Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Ask HN: I work for consulting firm that's illegally moving bank code to GitHub

news.ycombinator.com

Post reply on HN
Print view View original

61–70 of 82 posts

Re: Ask HN: I work for consulting firm that's illegally moving bank code to GitHub

#61

Post by [deleted] »

AussieOdyssey wrote: post #56
i336_ wrote: post #52

Earlier quoted context omitted.

I think there's a small misunderstanding here that I'd like to clear up explicitly. Public GitHub repos are viewable by anyone with or without an account. You can view and clone the repo if you know the correct URL. Private GitHub repos are only accessible to those given access. Within the scope of this terminology, my understanding is that this repo is private. I think I'm right based on https://news.ycombinator.com…

> I understand that the code is being moved out of the local intranet onto a non-corporate-managed Web service Spot on and this is what I meant. By "public github" I meant code on the internet but accessible to anyone in the consulting company. There are multiple modules and they are moved to github,bitbucket and stash. This also means people without background checks or ANYONE in the organization has access to ALL t…

[deleted]

Re: Ask HN: I work for consulting firm that's illegally moving bank code to GitHub

#62

Post by AussieOdyssey »

steve_g wrote: post #25

A. Shut up now. B. Stop talking about this. C. Shhhh! Shut up! D. Get a lawyer It sounds like you're a good guy who want to do the right thing. But no one here can fully understand your situation, and it is not smart for you to be discussing this here. Find a lawyer who can give you good advice and protect your interests.

>It sounds like you're a good guy who want to do the right thing

As much as I sound like I am trying to do the right thing all I am doing is avoid going to jail by doing illegal things and earning to feed my family

Re: Ask HN: I work for consulting firm that's illegally moving bank code to GitHub

#64

Post by jmho »

Firstly you need to take care of yourself. If they are refusing to pay you and you are coming here to make an "anonymous public statement", it is fair to assume that your employer didn't like what they heard or quite simply how they were told. It is important to remain true to your values, raising it with your employer and explain why you are uncomfortable with that would have been my number one suggestion. She/he should be able to understand. It looks like she/he did not, my suggestion would be to raise it to she/he managers and managers manager. Always calmly and respectfully, as most likely there isn't necessarily a malicious intent.

Secondly, if you are really keen to reach out to the bank I'm happy to do it for you as I know quite a few security teams in the major banks. But please do not disclose who you are. Email me at 6lh008+1lhx68glu7jh83h8r9pxo7ad9wc8uao@pokemail.net

Re: Ask HN: I work for consulting firm that's illegally moving bank code to GitHub

#65

Post by detaro »

AussieOdyssey wrote: post #58

Just a clarification that I posted here: By "public github" I meant code on the internet (from the bank intranet) and accessible to anyone in the consulting company (public as in public network). There are multiple modules and they are moved to github,bitbucket and stash. This also means people without background checks or ANYONE in the organization has access to ALL the code of the bank. In the bank ONLY people in s…

> although what they doing is illegal

I can't add much to help you, but I'd be interested what laws requiring background checks for this look like, could you tell me where I can find more about that? (I would have expected this to be "just" a contractual requirement between the bank and your employer)

Re: Ask HN: I work for consulting firm that's illegally moving bank code to GitHub

#66

Post by i336_ »

AussieOdyssey wrote: post #58

Just a clarification that I posted here: By "public github" I meant code on the internet (from the bank intranet) and accessible to anyone in the consulting company (public as in public network). There are multiple modules and they are moved to github,bitbucket and stash. This also means people without background checks or ANYONE in the organization has access to ALL the code of the bank. In the bank ONLY people in s…

Oh ouch. That git setup is... great lawyer material. Wow.

Re: Ask HN: I work for consulting firm that's illegally moving bank code to GitHub

#67

Post by flukus »

AussieOdyssey wrote: post #58

Just a clarification that I posted here: By "public github" I meant code on the internet (from the bank intranet) and accessible to anyone in the consulting company (public as in public network). There are multiple modules and they are moved to github,bitbucket and stash. This also means people without background checks or ANYONE in the organization has access to ALL the code of the bank. In the bank ONLY people in s…

What SCM does that bank itself use? It may have started as a svn bridge or something and been moved to github and had access extended accidentally.

Re: Ask HN: I work for consulting firm that's illegally moving bank code to GitHub

#68

Post by AussieOdyssey »

jmho wrote: post #64

Firstly you need to take care of yourself. If they are refusing to pay you and you are coming here to make an "anonymous public statement", it is fair to assume that your employer didn't like what they heard or quite simply how they were told. It is important to remain true to your values, raising it with your employer and explain why you are uncomfortable with that would have been my number one suggestion. She/he sh…

Thank you for the polite response. I did speak to the consulting company HR and their response was extremely rude with them going as far as saying they will make sure I never get a contract with anyone else in "(this city)"

The federal ombudsman offered to mediate the issue but they flat out refused to talk to either the ombudsman or me and the ombudsman has no power to force them (as they are technically not my "employer")

I am sending you an email

Re: Ask HN: I work for consulting firm that's illegally moving bank code to GitHub

#69

Post by i336_ »

AussieOdyssey wrote: post #62
steve_g wrote: post #25

A. Shut up now. B. Stop talking about this. C. Shhhh! Shut up! D. Get a lawyer It sounds like you're a good guy who want to do the right thing. But no one here can fully understand your situation, and it is not smart for you to be discussing this here. Find a lawyer who can give you good advice and protect your interests.

>It sounds like you're a good guy who want to do the right thing As much as I sound like I am trying to do the right thing all I am doing is avoid going to jail by doing illegal things and earning to feed my family

I don't want to (a) duplicate work and (b) misstep so I'm asking first - would you like me to ask in /r/AusLaw about this whole thing? I don't think there's much difference between me and you asking; just trying to be helpful.

EDIT: I'm leaving this comment here, but I just learned that /r/AusLaw does not provide legal advice under any circumstances. Asking them would likely get you the same "find a lawyer" advice you've gotten here.

Re: Ask HN: I work for consulting firm that's illegally moving bank code to GitHub

#70

Post by AussieOdyssey »

i336_ wrote: post #69
AussieOdyssey wrote: post #62

Earlier quoted context omitted.

>It sounds like you're a good guy who want to do the right thing As much as I sound like I am trying to do the right thing all I am doing is avoid going to jail by doing illegal things and earning to feed my family

I don't want to (a) duplicate work and (b) misstep so I'm asking first - would you like me to ask in /r/AusLaw about this whole thing? I don't think there's much difference between me and you asking; just trying to be helpful. EDIT: I'm leaving this comment here, but I just learned that /r/AusLaw does not provide legal advice under any circumstances. Asking them would likely get you the same "find a lawyer" advice yo…

Thank you for being helpful. I really appreciate it. I did checkout /r/auslaw and noticed that do not provide any legal advice under any circumstances.
Post reply on HN