Could you carry on?

Strider590

Could you carry on working for a company where your knowledge and experience are treated with distrust and contempt?

I know a darn site more about IT than anyone else at work (even the IT support staff), A situation ive been in with every single job ive had. Recently I pointed out a very big hole in their security and went into great depths as to how it could be exploited.
I then pointed out how they could very simply fix the issue......

Result = Problem not fixed and my own local/network privileges reduced to the point where I have to call somebody over every 5 mins just to do my job......

Basically they see my knowledge as a threat to themselves.

Part of me is ok, the money isnt bad.... But it's now at a point where basically nobody wants to speak to me, all sorts of accusations and rumors appear to have been thrown around and im working in an atmosphere you could cut with a knife.

This is less about money saving and more about saving my sanity.... But the result of a wrong decision could cost me dearly.

Moral of the story however is to always act dumb.

getmore4less

Stick to your own job, no one likes a smart a**e.

Have you been giving them driving lessons as well?



I know a darn site more about IT than anyone else at work (even the IT support staff), A situation ive been in with every single job ive had.

Perhaps you need to review the jobs you get and get one that uses this vast amount of knowledge and experience.



Recently I pointed out a very big hole in their security and went into great depths as to how it could be exploited.

Should have stopped at the security hole and let them deal with it no need to go into great depths.

Strider590

getmore4less wrote: »

Perhaps you need to review the jobs you get and get one that uses this vast amount of knowledge and experience.

I have 14 years experience, self taught.... Very little on paper.
Oh and im an ethical hacker, which you'll need to look up.
The issue is not what with they've done, I could undo it in seconds, the issue is with the blackening of my name when I have infact done nothing at all wrong.

getmore4less wrote: »

Should have stopped at the security hole and let them deal with it no need to go into great depths.

They wouldn't have understood WHY it was a problem if I hadn't gone into detail. That's like me telling you I can get into and steal your car and then not telling you how.



The problem with IT is that everyone knows a bit and thinks they know it all, when someone like me comes along they immediately go into distrust mode.

Effectively having this knowledge gets you treated like a criminal! it's just WRONG!

getmore4less

Oh and im an ethical hacker, which you'll need to look up

So have you been doing anything at work to uncover these security issues without permission?



Result = Problem not fixed and my own local/network privileges reduced to the point where I have to call somebody over every 5 mins just to do my job......

Looks like you might have been

If you have you are lucky you have not been sacked for gross missconduct.


The issue is not what with they've done, I could undo it in seconds

That would just compound your issue

Strider590

^^ Ok buddy, your arrogance isn't contributing to this thread at all......

You clearly don't understand or even want to understand, this does not work the way you seem to think it does and I really don't have the time to sit here and explain it to you, JUST for you come back with more arrogant remarks.

FYI the security hole was found when trying to access a shared network printer, it still exists and still allows even low level users FULL access to run commands on any networked PC. I have nowt more to say on this.

MonkeySaving?

So let me get this straight, you are one of these annoying end users that fiddle around with things that you're not supposed to? If thats the case then I suggest you take heed of Getmore4less's posts because if I were one of those support guys I'd be doing exactly the same thing. You think you're a hot shot in IT, so go and find a job in IT....you're being the arrogant one in this thread.

Strider590

When I started at this company I was asked to contribute toward any area to which I had knowledge, my wide ranging skill base was the reason I got the job and IT was specifically mentioned as point where I could help. Please get off my back..... Why so much hate?

Do you hate your doctor for knowing more about the human body than you do?
What the hell is with people hating those who have experience/knowledge in computers/IT?

It seems that in a subject where people "think" they know everything (when in fact they know very little), those who do actually know their !!!!!! become a target for a barrage of abuse!

MonkeySaving?

Strider590 wrote: »

What the hell is with people hating those who have experience/knowledge in computers/IT?

Can't say I've experienced any of that myself, MCSE+S, CISSP, CISM, CEH, CPT certified....16 years experience in IT to put it into perspective. Like I said, if you think you are good at it, then why not look for a job in the field? I could never, ever be an end user with a "bit" of IT responsibility, you're leaving yourself open to all sorts of problems there, one of which you have highlighted in this thread

Strider590

^^ As mentioned, nothing worth noting on paper and these days if you have to go through a HR dept you can be as thick as two short planks as long as you managed to temporarily memorise some text books in uni.

These people will spend a fortune of company money on software that does little more than add some entries into the system registry, or on programs where the same effect can be achieved with simple VBS or even a DOS batch file.

I chose a path in my first love, Electronics..... Which died a death when schools started doing VERY basic electronics as part of GSCE's. Employers thought "why do we need this guy when that 16 year old knows electronics and can work for half the money".

I didn't really get my hands on a PC properly until a year after I left school because only the "top" group was allowed to use PC's, not that is until I worked out how to screw up the BBC micro network so that the teacher would be forced to put us into the new PC room
IT wasn't something id really experienced and therefore something I didn't really know enough about during those later educational years.

billydino

Strider590 wrote: »

These people will spend a fortune of company money on software that does little more than add some entries into the system registry, or on programs where the same effect can be achieved with simple VBS or even a DOS batch file.

In my organisation it is important that systems and processes can be handed over to varying skill sets. That is why we have nice 'front ends' for common tasks. Management don't like risk and you would be a massive risk if you think you can just 'change stuff' with no paper trail.

If you set a process up, say something in powershell that only 20% of your department understand, what happens when you all don't turn up for work one day and that 'simple process' starts to affect business?

I understand your frustration but not everyone in any given department has the same skill set and you must always take this into consideration (I've been battling with it for 10 years!).

Wyndham

Strider590 - if you made your points in the work environment in the way you've made them on this thread, then I'm not surprised you had a bad reaction. I'm not saying you were wrong to offer help, but there are ways and means of doing that so people see it as help rather than as interferance.

Just a thought....