Wapsi Square Forum

Charlie Osborne/SmartPlanet wrote:If businesses can save time and money by outsourcing jobs and services, why can't employees do the same?

Perhaps this was the mindset of "Bob," a developer based at a U.S. critical infrastructure company who was part of a case study released by Verizon. Bob, one of the top developers at the firm, was part of a security audit that exposed what the employee was actually doing — outsourcing his job to a Chinese developer.

The situation came to light when the company's telecommunications supplier was called in after a basic virtual private network (VPN) was constructed to cater for staff to be able to work from home. The VPN logs showed that the corporate network was continually being accessed from Shenyang in China, which suggested that something dodgy was going on.

By using Bob's credentials, the Chinese programmer was able to login and access the company's main server. Recorded invoices showed that Bob had outsourced his work to a software consultancy firm in the Asian country, giving them his credentials and paying them only a fifth of his six-figure salary while he enjoyed his free time.

"The company's IT personnel were sure that the issue had to do with some kind of zero day malware that was able to initiate VPN connections from Bob's desktop workstation via external proxy and then route that VPN traffic to China, only to be routed back to their concentrator," said Verizon. "Yes, it is a bit of a convoluted theory, and like most convoluted theories, an incorrect one."

So what did Bob do with all of his spare time? He surfed, chatted, and procrastinated, as his browser history shows:
9:00 a.m. - Arrive and surf Reddit for a couple of hours. Watch cat videos.
11:30 a.m. - Take lunch.
1:00 p.m. - Ebay time.
2:00p.m - Facebook updates, LinkedIn.
4:30 p.m. - End of day update e-mail to management.
5:00 p.m. - Go home

After further investigation into the programmer's activities, Verizon found that Bob had pulled the same stunt on other companies, resulting in his middle-man job earning him a fortune in profit. Sadly for Bob, his company may be allowed to outsource work, but employees may not.

Jabberwonky wrote:If the job's getting done to the employers satisfaction, where's the problem? The only one I see is the security access to the outside.

scantrontb wrote:

Jabberwonky wrote:If the job's getting done to the employers satisfaction, where's the problem? The only one I see is the security access to the outside.

that's a simple one, if they can prove it was him, and it does seem like they can prove it... they can sue for fraud... the company hired HIM to do the work NOT the sub contractor, and if he did the same thing at other jobs and used those as references/ experience, then he flat out lied to get the job in the first place, as well... so they can conceivably get all his wages back from him from the time he started to do this to the day they fire him for cause... and depending on if the job was for the Government or not, he could be looking at federal charges as well. he will then have a criminal record that will prevent him from various other jobs in that field of employment, as well as many other job fields too. they can also fire him for misuse of company property, namely anything done on the computer from 0900 to 1630 and i'll take a quick guess and say that his job description says nothing about doing that as an official job function...

ShneekeyTheLost wrote:Then he laughs and starts up his own consultant firm, doing the exact thing as the owner of his company, outsourcing it to the same guys (who are apparently doing a pretty good job) all nice and legal-like...