Live data from Hacker News

Ask HN: I work for consulting firm that's illegally moving bank code to GitHub

news.ycombinator.com

11–20 of 82 posts

Re: Ask HN: I work for consulting firm that's illegally moving bank code to GitHub

#11
You're doing the right thing, please look out for yourself though!

You're pretty much inviting media in on this now before you're ready.

Delete post, it's a short list here in AU and I know which one of them I'd look at first. Get more legal advice before going any further.

Re: Ask HN: I work for consulting firm that's illegally moving bank code to GitHub

#12
post #6

Earlier quoted context omitted.

Talk to a lawyer. Especially because you're asking about Oz advice on a primarily us site, so common understanding of the law may be different. And whatever you do, consider if you can afford getting both fired and sued right now - even if people tell you you're right. Also I'm assuming that's 100% the public GitHub service and not an on-site, or specially negotiated GitHub enterprise system?

100% public github because they want to give access to new employees who do not have access to enterprise system.

Sounds like they want to give access to everyone on Earth!

Re: Ask HN: I work for consulting firm that's illegally moving bank code to GitHub

#13
post #3

Anonymously heads-up the country-level information security officer of the bank in question with a link to the Github repo. CC the country head. Working on code without security background checking confirmed is an absolute no. This will completely torpedo your employer, but that might not be so bad if this is their attitude to information security. Edit: As anonymous as you can. Have a lawyer present. Don't take advi…

The consultant is running wireless hotspots to copy the software. All I want is the contract money they agreed to pay me for this project. They froze the payment because I complained about this, at best unethical, behaviour.

You will need a lawyer to determine your own liability here, to determine the best path to report this to the bank, and to check your contract to see how you can force the payment to be delivered. Save any and all communication between you and the contracting firm, ideally on a device that they do not control, and don't communicate in any way that can't be recorded for your own protection.

Once things reach this stage you need a lawyer

Re: Ask HN: I work for consulting firm that's illegally moving bank code to GitHub

#14
First of all - get a lawyer.

Secondly - get a lawyer.

I don't know what state you're in, but Reddit's /r/AusLaw has a thread[1] which has the various law societies in each state, who can give you advice, and information about community legal centres.

[1] https://www.reddit.com/r/auslaw/comments/1u776a/looking_for_...

Re: Ask HN: I work for consulting firm that's illegally moving bank code to GitHub

#15
post #3

Anonymously heads-up the country-level information security officer of the bank in question with a link to the Github repo. CC the country head. Working on code without security background checking confirmed is an absolute no. This will completely torpedo your employer, but that might not be so bad if this is their attitude to information security. Edit: As anonymous as you can. Have a lawyer present. Don't take advi…

The consultant is running wireless hotspots to copy the software. All I want is the contract money they agreed to pay me for this project. They froze the payment because I complained about this, at best unethical, behaviour.

You're not getting paid until you break the law.

Re: Ask HN: I work for consulting firm that's illegally moving bank code to GitHub

#16

First of all - get a lawyer. Secondly - get a lawyer. I don't know what state you're in, but Reddit's /r/AusLaw has a thread[1] which has the various law societies in each state, who can give you advice, and information about community legal centres. [1] https://www.reddit.com/r/auslaw/comments/1u776a/looking_for_...

This - EFA might even worth be asking who might be a good person to represent you.

Re: Ask HN: I work for consulting firm that's illegally moving bank code to GitHub

#17
If they're refusing to pay you, as mentioned in a comment, get a lawyer. Now.

The lawyer can help you recover your wages AND advise you about the legal implications of both your and the company's handling of the code, and of any action you might take to reveal it.

Re: Ask HN: I work for consulting firm that's illegally moving bank code to GitHub

#18
post #4

"Illegal" how? Against an actual Australian law, or do you think it's against the terms of the master services agreement the bank has with the consulting company. Have you seen that agreement or the specific statement of work they're operating under?

I have worked in Financial sector for a long time and know that copying bank software illegally is criminal in US and probably civil in Australia. I program for the bank via the consulting company and my code is on the internet. Plus my contract is frozen with fees until I withdraw my complaint to IT of my consulting company. Not sure who to talk to in the bank. HR said I have to resolve with my consulting company bu…

Is the illegal part generic for any software because of copyright and licensing or is it specific for banks? If the latter, what are those laws based on? Why is it not the same as any software for any private company?

Re: Ask HN: I work for consulting firm that's illegally moving bank code to GitHub

#19
Tricky spot. You need a lawyer to write what's called a letter of demand for the rest of your contract fees. If your consultancy has any sense that should resolve things. Don't contact the bank as that could backfire. Suggest contacting https://www.slatergordon.com.au/dispute-resolution/contract-...

Re: Ask HN: I work for consulting firm that's illegally moving bank code to GitHub

#20
A word of warning - it's quite straightforward to do a Google search for 'site:github.com {bank_name}' for the large Australian banks, and find a repository that looks like the one you describe.

You might want to contact the HN admins and ask them to completely scrub this entire thread, as it could well get you into trouble.

Post reply on HN