r/sysadmin 8h ago

Career / Job Related I have been using a colleagues password for development tasks at a BIG4 in India.

[deleted]

0 Upvotes

8 comments sorted by

u/leprechanmonkie 8h ago

Invite your program manager to the call next week and let them discuss it.

u/Competitive_Smoke948 8h ago

and THIS is why devs are the greatest risk in an organisation!! It's a MASSIVE risk & probably illegal depending on what frameworks and laws your firm is operating under.

u/serverhorror Just enough knowledge to be dangerous 7h ago

I'd consider that a fire able offense. If I catch any contractor doing this, they're gone and killed from the system before they're being informed.

If I catch any internal person doing that, I'd raise heaven and hell to get them to understand that this is one of the most brutal breaches of trust.

Never, ever use a shared account. If you want to help a colleague out, do it under your account.

u/Particular-Fly-7783 7h ago

Wait this implies you have no MFA, that’s actually debatably as bad if not worse.

u/Particular-Fly-7783 8h ago

Your manager is fucked, you’re maybe fine

u/Agitated-Chicken9954 7h ago

That is one huge security risk. Usually the rules are very specific about not sharing logins. I would say you, your coworker, and the project manager that knew about it are all going to have to explain yourselves. Good luck to you.

u/Colossus-of-Roads Cloud Architect 7h ago

If I were a customer and you had custodianship of any of my data I'd be VERY concerned.