Conspiring Against Your Employer? Watch What You Email 420
Eric Giguere writes "In a story that has Bay Street (the Canadian equivalent of Wall Street) in a kerfuffle, the Globe and Mail writes that bank employees defecting to set up a rival investment firm didn't realize that their employer could easily track the emails and messages they sent and received, even when they're sent via a nominally-secure system like RIM's BlackBerry. In particular, the employees were assuming that the messages they sent via direct PIN-to-PIN communication (a PIN uniquely identifies a BlackBerry device) weren't trackable. But if they're on the device, they're available to the employer to see. The employees may also have thought that PIN-to-PIN messages are encrypted, though RIM has always said that they're not -- it's only the connection to the corporate email server that is secure. A lot of damning information pulled from those emails and messages has made its way into a lawsuit."
Can I be the first to say "duh"? (Score:5, Insightful)
If you're doing something with their resources like plotting against them... well...
Agreed (Score:4, Interesting)
People are either getting dumber, or too trustful - either way, one is a sure sign of another.
Re:Can I be the first to say "duh"? (Score:3, Insightful)
Re:Can I be the first to say "duh"? (Score:2, Insightful)
I mean seriously, how dense to you have to be to realize that there is no expectation of privacy at work. It is usually spelled out in the policies. If they own or pay for the computer, the network, or whatever other methods your connect with, they are going to be able to know what is passing between those devices.
Duh.
Re:Can I be the first to say "duh"? (Score:3, Interesting)
Re:Can I be the first to say "duh"? (Score:2, Insightful)
Re:Can I be the first to say "duh"? (Score:5, Insightful)
This once happened to me. A router in my area lost its config. They claimed I did it. I replied that it could have been a lazy admin never doing a "wr mem". They told me that I could either sign a confession or they'd reassign me to an outside work area while they "investigated". My boss outright told me the investigation would take months while they bounced me from area to area and shift to shift.
Given that kind of culture, the employee always loses.
Re:Can I be the first to say "duh"? (Score:3, Informative)
Two weeks later he is fired for *SEXUAL HARRASMENT* for using the word "fuck". And because he is fired for something of his fault, he is ineligable for unemployment benefits (which starbucks would have had to pay).
Lots of places have policies to *never* fire someone. The best thing to do is
Re:Can I be the first to say "duh"? (Score:4, Insightful)
More importantly, you've left something out, or more accurately, your friend did. He has an actionable case, but most likely, he did something else, and is passing this story off to his acquaintances. I seriously doubt it went down they way you claim.
Re:Can I be the first to say "duh"? (Score:3, Funny)
Re:Can I be the first to say "duh"? (Score:2)
In this case the bank can use the information it obtained to fire the employees. However the bank could not p
Re:Can I be the first to say "duh"? (Score:2)
Re:Can I be the first to say "duh"? (Score:2)
Still, it's possible, however unlikely that my company has installed other logging facilities on this machine. While I do format/reinstall regularly they're sneaky bitches and it'd be perfectly legal.
Looting != protected concerted activity under NLRA (Score:4, Informative)
I don't think "hey, let's blow this popsicle stand and take all of its business with it" qualifies as "protected concerted activity" under the act, even if it had occurred within the US NLRB's jurisdiction.
However, don't let this dissuade you from working together to improve your workplace under the protections of Section 7. You should, however, try to avoid using company-owned computer systems for obvious reasons. (They own them, they can read whatever they want on them, you have no expectation of privacy on them.)
That's why... (Score:2)
Ofcourse I will format it...
Re:That's why... (Score:2)
Re:Can I be the first to say "duh"? (Score:2)
You've hit the nail on the head;
This is like getting caught photocopying your butt on the company copier and then arguing that you have a right to privacy in the copy room.
Even in a grey area (for example, I use a PC at home to VPN to work; where is the line drawn?) the chances are still good that you most likely signed some of your right of privacy away in exchange for employment.
Re:Can I be the first to say "duh"? (Score:2)
They were using something called PINing which is some sort of direct Blackberry-Blackberry messaging method that *does not use the company's server*. Perhaps a friendly BlackBerry admin can explain more.
They will have assumed that since these messages went direct from blackberry to blackberry without using any company resources, they were not liable to interception. And indeed it appears they weren't
Silly Rabbits, its too late (Score:5, Funny)
Although an employer sometimes can go through the emails on your harddrive, I think what the people in this article don't realize is that it sounds like emails are being intercepted at the server level. Who is stupid enough to use company email to conspire against the company? Setup a freakin gmail account and talk about it at home!
Re:Silly Rabbits, its too late (Score:2, Insightful)
Yes. But, how many idiots would set up a gmail account and then use their companies computer to access that account?
Re:Silly Rabbits, its too late (Score:2)
Re:Silly Rabbits, its too late (Score:2)
Re:Silly Rabbits, its too late (Score:2)
Re:In the US..... (Score:5, Informative)
Silly Rabbits should not start businesses (Score:5, Insightful)
it would cost the employer less to take out an add in the financial section pointing out that the upstart company was demonstrably dishonest and joining a competitive race with its intellectual pants down around its ankles than it would to sue the dummies.
Re:Silly Rabbits, its too late (Score:5, Informative)
And people should realize that due to new regulatory reasons like Sorbanes-Oxley [sarbanes-oxley.com] companies are required by law to perform this.
In order that they don't get sued they need to treat e-mail as corporate records. So getting caught doing something like this is even more likely as companies make sure they can comply with that law.
Cheers
gratitude (Score:3, Insightful)
Loyalty used to mean something in this country. I guess loyalty has gone the same way as traditional family values and faith in God.
Things are going to have to change, people.
Steve
Re:gratitude (Score:5, Insightful)
I admire loyalty, but there are situations where it's not warranted. Most corporations have chosen not to give or reward loyalty, so they get back in turn.
Re: (Score:2)
Re:gratitude (Score:2)
But that's not usual.
There's loyalty, and there's loyalty... (Score:5, Insightful)
Look, these people were dumb, that much can be argued. They were dumb for using a monitored service to do this, and they were dumb for (ostensibly) stealing their company's resources for the purpose of setting up a competitor.
However, you need to decouple this from the loyalty argument. The loyalty you need to have is not to your company any more. Are they loyal to you if business turns sour and they have to start slashing the payroll? Hell no. The corporate sinecure is dead. "Ma" Bell doesn't evince the image of a benevolent mother any more.
The kind of loyalty you should have is to your projects, to your work, to you as an individual and to your Rolodex (or electronic equivalent.)
If you live every day as if you might be laid off, working on projects that will escalate your worth and making sure that lots and lots of people know what kind of value you contribute, then you'll be better off; your customers (those who are the beneficiaries of your projects) will be better off, and your company will be better off.
And if things should turn sour, then you shrug your shoulders, get your Rolodex out and start calling.
So instead of "Logo Loyalty" you should cultivate "Rolodex Loyalty" (thanks, Tom Peters. [tompeters.com])
Re:There's loyalty, and there's loyalty... (Score:2)
Loyalty != Blind slavery to a corporation.
Re:There's loyalty, and there's loyalty... (Score:2)
Re:gratitude (Score:5, Funny)
Re:gratitude (Score:2)
Re:gratitude (Score:2)
I agree that it's pretty lame to use a company's resources to steal their business, but I've never understood the notion of deep company loyalty. True, a company may "write me a check" but the company does NOT "put bread on my table", I do. The check was in exchange for the services I provided -nothing more, nothing less. Don't get all sentimental about company loyalty. It's a business. When times get tough, you might get a pink slip just as fast as the next guy.
Loyalty does mean something nowadays, it's
Re:gratitude (Score:2)
Re:gratitude (Score:3, Insightful)
Or the traditional family value of basically owning your wife and children... People miss "teaching others lessons" in the family.
If you pull back that blind nostalgia those traditional family values are no different than the ethics of Victorian England.... most of the time they were all a facade.
As intelligent people we should challenge tradition instead of complacently accepting
Re:gratitude (Score:5, Insightful)
Ahem.
Over 80% of the nation's population is Christian.
The are blue laws to prevent the sale of alcoholic beverages during certain days (Sunday) or completely in roughly 80% of the United States.
There are over one hundred cable channels nationwide devoted entirely to Christian programming.
Nearly very company in the U.S. is closed on Christmas.
"In God We Trust" is printed on all U.S. money.
And yet, every day someone claims religious persecution of the Christian religion.
Re:gratitude (Score:3, Interesting)
Businesses pay me for my skills. They don't get my loyalty as a freebie on top of that. Companies aren't nations, aren't friends, aren't family, and they sure as hell don't deserve my devotion as a matter
Re:gratitude (Score:2)
Businesses exist to make profits. That is their sole goal. If someone wants to start a company they don't have any ethics other than 'make the most money possible.' No one should trust a business to do the right thing, especially if it's unprofitable.
Re:gratitude (Score:3, Interesting)
Loyalty used to mean something in this country.
Where have you been for the last twenty years?
We can easily get in a chicken and egg argument but in my opinion this trend toward lack of loyalty was begun by employers, not their employees.
It wasn't the employees who first went around pronouncing that the age of lifetime employment was over and people had better get used to have 2 or 3 different careers in a lifetime. It wasn't employees who decided to ship their own jobs overseas to save some money.
Integrity (Score:2)
When you're working for a company, you should work for the company. You're collecting their paycheck, so behave like a professional.
If you want to set up your own company, do it on your time with your own resources. You own them at least that.
Do people have less integrity than in past generations? I'm not sure. I think malfeasance is better publicized than before (eg, this forum).
And in Canada, "family values" has never
Re:gratitude (Score:2)
Instead, a company should expect an employee to act essentialy in her/her best interest (and there is more to this than financial benefit of course). It is up to the company to provide a workplace that is, in fact, something the employee wakes up every day to and can say "this is something I want to be par
Re:gratitude (Score:2)
it usedto be that companies treated the employees like human beings and treated them well to help encourage loyalty.
Nowdays it's status-quo to screw your employees in any way you can.
anyone suprised that an employee is not loyal is either unbelieveably stupid or had their head stuffed somewhere.
Some companies try hard to treat their employees right, and they have a very low turnover and high employee morale and statisfaction. but those companies are
Re:gratitude (Score:2)
Obviously, the people working at this company must have thought that they weren't being compensated adequately for the value that they brought to the company. They thought that their management was clueless and didn't deserve the employees and the business that it had, and that they could do better on their own.
The only dumb thing these people did was use company resources to do their conspiring, and that it
king and country (Score:2)
Yup. Sadly, man has a long history of betraying his benefactors.
Example: colonists who owed everything to king and country -- yet they threw all that tea in Boston Harbor. And what followed was worse. Ingrates!
-kgj
Re:gratitude (Score:2)
Re:gratitude (Score:2)
Re:gratitude (Score:2)
How can you make fat-cracks on someone with a nick like BigHungryJoe? You looking for a new place to live or something?
Badoom-boom!
Re:gratitude (Score:2)
Uh, Canada is parf of America. Take a look at a globe. Do you see that continent called North America? Take a closer look, you will see Canada is part of that continent.
Re:gratitude (Score:2)
Uh, Canada is parf of America. Take a look at a globe. Do you see that continent called North America? Take a closer look, you will see Canada is part of that continent.
Repeat after me: America is a country. North America is a continent. Kids today...
Re:gratitude (Score:2)
Uh, the United States is a country. That country happens to be part OF America.
Re:gratitude (Score:2)
That country happens to be part OF America.
No, that country happens to be America. When people refer to the continent, they say North America. the United States of America is frequently referred to as the States, the USA, and America. Just because you're confused doesn't mean that we are.
Re:gratitude (Score:2)
I never said I was confused. I am saying that people are using the term America incorrectly. There are about thirty or forty countries or so that are part of America (if you include South America). If you want to be specific about what country you are referring to, then you should refer to the United States or even "The" States.
No pity, no new violation (Score:5, Insightful)
Another question, (Score:2)
Re:Another question, (Score:3, Funny)
You would, but these folks were EXECUTIVES. Just by the nature of their job, they are pre-disposed to idiocy.
OMFG (Score:2, Funny)
Well the guy is a moron (Score:2)
basic fact is, he deserved to be caught for being a moron.
Re:Well the guy is a moron (Score:2)
Re:Well the guy is a moron (Score:2)
Re:Well the guy is a moron (Score:2)
Unless they have spyware on the computer, they can't tell what I'm doing. And our software is unstable enough as it is.
I'm a knee-jerk privacy freak, BUT (Score:3, Insightful)
The really shameful thing (aside from working on company time to screw your employer) is that these people didn't know this already. Looking at the list of those being sued, I see IT people who should have known better. Perhaps the company would have punished them more effectively by letting them go form their own company without understanding the basics of ethics, law (including allegedly trying to steal customer databases), or security.
Conspiracy of Idiots (Score:2)
Re:Conspiracy of Idiots (Score:2)
I was involved in a project a couple of years ago to build Blackberry encryption software for the US government (they cancelled it, but we finished the software anyway -- unfortunately no one uses it). The PIN to PIN issue was one of the main reasons the government wanted extra encryption (plus, regular Blackberry e-mails are encrypted ri
Re:Conspiracy of Idiots (Score:2)
Yup, that's right, the messages themselves weren't tracked as they were sent, but once they were left on the inbox on the device then they were fair game...
EricIdiots**2 (Score:5, Interesting)
They are idiots for two reasons.
First, because they clearly acted unethically, which is the really big idiocy. I run my own company and rule number one is due diligence. I am not going to screw myself by doing something that could bite me in the ass further down the line.
It's astonishing how many investment guys simply don't get this. I have literally had my own investment guy sit there and tell me that a particular investment 'cannot lose', in the presence of his lawyer -- who looked very uncomfortable and was forced to intervene by saying "Look, you cannot say that".
Second, anyone who uses unencrypted email on a server they do no control, ESPECIALLY if it belongs to someone they are screwing, deserves to spend the rest of their productive years flipping burgers, or possibly stamping licence plates.
Re:Idiots**2 (Score:2)
Investment bankers are salesmen, akin to car dealers. If unable to avoid them, they should be handled with care and suspicion.
Pardon my French... (Score:3, Funny)
Re:Pardon my French... (Score:2)
It's similar to a brouhaha :)
Seriously, why not check a dictionary [m-w.com]?
Or you could try using the mysterious skill known as "figure it out from context".
Moula? (Score:3, Funny)
Comment removed (Score:5, Funny)
For this very same reason (Score:2)
Now, you really have to be an ass if you try to fsck with the hand that's feeding you. And we are talking about people making tons of money anyways !
decent crypto, properly used (Score:3, Insightful)
install gpg, or worse than nothing, use s/mime - but if you need to ensure privacy, you need to have (put) your own privacy layer in place.
(it's no good hoping and relying on magic pixies)
Lesson in stupidity (Score:3, Insightful)
That means: keep the bits off their infrastructure. ALL of it.
ssh and silc via blackberry (Score:2, Interesting)
Re:ssh and silc via blackberry (Score:5, Informative)
Most large institutions have a BES, yes, but not all of them have the Mobile Data Service (MDS) enabled, which is what you'd need to run something like that. Without MDS, the BES is really only about getting email and PIM stuff in and out of the corporate mail server.
EricJust like my workplace. (Score:3, Insightful)
This happened to my old ex-boss! (Score:2, Interesting)
Not to be trusted (Score:3, Interesting)
In reading the replies to this post it is clear there are two camps. One which says they were stupid to get caught and the other that has no pity.
Remember, these turncoats gladly accepted a pay cheque to be a representative of their company. Their actions could cause the company to lay off people, perhaps you if it causes financial harm.
I for one would not look forward to calling one of these turncoats a friend. It would only be a mater of time before they framed me for their own gain.
Let these turkeys fry
Re:Not to be trusted (Score:2)
Remember, these turncoats gladly accepted a pay cheque to be a representative of their company. Their actions could cause the company to lay off people, perhaps you if it causes financial harm.
They aren't turncoats, they're employees. Turncoat implies some level of loyalty, which is totally absent.
PGP is the way to go (Score:2)
Speaking of which, GnuPG [gnupg.org] is at 1.4.0 now. For Windows users, GPGShell [jumaros.de] is a good (closed-source) frontend for it.
Are Slashbots Commies? (Score:2)
Damned commies
The article says they were company BlackBerrys (Score:2)
Sheez, 60 bucks a month or something like that. Cheap insurance.
PIN to PIN??? (Score:2)
Personal Information Manager
Re:PIN to PIN??? (Score:2, Informative)
Re:PIN to PIN??? (Score:2)
Should read more carefully
Mod me -1 -> Really Dum...
How to Get Away With It (Score:5, Interesting)
1. Don't stab anyone in the back (burned bridges, insert your favorite cliche). It can come back to hurt you.
2. Don't give your bosses a reason to be unhappy with you. Work just as hard - or harder. If you're valuable to the company, leaving them will be more painful (and can produce a more profitable situation for you).
3. Encrypt every email, instant message, and web transaction that deals with your activities. Don't assume anything is safe unless you're actively doing something to ensure its security or you can verify it easily (SSL, for instance).
4. Regularly scan your machine for viruses and spyware. Use a packet sniffer to see if you're sending anything unexpected. Look through your machine to see if there are programs installed that shouldn't be there... is your company spying on you?
5. Don't use their phones. Upgrade your damn cell plan and use that.
6. Take advantage of non-company resources for communication and whatnot. Find a decent webmail provider with SSL enabled.
7. Make sure any contract or agreement you signed isn't going to come back to bite you. If you signed a non-compete agreement or whatever, don't assume it's invalid or that they won't pursue it. See a lawyer BEFORE you have legal troubles in this area.
As others have complained, there are loyalty problems in this country. I used to love my job, love my work, and love the company. Some things changed, and while I still love the work I no longer enjoyed anything about the company. Many attempts to change it from within failed. When your boss is taking advantage of you, you need to re-evaluate. When you're stuck in a dead-end, you need to re-evaluate. When you get the line, "if you don't like it, then find somewhere else to work," the time for re-evaluation has passed and it's time to end that part of your life.
Employers aren't loyal to employees any more than we are to them. I heard stories of pre-1980s-boom-and-crash Japan, where a failing company's president would give everything he had back into the company to keep it going as long as possible...and if it wouldn't work, he'd split the cash from his shares, pay, etc. among the employees. This was in return for the lifetime loyalty you gave to the company.
Re:How to Get Away With It (Score:2)
You're joking, right. Cell phone calls are the easiest of all to intercept - you just need a radio receiver. Use land-line phones, or if you're paranoid, encrypted VoIP.
Yes, but also keep all comms separate (Score:3, Interesting)
However, it turns out that before that, they had installed keystroke monitors, and used this to obtain passwords to private web-based email accounts. We found this out because one of the former employees was hit with a lawsuit with "evidence" from his private Yahoo ema
Leaving is NOT Screwing (Score:2)
Now I know this is gonna send some of you Radical Republicans over the edge.....
Have a Right, to leave and form another company or collect sea shells or any other damn thing.
Dat's righ
This is why I always use my own mail server (Score:2)
Re:This is why I always use my own mail server (Score:2)
Re:This is why I always use my own mail server (Score:2)
Re:This is why I always use my own mail server (Score:2)
Nope. I use SSL with it.
Simple solution. (Score:2)
C-Y-B-E-R-C-A-F-E.
law (Score:2)
Re:Companies reading emails (Score:2)
Re:Karma (Score:2)