Work Computers

prostock19

prostock19

Active Member
Joined
Apr 7, 2003
Messages
3,297
Reaction score
0
Hey Gang,

If a brand new co-worker looked over your shoulder and stole your password to logon to work, what would you think should be done about this new person? Also, say you are a computer administrator and the same thing happens, what do you think?

Well, that happened to me. What got me suspicious was when the Cache, Passwords and History from Firefox was deleted. Then I noticed another Administrator account added. I have added additional auditing and it logged that he used my name and password to log onto the computer. Since I am a domain administrator, he had access to EVERYTHING. I can't trust this person working for the police department. What do you all think?? Taylor, give me your 2 cents, too.

Matt
 
I find it very puzzling, especially at where you work.

I have no idea what I would do if that happened to me.
 
Did you turn on "Guest" account? It threated your computer security seriously. My dad told me about that bad account when he working on my computer/router. It allows any experted ppl hacking into your account via "My Computer" explorer.
Whatever, if someone broken into and abuse your account and computer. You have a right to report the problems to your manager. It will be treated as hacking problems.
If it did happening to me, I'll piss off and report hackers to manager to protect my work and other private stuff such as customer informations.
 
Why don't you check your logs and see how often he signs on. Maybe, you can catch him in the act if you knew what time he/she was signing on.
 
I know the type of enviroment you are working in, and security is a top priority. I would mention this to your supervisor immediately, or go above them. For starters, I would change ALL of your passwords immediately and advise your supervisor you have done so.

Is there a reason this person needed to use your logon ID and doesn't have one of their own? If your department had not given this person their own logon, then there is probably a reason....In your case it was because it was a NEW employee and hasn't reached a point to get their own logon.

I would also be highly suspicious if this person has their own logon but still used yours. I'm sure our department monitors all of our activity on any station computers (including me typing this post), and they know who was logged in at what time. I would be suspicious that this person was up to no good and doesn't want to get caught (surfing for porn perhaps?). I would bring this to the attention of your supervisor immediately. At a minimum, 3 months from now when you are called into your LT's office because of some 'questionable material' that was being viewed under your logon, you have something to fall back on, such as 'I told you John Smith stole my password,etc and was logging in using my ID'.

There are also other security issues. For example, what is the procedure for running warrants in your in-house system? In our department, not everyone can check for warrants in-house, nor can they run them through state courts or our MILES/NCIC system. I don't know what your state system is like but our MILES absolutely forbids us from logging in under another users ID. NCIC is the same way. If you use the same passwords for your NCIC and this guy knows your logon, whos to say he doesn't run 'George Bush' through NCIC and you end up being charged federally with it (and your department loses its priviledge to the system).

I know there are some things in regards to your work that you can't post here so I'm sure there were some details to your story that were left out. Please feel free to PM me as well.

I can't stress enough, however, to be sure to tell your supervisor. I know you don't want to get the new guy in trouble, but if he was surfing questionable material from your ID and terminal, this can have HUGE ramnifications for you and your department.

BTW, smart move on the Key Logger. I had a similar situation when I worked at a radio station. The employee wasn't trying to get me into trouble but was covering his tracks for surfing porn. I set up a key logger and it proved everything!
 
Taylor said:
I know the type of enviroment you are working in, and security is a top priority. I would mention this to your supervisor immediately, or go above them. For starters, I would change ALL of your passwords immediately and advise your supervisor you have done so.

Is there a reason this person needed to use your logon ID and doesn't have one of their own? If your department had not given this person their own logon, then there is probably a reason....In your case it was because it was a NEW employee and hasn't reached a point to get their own logon.

I would also be highly suspicious if this person has their own logon but still used yours. I'm sure our department monitors all of our activity on any station computers (including me typing this post), and they know who was logged in at what time. I would be suspicious that this person was up to no good and doesn't want to get caught (surfing for porn perhaps?). I would bring this to the attention of your supervisor immediately. At a minimum, 3 months from now when you are called into your LT's office because of some 'questionable material' that was being viewed under your logon, you have something to fall back on, such as 'I told you John Smith stole my password,etc and was logging in using my ID'.

There are also other security issues. For example, what is the procedure for running warrants in your in-house system? In our department, not everyone can check for warrants in-house, nor can they run them through state courts or our MILES/NCIC system. I don't know what your state system is like but our MILES absolutely forbids us from logging in under another users ID. NCIC is the same way. If you use the same passwords for your NCIC and this guy knows your logon, whos to say he doesn't run 'George Bush' through NCIC and you end up being charged federally with it (and your department loses its priviledge to the system).

I know there are some things in regards to your work that you can't post here so I'm sure there were some details to your story that were left out. Please feel free to PM me as well.

I can't stress enough, however, to be sure to tell your supervisor. I know you don't want to get the new guy in trouble, but if he was surfing questionable material from your ID and terminal, this can have HUGE ramnifications for you and your department.

BTW, smart move on the Key Logger. I had a similar situation when I worked at a radio station. The employee wasn't trying to get me into trouble but was covering his tracks for surfing porn. I set up a key logger and it proved everything!
Click to expand...
I've used a key-logger once. My ex-girlfriend used a key-logger once too. She had suspicions that her roommate was looking at porn. He denied everything. She then cleaned out the computer, then started fresh again. Her other roommate was out of town during the next few days. The night of the first day after cleaning out the junk, she realized that there was so much shit on it. The tried confronting her roommate about it, but he kept denying it... even with proof. Because of that, she never let him use the computer again. ;)
 
Taylor said:
I know the type of enviroment you are working in, and security is a top priority. I would mention this to your supervisor immediately, or go above them. For starters, I would change ALL of your passwords immediately and advise your supervisor you have done so.

Is there a reason this person needed to use your logon ID and doesn't have one of their own? If your department had not given this person their own logon, then there is probably a reason....In your case it was because it was a NEW employee and hasn't reached a point to get their own logon.

I would also be highly suspicious if this person has their own logon but still used yours. I'm sure our department monitors all of our activity on any station computers (including me typing this post), and they know who was logged in at what time. I would be suspicious that this person was up to no good and doesn't want to get caught (surfing for porn perhaps?). I would bring this to the attention of your supervisor immediately. At a minimum, 3 months from now when you are called into your LT's office because of some 'questionable material' that was being viewed under your logon, you have something to fall back on, such as 'I told you John Smith stole my password,etc and was logging in using my ID'.

There are also other security issues. For example, what is the procedure for running warrants in your in-house system? In our department, not everyone can check for warrants in-house, nor can they run them through state courts or our MILES/NCIC system. I don't know what your state system is like but our MILES absolutely forbids us from logging in under another users ID. NCIC is the same way. If you use the same passwords for your NCIC and this guy knows your logon, whos to say he doesn't run 'George Bush' through NCIC and you end up being charged federally with it (and your department loses its priviledge to the system).

I know there are some things in regards to your work that you can't post here so I'm sure there were some details to your story that were left out. Please feel free to PM me as well.

I can't stress enough, however, to be sure to tell your supervisor. I know you don't want to get the new guy in trouble, but if he was surfing questionable material from your ID and terminal, this can have HUGE ramnifications for you and your department.

BTW, smart move on the Key Logger. I had a similar situation when I worked at a radio station. The employee wasn't trying to get me into trouble but was covering his tracks for surfing porn. I set up a key logger and it proved everything!
Click to expand...


what is a key logger??
 
A key logger is a program that runs silently in the background logging everything that is done. Some just record what is typed on a keyboard. The one I used at the radio station logged key punches on the keyboard, it logged all urls that were visited page by page in order and it also took screen shots (a photo of what the person was seeing on the screen) every so many seconds. It was handy catching people at porn, but the privacy issue is a big deal as I could see EVERYTHING that the computer did.

I have also used it to help a friend of mine who thought her husband was being either unfaithful or looking at porn all night (he would stay on the computer all night after she went to bed and she became suspicious). I won't go into their private details but it provided the information she needed.
 
Zesty, a key logger logs everything you type. We don't currently use one here.

Taylor, he uses the general dispatcher login. He knows the password for that login, and if he didn't, he could ask any cop for the general login. I am currently in the process of giving every officer his or her own login account instead of using a general department login. I feel that would be more secure.

I have brought this to the attention of my supervisor, and he is going directly to the director (equivalant to a chief, but we hate him and won't call him that). I have changed my passwords to both the domain and to the CAD/Reporting software.

The only reason why he would need my login is to add software, which he did. When I ordered the new computer for dispatch, because we deal alot with Video from the cameras, I figured at DVD+/-RW would be a good thing. Well, it appears he is copying DVD by the software he's been installing under my Admin Login. I am definitly not up for illegal activities on a police department computer.

This is so big of a concern, my supervisor is having me do a typed witness statement. This guy, we didn't want to hire. Due to the State Union contract, we HAD to hire him. One good thing, he is on probation, so if he messes up in the 1st 6 months, we can get rid of him....and it looks like he just opened the door on his own. I am soooo pissed....and I can't trust a guy like this anymore.
 
prostock19 said:
Zesty, a key logger logs everything you type. We don't currently use one here.

Taylor, he uses the general dispatcher login. He knows the password for that login, and if he didn't, he could ask any cop for the general login. I am currently in the process of giving every officer his or her own login account instead of using a general department login. I feel that would be more secure.

I have brought this to the attention of my supervisor, and he is going directly to the director (equivalant to a chief, but we hate him and won't call him that). I have changed my passwords to both the domain and to the CAD/Reporting software.

The only reason why he would need my login is to add software, which he did. When I ordered the new computer for dispatch, because we deal alot with Video from the cameras, I figured at DVD+/-RW would be a good thing. Well, it appears he is copying DVD by the software he's been installing under my Admin Login. I am definitly not up for illegal activities on a police department computer.

This is so big of a concern, my supervisor is having me do a typed witness statement. This guy, we didn't want to hire. Due to the State Union contract, we HAD to hire him. One good thing, he is on probation, so if he messes up in the 1st 6 months, we can get rid of him....and it looks like he just opened the door on his own. I am soooo pissed....and I can't trust a guy like this anymore.
Click to expand...

Sounds like you are on the right track and I'm glad the supervisor is handling it they way he/she is. With him being on probation, you would think he would know better LOL. I know when I was on probation I was really watching my P's and Q's. I wasn't difficult to forget that I was still in pencil and could easily be erased LOL.

I won't go into the legal aspects of copying DVD's, especially on a police department computer, however, I'm sure your department has a policy that the computers are for Police Use only....they probably let you all slide by surfing the net, etc but if it came down to it, it could be pointed out that they are strictly Police Business only. I don't know how large your department is but you have probably signed a paper that says they are to be used for Police only.
 
Taylor said:
Sounds like you are on the right track and I'm glad the supervisor is handling it they way he/she is. With him being on probation, you would think he would know better LOL. I know when I was on probation I was really watching my P's and Q's. I wasn't difficult to forget that I was still in pencil and could easily be erased LOL.

I won't go into the legal aspects of copying DVD's, especially on a police department computer, however, I'm sure your department has a policy that the computers are for Police Use only....they probably let you all slide by surfing the net, etc but if it came down to it, it could be pointed out that they are strictly Police Business only. I don't know how large your department is but you have probably signed a paper that says they are to be used for Police only.
Click to expand...
Sometimes I wish we didn't have the internet, but we do so much work on it now. We are not that strict on computer usage, as long as it is legal and not taking away from your work. If you notice, there have been big delays in my postings. I write during quiet times. When the college is closed, I post more. On a busy night, you won't see me online at all.

I am still checking logs on this computer and the server to find out if he did anything that would hurt the system. So far, I can't find anything. That doesn't mean that I didn't miss something, or something that has already passed through the log. I have been talking to my supervisor about this. I actually feel so violated.
 
Same with me when it comes to posting. Some people are bothered because we are exchanging e-mails or PM's and then I disappear for a few hours, just to pop up again at 4am.
 
Well, my supervisor is recommending termination to the director due to the fact that he STOLE my password and used it without permission. Well, that is sorta good news to me if he gets terminated....I don't lose my overtime :-D
 
prostock19 said:
Well, my supervisor is recommending termination to the director due to the fact that he STOLE my password and used it without permission. Well, that is sorta good news to me if he gets terminated....I don't lose my overtime :-D
Click to expand...

LOL, I know the cherished overtime ;)

I hate to see people get fired, however, I really do think its justified in this case. It wasn't an accident that occured but maliciousness (even if that wasn't his true intent and just wanted to copy DVD's). IMO, him installing software on a computer that contains your CAD is grounds for termination as that can become an officer and citizen safety issue. That of course is just my opinion.

One problem with this business is the costs associated with hiring new people. It is a long, drawn out process, and many departments spend a pretty penny on new hires. I know a lot of money was spent on me, from my background investigation to psychiatric evals to drug tests and other tests. That was all before I was even hired. For that reason, it can be tough to fire new people and do the process all over again, but in many cases (such as yours) firing is justified.
 
Taylor said:
LOL, I know the cherished overtime ;)

I hate to see people get fired, however, I really do think its justified in this case. It wasn't an accident that occured but maliciousness (even if that wasn't his true intent and just wanted to copy DVD's). IMO, him installing software on a computer that contains your CAD is grounds for termination as that can become an officer and citizen safety issue. That of course is just my opinion.

One problem with this business is the costs associated with hiring new people. It is a long, drawn out process, and many departments spend a pretty penny on new hires. I know a lot of money was spent on me, from my background investigation to psychiatric evals to drug tests and other tests. That was all before I was even hired. For that reason, it can be tough to fire new people and do the process all over again, but in many cases (such as yours) firing is justified.
Click to expand...
Well, firing him wouldn't be that bad. Just that his month or so of training has gone down the drain. If he is terminated, then it would be good that it happened before his probation is up. After that, it is hard to fire someone because of the Union we have. I kinda liked the guy, although I had a funny feeling about him. I NEVER thought this would happen.

The installation of programs are blocked from everyone except for me and my supervisor. If an officer needs something installed, then they ask us. One time, I installed a typing tutor program for an officer so he could become a more proficient typer (as you know, REPORTS REPORTS REPORTS). There has been many officers who need software installed for classes they are taking, so I install it for them. (As you can imagine, summer time at the University, many people take classes because it is alot slower).

If he gets fired, the only thing I am afraid of is retaliation. I just have to stand up for myself. I don't know if he is stupid enough to risk jailtime for assaulting me or damaging anything of mine.
 
prostock19 said:
Well, my supervisor is recommending termination to the director due to the fact that he STOLE my password and used it without permission. Well, that is sorta good news to me if he gets terminated....I don't lose my overtime :-D
Click to expand...
That's good news! :thumb: Finally!
 
Back
Top