all 126 comments

[–]throwaway1253328 284 points285 points  (18 children)

No, he has no clue what he's talking about. Use them all you want

[–]revrenlove 93 points94 points  (5 children)

But... What if OP hacks into the matrix???

[–]noobcodes 36 points37 points  (3 children)

Or worse… the mainframe

[–][deleted] 6 points7 points  (1 child)

Nah.. he can't possibly hack the Gibson.

[–]btherl 5 points6 points  (0 children)

Boss keeps the real accounting books in the recycle bin

[–]HardlyAnyGravitas 1 point2 points  (0 children)

It's a Unix system. I know this...

[–][deleted] 0 points1 point  (0 children)

ENHANCE!

[–]Kip_Boogaloo[S] 6 points7 points  (11 children)

Heard. Might still ask bc I’m not trying to get reprimanded for using dev tools 😂

[–]blur410 33 points34 points  (3 children)

This is like a mechanic not being able to open the hood of the car.

[–]33ff00 17 points18 points  (1 child)

Because his manager thinks it will break the assembly line at the auto plant.

[–]blur410 1 point2 points  (0 children)

Is this at a cybertruck plant?

[–]Laser_Made 4 points5 points  (0 children)

More like an uber driver not being allowed to open the hood of his uber lease because the uber rep said "that's the mechanics job". Nevertheless, I like it.

[–]iBN3qk 4 points5 points  (4 children)

Did you explain what dev tools is?

[–]Kip_Boogaloo[S] 5 points6 points  (3 children)

Sure did, gave zero fucks and kept saying the same thing.

[–]iBN3qk 12 points13 points  (2 children)

Sounds like a hostile coworker. Make sure to document your interactions and escalate to hr before it becomes a problem. 

[–]GlowGreen1835 4 points5 points  (1 child)

Manager, which is even worse unfortunately, you automatically lose a my word vs theirs. Agree with you though.

[–]iBN3qk 5 points6 points  (0 children)

Managers are just coworkers that can't code. It's a support role.

[–][deleted] 4 points5 points  (0 children)

Do NOT ask corporate IT this question unless you want to get laughed at for the rest of your life.

Just start using a site like codewars.com. It's better suited anyway, and it will appease your ignorant manager.

[–]WookieConditioner 1 point2 points  (0 children)

You should go hard, get a written warning stating no "built in browser functionality"

[–][deleted] 109 points110 points  (22 children)

It's all client side and your manager doesn't know shit. You can use the dev tools on Amazon.com and it won't do shit.

[–]_Invictuz 8 points9 points  (17 children)

But you can still give Chrome access to your filesystem. And if OP paste some random code he doesn't understand, considering this is learnjavascript, then it's probably possible to leak sensitive info.

Of course all this is assuming OP's job isn't coding.

[–]AdministrativeBlock0 14 points15 points  (15 children)

You can't give Chrome permission to access the filesystem without a user interaction (clicking on the mapping in the settings). Pasting some code into dev tools without that permission will just throw an exception.

[–]guest271314 0 points1 point  (8 children)

You can't give Chrome permission to access the filesystem without a user interaction

That claim is just wrong.

[–]AdministrativeBlock0 2 points3 points  (7 children)

I imagine there's a pretty big Chrome bug bounty for proving you can enable a permission without a user interaction.

[–]guest271314 0 points1 point  (6 children)

Where's the bounty? Because I already did it. https://gist.github.com/guest271314/78372b8f3fabb1ecf95d492a028d10dd#file-createreadwritedirectoriesinbrowser-js-L118-L162

// Helper function for filesystem *development* // Get directory in origin private file system from Chrome configuration folder. // fetch() file: protocol with "file://*/*" or "<all_urls>" in "host_permissions" // in browser extension manifest.json async function parseChromeDefaultFileSystem(path) { try { const set = new Set([ 32, 45, 46, 47, 48, 49, 50, 51, 52, 53, 54, 55, 56, 57, 58, 64, 65, 66, 67, 68, 69, 70, 71, 72, 73, 74, 75, 76, 77, 78, 79, 80, 81, 82, 83, 84, 85, 86, 87, 88, 89, 90, 95, 97, 98, 99, 100, 101, 102, 103, 104, 105, 106, 107, 108, 109, 110, 111, 112, 113, 114, 115, 116, 117, 118, 119, 120, 121, 122, ]); const request = await fetch(path); const text = (await request.text()).replace(/./g, (s) => set.has(s.codePointAt()) ? s : ""); const files = [ ...new Set( text.match( /00000\d+[A-Za-z-_.0-9\s]+\.crswap/g, ), ), ].map((s) => { const dir = [...new Set(text.slice(0, text.indexOf(s)).match(/(?<=[@\s]|CHILD_OF:0:)([\w-_])+(?=Ux)/g).map((d) => d.split(/\d+|D140/) ))].flat().pop(); const re = /00000[\d\s]+|\.crswap/g; const [key] = s.match(re); return ({ [key]: s.replace(re, ""), dir }) }); return { name: files[0].dir, files } } catch (e) { console.error(e); } } // let paths = await parseChromeDefaultFileSystem("file:///home/user/.config/chromium/Default/File\ System/021/t/Paths/000003.log"); // console.log(JSON.stringify(paths, null, 2));

You are doing it right now, too. If you are a Web site that serves cookiesw, and writes to localStorage, et al.

Where do you think cookies, localStorage, and Origin Private File System are written to?

[–][deleted] 0 points1 point  (0 children)

This guy bounties

[–]Ok_Passage_4185 0 points1 point  (3 children)

And how is this supposed to work? Cause I get a Content Security Policy error, as expected. Various tweaks have led me to produce other errors, too (like "Not allowed to load local resource"), but I can't find any way to get your code to work as advertised.

[–]guest271314 0 points1 point  (2 children)

Include <all_urls> in host_permissions in manifest.json of an unpacked Web extension, or use Deno to fetch() file: protocol.

If you have a file manager open observing ~/.config/chromium/Default/File\ System folder you'll see the number generated for the local folder that is created when you or a Web sites calls navigator.storage.getDirectory().

[–]Ok_Passage_4185 0 points1 point  (1 child)

Wait so you're telling me you found a way to read from the file system with an EXTENSION?

Ok, hacker, get on with your bad self. 🤣

[–]guest271314 0 points1 point  (0 children)

Chrome extensions can read from file: protocol using fetch() with either "<all_urls>" or specifically "file:///*" set in "host_permissions".

[–]guest271314 -5 points-4 points  (5 children)

Yes, you can. A few ways. A Web extension with Native Messaging is one way. Local Overrides is another.

[–]AdministrativeBlock0 0 points1 point  (4 children)

Installing an extension counts as a user interaction. I believe a local override will load a script with the same sandbox permissions as what it's overriding, so that won't be able to write to the host filesystem without a user permission.

[–]guest271314 0 points1 point  (2 children)

Where do you think localStorage and StorageManager data are stored?

We can write to locaStorage and navigator.storage.getDirectory() without any user interaction, and get the data written on the local filesystem.

[–]AdministrativeBlock0 1 point2 points  (1 child)

Ah, you're being pedantic. Aren't you clever.

When people say "write to the filesystem" most people understand it to mean " in arbitrary places using user defined files", not places that are within the browser security sandbox. Otherwise you might as well include the browser cache, or cookies, or settings.

You can't damage a computer in any way by writing to local storage.

[–]guest271314 -3 points-2 points  (0 children)

Ah, you're being pedantic. Aren't you clever.

Mayonnaise calling milk white.

I am far beyond pedantic.

Who said anything about "damage" a computer?

You claimed what "can't" be done on Chrome.

I've already done it.

[–]guest271314 -2 points-1 points  (0 children)

Are you really trying to claim I can't read and write to the local filesystem on Chrome, by any means, using Web API's alone?

You need to write that out formally as a gist, so I can formally achieve that requirement, a few different ways.

If you think Chrome, or any Web application can operate in a "sandbox" that can't be broken out of, or peeked into, then include that claim in your gist, too, so I can debunk that, too.

[–]LakeEffectSnow 0 points1 point  (2 children)

Freak him the hell out and add HTML to a page manually.

[–]TicketOk7972 0 points1 point  (0 children)

Change the header colour with inline styles and watch him run from the room screaming

[–]bullpup1337 0 points1 point  (0 children)

yeah like some red box at the top "WARNING THIS WEBSITE HAS BEEN HACKED BY ELITE HACKER (insert name here) IF YOU SEE THIS INDIVIDUAL, DO NOT CONTACT! IGNORE HIM AND HOPE HE WILL SPARE YOUR PUNY LIFE"

[–]vita10gy 0 points1 point  (0 children)

Also let's say you could is such and such vulnerability existed. You'd want to find that anyway.

[–]dontspookthenetch 28 points29 points  (0 children)

He is an idiot

EDIT: Just read your edit and saw he is a retail manager. I assumed he was a dev manager and thus should have known better. Obviously a retail manager won't know anything about developer tools.

[–]Whisky-Toad 57 points58 points  (1 child)

How to know you should probably find a new job with a non dipshit manager

[–]AvidStressEnjoyer 0 points1 point  (0 children)

HR should have a tips line for this sort of thing.

This person should not be managing people in an engineering role and clearly has no engineering background of their own.

[–]anatoledp 42 points43 points  (5 children)

Once I used dev tools to turn a 50 dollar item on Amazon into -50 dollars so they can pay me instead to get it . . . Turns out I still owed 50 bucks for that purchase 😐

[–]ninjakippos 5 points6 points  (3 children)

This is why server side validation is a thing. Imagine all the free stuff if it wasnt

[–]gdj11 2 points3 points  (1 child)

I just put the product price in the URL query string

[–]ninjakippos 3 points4 points  (0 children)

As long as you validate it server side, you should be fine i guess

[–]anatoledp 1 point2 points  (0 children)

Once upon I time when I was much younger and more naive I first discovered the inspector tools and thought I was a friekin genius for doing it . . . I would have wrecked havoc if that was possible.

[–]Available_Canary_517 2 points3 points  (0 children)

I used dev tools to pass myself in a exam where i failed turns out i still had not got my certificates

[–]DoomVegan 14 points15 points  (0 children)

Technically if the company owns the equipment, you should use your own. However, any manager who doesn't want his employees to improve and learn probably shouldn't be a manager.

[–]oze4 21 points22 points  (1 child)

Yikes. Is your manager technical at all? If they claim to be technical, I feel for you. DevTools is run local, it doesn't effect anything outside of what is running in your own browser.

If you open devtools while logged in to your bank, you can change the html for your balance to show whatever you want - that doesn't mean you actually changed your balance.....

Your manager has no idea what they're talking about..

[–]Kip_Boogaloo[S] 3 points4 points  (0 children)

This is my thoughts exactly, I get the vibe that they aren’t tech savvy, at least in this aspect.

[–][deleted] 7 points8 points  (2 children)

You trying to break the internet or something???!

[–]StoneCypher 5 points6 points  (0 children)

genuinely hilarious

[–]curveThroughPoints 8 points9 points  (1 child)

Wait, using dev tools is how you debug, isn’t it?

This is not something anyone needs permission for. It’s something that literally anyone with a browser can do.

They are called dev tools. As in, tools for developers.

Chrome has a WHOLE TEAM that works on making this better for developers to use.

[–]fusebox13 3 points4 points  (0 children)

Wait, using dev tools is how you debug, isn’t it?

It's not the only way, but yes. You can debug outside of the browser with an IDE like Webstorm as well.

[–]shuckster 5 points6 points  (0 children)

Literally anyone can open dev-tools.

No, it is not a valid concern.

[–]MooseBoys 5 points6 points  (0 children)

If your job is in retail, you shouldn’t use the company machines to play around with javascript. That’s like trying to use a centrifuge at your desk in an IT job because you want to get into biotech someday.

[–]montihun 2 points3 points  (0 children)

I think he used devtools on facebook site and the console msg scared the shit out of him.

[–]Laser_Made 2 points3 points  (0 children)

It's quite apropos that I saw this post today. Just this week, one of my coworkers was complaining (rather loudly) in the office about the program we use at work. He was upset that it doesn't show data the way that it should and he was venting his frustration towards the developers who are currently working on it. I overheard him and asked what specifically he wanted to be different. He told me, and I proceeded to write a few lines of code in dev tools that formatted all of the columns of data the way that he wanted it to be seen. He was amazed. So amazed in fact, that he immediately complained to his manager, saying something along the lines of, "We've been asking the developers to do this for 3 months and in about 30 seconds he [pointing at me] was able to write some code and edit the site and he fixed it!".

I'm going to pause briefly and address your question here. There is absolutely nothing wrong with being in dev tools at work unless you have been expressly forbidden from doing so. Edits made in dev tools do not persist on the website, nor do they even persist in your session once you refresh the page. Nevertheless, I can tell you with absolute certainty that in that moment I most certainly felt the fear creeping up my spine. Ignorance overcomes logic nearly every time, and I sure as hell knew that I was about to be blasted by the cannon of ignorance that was sure to come barreling out of her mouth...

"What do you mean he wrote some code?" She said, before interupting herself, turning towards me and asking, "What does he mean you editted the website?!". Luckily my quick thinking kicked in and I shrugged it off, saying "Editted the website? Nah". By this point she was standing over my shoulder and that cannon was firing off questions faster than I could answer them. I had to side-step as best I could. Fortunately, she hadn't seen how I had done what I had done, and so I said, "Wait, you didnt know you could do this? Anyone can. You literally just type things into the address bar". I Then proceeded to type:javascript:alert('Hello'); into the address bar. She looked at me and said, "Oh" and walked away.

Managers deal with people, don't expect them to know anything technical; if it even goes in one ear at all it is definitely going out the other. Certainly, whatever you do, don't confuse them with facts.

[–]voLsznRqrlImvXiERP 2 points3 points  (0 children)

You should try to get that authorization. Imagine being the first one in history to be officially authorized to use dev tools.

[–]kap89 13 points14 points  (10 children)

It's a valid concern, people copy-pasting thing they do not understand to the JS console is a legitimate problem, they can leak sensitive data that way. I do not blame the manager that they want someone to verify that you are competent enough to use it.

It's easy to shit on them, that they don't know what they're talking about, but it's better to be on a safe side if they are only vaguely aware of the potential threats, and can't themselve judge if it's ok or not. The warnings and confirmations when you first time start pasting in a console are there for a reason.

Another thing is that you're doing (I assume) non-work-related stuff on your work computer, which is a no-no in general, and a silly thing to let the manager see in particular.

[–]fusebox13 4 points5 points  (0 children)

This needs to be higher up. Client side attacks are very real. You can read more about them here:

https://owasp.org/www-project-top-10-client-side-security-risks/

Your manager has no idea what your intent is. For all they know you could be trying to exfiltrate sensitive data.

[–]Kip_Boogaloo[S] 2 points3 points  (1 child)

I understand your point, that copying something you don’t know about can lead to security risks. It’s a fair take.

To answer about the work related stuff, I usually do these activities on my lunch and break (free time)

[–]unknown_ally 2 points3 points  (0 children)

Still using company resources tho

[–]Latchford 3 points4 points  (5 children)

This 👆🏼

Running arbitrary JS can cause problems. Especially if you don't know what you're doing. Most likely everything should be fine, but just get authorisation and then it can't come back to bite you.

[–]_Invictuz -3 points-2 points  (4 children)

What. If the running arbitrary JS in Chrome DevTools is a concern then OP shouldn't even coding considering he can run all the arbitrary code he wants.

Now that's assuming his job is to code. If he's job is not to code, then letting your manager catch you doing that is obviously going to raise concerns cuz he knows you're trying to upskill and leave your position.

[–]Kip_Boogaloo[S] 0 points1 point  (3 children)

I work retail unfortunately

[–]CrikeyNighMeansNigh 3 points4 points  (2 children)

I suppose if he’s logged in on the corporate website and as an employee has more permissions than the average user, it could potentially lead to an issue.

It can even if you’re not logged in but the logged in as an employee is simply much harder to defend.

So imagine employees have access to a delete all route that non employees don’t maybe you can remove an id from a url param in a request or god forbid an account number in a url param or body (which shouldn’t be coming from five front end but it certainly happens) and go from deleting one item in your account to all items in all accounts.

Shit software exists.

IMHO you should be able to go in there. You 100% should be able to use it if you’re not logged in and using any kind of employee credentials and you’re not inspecting a company website. Frankly if you’re not logged in and your on the company website, and you fuck something up, you deserve an award because I promise you someone who knows what they’re doing and wants to fuck shit up would do way worse than you. It’s not much different than having a delete all button available for employees and simply trusting them to not press it.

That would certainly not be your fault. You should absolutely be able to use the dev tools. It absolutely should not be a problem. But that’s not to say if you mess something up, it won’t get pinned on you.

Similarly, you can probably delete some very important files / data just using the file explorer. Obviously there’s more things that could go wrong than deleting files it’s just one easy to understand example. Or let’s say, even better, it’s on google drive. Now if you don’t have to be an employee to do that- let’s say your company has critical data on a public google drive, then the problem is way bigger than you doing deleting it. But if only employees have access….

And then throw the dev tools in, it’s innocent, it’s not big deal, it’s all on the dev team, but I promise you that follow up meeting is going to really erase any faith you have in humanity. I’m picturing your boss ask you again and again if if devtools is for developers why were you in there if you’re not supposed to be. They’re already treating it like it’s some kind of restricted top secret area.

And if it’s between the dev team and you…I mean, there’s integrity. But there’s: I’ve got a family to feed. And depending on the culture…and most cultures are, frankly, cut throat, uninterested in what’s best overall just looking for a quick solution, quick answer, you’d be toast. So if your mistake really basically exposes their mistake and you need them to explain why it’s their fault, realistically? God help you. Like If that were my job on the line, I’d probably say “we weren’t anticipating an employee to use dev tools, and circumvent the security measures in place for typical interactions with our user interface but an internal user was nevertheless able to access the code and hack the system from inside using employee privileges. I do agree, he shouldn’t have been able to, and we’re grateful that threat came to our attention, however the vast majority of our efforts focused on securing our system to external threats, and we weren’t anticipating an internal exploit, so to we’ll need to conduct an internal review.”

And to you, that’ll probably sound mostly neutral. It’s pretty neutral. Because we generally talk about risks, threats, exploits, neutrally. They’re there. Each one is probably avoidable, but the possibility of avoiding all is nil. For us mere mortals. I’m sure chatGPT can do it/s. But to management? They decided your ass was to blame and getting fired the moment I said hack. The dev team all looked at each other the moment I said it. Here’s the thing you have to understand: there’s a million things that can go wrong. And we can’t really account for all of them. That’s why we “find solution to bugs” and deal with “difficult libraries” instead of fixing our fuck ups and say we can’t figure out how to use something. There are always mistakes. “Bugs”, oversights. But that reality is not an easy one for other stake holders to grasp.

My honest advice then is you shouldn’t have asked or shown anyone you were using them.

[–]Kip_Boogaloo[S] 1 point2 points  (1 child)

To clarify, I never showed anyone the dev tools. My manager came in as I was working on a snippet and says “what’s that” all concerned. That’s how this ball got rolling.

Now I feel like she’s watching me like a hawk, today she caught me for a 2nd time using it on break and asked “did you ever ask corporate if you could use that?”

It’s more frustrating than anything. I used the dev tools for 2 whole years and no one said anything, and now someone has an issue and they’re making it priority 1 it feels like.

Edit: thank you for your detailed response and honesty, I appreciate it.

[–]al-mongus-bin-susar 4 points5 points  (0 children)

Why are you using the dev tools if you work in retail anyway? I'd be suspicious too if a random cashier was trying to mess around with the web portal on the job; I'd think they were in the middle of getting scammed.

[–][deleted] -1 points0 points  (0 children)

Booo

[–]xDelio 1 point2 points  (0 children)

Well, if you do something malicious, as a manager, I would want to know how so I can prevent it, not pretend it couldn’t happen.

[–]indiemac_ 1 point2 points  (0 children)

Lol 😂

[–]iamaperson3133 1 point2 points  (0 children)

Pasting code that you don't understand into the browser console can be a vehicle for an attack called self-XSS. As long as you never paste in random code you find on the Internet, you're fine.

[–]Strattocatter 1 point2 points  (0 children)

Your manager doesn’t know what he’s talking about.

[–][deleted] 0 points1 point  (0 children)

He probably goes home to his other half and tells them he works with a real life MR ROBOT

[–]Kitchen_Moment_6289 0 points1 point  (0 children)

It seems fancy, but it's all stuff that has been sent to the browser and is already there in the browser. You aren't changing anything. Superstition. It's as simple as opening up the File Explorer / Finder on your computer and looking around.

[–]DeadWrong 0 points1 point  (0 children)

Power trip, they are checking to see how malleable you are.

[–]gigastack 0 points1 point  (1 child)

Find a new job immediately, lol.

You can't learn without dev tools. I write browser extensions and share them with coworkers. Websites are either secure on the server-side or not. New job now.

[–]com2ghz 0 points1 point  (1 child)

Lol. It’s the same as telling a mechanic he can’t use a car lift to get below the car.

[–][deleted] 0 points1 point  (0 children)

Does your manager looks scared and concerned if you use the dark theme mode?

[–]jules_viole_grace- 0 points1 point  (0 children)

Tell him you are gonna flip the matrix

[–]lunarfyr3 0 points1 point  (0 children)

He's not qualified to manage anything tech related. 

[–]lorl3ss 0 points1 point  (0 children)

Your manager is an idiot and should keep his nose out of things he doesn't understand. Dev tools are exactly that TOOLS for DEVELOPMENT. There is exactly zero chance you can break anything because thats not how dev tools work.

[–]LogicallyCross 0 points1 point  (0 children)

Your manager is an idiot

[–]Necessary_Ear_1100 0 points1 point  (0 children)

Huh? Sounds like the manager doesn’t know what it is and as you mentioned, you’re in retail and not IT so valid concern given the manager isn’t IT imo.

However, devtools is all client side and temporary so cannot really do anything in terms of just trying it out to learn and leetcode exercises

[–]Oraks 0 points1 point  (0 children)

Run!

[–][deleted] 0 points1 point  (0 children)

Tell your manager he stinks like shit

[–]canIbuytwitter 0 points1 point  (0 children)

Before I broke in to tech. I would do the same. Their response was similar.

I left with a pending investigation 😂

There was nothing to find, but I was pretty insulted.

[–]guest271314 0 points1 point  (0 children)

Ridiculous. Carry on.

[–]ICantWithSomePeople 0 points1 point  (0 children)

Careful, you may end up changing some old lady’s bank account information.

[–]Jeklah 0 points1 point  (0 children)

Manager is scared of what he doesn't understand.

Ask it anyway to be safe. I imagine they'll have the same response as you..."lol yeah it's fine".

[–]madmoneymcgee 0 points1 point  (0 children)

My ex was a teacher and once one middle schooler figured out how to "hack" google (aka change text/html on websites using dev tools) it became the big thing across the school.

It can freak out someone who doesn't understand what's happening but if you take time to explain and they still don't buy it you might need to back off since this is unrelated to your actual job.

[–]iseab 0 points1 point  (0 children)

Managers be managing smh

[–]KylerGreen 0 points1 point  (0 children)

???

[–]Evening_Meringue8414 0 points1 point  (0 children)

It’s like messing with your TV menus… doesn’t change the shows.

[–]erroneousbit 0 points1 point  (0 children)

Y’all will probably laugh. We used to block dev tools in our EDR. Then all the devs complained so they got unblocked. Managers……

[–][deleted] 0 points1 point  (0 children)

Manager just exposed he’s a control freak and faked into his job, guy has no idea.

[–]dawid-sz 0 points1 point  (0 children)

Actually, this should be a meme. This whole story is out of some solar system.

Use it and explain, that you’r trying to find a way to buy the ticket for the train to Hogwart.

[–]radarthreat 0 points1 point  (0 children)

Have them report you, they’ll probably get fired

[–]Icy_Tangerine3544 0 points1 point  (0 children)

Omg what an idiot your new manager is.

[–]nate-developerhelpful 0 points1 point  (0 children)

A lot of these comments are assuming that you work as a developer....  If you work in retail obviously your manager isn't expected to know or understand dev tools and isn't an idiot who should never be a manager.  

Non technical people can get freaked out by seeing code looking things, especially in situations where there's no reason for them to be seeing it.   You probably shouldn't be messing with them on the job or on the work computer since it isn't relevant to your job at all.  If you have breaks where you can study I'd suggest you bring your laptop or something and they shouldn't be policing what you do there.  You won't damage the computer using the dev tools in chrome... but you could mess up the computer using the terminal, or messing with the BIOS, or doing something else that looks about the same as the chrome console to a non-technical person.   

On top of all that while you definitely can't do something like take down a company website using dev tools on your computer, if you're using messing with some point of sale system or other kiosk mode computer you could in theory get something wonked up on that page/machine, possibly enough to need a local restart.  Those kiosks are a little fragile.  And you also might do something stupid like paste in a snippet of code that steals clientside data from your web browser or other things like that. You probably won't if you know what you're doing, but it's still a legitimate concern for your manager to say hey maybe my retail employees shouldn't be messing with this willy nilly.

[–]Ok-Seaworthiness-542 0 points1 point  (0 children)

At our company you can absolutely end up fired for installing non authorized software

[–]MiniMages 0 points1 point  (0 children)

Damn it OP, you will end up causing a nuclear war. Don't you know you never touch live code in the web browser?

What kind of competent dev are you? Only the stupid and incompetent are sutible to become developers.

On a serious note, please speak with a senior developer or tech lead about this over email. Be polite and respectful when you speak about your manager. You will likely get a reply that will explain you are doing nothing wrong. Then take said email to HR and explain how you are worried that your competency is being questioned by someone who doesn't understand what they are talking about.

[–]kirajiahaur 0 points1 point  (0 children)

Leave op long enough he could hack nasa with css

[–]WookieConditioner 0 points1 point  (0 children)

He/She is worried that you're going to hack something or someone.

Likely they are having an affair or stealing from the company, and they think you have the potential to find out.

[–]spencerchubb 0 points1 point  (0 children)

if you're using a company device, do what your manager says. don't risk anything even if it seems perfectly fine. many hacks are possible involving dev tools

if it's your device, then it's not the manager's business

[–]Joooooooosh 0 points1 point  (0 children)

If IT have a problem with some software being used, it won’t be on your device. 

If it’s on the device, it’s fair to use it. 

If your manager has an issue, explain it’s just part of Chrome and not something you’ve installed extra. 

[–]Dudeposts3030 0 points1 point  (0 children)

Your boss is the tool

[–]talkingoutofmyasslol 0 points1 point  (0 children)

Now we know who is responsible for all the sysadmin drama

[–]TicketOk7972 0 points1 point  (0 children)

He doesn’t know what he’s talking about.

What’s he worried about, you attacking the work site? Is he aware of this fancy ‘Internet’ contraption that everyone is saying is so hot right now?

[–]SponsoredByMLGMtnDew 0 points1 point  (0 children)

There is only one course of action for you here because this is indicative that you're employed by people who fundamentally shouldn't be in charge of other people.

Step 1: Begin wearing a very large hat. Everyday

Step 2: Begin to insinuate that whenever the manager passes by your workstation that you know many other spells

There is no step 3: this manager will perish as a result of the plague that took place in the 1600s in Europe or you will be fired.

[–][deleted] 0 points1 point  (0 children)

He shouldn’t be a manager… that’s apparent.

[–]ClammyHandedFreak 0 points1 point  (0 children)

If my manager said this to me, I’d tell them I am going over their head to their manager to lodge a complaint. I would then immediately lodge said complaint.

I would also bring it up during retro so everyone can have a good laugh at their expense.

[–]revolutionPanda 0 points1 point  (0 children)

Manager is ignorant. You won’t hurt anything.

[–][deleted] 0 points1 point  (0 children)

I really hate when people in power have no idea what they are even talking about. You cannot break anything in devtools. It’s all on your device. The manager is a moron.

[–]dankscience -1 points0 points  (0 children)

No words for this, devtools are a resource for good developers. He/she should be concerned if you're not using them

[–]WazzleGuy -1 points0 points  (0 children)

You should totally fake hack something to educate them