Comment by d4mi3n | Hacker News Reader

Comment by d4mi3n | Hacker News Reader

Parent Full thread

Also laid off by Shopify. Agree that leaking was not the right call but I would have to vigorously disagree about the “well done” lay-off bit.

Issues I observed included:

* A complete lack of resourcing for the operational teams conducting the layoffs (talent, legal, etc)

* People receiving demands to sign their severance agreements within a few days.

* Severance agreements that were outright illegal in the regions of the employees there were laying off

* Severance agreements with wildly incorrect numbers

* Severance agreements that Shopify refused to honor after signing (to the point that it’s triggered a class action in Ontario)

* Poorly coordinated equipment return. Many of us have not received return boxes for our laptops over a month after the layoff. Some have received 3 or more boxes despite having no additional equipment.

* Questionably times layoff of all personnel in Berlin shortly before a works council was established. This has also resulted in an investigation by the local authorities.

Now I’ve been through my share of layoffs—they always suck and it’s reasonable to expect large ones will have problems. But this mantra that Shopify has done a good job of the May 2023 layoff or the previous layoff last year is a fallacy being pushed by an executive board at Shopify that has become increasing unaccountable for poor decisions and exercised even worse leadership.

Unless there’s a security concern they should just let the employee keep the machine. The company I work for that did layoffs this year did that. It’s just easier for everyone involved and I imagine makes the layoff slightly less shitty for the employee.

I don’t disagree with you. I’ve been wondering what the economics of shipping thousands of laptops internationally shakes out to be. I suspect it may be a wash given the laptops are used and are likely depreciating assets.

Anybody ever manage equipment return programs? Are there compelling reasons to do this at scale that don’t boil down to data loss prevention.

The issue is that company information gets immediately sold on Craigslist or OfferUp or whatever.

In returning the equipment it actually protects the employee from compromise by creating a chain of custody for corporate data.

Sounds counterintuitive but it’s not. If the equipment needs to be destroyed — and it often is — it can be done properly.

People have no idea how easy it is to recover data from a single formatted drive.

I’d be curious if it was easy (or even possible) to recover data from a FileVault encrypted drive, which any IT dept worth its salt could remotely wipe

I’d wager to agree, I don’t play in this space much but I can’t imagine MDM being unable to handle this kind of basic use case, and also for most companies the confidential data being worth enough to be more careful than relying on MDM. Sure if you work for a compay that builds weapons for the USG you probably need to worry about hardware chain of custody. But those people are not sending their employees home with laptops anyway. In other words, if you trust your employees enough to take that device home, whatever you have on there is probably fine to be handled by MDM

I'm of a similar mind. I also think the argument of this protecting the employee, while true, feels a it weak in the face of an employer deciding to leave a laptop they didn't adequately scrub with said ex-employee.

I can't speak to FileVault, but Bitlocker and TPM can be quite easily defeated through sniffing the bitlocker key as it's transmitted from the TPM chip to the CPU to decrypt the drive on boot over the LPC, I2C, or SPI bus. Unless you enable TPM+pin for preboot auth you can't easily protect the data on a Windows PC, even with FDE.

If there's a remote wipe done (one click in MDM software) then there is no key left.

Pretty much every company does preboot auth nowadays for Windows laptops. And remote wipe is also possible, as the side comment says.

Letting the former employee keep the laptop is the default, IMO. Although, frankly, I am not sure I would want to keep mine... sitting on a pile of a dozen laptops accumulated over the years.

And everyone watches porn on their on own devices anyway.

> sitting on a pile of a dozen laptops accumulated over the years.

low power consumption and can probably run a couple of VMs, albeit not super well but well enough

When Kenna was bought by Cisco I never got a box to ship my laptop back (despite asking repeatedly). Instead the Cisco team bricked all of the laptops remotely.

I had only worked there for two months, so this brand new rather expensive laptop was turned into a paperweight for no reason other than to spite as far as I can tell. I still have it in my closet in case they decide we need to return it still (despite it being two years later). Anyways, if Cisco buys a company you're working for my advice is to immediately start looking for a new job.

Bricked like fried? or just can't log-in / OS scrambled / reinstall the OS?

One way to brick if it’s an Apple product is to do an MDM wipe and not disable the activation lock. It would be kind of shitty to just turn the laptops into e waste by not disabling the lock but this is Cisco that the OP mentioned so I could absolutely see that as a reality. After you wipe there’s literally no reason to not unlock the device except spite (if the device is stolen, you obviously don’t want people to be able to sell or use it again so it makes perfect sense not to unlock it). But if it was legitimately used as an employee device then the employer gains nothing but forcing the employee to deal with junk by not unbricking the device

Reply on news.ycombinator.com