Gotta love high security

Matt Stratton | Sep 11, 2007 min read

OK, so we have this system here at work for requesting access. It’s a Lotus Notes database (shudder) that is a real pain in the patoot. Unfortunately, it’s the only way to request new IDs in Active Directory, or to get users moved in and out of AD groups.

Anyway, after you submit a request through this system, it sends you an email update basically saying “okay, so we got your request, etc”. For some bizarre reason, the system doesn’t send these emails to me at my work address.

It sends them to matt [at] windyhop [dot] org.

This is really weird. Number one, I’m positive that I would never, ever have given that email address to ANY system at the Bank (when I started working here, I was already on Gmail). Secondly…

WHY THE HELL IS OUR SECURITY SYSTEM SENDING EMAILS WITH CONFIDENTIAL, SECURE INFORMATION OUTSIDE OF THE BANK??!!

I have tried to bring this up with our security people time and time again, and they never seem to understand the problem. Sigh.