rSlash - r/Prorevenge I Embarrassed My Lazy Boss In Front of the Entire Company!
Episode Date: January 16, 2022r/Prorevenge In today's episode, OP works for a CTO who is one of the dumbest workers on the planet. The guy honestly thought that it was a good idea to give every single person in the company the exa...ct same password. Anybody could literally log into the CEO's email whenever they wanted. OP pointed out that this was a bad idea, but the CTO refused to make any changes because he's a lazy douchebag. So, OP calls out the CTO in front of the entire company and embarrasses his boss so badly that the CEO fires him! Learn more about your ad choices. Visit megaphone.fm/adchoices
 Transcript
 Discussion  (0)
    
                                         Welcome to our slash pro revenge where OP gets his boss fired in an incredibly embarrassing way.
                                         
                                         Our next reddit post is from rock expat. I just want to state that this IT issue is going to blow
                                         
                                         some effing people's minds. The security flaw that this presented was nothing sort of incredible
                                         
                                         and the fact that we never had a major security breach is astounding. It truly is. And what is that flaw you may ask?
                                         
                                         Everyone in the entire company had the same password. Yes, you read that correctly. Every single
                                         
                                         password to every single employee login was the same password. It was like this for years before
                                         
                                         I joined the company and for quite a few years after, until… well, enjoy
                                         
                                         the story.
                                         
    
                                         Now what about the username?
                                         
                                         That must have been the trick, right?
                                         
                                         Oh yeah, that was a real trick.
                                         
                                         The username was the employee's email address.
                                         
                                         I did point out this flaw to my management and their response was, that's not our area
                                         
                                         to be concerned about.
                                         
                                         So whatever, it paid well, so I'll just do my job.
                                         
                                         And then one day we had a Windows update which caused a piece of software I used at work
                                         
    
                                         to break.
                                         
                                         I submitted a help ticket, and after escalating this issue, I got to the chief technology
                                         
                                         officer.
                                         
                                         It wasn't a big company.
                                         
                                         The CTO said, I don't want to spend time fixing this, use this other workaround.
                                         
                                         I explained that his workaround slow things down, makes my job harder, and my Windows update
                                         
                                         has to affect more people than just me.
                                         
                                         He told me to suck it up.
                                         
    
                                         Now at the time, the CEO was the son of the founder, and was a bit of a moron.
                                         
                                         I legit believe that at this point in time, the CEO was just collecting a paycheck and letting
                                         
                                         everything run on autopilot and just didn't pay attention.
                                         
                                         But I was mad at the CTO for brushing me off, so I wrote an email to the CEO.
                                         
                                         It was a short email, I simply said, I discovered a massive security flaw that could potentially
                                         
                                         expose us to huge liabilities.
                                         
                                         When would be a good time to discuss this?
                                         
                                         The CEO responded, what security flaw?
                                         
    
                                         I decided to demonstrate the flaw. I
                                         
                                         picked two random salespeople, got their username, and I logged into their systems. From there,
                                         
                                         I pulled up the personal information of two random customers. This was the kind of information
                                         
                                         that would have easily allowed me to commit identity fraud, pull out credit in their names,
                                         
                                         all kinds of bad stuff. I emailed the CEO and explained,
                                         
                                         anyone who knows our URL can log into our system,
                                         
                                         can log into anyone's account,
                                         
                                         pull up customer's information,
                                         
    
                                         and everyone has the same password.
                                         
                                         To prove this, I logged into two employees' random account
                                         
                                         and pulled two different customer profiles
                                         
                                         and I've attached them.
                                         
                                         One single disgruntled employee could screw us over.
                                         
                                         25 minutes later, my phone
                                         
                                         rings. It's the CEO. He was nice and very interested in how I did this. This guy isn't the
                                         
                                         sharpest knife in the drawer. I explained the flaw in plain English and the liability that
                                         
    
                                         it presents to him. I walked him through the process of hacking my own account as he called
                                         
                                         it. I hate to use the word hacking because
                                         
                                         it was so easy. Now, it dawned on the CEO that this was a huge liability. I pointed out
                                         
                                         again in our conversation that a single upset employee could destroy us. The fact that
                                         
                                         this hadn't happened already is nothing sort of a miracle. He tells me he wants me to
                                         
                                         present this to the executive team so they can discuss a solution. Honestly, the solution is effing obvious. So, a day later we have
                                         
                                         the conference call. It's the Chief Executive Officer, the Chief Technology Officer,
                                         
                                         the Chief Operations Officer, the Chief Financial Officer, the Company Lawyer, the Senior
                                         
    
                                         VP, everyone. On the call, I demonstrate the flaw and I lay out how I as a layperson
                                         
                                         with very little IT background is able to figure this out.
                                         
                                         It's incredible that we have this flaw.
                                         
                                         Everyone is in agreement that this is a huge issue.
                                         
                                         Everyone except the CTO.
                                         
                                         The CTO gets very upset at me and he wants me fired for hacking the system.
                                         
                                         He says that per our employee handbook what I did is a fireable offense.
                                         
                                         I point out that I'm not abusing some loophole, I'm only doing it to expose the flaw because
                                         
    
                                         I care about the company.
                                         
                                         And I think this is something that has to be brought forward.
                                         
                                         I could tell that our corporate attorney agreed with me and he was shocked at what I was
                                         
                                         demonstrating.
                                         
                                         The CTO pointed out that former employees'
                                         
                                         user names are disabled, to which I pointed out that every employee username is their email address.
                                         
                                         It would be trivial for a former disgruntled employee to use a different employee email address
                                         
                                         that they remember to log in. And since everyone's password is the same, they don't even have to guess.
                                         
    
                                         The CTO pointed out that we would know who did this because of IP addresses
                                         
                                         and I pointed out that VPNs are indeed a thing. The corporate attorney wasn't actually familiar with what VPNs do,
                                         
                                         so I had to explain it. And what shocked me the whole time was the only person in the meeting who didn't agree this flaw needed to be changed was the
                                         
                                         Chief Technology Officer. The CEO made it clear that this issue would be
                                         
                                         fixed by end of business that day, and there was no ifs, ends, or buts about it. The meeting
                                         
                                         ended. After the meeting, the CTO called me privately, and he was pissed. I just exposed
                                         
                                         his incompetence because the system was his design. The decision for everyone to have the same password was his decision.
                                         
                                         I know why he did it, he did it because he's lazy. And I said to him,
                                         
    
                                         here an awful CTO, you shouldn't be in the position you're in and you're lazy.
                                         
                                         You really should have found a better solution for my help tickets. He stops and asks.
                                         
                                         So this is about your stupid help tickets? Yes, yes it is. He laughs and says he's gonna have me fired and I laugh and say,
                                         
                                         I'm pretty sure someone's getting fired and I'm also super confident that it's not gonna be me.
                                         
                                         Well sure enough, later that day we got an email stating that everyone had to change their passwords to something unique.
                                         
                                         A week later the CEO announced that the old CTO stepped down
                                         
                                         to spend more time with this family.
                                         
                                         On the first day of the new CTO's job,
                                         
    
                                         he sent me an email telling me that he wanted
                                         
                                         to personally work in my help ticket
                                         
                                         and find a solution around the Windows update.
                                         
                                         And I'm pleased to say that he did.
                                         
                                         And I later had conversations with that attorney
                                         
                                         from the meeting and we legit never had a security
                                         
                                         breach.
                                         
                                         Which is simply astounding.
                                         
    
                                         The attorney admitted that this was just plain dumb luck on our part.
                                         
                                         And that if we did have a security breach, it would have been very bad for us.
                                         
                                         Oh, okay.
                                         
                                         When the CTO was arguing with you during that meeting, which you should have done was
                                         
                                         log into this guy's email address and then send everyone like at that meeting an email saying,
                                         
                                         hello, I'm the CTO and I'm a big dumb idiot.
                                         
                                         Like if that wouldn't have proved your point, then what would have?
                                         
                                         Alternatively, you could have sent an email from the CTO that said, dear everyone, I quit
                                         
    
                                         because clearly I'm a moron.
                                         
                                         Our next Reddit post is from Pugsy.
                                         
                                         Some years ago I worked at a logistics facility and a leadership had a way of adding workload
                                         
                                         to middle management.
                                         
                                         Rarely did any of them last more than three years before they either got disillusioned
                                         
                                         or changed job somehow.
                                         
                                         After working the floor there for two years, I was promoted to a team leader and after
                                         
                                         three years as team leader I became shift leader, managing a shift of about 60 workers.
                                         
    
                                         We did pretty well.
                                         
                                         No other shift at this facility or other facility could match our performance, and we did a lot
                                         
                                         of cross training and on-the-fly adapting to the ever-changing needs of the company.
                                         
                                         I found the work to be interesting and challenging, until I got a new manager who was hell-bent
                                         
                                         on micro managing.
                                         
                                         It didn't take long before he wanted me to write a detailed log of how I spent my days,
                                         
                                         hours, and minutes.
                                         
                                         I told him this was a really bad idea, but if he wanted this, then I would of course comply.
                                         
    
                                         The first week, I accounted for every 30 minutes with a line or two, thanking this was already
                                         
                                         enough of a waste of time. But I was soon informed of my mistake.
                                         
                                         The new boss wanted more details and every 15 minutes accounted for.
                                         
                                         Again, I told him this wasn't smart, but I got overruled.
                                         
                                         The next week, I made sure to write 4 or 5 lines for every 15 minutes of the work day,
                                         
                                         like writing down the names of the workers who took the early lunch and who took the later lunch.
                                         
                                         I wrote the same lines for multiple entries, and if one task took longer than 15 minutes,
                                         
                                         then I would write the same thing on multiple lines.
                                         
    
                                         To his credit, the new boss actually followed up on a few things the first few weeks, and
                                         
                                         if he had kept doing that, then I wouldn't have complained much.
                                         
                                         But of course, he gave up after a couple of weeks.
                                         
                                         I noticed this when I made a reference to one of the follow-ups and how we had failed
                                         
                                         that specific metric for good reason.
                                         
                                         But I never heard anything from him.
                                         
                                         So from then on, I suspected that he had stopped reading my logs.
                                         
                                         After keeping the logs honest for a few weeks more, I felt secure that he never read them.
                                         
    
                                         I started adding a few tidbits of my own making.
                                         
                                         At first it was a line that said that, if he used a certain phrase when talking to me
                                         
                                         next week, I would buy a misota.
                                         
                                         He never used any of these phrases, and thus he never got free stuff.
                                         
                                         An example of a phrase could be, Pineapples are best served hot, or apples are sweeter than
                                         
                                         oranges.
                                         
                                         General statements, but unlikely to pop up randomly in conversation.
                                         
                                         My boss still claimed that he read every single one of my reports, and he ridiculed me for
                                         
    
                                         claiming that it was a bad idea.
                                         
                                         As the weeks went on without having to pay up, my malicious compliance kept getting bigger
                                         
                                         and bigger.
                                         
                                         Eventually, I promised him $100 in cash if he would
                                         
                                         talk to me about a specific picking location in our facility during the next week. He
                                         
                                         didn't. But, of course, I also started writing many relevant things into the logs. Like,
                                         
                                         questions for him on how to solve potential problems, telling him he needs to start planning
                                         
                                         for vacations well in advance of the holidays and so forth. Still, I got no response
                                         
    
                                         in any way shape or form. If he really did read them, why not use them to get questions and
                                         
                                         potential problems on the record? So, after a year of writing logs that were never read and hadn't
                                         
                                         been open since I saved them in the assigned folder, our great leader got himself into some trouble
                                         
                                         and tried to shift the blame onto his underlings. We did NOT appreciate that.
                                         
                                         Especially when the cause of that trouble was written in clear text in these logs from
                                         
                                         the very first moment we discovered there might be a problem.
                                         
                                         All the way up to where it was an ongoing hindrance that cost us more and more time and
                                         
                                         money every week.
                                         
    
                                         Eventually, a big meeting was called with all the Foreman, Team Leads, Shift Leads, and Middle Managers,
                                         
                                         with several big brass observing our boss trying to fix the situation.
                                         
                                         Whenever my boss went from one of my people, I stood up for them, and I told them that I took responsibility for the entire shift.
                                         
                                         There was no need for him to call out my people, because I was there, and it was my responsibility. A gleam in his eye told me that he was about to make me the scapegoat, and I sat there
                                         
                                         calmly while he tore me a new one.
                                         
                                         He didn't hold back, and he really gave me his all to such an extent that several of
                                         
                                         the big brass started storing uncomfortably.
                                         
                                         They could probably sense that he was overplaying his hand.
                                         
    
                                         After his tirade peedered out or he had run out of steam, I asked him if he was done.
                                         
                                         And if he was done, could I reply?
                                         
                                         He agreed and leaned back in his chair, confident in his character assassination of me.
                                         
                                         I took out my laptop, connected it to the big screen so that everyone could see and I
                                         
                                         opened the folder where my logs were saved.
                                         
                                         I pointed out that they hadn't been opened in a while and that track changes had been
                                         
                                         activated and no changes had been logged by his user.
                                         
                                         My user account was the only one who made the logs, edited them, and saved them.
                                         
    
                                         I then pointed out the log entries where we discovered the problem and how we tracked
                                         
                                         its development until it became the big problem that it was today.
                                         
                                         One of the best moments was when I could show everyone that we had.
                                         
                                         In fact, suggested several solutions to the problems many times.
                                         
                                         I had also logged that we had several meetings discussing the problem.
                                         
                                         It's causes improbable solutions, and sometimes even directly asking my manager what he thought
                                         
                                         about them.
                                         
                                         These logs proved that we had told our boss about the problem many times in many ways, but there was never a log of any solution or response from him. I was
                                         
    
                                         so focused on the presentation that I didn't really look at my boss, but when I was done,
                                         
                                         I glanced up at him and I can safely say that I have never seen a face more angry than
                                         
                                         his. He was furious, but of course, his boss and his boss
                                         
                                         was there right next to him, so he couldn't do much.
                                         
                                         His boss asked him if he had anything to say for himself,
                                         
                                         but he didn't.
                                         
                                         He claimed that I had edited the files later
                                         
                                         and filled in details not known at the time of writing,
                                         
    
                                         but he was obviously reaching for anything to save himself.
                                         
                                         One of the big brass asked about a phrase that he had seen.
                                         
                                         What's so special about that picking location?
                                         
                                         I told them all about my little joke and how my boss had misgitting tens of free sodas,
                                         
                                         and probably 400 bucks if he had merely said the magic words each week.
                                         
                                         A mid-general laughter, I was told to leave the meeting, along with anybody at my pay
                                         
                                         greater lower. A mid-general laughter, I was told to leave the meeting, along with anybody at my pay-greater
                                         
                                         lower.
                                         
    
                                         Three hours later, some security guard emptied the boss's office of his personal belongings,
                                         
                                         and two weeks later, a new boss arrived from another facility.
                                         
                                         It only took him three days to ask about pineapples and apples, and he made sure that there
                                         
                                         was nothing wrong with the aforementioned picking location.
                                         
                                         He also told me to keep the logs more general and only have a few lines for each day. But to also mention things of high importance
                                         
                                         directly to him. The new boss and me had a great relationship, where he left me and my
                                         
                                         shift mostly alone and we kept topping out our performance for the rest of my time at
                                         
                                         that company. The micromanaging boss that was fired eventually found a new job at a
                                         
    
                                         lower level at another company, but he only
                                         
                                         lasted a year.
                                         
                                         Five years later, I saw him selling used cars in a neighboring town.
                                         
                                         Life has not treated him well.
                                         
                                         Down in the comments, Frankie Mint has this story.
                                         
                                         Oh, the things that don't get read.
                                         
                                         My boss removed his company ID at my station and left it there for a while after walking
                                         
                                         away.
                                         
    
                                         As a joke, I used white tape and a typewriter to type the words, Tootsie, trimmed it for
                                         
                                         his badge, and covered up his first name with it.
                                         
                                         I thought he'd notice it immediately, but no.
                                         
                                         He wore that badge for a week in a dozen meetings before someone asked him if Tootsie was really
                                         
                                         his first name.
                                         
                                         Yeah, it's kinda funny, because literally my entire channel is built around the idea
                                         
                                         that people just don't like to read that much. I mean, there's lots of great content on Reddit.
                                         
                                         There's really amazing content, but like filtering through all the stories to find good stories,
                                         
    
                                         and like when you open up a post and it's, you know, several thousand words long,
                                         
                                         you know, it's like, I don't want to read this. What if it sucks? So yeah, my entire
                                         
                                         career is built around the idea that, yeah, reading is kind of lame. That was our slash
                                         
                                         pro revenge. And if you like this content, be sure to follow my podcast because I put
                                         
                                         on new Reddit podcast episodes every single day.
                                         
