Hacker News Reader

Comment by wil421 | Hacker News Reader

It sounds like you are mad at the security folk not really IT.

No you can’t run arbitrary queries that bring my server to a halt. No I’m not going to give to access to my API only for you to blast my system with some python script during peak hours when you can just extract the data in CSV and use a real data analysis tool. No I won’t support your shadow IT Access DB that you created because you refuse to pay for a sql server with enterprise grade storage and redundancy.

These are things that have happened to me and I can’t imagine being in security and having to deal with people installing whatever they want.

The reason IT (including security) say no is because we have been burnt before and are left alone when someone fucks things up.

View on HN

Then you need to help me write the queries . Then you need to help me with the API calls. And yes I will shadow IT all day long until you work with me on a better solution then just downloading CSV files. If you aren’t going to help me and do your best to get me a solution, Even if not perfect, I am definitely skeptical of your requests and need to watch out for empire building. I’m not writing SELECT * queries man - I have very specific data requests and have an MS in Comp Sci so while I’m far from a DBA, I’m respectful of things I don’t know. You can’t just say “no we aren’t writing requests today”.

I don’t think people should install just any program willy nilly, but why in the fuck can’t I install SSIS from Microsoft to help me deal with shitty “here’s some csv’s” service I sometimes get? Literally no reason ever ever to not be able to download that.

Shadow IT is fine for now. The execs will do their next Technology Transformation to get rid of shadow IT at the advise of highly paid consultants. It will be consultants draining your coffers not IT and I can guarantee you it will be more expensive than doing IT right in the first place.

> Then you need to help me write the queries .

As it must be.

> Then you need to help me with the API calls.

As it should be, with visualizations of the time-series data, if applicable.

Banks are more than ever driven by their tech teams. Tell your manager if you're suffering.

>As it must be.

No IT department in the world has that level of resource, hence the "cybersecurity skills shortage", rolling battles between IT and engineering/sales/marketing, and Shadow IT.

The Zen of IT is giving your users the tools and knowledge they need and locking off the things that are actually illegal. The former use cases no longer bother you, the latter cases don't have exceptions to argue.

You are not doing case-by-case support. Ever.

I agree that this is not a one-size-fits-all solution. However, if a business user has deep understanding of the problem domain and deep knowledge of the data model behind it (because they may have written it), then I want to move them into my tech organization.

We can always find new Actuarial Science grads.

It's the opposite of the "IT reports to CFO" problem.

Reply on news.ycombinator.com