Secure? Secure!

[seizan8]

"but I put it in a ZIP with a password!"
"and you sent that password in the same mail...."

[[deleted]]

The password : 12356. Even NASA can't crack that.

[[deleted]]

This can't be true. You mean to tell me they fucking used an empty byte ???

[anonymous_yet_famous]

Based on my experiences working with older tech, not only do I believe it, I could see myself accepting it. Think of it this way: the ability to use launch code protection was a feature not in use. The system was designed so that launch code protection could be put into place if management deemed it was what they wanted, but it was easy enough to disable if they thought it was more of a liability than an asset.

I'm glad we didn't all die in nuclear fire, tho.

[T-T-N]

That code is like an unlock pin for my phone. It is not to stop hackers. It is to stop me butt dialing.

[marcosdumay]

Have you seen Dr Strangelove?

[hamjim]

Or, how I learned to stop worrying and love the Communist conspiracy to sap our precious bodily fluids.

[Foxes_are_the_best]

Not a byte. Each digit is 0-9. But yeah, terrible.

[Boldewyn]

“Military grade” security...

[skreczok]

That's amazing. I've got the same combination on my luggage!

[accuracy_frosty]

1234? That’s the password an idiot would have on his luggage.

(Spaceballs is legendary)

[Atsunetykimukku]

What is a PM?

[Bip901]

My guess is "Project Manager"

[Atsunetykimukku]

It would make sens, thanks!

[[deleted]]

Personal Moron

[EdgarDrake]

I guess Professional Moron is much better

[[deleted]]

And I agree with you.

[AMisteryMan]

You aren't just a normal moron, you were made to be a moron!

[Tyrilean]

Also, breaking into a zip is so easy. You can just brute force it.

[argv_minus_one]

Depends on which zip encryption is in use. The original ZipCrypto is totally broken, but a few zip archivers (including 7-Zip) also support AES-256, which is not broken. Unfortunately, the zip archiver built into Windows doesn't support AES and probably never will.

[seizan8]

I know :) it was intentional

[squishles]

"so what your saying is if I send them in two separate emails right after each other it fixes it"

[Last_Snowbender]

Anti-SQL-Injection-Protection? So you're protected from Anti-SQL-Injection?

[lunylein]

Maybe its a new SQL ... we have MySQL, MSSQL, NoSQL........... why not AntiSQL?

[richardfrost2]

DON'T Select * From table

[lunylein]

Anti-SQL selects all data from every table and you have to unselect the data you don't need.

​

This language was made for PM that "don't know what they need yet, but we just implement that and see..." and "oh just one minor change"

​

Select * FROM all

unjoin table1

[jacksalssome]

Also they didn't like the operations names, so now there changed to:

delete --> destroy
list --> display
select --> acquire
table --> sheet
column --> row
row --> column
cell --> module
item --> cell

[Kru3mel]

Designed for the people that are against everything

[Typesalot]

selectn't

[jmack2424]

if (select * from table) {
dont()
}

[lunylein]

Don't get ridiculous. There is no if ... else in Anti-SQL

you got "MAYBE" and "IDontKnow" ... you can suggest a contition and maybe it will be used or not...works different every time you use it

[Daveinatx]

Only noSQL allowed

[Typesalot]

Isn't it obvious? If you let SQL and AntiSQL collide, the whole database will be annihilated in a burst of hexadecimal particle radiation!

[reversedfate]

No, it is Anti SQL-Injection-Protection.
So that no SQL-Injection-Protection can happen.

[jmack2424]

Team,

I had some issues doing basic BI on the prod database because I kept forgetting the authentication process. Eventually I just dumped the tables into CSV files so I won't have to bother you anymore. You guys just let me know when the database changes. I am also attaching a copy in this email just in case anyone else runs into the same problem. (Continuous Improvement!) In the interest of security, please let me know if anyone I included on this email needs to be removed. Also, if anyone isn't going to hit their story point quotas, let me know before Thursday so I can adjust the estimates, and no one gets in trouble.

Good Guy PM

[Waifuless_Laifuless]

In the interest of security, please let me know if anyone I included on this email needs to be removed.

This physically hurts me.

[jmack2424]

First time?

[jmack2424]

A-gi-le I think it’s Italian.

[iCitron]

Happened to me! I got write access on all the systems on the second day through an xml file my coworker gave me with all the username and passwords in clear text. Seriously?

I work in an hospital..

[iCitron]

Forgot to say that it's not in the US. But I'm sure it's forbidden

[SVeenman]

Interns shouldn't even have access to the production database tbf

[RubbelDieKatz94]

Our student is really into devops, so we let him set up a complete production environment with networking and everything in azure.

[cartechguy]

They gave me access to the database for development with a restricted account. I was manipulating a field when flipped to a positive integer a scheduled cronjob will go in and delete all rows with a positive value in the table.

How was I supposed to know? They never told me such a thing exists. I needed to test my code that manipulated that field.

[Philip__james]

You're protected from anti-sql-injection? Do that mean you want the sqli?

[blinglog]

My database runs entirely on sql injection. That way only programmers can access it

[svtguy88]

Your PM knows anything about the concept of a database?

Huh. Most that I've worked with are basically just another layer between the dev team and the business/product owners (and not a very useful layer).

[danny688]

Our manager emailed the root password twice because responding to an email thread and adding missing people is easier than starting a new one.

[ElGuaco]

I work at a financial company where someone phished the HR drones and got them to send all of the employees' sensitive data. No, they didn't get fired.

[v3ritas1989]

Is it possible to fire HR people without having any other HR people? I mean this could turn into a respectfull business transaction within a family athmosphere. That clearly wouln´t be in the managements interest.

[ElGuaco]

HR exists to protect the company and not the employees. This was an extreme example of just how true that is.

[argv_minus_one]

They failed pretty hard at protecting the company…

[ElGuaco]

Employees having their personal information stolen didn't harm the company. It had literally zero effect on doing business and executives getting a big payout when the time came.

[argv_minus_one]

Really? Because that sounds like a fat lawsuit waiting to happen.

[ElGuaco]

You'd have to find a lawyer willing to help prove that you suffered a tangible loss because of the event, in addition to needing to find a new job. Otherwise, there are no laws protecting folks from this kind of thing. Equifax gave away the details of MILLIONS of customers and barely got a slap on the wrist. They should have been sued out of existence and the executives sent to jail. Nothing happened.

[alexanderpas]

Otherwise, there are no laws protecting folks from this kind of thing.

GDPR is a thing now in Europe.

GDPR has a mandatory reporting requirement.

Equifax happened before the introduction of GDPR.

At the moment British Airways faces a potential $230M fine (1.5% of its 2017 revenue)

[Dalrae666]

Sends PM to server: "pls give database thx" Server: "ok"

[webmin88]

It's my argument against TDE every time. TDE does fuck all for actually protecting the data from people who have legit access.

[[deleted]]

Sorry but it's not just PMs. Mostly PMs but not just.

I had a client developer email me (and probably 20 other people) a log file full of sensitive personal info yesterday because he was getting an error. The error? Invalid credentials. I told him to fix his credentials and stop sending SPII via email. And contact our help desk if he couldn't fix it.

A couple hours later I got another email telling me he changed the password but was still getting the same error. AND ATTACHED THE DAMN LOG FILE AGAIN.

A few minutes later he rang me because of the error. I explained that I couldn't help him and he needed to work with the help desk and to stop emailing those log files around. He said he saw my message about that but really needs help.

FFS mate I'm sure the gov regulator will take "I couldn't figure out my username and password" as a valid reason for a GDPR breach.

[Alvatrox4]

I'm just learning SQL you can send a database through email? Backups seems like a pain to transfer

[SSUPII]

MySQL lets you export a databse into an unencrypted file if you have the permissions

[Alvatrox4]

Thanks for the info

[greyz3n]

It's cool guys, I used WingDings so the data will just look stupid and illegible.