technology

Changes Coming at Work

For those who don’t know:

  1. My employer, ITS Consulting, is a consulting company; they hire out to other businesses to solve IT/tech challenges.
  2. In 2016 I was in a near-fatal crash, while cycling home from work, that has left me with multiple challenges and thus far I’ve only been able to work part time at 20hrs a week, max 26-28.

January-May, 2022 I’ll be working full-time again. I am aware of the “optics” of this coming just months after the lawsuit was settled for the 2016 crash. I was absolutely open & honest with lawyers & doctors on both sides of the lawsuit, maybe too honest according to my lawyers.

Web Apps Should Always Have a Log

I’m working on an event log for a client (of my employer):

   

At a bare minimum, an event/security log offloads some of the responsibility to the user. If you show fail and successful login attempts hopefully a user will catch when their own account has been compromised even if you can’t (I.E. their password was stolen so a hacker login in is technically valid).

It also hopefully reminds users of what they’ve done within the app. If they wish to undo something or forget if they have done something the event log can be the next step rather than customer support.

And finally, hopefully it helps system administrators identify patterns of malicious behavior. A malicious IP might have failed login attempts for multiple accounts, which can only be identified from an admin level. Similarly if a valid user repeatedly attempts to access a page they do not have permission for it could be a sign of an internal hack or a hacked account.

 

If you’re managing developers, ask for this functionality. If you’re buying/subscribing-to a web app, insist that you have access to this data or question why you don’t.