<story><title>Engineer admits he wiped 456 Cisco WebEx VMs from AWS after leaving</title><url>https://www.theregister.com/2020/08/26/former_cisco_engineer_aws_webex_teams/</url></story><parent_chain></parent_chain><comment><author>kstrauser</author><text>I left one job to switch to another. A year later, my new job started using a cloud-based task management app. When I went to sign in, my 1Password auto-filled the credentials I&amp;#x27;d used for the same app at my previous job, and there I was looking at all of my old employer&amp;#x27;s current projects and other confidential info. I called my old boss (who I got along with just fine), told him what happened, and asked him to please cut off my access immediately.&lt;p&gt;When you leave a job, it&amp;#x27;s in your own best interest to make sure that all of your access is removed. It&amp;#x27;s a lot harder for them to blame unexpected happenings on you if you can&amp;#x27;t even log into the thing. (Not that this happened here. I just wanted to point out a gotcha you might not have thought about.)&lt;p&gt;If you find out that they missed something, report it to them immediately &lt;i&gt;and keep that paper trail&lt;/i&gt; demonstrating your good intentions toward them. Then hound them about it until they get around to fixing the situation. And for the love of God, &lt;i&gt;don&amp;#x27;t ever, EVER&lt;/i&gt; log in &amp;quot;just to look around&amp;quot;. Absolutely no good can come of that.</text></comment>
<story><title>Engineer admits he wiped 456 Cisco WebEx VMs from AWS after leaving</title><url>https://www.theregister.com/2020/08/26/former_cisco_engineer_aws_webex_teams/</url></story><parent_chain></parent_chain><comment><author>saidajigumi</author><text>This article leaves more questions than it answers. Room-elephant number one: access being available after an employee has left is bad. That access remaining &lt;i&gt;five months later&lt;/i&gt; is beyond the pale, unless the real story is that the employee created a backdoor. Barring a backdoor, there are further serious questions about the employee retaining this access, presumably without any employer-provided and controlled hardware (e.g. laptop, yubikey, or what-have-you).&lt;p&gt;Room-elephant number two: motive. The reported facts naively summarize as &amp;quot;oops, ex-employee blew up some stuff in prod, caused problems&amp;quot;. &amp;lt;meme&amp;gt;But whyyyyy??&amp;lt;&amp;#x2F;meme&amp;gt; There&amp;#x27;s no indication of specifics, and seeming denials of some obvious guesses: attempts at hacking (e.g. data exfiltration for profit, which are denied), ransomware, revenge, or anything else that would explain this behavior.&lt;p&gt;Further confounding everything is the bit where the new employer&amp;#x27;s response to these revelations is apparently &amp;quot;shrug&amp;quot;.</text></comment>