So the security at the company I am doing this internship for is abysmal. When I say abysmal I am actually being nice.
A quick example, I called IT this morning to install MS Access 97. The guy remoted into my computer, asked me to log out so he could enable my account as an administration. I log back in, and the real fun begins. He knows perfectly well that I am sitting right at the computer, but he still does everything I am about to tell you.
He goes to “run” and types in the full network location for a folder that happens to contain all kinds of software that the company uses. We’re talking things from AutoCAD, Nero, Maple, etc to Microsoft Office. So obviously I am a bit interested when I see the contents of this folder. He then goes into the “MS Office 97” folder and opens a document called (I kid you not) “Office 97 serial”. So here is the serial number for Office 97 sitting on the screen in front of me. Yes, I know Office 97 is nothing exciting, but the point is that he was flashing the serial for anything around.
So continuing …he installs Access 97 for me and then promptly says “ok, everything looks ok, have a good day, goodbye”. Yes, he hung up that quickly. Now at this point, I was shocked. Not only is 1. the serial number still open on my desktop, 2. the directory of applications (each with a serial in the directory, I checked) still open on my desktop, 3. the full network path for this folder of applications is still in my “run” field, BUT HE ALSO LEFT ME WITH ADMIN PRIVILEGES. I felt like calling this guy back and laughing at him, but instead I decided I didn’t feel like getting fired today.
It’s scary and frightening how poor the security is inside this company. I can only hope, and god do I hope considering what is it they/I do, that security to the outside world is drastically better than this.
p.s. I won’t say where it is that I am working because I can only guess they’d not like me telling the world how crappy their internal security is.