The HR Email

Yesterday, I was changing planes in Seoul from Tokyo back to Honolulu.

I check voicemail and got this message.

"John, this is HR department. We've just sent you an urgent mail. Please read it ASAP."

Oh Jesus Christ! Can't they just leave in the message what the hell they want?

I try to login to the Outlook. Unfortunately, it's setup with two factor authentication and wants to send me a code to either my Japan or US phone. Neither are working now since I'm in Korea.

I call up the Ken at the office in SF.

"Ken, this is John. It seems I have some vital email from HR." I said.

"Did we finally fire you, John?" asked Ken condescendingly.

Jesus, what a smartass ... "I dunno, I can't get to it right now cuz Outlook mail is asking for Two-Factor authentication and my phone doesn't have service in Korea.

"Well, just wait until you go back!" replied Ken.

"Look dude, they said it's critical. If sh*t hits the fan, I'm gonna say Ken didn't help me" I replied.

There is silence for a few seconds...

"All, right hang on." said Ken.

A few minutes go by.

"Ok, I've disabled Multi factor authentication on your account now. You should be able to just login using a password. Try again." replied Ken.

I try to login. It still doesn't go.

"Dude, it's still not taking my password." I replied.

There is more silence on the other end.

"Does your password have weird characters like a backslash?" Ken asked eventually.

"Yes, it has tons of weird chars... &-%-#-(-\-$, you name it." I replied back.

"OK that's the problem." he replied.

"Not complicated enough?" I asked.

"No, it's too complicated. I think the backslash is causing a problem since we upgraded." he said.

"WHAT THE F-?"

"I just reset your password to your birthdate 0423. Try to login how." he replied.

I try again, and this time it works.

"Did you get the mail?" asked Ken. "Did we fire you?"

"Shut the hell up." I yelled back at him.

"HA-HA" replied Ken (in Nelson's tone from the Simpsons)

I open Outlook and then look for messages from HR.

I click on that message.

"John. As a contractor, you are required to complete several training classes throughout the year. Your training class is 120 days overdue. Please complete this ASAP."

You gotta be F***ING kidding me.

"It's saying I need to complete some training class." I replied.

"What?" asked Ken.

I click on the training ... and the topic was perfect...

"WELCOME TO THE FUNDAMENTALS OF CYBERSECURITY"

Sure enough ...

Slide 1: ALWAYS USE MULTI-FACTOR AUTHENTICATION

Slide 2: NEVER USE A PASSWORD THAT CONTAINS EASILY GUESSED THINGS ... SUCH AS YOUR BIRTHDATE

Slide 3: BEWARE OF SOCIAL ENGINEERING HACKS. IF SOMEONE CALLS AND ASKS FOR A PASSWORD, REPORT THEM IMMEDIATELY.