice how they didn't mention the name of the developer, either?

Ahh, well then I guess it would make sense.



Carl is a Piplup hater and deserves to be punished eternally.