{"id":15782,"date":"2019-07-15T02:30:19","date_gmt":"2019-07-15T10:30:19","guid":{"rendered":"http:\/\/www.palada.net\/index.php\/2019\/07\/15\/news-9529\/"},"modified":"2019-07-15T02:30:19","modified_gmt":"2019-07-15T10:30:19","slug":"news-9529","status":"publish","type":"post","link":"http:\/\/www.palada.net\/index.php\/2019\/07\/15\/news-9529\/","title":{"rendered":"Memory-Lane Monday: Even worse than you thought"},"content":{"rendered":"<p><img decoding=\"async\" src=\"https:\/\/images.idgesg.net\/images\/article\/2019\/05\/cw_sharktank_3x2_2400x1600_04-100796353-large.3x2.jpg\"\/><\/p>\n<p><strong>Credit to Author: Sharky| Date: Mon, 15 Jul 2019 03:00:00 -0700<\/strong><\/p>\n<p>This government agency has cashiers\u2019 stations for handling transactions with the public, and the treasurer\u2019s office decides it needs new software to run those stations, according to a pilot fish in IT.<\/p>\n<p>And there\u2019s going to be one sign-on and password for all the stations, brag the higher-ups.<\/p>\n<p>Bad idea, protest all the IT programmers and system administrators. For one thing, having a single user sign-on to the system will prevent tracking who is completing each transaction. They cite security, accountability and separation of duties, but their protests fall on deaf ears.<\/p>\n<p>The vendor rep shows up one day, and he and the treasurer do a presentation for an audience that includes IT managers. The two sound excited, and a touch proud, when they tell everyone that the cashiers will sign on with the user ID \u201cCash.\u201d They don\u2019t share the top-secret password, though; that\u2019s just for the cashiers to know.<\/p>\n<p>IT manager blurts out, \u201cWhat is it, \u2018Money\u2019?\u201d<\/p>\n<p>And immediately sees that the treasurer\u2019s and vendor rep\u2019s faces fall.<\/p>\n<p>\u201cBefore testing was finished,\u201d reports fish, \u201cthe application was changed to allow individual user IDs and passwords. It took a little longer, but transactions are now tracked by the user ID, date and time.\u201d<\/p>\n<p><strong>Sharky will file the identifying marks<\/strong> <em>off your true tales of IT life. Send them to me at <a href=\"mailto:sharky@computerworld.com\" rel=\"nofollow\">sharky@computerworld.com<\/a>. You can also subscribe to the <a href=\"http:\/\/www.computerworld.com\/newsletters\/signup.html\" rel=\"noopener\" target=\"_blank\">Daily Shark Newsletter<\/a>.<\/em><\/p>\n<p><a href=\"https:\/\/www.computerworld.com\/article\/3406430\/memory-lane-monday-even-worse-than-you-thought.html#tk.rss_security\" target=\"bwo\" >http:\/\/www.computerworld.com\/category\/security\/index.rss<\/a><\/p>\n","protected":false},"excerpt":{"rendered":"<p><img decoding=\"async\" src=\"https:\/\/images.idgesg.net\/images\/article\/2019\/05\/cw_sharktank_3x2_2400x1600_04-100796353-large.3x2.jpg\"\/><\/p>\n<p><strong>Credit to Author: Sharky| Date: Mon, 15 Jul 2019 03:00:00 -0700<\/strong><\/p>\n<article>\n<section class=\"page\">\n<p>This government agency has cashiers\u2019 stations for handling transactions with the public, and the treasurer\u2019s office decides it needs new software to run those stations, according to a pilot fish in IT.<\/p>\n<p>And there\u2019s going to be one sign-on and password for all the stations, brag the higher-ups.<\/p>\n<p>Bad idea, protest all the IT programmers and system administrators. For one thing, having a single user sign-on to the system will prevent tracking who is completing each transaction. They cite security, accountability and separation of duties, but their protests fall on deaf ears.<\/p>\n<p>The vendor rep shows up one day, and he and the treasurer do a presentation for an audience that includes IT managers. The two sound excited, and a touch proud, when they tell everyone that the cashiers will sign on with the user ID \u201cCash.\u201d They don\u2019t share the top-secret password, though; that\u2019s just for the cashiers to know.<\/p>\n<p class=\"jumpTag\"><a href=\"\/article\/3406430\/memory-lane-monday-even-worse-than-you-thought.html#jump\">To read this article in full, please click here<\/a><\/p>\n<\/section>\n<\/article>\n","protected":false},"author":4,"featured_media":0,"comment_status":"open","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"colormag_page_container_layout":"default_layout","colormag_page_sidebar_layout":"default_layout","footnotes":""},"categories":[11062,10643],"tags":[714],"class_list":["post-15782","post","type-post","status-publish","format-standard","hentry","category-computerworld","category-independent","tag-security"],"_links":{"self":[{"href":"http:\/\/www.palada.net\/index.php\/wp-json\/wp\/v2\/posts\/15782","targetHints":{"allow":["GET"]}}],"collection":[{"href":"http:\/\/www.palada.net\/index.php\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"http:\/\/www.palada.net\/index.php\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"http:\/\/www.palada.net\/index.php\/wp-json\/wp\/v2\/users\/4"}],"replies":[{"embeddable":true,"href":"http:\/\/www.palada.net\/index.php\/wp-json\/wp\/v2\/comments?post=15782"}],"version-history":[{"count":0,"href":"http:\/\/www.palada.net\/index.php\/wp-json\/wp\/v2\/posts\/15782\/revisions"}],"wp:attachment":[{"href":"http:\/\/www.palada.net\/index.php\/wp-json\/wp\/v2\/media?parent=15782"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"http:\/\/www.palada.net\/index.php\/wp-json\/wp\/v2\/categories?post=15782"},{"taxonomy":"post_tag","embeddable":true,"href":"http:\/\/www.palada.net\/index.php\/wp-json\/wp\/v2\/tags?post=15782"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}