Never, EVER, do anything that might create personal legal liability for yourself on behalf of your org. No matter what anyone says, you are not "family." You are not "in this together." And most importantly they do NOT "have your back." - ThreadSky

malwarejake.bsky.social • 82 days ago

Never, EVER, do anything that might create personal legal liability for yourself on behalf of your org.

No matter what anyone says, you are not "family." You are not "in this together." And most importantly they do NOT "have your back."

Comments

gingerjet.net•82 days ago

The proper response in a situation where an organization asks you to do this is “I quit”.

gingerjet.net•82 days ago

Additional note: when someone calls you 4 months later to asking you why you quit the proper response is “talk to my lawyer”

wokeineurope.bsky.social•82 days ago

This is also a bad look...😉

eljefe.social•82 days ago

*looking at my personal risk register I'm carrying for bigCorp*. Yeap, can't disagree with that one...

Do as he says, not as I do.

riskymanag3ment.bsky.social•82 days ago

I'm glad I'm not the only one who thought that. Though, I regularly have a conversation about what is legal and what isn't with my boss.

Yes I scraped some cybercriminals website and found credentials in clear text. No I did not attempt those credentials, because that's against the law.

paulmurphyetc.bsky.social•82 days ago

Also, use up yer vacation time and keep a copy of emails. Unless they’re like government secrets.

quantenghost.bsky.social•82 days ago

I also have a work benefit of personal legal insurance.

I always assumed that it would get cut the second I tried to get representation against my employer's interest. I don't know if that's contractually true, but I hope to never test it.

quantenghost.bsky.social•82 days ago

Are there #lawyers who can share terms, #laws, or resources?

I imagine some new workers unaware of niche laws in their industry.

When might employers be required to provide legal defense of employees?
What employment contracts cover lawyers?
What roles contain liability minefields?

miketalonnyc.bsky.social•82 days ago

Oh, they have your back - it's what they shove on when they throw you under the bus.

zen1den.bsky.social•82 days ago

& don’t over share on personal/political/cultural topics.
Better yet just read this

https://www.amazon.com/Survival-Savvy-High-Integrity-Political-Tactics/dp/0743262549/ref=mp_s_a_1_1?crid=3BI3TA5614EHE&dib=eyJ2IjoiMSJ9.ZvZy4yTJHSqTQTZMVRYMta2JdckunHCXrwbZusDprNK9dEVkEqkRm7SjsWx1zPJIzJMPKszbO9d90pleDSm7_noWZbbTX_mZvnjCAcDKJ62LSpPx1kirvprMt064ZCEgM4uT0yj1P_E5FFzzKurNtGEjGMTIg4NHRJ2UiB-Y9nx-Q5rW-phMVP4cfb8WHItNq3eyvKN3Xq9IIcswp-HpPQ.YpF6TkFJD-mBQEuqm9CvmvYSBo733qw8xr4jiuCatcI&dib_tag=se&keywords=corporate+savvy&qid=1734463419&sprefix=corporate+savvy%2Caps%2C189&sr=8-1

alissa.bsky.social•82 days ago

Just ordered a copy! Thanks

lucy-bee.bsky.social•82 days ago

My brain is so warped that I read "dog" instead of org.

onidthetrex.bsky.social•82 days ago

I did that once under some corporate duress and it will never happen again. IT - and cybersecurity people in particular - are likely to need to deal with this more frequently than most people

codepilot.bsky.social•82 days ago

What are some examples of this?

alissa.bsky.social•82 days ago

Here’s one! Being the poor sap who agrees to sign off to “Accept the Risk” for any identified security gaps

bolivarfiles.com•82 days ago

Hacking back.

codepilot.bsky.social•82 days ago

That makes total sense

bolivarfiles.com•82 days ago

Especially if an organization doesn't really understand what they're asking. Often attackers are using hijacked infra, which means when you hack back you're really hacking some company's server which is completely illegal and can land you in legal Jeopardy even if you were told to do it by your boss

Posting Rules

Be respectful to others
No spam or self-promotion
Stay on topic
Follow Bluesky's terms of service

Comments

Posting Rules

Reply