Hacker News Reader

Good culture to enforce security, no?

It happens at my workplace. If someone who has access to elevated privileges leaves their workstation unlocked and unattended, it's highly likely that a colleague will send an email to the team to embarrass them.

I've pointed out that this technically breaches company policy regarding use of someone else's user account/identity, but it falls on deaf ears.

Leaving your computer unlocked usually also breaks policy (except if the policy is very much useless). The non-embarassing way would be to report the user leaving the computer unlocked, leading to disciplinary action and eventual dismissal. I think something slightly embarassing is the kinder option here.

>Leaving your computer unlocked usually also breaks policy (except if the policy is very much useless).

Agreed. But at this point, only one person has breached policy and it's a forgetfulness/oversight kind of breach.

If someone actively takes control of the machine to send an email, that's a much more serious offence.

Reply on news.ycombinator.com