5 Months to Run Code Locally
Nathan Spencer's internship at a financial institution involved automating a process but faced hurdles from strict security protocols. After persistent efforts and colleague support, he achieved software approval, highlighting bureaucratic challenges.
Read original articleNathan Spencer recounts his experience during an internship at a financial institution, where he aimed to automate a weekly process that was time-consuming for employees. Despite identifying an open-source solution that worked on his personal machine, he faced significant hurdles due to strict security protocols that prevented him from running unapproved code on company computers. His attempts to gain security approval for the software were met with repeated rejections, citing concerns over the software's update frequency and demand. After gathering support from colleagues through a Slack poll, he managed to provoke a security review, which ultimately deemed the software a "medium security risk" due to the lack of code signing. This led him on a convoluted journey through various departments, including a frustrating detour with the Certificate Management team, which was ill-equipped to handle internal applications. After months of persistence and a chance conversation with a higher-up, the software was finally approved and made available on the internal app store. Spencer reflects on the challenges posed by excessive security measures in financial institutions, which can hinder productivity and innovation, and emphasizes the importance of having connections within the organization to navigate bureaucratic obstacles.
- Nathan Spencer automated a time-consuming process during his internship at a financial institution.
- He faced significant challenges due to strict security protocols preventing code execution on company machines.
- His initial requests for security approval were rejected multiple times, citing various concerns.
- After gathering support from colleagues, he managed to provoke a security review, which ultimately led to approval.
- Spencer highlights the detrimental effects of excessive security measures on productivity and the value of internal connections.
Related
Security is not part of most people's jobs
Chris Siebenmann discusses the lack of security priority in workplaces, where job performance overshadows security adherence. Rewards for job skills often neglect security, hindering its importance and feedback mechanisms in organizations.
Stop installing that software – you may have just died
A tech support incident at an Air Force base during wargames led to a simulated bomb disabling the base, causing work stoppage. The story highlights inefficiencies and challenges in tech support roles.
Office Space (2006)
Aaron Swartz discusses his struggles with productivity in a noisy office environment, contrasting it with his previous independent work style. He feels overwhelmed, unproductive, and trapped in a cycle of dissatisfaction.
Don't Be Afraid to Re-Invent the Wheel
The article discusses the risks and benefits of using external codebases in software development, emphasizing the importance of security, efficiency, and the potential advantages of building internal solutions.
Ask HN: Does My Company Think I'm a Cybersecurity Risk?
A quality engineer faces restrictions on code access, hindering essential tasks and increasing communication inefficiencies. They question the decision's rationale and seek colleague input to understand potential implications.
Related
Security is not part of most people's jobs
Chris Siebenmann discusses the lack of security priority in workplaces, where job performance overshadows security adherence. Rewards for job skills often neglect security, hindering its importance and feedback mechanisms in organizations.
Stop installing that software – you may have just died
A tech support incident at an Air Force base during wargames led to a simulated bomb disabling the base, causing work stoppage. The story highlights inefficiencies and challenges in tech support roles.
Office Space (2006)
Aaron Swartz discusses his struggles with productivity in a noisy office environment, contrasting it with his previous independent work style. He feels overwhelmed, unproductive, and trapped in a cycle of dissatisfaction.
Don't Be Afraid to Re-Invent the Wheel
The article discusses the risks and benefits of using external codebases in software development, emphasizing the importance of security, efficiency, and the potential advantages of building internal solutions.
Ask HN: Does My Company Think I'm a Cybersecurity Risk?
A quality engineer faces restrictions on code access, hindering essential tasks and increasing communication inefficiencies. They question the decision's rationale and seek colleague input to understand potential implications.