Hacker News Reader

I think a key here is that the employee was a Software Development Manager. This makes it more likely that they had the ability to install arbitrary software and likely had elevated local privileges on their work machine. Non-software development employees at Disney probably have more restrictions.

It sounds like this employee should have known better than to install a game, and a random mod for the game on a work machine.

View on HN

It's interesting because I actually do agree with you entirely but unfortunately I suspect this is a fairly common issue.

I think unfortunately there's a lot of software developers who (and I'll happily include myself in this), think they know better and that they don't have to worry about malware because they use 'common sense'.

One of the biggest issues that I find people tend not to understand is that, even if you find the malware very quickly, and remove it, it only takes a matter of seconds for it to steal credentials / sessions / other sensitive data and send them to who only knows where.

I wouldn't call it common sense to install a random mod. Script kiddies are always in places that have gullible audiences. Games and worse unvetted mods should have really sounded the alarm.

That’s the point.

Reply on news.ycombinator.com