Warning your Boss about Security can get you fired

[voodooflux]

Indeed. You should have contacted your manager (or even coworkers) first, not the director.

It's not the company director who hired you, it was the local development team. it's them you should be keeping happy, not the company bosses. Going over your handler's head with a serious concern over code quality is not going to win you any friends with the people who sign off your timesheets.

In a small company this could be a single individual. Although a better course of action would have been to wait the one day for the developer to return from holiday, and then raise the matter with him directly.

I had a similar issue where I noticed a hole in the security infrastructure on a previous project. I raised it directly with the team concerned and the matter was dealt with.

[moorfield]

As a contractor I try not to get involved or drag myself into this kind of tulip. Keep your head down and get on with it don't rock the boat. Works for me.

[minestrone]

I learned long ago to put up with client's crap software.

Part of being a contract developer is letting the permies think that you are their code b1tch, they don't like it when you start showing them up with your finely honed skills, laughing at their crap code.

If the software is really really crap I will just say 'it's written in an unconventional way, and so it will take a wee bit longer to finish this.

Anyway what's the point of fixing software for a company? Crap software needs more developers, think of your fellow contractors in this time of need.

[moorfield]

Edit: Normally I will just fix crap software anyway without telling anyone. And it's surprising how many just don't notice.

[Purple Dalek]

Whenever I wander across security problems I keep schtum, unless it's worth a lot of money and then I sell it to some Russian friends. Send me a PM next time, usual 20% agency fee applies.

[Bagpuss]

Once you start bleeting like an employee your are on your way out of the door.

[Chugnut]

As a contractor I try not to get involved or drag myself into this kind of tulip. Keep your head down and get on with it don't rock the boat. Works for me.

I mostly agree with that but there's plenty of clients who would prefer the benefit of your experience to point out such flaws. It makes you better value and can gain you more kudos witht client.

I think it ultimately just comes down to how the individual handles criticism. Some people just don't want to hear it and get on the defensive immediately. Offer to fight these people in the car park.

[Peoplesoft bloke]

I don't believe a word of this "true" story - this isn't the only place online it's been posted............

[DimPrawn]

I don't believe a word of this "true" story - this isn't the only place online it's been posted............

WHS.

[norrahe]

Hmmm!

As someone who's worked in the insurance industry and dealt with most of the small service providers, methinks this is a highly implausable incident.

or is it....??