One chestnut from my history in lottery game development:

While our security staff was incredibly tight and did a generally good job, oftentimes levels of paranoia were off the charts.

Once they went around hot gluing shut all of the “unnecessary” USB ports in our PCs under the premise of mitigating data theft via thumb drive, while ignoring that we were all Internet-connected and VPNs are a thing, also that every machine had a RW optical drive.

    • fat_stig@lemmy.world
      link
      fedilink
      English
      arrow-up
      0
      ·
      1 year ago

      Mine was removed by Corporate IT, along with a bunch of other open source stuff that made my life bearable.

      Also I spent 5 months with our cyber security guys to try and provide a simple file replication server for my team working in a remote office with shit internet connectivity. I gave up, the spooks put up a solid defense, push all the onerous IT security compliance checking onto my desk instead of taking control.

      Not as bad as my previous company though, outsourced IT support to ATOS was a nightmare.

      • Aceticon@lemmy.world
        link
        fedilink
        arrow-up
        0
        ·
        edit-2
        1 year ago

        It’s reasonably easy to make a hardware mouse wiggler with an Arduino Micro (and I don’t mean something that physically moves a mouse, rather something that looks like a USB mouse to the computer and periodically sends mouse movement messages).

        If you’re desperate enough, look it up as it’s quite simple so there should be step by step instructions out there.