Warning your Boss about Security can get you fired

[Mich the Tester]

Being a tester can get you into trouble with Project Managers who are chasing their bonusses and CIOs who don’t want to see the truth. I always feel it’s best to keep your integrity even at the cost of your job; in the long run it’s your professionalism that will get you contracts and pay the bills, and one client can’t change that.

[Advocate]

My job is to warn people about security, in light of this information is the boards advice that I do nothing?

[Chugnut]

My job is to warn people about security, in light of this information is the boards advice that I do nothing?

Correct, in fact you've already told us too much.

[Mich the Tester]

My job is to warn people about security, in light of this information is the boards advice that I do nothing?

Nope, just stick at it. Sometimes I do contracts as a Test Manager and the first things I look for in hiring people is preparedness to tell me the bad news or contradict me if they think I’m going to make a mistake. I’ve even met one project manager who said to me ’keep me honest’. Really, there are managers with integrity, just not very many.

[Bagpuss]

I’ve even met one project manager who said to me ’keep me honest’.

Sounds like he was coming on to you

[Advocate]

Sounds like he was Proposing to you

[zathras]

I don't imagine the damages I would receive from court action would sufficiently compensate for the long-term damage suing a former employer would do to my career.

Zero, nadda - there is usually contingencies within a contract to terminate. (PS they are not your employer as such, any claims would be contingent upon proving you were)

So, let this be a warning: your boss doesn't want to be told (a few days before release) that entire networks of their software could be turned into a zombie botnet by a newbie script kiddie.

[TheBigYinJames]

No - the beginner is anyone who takes the original post seriously. It is a totally made up story IHMO.

Even if it is made up, still an interesting discussion on good contractor behaviour.

[TheBigYinJames]

Being a tester can get you into trouble with Project Managers who are chasing their bonusses and CIOs who don’t want to see the truth. I always feel it’s best to keep your integrity even at the cost of your job; in the long run it’s your professionalism that will get you contracts and pay the bills, and one client can’t change that.

I don't thinik anyone was advising just doing nothing. But you can raise the alarm in a way that doesn't insult the people paying your invoice.

[Peoplesoft bloke]

Even if it is made up, still an interesting discussion on good contractor behaviour.

Fair enough, good point, well made.