Google Search

Monday, October 21, 2013

Dozing bank clerk turns €64 into €22 million – and teaches us all a security lesson!

Over 170,000 people are part of the Sophos community on Facebook. Why not join us on Facebook to find out about the latest security threats.

Hi fellow Twitter user! Follow our team of security experts on Twitter for the latest news about internet security threats.

Already using Google+? Find us on Google+ for the latest security news.

The London Evening Standard recently ran a story about a German bank clerk who is supposed to have "nodded off at his keyboard during a transaction."

Apparently, the clerk was typing in an amount of 64 Euros and 20 cents when he fell asleep and his keyboard's auto-repeat took over.

A transaction of €22,222,222.22 (about $30m) was processed instead and inadvertently approved by his supervisor.

The supervisor's supervisor spotted the double-blunder and headed it off at the pass, but the intermediate supervisor was sacked for letting the transaction go through in the first place.

? The story claims that this all came to light because an industrial tribunal in Germany decreed the supervisor's punishment to be too harsh, considering that she had already been expected to vet 812 documents that day, spending "just over a second" on each one. She was reinstated.

There are lots of unanswered questions in the story, which makes you wonder how much of it is urban legend, extrapolated somehow from details that were lost or altered in translation.

So, who knows what really happened in this case?

Nevertheless, it's a great story, and (I bet you're wondering if I'll manage to squeeze a generic computer security lesson out of it) contains a generic computer security lesson for us all.

We know that there are some tasks that we simply oughtn't to attempt when our judgements are impaired, say through tiredness or alcohol.

Driving cars, shooting firearms and performing orthopaedic surgery, for example, are activities that are best avoided under such circumstances.

Yet many of us insist on living our digital lives logged in semi-permanently to sites such as Facebook, Twitter, webmail and more, thus actively and unashamedly inviting upon ourselves exactly this sort of 22-million-Euro-blunder moment.

It's not just that we're more likely to initiate an unwanted bank transaction (or send an unintentionally ruinous email) while we're tired or lit.

It's that by leaving ourselves logged in unnecessarily, we make it easier for our computer to do just such a thing if it becomes impaired, for example through misconfiguration or malware infection.

It's a lot less convenient to have to keep logging into and out of your email account, your blog site or your favourite social media account every time you want to tell the world something new.

But do you really have so much to say, at such short notice, that this is an inconvenience you can't tolerate?

If you are the sort of user who likes to log in and stay logged in, especially to on-line services, why not give yourself a week's trial of logging out whenever you can, especially from on-line services?

Try it: you may thank yourself one day.

Follow @duckblog


View the original article here