Hacker News new | ask | show | jobs
by lawnchair_larry 4811 days ago
I'll never work for any employer who does that, so I'd have trouble calling it a reasonable thing to do.
3 comments

The areas where it would be important are on security/NOC systems, where there is almost unlimited power given the proper credentials.

The Runbooks that NOC teams have, quite often have them connecting to a lot of systems with greatly heightened privileges - It's not unusual for a NOC employee to have expansive sudo privileges on many of the unix hosts they manage. They are also often on privileged VLANs, with direct IP routing to a lot of hosts that normally wouldn't be reachable.

Most of our NOC guys have their own personal laptops, and they can hop onto the (unprivileged) wireless system and do their own thing when they aren't working an incident.

I'd have no problem having my screen captured once a minute when I was working in that type of environment.

Any powerful IT guy should be monitored and have his power checked. IT personnel have almost unmatched power in an organization to cause damage without detection.

Anything with lots of confidential information, or anything financial, and you are going to want to monitor all the people with access constantly. You may not want to snoop real-time, but you are going to want to be able to find and fix breaches after the fact, and do root-cause analysis.

It's not a matter of trust in the IT people, it's a matter of people go crazy sometimes, and people make bad hiring decisions sometimes.

What alternative do you think is reasonable to help track down problems like this after the fact?