Posts by SecOps 5 publicly visible posts • joined 21 Nov 2017
Face unlock provides a reasonable level of security given you aren't being targeted for attack. A photo might unlock the phone, but most people are worried about access to their phone if they lose it. In the event a phone is lost, it is unlikely someone will discover the correct photo to unlock the phone unless there is some indication of the owner displayed somewhere.
Sure it would be bad to do in cases where you may be targeted (e.g. an executive traveling to China) but otherwise it provides a reasonable level of security for most people. And lets be honest, face unlock is more convenient than fingerprints.
You missed the part where every competent employee with any knowledge tries to cram out the door before IBM can figure out what needs to be knowledge transferred. That is if they can even figure out what is in scope for their contract.
I was part of one of these deals last year.
Day one -- everyone has 3 months to find a new job using the job board.
Day 30 -- We miscommunicated the message, please stop looking for jobs (too many people had come to the same conclusion, the internal job board was harder to use than external searches).
Day 60 -- scope of the contract still seems unclear, huge issues arising from the fact the client has tons of data that can't go overseas as it can't be access by non-citizens; apparently, no one brought that up.
Day 75 -- I tender my resignation (14 day notice)
Day 84 -- Scheduled call to discuss the enterprise 2fa application, I mention that I am gone in 3 working days (last day was a Monday). Apparently, no one communicated to those organizing KT when people resigned.
To boot, a lot of the staff that was "retained" by my old org has been filing out, either voluntarily or involuntarily.
My first thought was this is just a step toward just selling the whole damn thing off.
Bain: You should sell the divisions
IBM: Well ok, but how do we get ready to do that
Bain: We'll make it look less complex by merging them and then we can move some of the staff around to areas you want to keep.
IBM: That sounds great, we're good at moving people
Bain: Our invoice is in the mail, you won't believe how many hours we billed thinking this one up.
Just curious if you have ever reviewed the public salary postings for what government jobs pay in the US. At least in some areas I wouldn't qualify it as crap. If you are interested you can lookup California ones via transparentcalifornia.com
For 2016 in Riverside County the lowest paid Security Analyst made 94,766 and the highest paid made 151,657. Just to cherry pick a few others, a Security Analyst for the Modesto Irrigation District was paid 119,406 a Information Security engineer for Santa Clara Country 143,119.59 and so on. I'm not sure I would qualify any of these as paying the least having worked at a fortune 500 previously where I made less than all of these people in a security engineering role. And this is without benefits which tend to be better in general. I don't work for a government agency currently, but you can bet I'm not crossing them off the list for the future.
The Register 
Biting the hand that feeds IT
Copyright. All rights reserved © 1998–2025
