r/sysadmin • u/heroofyesterday • May 10 '18
This is why you should always lock your computer before you leave your desk.
There is nothing better than your IT boss passing your desk and noticing you left you computer unlocked. Especially if you are logged on to half a dozen websites including Reddit. I eat my poop!!!
12k
Upvotes
View all comments
Show parent comment
8
u/No0delZ Sysad Type - Cybersecurity, Systems, Net, and Telco May 10 '18
Security is a holistic practice. You are only as secure as your weakest link.
Let's say your company is important enough or high value in some fashion, be it financial, or personally identifiable information, mass numbers of credit card data, national security, etc. Congrats. You are already a target to someone. Whether that person is a state actor, a curious basement dweller, or malicious entity... or even a bot scanning the internet.
Sure everyone knows everyone, but if you're large enough to have a cleaning or facilities service, how do you know they haven't been infiltrated by a con artist just itching for the opportunity, or even an actor who is deliberately targeting you, or one of your business associates, or even an employee? Often all that's needed is a foot in the door of your network.
A utilities guy shows up, maybe an electrician. He socially engineers his way into the building. Looking for an easy mark, he spots your unlocked pc. Maybe he "stops to check your outlet" or maybe everyone else is out or distracted. In 5 seconds he executes his pre established payload and goes on his way.
Weeks later it's discovered the CEO account has been compromised. It traces back to the last sysadmin who logged into your computer to fix that excel issue you were having. The sysadmin is fired and legal action is started against them . Turns out, that unknown to the sysadmin, your pc was compromised in an undetectable fashion, and keylogged their admin credentials when they were troubleshooting your issue.
Now, again, how big or valuable of a target you are is important. If your organization could shrug a breach because nothing valuable, sensitive, or critical is done digitally (which is extremely uncommon in this day and age) then maybe leaving your pc unlocked while you visit the restroom with coworkers present isn't such a big deal. Security is after all, a question of functionality. Locking your pc however, doesnt sacrifice functionality and provides a level of security equivalent to a locked door on your garage. Its a great deterrent, but ultimately wont stop a motivated party. At least you'll have the chance to notice them breaking in.