Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Ask HN: I work for consulting firm that's illegally moving bank code to GitHub

news.ycombinator.com

Post reply on HN
Print view View original

31–40 of 82 posts

Re: Ask HN: I work for consulting firm that's illegally moving bank code to GitHub

#31

Post by brudgers »

As a consultant, this is why it is a good idea to have a corporate entity to absorb contractual liability...and why it is a good idea for that corporate entity to have no assets.

Practically speaking, and skipping the 'hire a lawyer' part. It is likely that if there is legal action, it will be directed at the consulting company first and foremost because it is likely to have deeper pockets and be backed by an insurance policy that was acceptable to the bank.

Generally, the insurance company will settle based on its exposure rather than outright liability. These things rarely wind up in court. Which brings me to my second recommendation, have insurance for errors and ommissions.

Good luck.

Re: Ask HN: I work for consulting firm that's illegally moving bank code to GitHub

#32

Post by grspencer »

contravariant wrote: post #29
AussieOdyssey wrote: post #7

Earlier quoted context omitted.

100% public github because they want to give access to new employees who do not have access to enterprise system.

Please tell me you're not saying they're using a public repository (one reachable to anyone, even people not logged in to GitHub).

could be the repos at https://github.com/WestpacCXTeam

Re: Ask HN: I work for consulting firm that's illegally moving bank code to GitHub

#33

Post by cpncrunch »

Contact the CEO of the consultancy. Assume he/she doesnt know and would like to know. Do it in writing. Then write registered letters to all directors of bank if no satisfactory answer and remove yourself from project, and send threats of legal action if not paid in required time.

If you are upfront with the bank, it is unlikely they will take legal action against you. In the event they do, you will be protected by your limited liability company (assuming you are operating through one).

Re: Ask HN: I work for consulting firm that's illegally moving bank code to GitHub

#34

Post by g00gler »

contravariant wrote: post #29
AussieOdyssey wrote: post #7

Earlier quoted context omitted.

100% public github because they want to give access to new employees who do not have access to enterprise system.

Please tell me you're not saying they're using a public repository (one reachable to anyone, even people not logged in to GitHub).

lol

Re: Ask HN: I work for consulting firm that's illegally moving bank code to GitHub

#35

Post by ExactoKnight »

vickfoo wrote: post #24
dr_win wrote: post #22

Earlier quoted context omitted.

I don't get your comment. Assuming we are not talking about public repos here. OP's employer did set up a private github repo where contractors collaborate on bank's code. This cannot be searched by google. The problem OP has is that the code should not be hosted outside bank's own infrastructure and contractors should not have access before they pass background checks. According to my understanding.

it's a public repo https://news.ycombinator.com/item?id=13679334

Let the hunt begin!

Re: Ask HN: I work for consulting firm that's illegally moving bank code to GitHub

#37

Post by viraptor »

vickfoo wrote: post #24
dr_win wrote: post #22

Earlier quoted context omitted.

I don't get your comment. Assuming we are not talking about public repos here. OP's employer did set up a private github repo where contractors collaborate on bank's code. This cannot be searched by google. The problem OP has is that the code should not be hosted outside bank's own infrastructure and contractors should not have access before they pass background checks. According to my understanding.

it's a public repo https://news.ycombinator.com/item?id=13679334

No. They said it's on the public GitHub, as opposed to private GitHub enterprise installation. Not that the repo itself is public.

Re: Ask HN: I work for consulting firm that's illegally moving bank code to GitHub

#38

Post by AussieOdyssey »

viraptor wrote: post #37
vickfoo wrote: post #24

Earlier quoted context omitted.

it's a public repo https://news.ycombinator.com/item?id=13679334

No. They said it's on the public GitHub, as opposed to private GitHub enterprise installation. Not that the repo itself is public.

This is correct. It's a "public github" as in it's on *.github.com with access to all employees of the consulting company regardless of the background check (That's the whole idea of them moving to their github repo)

Re: Ask HN: I work for consulting firm that's illegally moving bank code to GitHub

#39

Post by AussieOdyssey »

warninger wrote: post #20

A word of warning - it's quite straightforward to do a Google search for 'site:github.com {bank_name}' for the large Australian banks, and find a repository that looks like the one you describe. You might want to contact the HN admins and ask them to completely scrub this entire thread, as it could well get you into trouble.

You can see the company's github profile but you cannot see the project. It's only for the consulting company employees. The commenter below explains it right.

It's moved out of intranet into the internet without consent to avoid delaying work for employees who failed/in process of background check

Post reply on HN