Do you know what the biggest security whole in any company is? It is not intricate file permissions. It is not flaws in firewall’s or in IIS web servers that have not been patched. The biggest security flaw is people. Gus showed me someone else’s blog that ranted about that. His quote was perfect. It boils down to people are lazy. People generally say “security is good, and important”, but when you say don’t tell anyone your password they do. You tell people to make difficult passwords, they find the craziest ways around your restrictions. My own dad who I consider a smart guy doesn’t even have good passwords. I consider him the typical user. If he needs to reinstall AOL he needs me to give him his password. Who am I kidding if he needs to reinstall AOL I do it for him, but you get the idea.
How do we fix this problem? Smarter minds than mine have pondered this for a long time. My answer is you don’t. You just cant. You can try and try, but in the end it is plugging a whole in a dam with duck tape. Even good biometric security has flaws today. Maybe one day it will be good enough to use. Then 3 years after that day when it is cheap enough to deploy I will sign up for it.
OK, enough about security. WOW, I actually said that. Last night we had to do some last minute fix’s on one of our websites when an image server died. It was actually weird. I told Keith Monday morning that something was wrong with that server and he needed to fix it. So he waited till late in the day and ended up at our colo at 6pm. I was at dinner with my sister after that, so he actually took care of the restore and reconfiguration of the backup box. It was kind of nice not having to do everything. Of course it took him 8 hours to do what I asked, but hey I can’t ask for everything.
We are looking at resume’s for the helpdesk guy we are going to hire for our new office. Man people cannot read. We post a job for Kingston, NY (it is about 2 hours north of NYC, 1 hour south of albany so you know the distance) and I get applicants from long island, California, and anywhere else you could think of. The crazier thing is I get applicants asking for more money than I make. It is crazy. Gus got a laugh out of it, but in reality it is not funny because we need to find someone quick. I have about 4-5 people I want to call and see if they are worth a face to face interview.
