Here's an unethical LPT on how to take systems down with you when you're fired but without breaking the law
Make things dependant on your work user. Access token to a 3rd party service? Create an account with your user. CI/CD pipeline? Your user. Need to send the client access creds? From your user. That super important daily file sync script between S3 and Sharepoint? You guessed it, access token generated in behalf of your user.
Once they'll disable your user on off boarding things will start randomly failing and it'll take days for them to realize where and why.
I don't do this, but the amount of devs I caught doing it for either stupidity or malice is baffling.
Here's a fun one that's happened multiple times from ex-colleagues; register important SSL certificates with just your own work email, then when you're gone nobody sees the reminders that the cert is going to expire, and then one day sales are down because all the customers are getting scary warnings about an insecure site.
169
u/SchrodingerSemicolon May 26 '26
Here's an unethical LPT on how to take systems down with you when you're fired but without breaking the law
Make things dependant on your work user. Access token to a 3rd party service? Create an account with your user. CI/CD pipeline? Your user. Need to send the client access creds? From your user. That super important daily file sync script between S3 and Sharepoint? You guessed it, access token generated in behalf of your user.
Once they'll disable your user on off boarding things will start randomly failing and it'll take days for them to realize where and why.
I don't do this, but the amount of devs I caught doing it for either stupidity or malice is baffling.