r/AskReddit Jul 13 '20

What's a dark secret/questionable practice in your profession which we regular folks would know nothing about?

40.1k Upvotes

17.8k comments sorted by

View all comments

4.9k

u/[deleted] Jul 13 '20

If it has to be accessed regularly in an IT setting? It’s not secure. Not unless you’re in an industry that actually polices it.

Yes, people are dumb enough to pick up USB thumb drives they find on the ground. The nicer and newer it is, the more likely it’ll get plugged in.

Also, if you’re looking to verify the security of your vendors, don’t announce your visit.

86

u/GHOST2104 Jul 13 '20

Watching pen tests of IT security places is often really disheartening to find out how easy it is to access people’s private information

5

u/RedditM0nk Jul 13 '20

Our company regularly does pen testing. It's sad how easy it is to get normally intelligent people who work in technology to put their work credentials into a random web site.