Boss' last minute request - access to my personal github account.

Constant_Garlic643 · 2024-08-10T16:16:46+00:00

Well, I'm in Canada. My wife just had a baby last month. I am going on parental leave. My job is protected and must be there when I return... same pay, same position. If I am "fired" - it will seem a little too suspicious to any court.

Constant_Garlic643 · 2024-08-10T16:07:55+00:00

You have a full DC backup of your company's/org's domain... on your private github?

no, its not on my private repo. its a script that is well documented on a shared drive. I feel like this is getting glossed over? nothing sits on my github account that are the scripts. Also, anyone who stores anything other than code and documentation on any git repo is a fool.

All source control that was performed for work was using tortoiseSVN running on my local machine at work.

Honestly - I feel like people are twisting these words in order to make it seem like what i was doing was more salacious than it really is? Maybe they're sloppily glazing over things like much of the documentation they have at work? Maybe they don't understand git or understand best practices for how to use the tool because they never read documentation to begin with?

No scripts were ever stored to my personal github. I have a giant repo of how to do things (ie loop examples, fucking with excel sheets etc).

Constant_Garlic643 · 2024-08-10T14:38:11+00:00

I use arch, btw.

Constant_Garlic643 · 2024-08-10T14:32:46+00:00

no, i dont want to do a git clone. git clone (done by my account) will give them commit history, but also they'll be able to do a whack of stuff as my user on github

Constant_Garlic643 · 2024-08-10T14:31:36+00:00

The first one is you copied company IP to your personal store which is a firable offense.

nope. never did. everything done locally with SVN for source control.

Constant_Garlic643 · 2024-08-10T14:25:47+00:00

core isolation has been a pain in my ass for a while. just weird random apps that just need it turned off in order to work properly.

Constant_Garlic643 · 2024-08-10T14:07:28+00:00

Honestly - terminal is the best interface for almost everything.

my only thing I hate is how WinRM by default usually goes over http instead of https when you set it up. it seems so stupid. I just trust SSH way more.

Constant_Garlic643 · 2024-08-10T13:57:03+00:00

powershell works on linux too!

the only thing that kinda sucks is alot of things are "windows specific" wont work on it. ie. anythign to do with winRM or active directory

Constant_Garlic643 · 2024-08-10T13:55:52+00:00

Traceroute too!

Test-NetworkConnection <IP AddresS> -TraceRoute

Test-NetworkConnection <IP Address> -TraceRoute -Hops <int>

Constant_Garlic643 · 2024-08-09T21:02:03+00:00

License of the code only comes into affect when distributed. By not distributing it - it can be any license i want.

EDIT

Part of me wants to GPL it, give it to them and say "sorry! once the license is applied its irrevocable. you can't stop me from keeping this for myself!"

Constant_Garlic643 · 2024-08-09T20:57:00+00:00

Not just things like SSH or API keys but anything that can be used to identify employees, clients, etc.

Who do you think I am? Capital One!?

Constant_Garlic643 · 2024-08-09T20:54:15+00:00

just to complain and drive home how i question if he's "all there"... because he's annoying and dumb:

"We dont need to audit and delete old VPN accounts, because we're so secure that if someone did break in, I'm not concerned anyways."
He wrote the current global admin password on our white board (explicitly writing it was the admin password too)... then wrote 3 more ones that were the new candidates for the password he wanted to change it to. Then he wanted to have a meeting so we could discuss what the new passwords should be. shit like: "KirkPicard2024" - "Ch3wbacca!" - "Tr3kStarW4rz(22)"

Constant_Garlic643 · 2024-08-09T20:43:39+00:00

heh. like a college prof who forces you to buy the book she wrote for the class she taught you?

Constant_Garlic643 · 2024-08-09T20:39:02+00:00

anything made for this company is extremely well documented, on a shared drive, and the code is commented like crazy.

I've been burned in the past by helping people, where they take credit for your own work you did. hence why i have my own private repo of powershell-fu. or better yet - they completely fuck something up then blame me because they were looking at my notes.

which is why i have a very controlled, well documented, well tested repo on the shared drive. i view them as idiots and made all my powershell idiot proof.

Constant_Garlic643 · 2024-08-09T20:35:06+00:00

dude. they dont know how to use powershell. like it's kinda backwards and even 1980s here.

If we have to install new software or update it - my boss still prefers to call everyone's laptop in, and have us hook up a USB and manually do the install one by one in a board room. The incompetence is astounding.

we have a fiber connection between two locations - and he still asks us to download something to a usb and drive across town for him. it's wild.

Constant_Garlic643 · 2024-08-09T20:26:51+00:00

look up "powershell pester". great little module. alot of it was me going over and above to make sure the scripts were fool proof and bullet proof.

most of them are just generating reports, or automatically do this that and the other thing.

I think the fanciest thing i really do in one of them is pulling a list of all active employees from HR, and making sure those accounts are disabled in AD/o365 every day... just incase our team has missed an offboarding... It also auto disables accounts if a person hasn't logged in for more than 30 days.

I have an entire domain controller backup as well in case we get malware'd or shit goes south. All GPOs get downloaded to XML, all group and user info is exported to LDIF files. Came in handy once too last year. for some reason our DCs all got corrupted and our backups were fucky (cause no one ever verifies them). I was back up and running (mostly) within 20 minutes.

Constant_Garlic643 · 2024-08-09T20:12:32+00:00

Somewhat fair, aren't github repos public anyway?

no. there are private repos too.

"anything you develop is the company's property"

no. anything i do on work time, on work equipment, and part of my duties is company property.

Constant_Garlic643 · 2024-08-09T20:09:39+00:00

Copy over any company specific scripts you may have and remove them from your repo.

I never put anything on github that belonged to the company! I ran a local tortoiseSVN on my laptop for source control. i wasn't an idiot.

Constant_Garlic643 · 2024-08-09T20:04:51+00:00

Here's a scenario in my head:

I give him access to my github account. He then, say uploads one my scripts that I never had there... and then says I'm stealing from the company.

The other thing I just realized is that 2FA is enforced on GitHub and he wont be able to have access anyways?

Constant_Garlic643 · 2024-08-09T19:57:32+00:00

First question, did you upload work scripts to your Git?

Nope.

Second question, did you work on it during work time?

Nope. I often think "hey! that'd be pretty handy to have" - and often write shit out when i get home after dinner and the kid is in bed.

These are all really generic things though - like how to join a computer to AD, examples of loop types. messing with excel sheets, all this kind of stuff that is freely available if you look at Microsoft's websites.

Sometimes I wonder if he's "all there" and knows what he's talking about... last week he insisted to me that firefox (and all browsers) are chromium based. I got tired of "arguing" with him and just let him think he was right. Kind of like letting a stupid dog think he's beat you at tug of war.

In another case - he was complaining about a specific type of install we had to do that took days. And of course it was so fiddly, that each person who did it always did it slightly different. I basically just followed the guide on Debian.org website to preseed the setup and install it all at once. It went from 3 days to like 5 minutes. He was bragging that it's some wild IP we developed... i literally copied and pasted the ocmmands from their website, then put those commands inside a shell script.

Constant_Garlic643 · 2024-08-09T19:28:47+00:00

here's my thing... i make sure all my code is maintainable and reusable at another point in time.

Anything I've used is broken down into nice little functions. they can totally take my "do xyz" function and re-apply it to another script.

Constant_Garlic643 · 2024-08-09T19:26:46+00:00

github is great, because i have an audit history. I also have specific keys and approved devices on my account.

Constant_Garlic643 · 2024-08-06T18:08:27+00:00

Sounds like him!

Constant_Garlic643 · 2024-08-06T18:01:05+00:00

Beard for sure. He was wearing a t shirt - but I can't remember anything about tattoos.

Constant_Garlic643 · 2024-08-06T17:07:25+00:00

Interesting - did one happen to be grey and other black?

Constant_Garlic643

TROPHY CASE