- 1
- 2
- 3
- 4
- < previous
- next >
Dirty IT job No. 3: Enterprise espionage engineer (black ops)
Seeking slippery individuals comfortable with lying, cheating, stealing, breaking, and entering for penetration testing of enterprise networks. Requirements include familiarity with hacking, malware, and forgery; must be able to plausibly impersonate a pest control specialist or a fire marshal. Please submit rap sheet along with resume.
Social engineer, con artist, penetration tester, or white hat hacker — whatever you call it, Jim Stickley has a dirty job that actually sounds like fun. As VP of engineering and CTO of TraceSecurity, Stickley gets to talk his way into a client's offices, sneak into their data centres, make off with the company's vitals, then come back later to show them where their internal security broke down.
The best part? He gets to wear disguises. Pest control specialist, AC repairman, OSHA inspector — Stickley and his crew have a closet full of uniforms. But fireman is a particular favourite. "At one place you're the fire inspector, and girls fall all over you," Stickley says. "The next place you're wearing the pest inspector suit and you're the scum of the earth."
First, Stickley and his team take over the company's e-mail system and schedule an appointment. Then they show up in the appropriate fake attire. Whoever has been assigned to watch them usually leaves after about five minutes, Stickley says. If not, they send her out to get them coffee or offer to show her a (fake) dead mouse they found in the corner. That usually does the trick.
Once she's gone, they sneak into the security room and take all the backup tapes, load Trojans onto the servers, or plug wireless devices into the network and hack it from the parking lot.
"If we can get the backup tapes, we're done," Stickley says. "Every piece of data you'd want — mothers' maiden names, Social Security numbers — is on those tapes. We've also walked out with computers, boxes filled with loan documents, and applications for patents that have been drawn up but not submitted. It's amazing."
Stickley says he's penetrated more than 1000 locations and has yet to be thwarted. The dirty part: Coming back the next day to face the people you just owned.
"You feel dirty, if nothing else," Stickley says. "People come up to you and they're mad. 'I can't believe I got you a cup of coffee.' But ultimately you're just trying to help them out. Nobody gets fired for screwing up. The whole point is to learn from the experience."
There's at least one person who doesn't gain much from Stickley's exercise in creative insecurity, however.
"I feel really bad for the real pest inspector," he says. "The next time he shows up, boy does he get beaten down."
Dirty IT job No. 2: Data centre migration specialist
Position involves relocating and reconfiguring data centre over impossible distances within a ridiculously short time frame. Prior experience as cable jockey, rack-n-stack grunt, console monkey, and/or log zombie a plus.
Moving a data centre is a dirty job. Moving one halfway across the country in 48 hours — that's a really dirty job. But that was the task facing Scott Wilson and his firm, Marathon Consulting, when one of its clients needed to close down its Chicago data centre the day before Thanksgiving 2003 and open for business in New York the following Monday.
Wilson tried to persuade his financial services client to set up a duplicate centre in New York; they could power down the Windy City operation, light up the Big Apple, then gradually move equipment as it was needed. No good, said the client — too expensive. So at 4:30 p.m. on Wednesday, his people loaded roughly 80 machines into trucks and drove nonstop to New York.
"We tracked the trucks using GPS, so when they reached the Holland Tunnel, we went to the data centre," says Wilson, managing director of the Brooklyn-based Marathon. "We spent the next 48 hours setting it up and getting operational. But we got it up." Unplugging everything and cleaning out the muck that's collected over the years is bad, Wilson says. "Cables sit for years in half-baked air-conditioned rooms that are dusty and nasty."
But the worst part is putting Humpty Data centre back together again. "Most data centres aren't labelled correctly and have been put together by 10 different consultants and in-house employees who each have their own ways of doing things," Wilson says. "And recabling someone else's work is always fun."
Fortunately, migrating data centres isn't something firms do very often. But when they do, it's an ordeal. IT pros resent having to do grunt work, but they also understand it's part of the job.
"On the other hand, moving 10 racks of servers from Chicago to New York in 48 hours at the end of the day feels amazing," says Wilson. "The gratification is definitely there."
- 1
- 2
- 3
- 4
- < previous
- next >
Read up on the latest ideas and technologies from companies that sell hardware, software and services. Achieving the impossible: Unlimited application scalability
Email Archiving 101—Customer Case Study
Solve Exchange Mailbox Storage Issues Once and for All
Enterprise Wireless WLAN Security
Everything you need to know about email and web security (but were afraid to ask)
Gaining Competitive Advantage Through Enterprise Planning
Data grids and service-oriented architecture
Best Practice in Building an Integrated Information Management Strategy
Zones provide focussed content from CIO and leading technology partners.- White PaperWhat you don’t know can destroy your business. It’s hard to imagine modern business without the internet but in the last few years it has become fraught with danger. Read on to discover how internet security can give your business a competitive advantage.
- White PaperView this webcast and discover the drivers for changing network design practices, why many organisations are changing their approach to network architecture and how enterprises should be moving forward with open architecture multi-vendor network solutions. Register now and learn how your business can maximize the business value of the enterprise network.
- White PaperDiscover how the integration of disparate technologies in your company can lead to greater user productivity, improved management, lower costs, higher efficiency, and easier risk mitigation.
Discover how SOA can create smarter outcomes for your business.
Attend and learn:
- How SOA is helping leading companies to become more agile
- Where you should be applying SOA processes in your company
- The top SOA implementation mistakes to avoid
Click here for more information.
- +
CIO Live Podcast #79: Brent D Taylor, author of The Outsider's Edge: The Making of Self-Made Billionaires Part II 05 October, 2007 06:00:00
For his new book, The Outsider's Edge: The Making of Self-Made Billionaires, social researcher Brent D Taylor spent four years of intensive research investigating the psychological make-up and backgrounds of some of the world's richest men and women, including IT luminaries Bill Gates, Larry Ellison and Steve Jobs. Taylor discovered that, despite working in different industries and coming from different upbringings, they all have one thing in common -- they are all outsiders. - +
CIO Live Podcast #78: Brent D Taylor, author of The Outsider's Edge: The Making of Self-Made Billionaires 28 September, 2007 17:34:25
For his new book, The Outsider's Edge: The Making of Self-Made Billionaires, social researcher Brent D Taylor spent four years of intensive research investigating the psychological make-up and backgrounds of some of the world's richest men and women, including IT luminaries Bill Gates, Larry Ellison and Steve Jobs. Taylor discovered that, despite working in different industries and coming from different upbringings, they all have one thing in common -- they are all outsiders. - +
CIO Live Podcast #77: Panasonic Speeds Up Trans-Pacific File Transfers, Part III 21 September, 2007 07:00:00
Part three in our three-part special report from CIO's sister publication Network World in the US, as Paul Desmond reports from the Network World IT Roadmap Conference in Santa Clara, California. With development teams in the US and Japan, Panasonic needed a more efficient way to move very large files between the two locations. Iben Rodriguez, IT consultant for Panasonic Research and Development, explains how a storage-area network and virtual server technology helped speed up WAN performance. - +
CIO Live Podcast #76: Panasonic Speeds Up Trans-Pacific File Transfers, Part II 14 September, 2007 07:00:00
Part two in our three-part special report from CIO's sister publication Network World in the US, as Paul Desmond reports from the Network World IT Roadmap Conference in Santa Clara, California. With development teams in the US and Japan, Panasonic needed a more efficient way to move very large files between the two locations. Iben Rodriguez, IT consultant for Panasonic Research and Development, explains how a storage-area network and virtual server technology helped speed up WAN performance. - +
CIO Live Podcast #75: Panasonic Speeds Up Trans-Pacific File Transfers, Part I 07 September, 2007 07:00:05
Part one in our three-part special report from CIO's sister publication Network World in the US, as Paul Desmond reports from the Network World IT Roadmap Conference in Santa Clara, California. With development teams in the US and Japan, Panasonic needed a more efficient way to move very large files between the two locations. Iben Rodriguez, IT consultant for Panasonic Research and Development, explains how a storage-area network and virtual server technology helped speed up WAN performance.
- +
Data breaches rose sharply in 2008, says study 08 January, 2009 08:27:00
More than 35 million data records were breached in 2008, according to the Identity Theft Resource Center.More than 35 million data records were breached in 2008 in the U.S., a figure that underscores continuing difficulties in securing information, according to the Identity Theft Resource Center (ITRC). - +
Rogue SSL certificate exploit puts VeriSign on the spot 07 January, 2009 11:04:00
Wishes "white hat" researchers had notified VeriSign before public demo.Following the success of researchers last week in creating a false SSL certificate based on VeriSign's RapidSSL brand, the company is scrambling to explain how it happened, how it's preventing it from reoccurring, and whether its other SSL certificate-generation services are at risk. - +
With Gaza conflict, cyberattacks come too 05 January, 2009 08:03:00
Pro-Palestinian hackers have defaced thousands of sites following attacks in Gaza.The conflict raging in Gaza between Israel and Palestine has spilled over to the Internet. - +
5 ways to secure your Blackberry 18 December, 2008 12:58:00
What do Tom Cruise and the McCain campaign have in common? They have both been bitten by the loss of a Blackberry. Mobile expert Dan Hoffman gives advice on how to keep your cherished mobile device safe, even if it's out of your handsWhat do Tom Cruise and the McCain campaign have in common? They have both been bitten by the loss of a Blackberry. Mobile expert Dan Hoffman gives advice on how to keep your cherished mobile device safe, even if it's out of your hands. - +
Wireless VPNs: Protecting the wireless wanderer 18 December, 2008 11:04:00
Employees sipping café Java over their wireless laptops may think a VPN makes them safe and secure. With careful configuration, there's some chance they're rightEmployees sipping café Java over their wireless laptops may think a VPN makes them safe and secure. With careful configuration, there's some chance they're right.
Research software developer appoints Susan Dart to new Business Development Director role 08 January, 2009 09:08:00
Research software developer appoints Susan Dart to new Business Development Director role 08 January, 2009 09:08:00
Anyware Introduce Two Powerful PCI TV Tuner Cards with S5 Power Up and Windows Media Center Remote 07 January, 2009 17:30:00
Fortinet Cures Mobile Phone “Curse of Silence/CurseSMS” Attack 07 January, 2009 16:30:00
SEAGATE SHIPS DESKTOP HARD DRIVE WITH WORLD’S HIGHEST AREAL DENSITY – 500GB PER DISK 06 January, 2009 15:34:00
|
||
|
||
|
|
||
|
Business Intelligence and Enterprise Performance Management: Trends for Emerging Businesses
Hyperion surveyed 163 companies to understand BI and EPM requirements, evaluation processes, and extent of adoption. Top areas of current and future investment for emerging businesses include budgeting and planning as well as management reporting solutions. Read on to discover more.










