Prevent users on local workstations from changing the time
-
@ccwtech said in Prevent users on local workstations from changing the time:
@dbeato Yes, but they move the clock back 10 minutes, clock in, and then they move it back to the real time.
Wow. That's both incredibly bad from an ethics standpoint, and also from a timeclock one. The timeclock just accepts any arbitrary remote client's claim to the time?
-
For something like this, those people will definitely make an effort to find away around any system that you put in place. This isn't casual disruption, this is seriously intentional fraud going on.
-
Even if I could get an alert or email when any of the times were manually changed....
Some people will be out of a job soon but want to see what can be done to prevent/detect it...
-
@ccwtech said in Prevent users on local workstations from changing the time:
Even if I could get an alert or email when any of the times were manually changed....
Some people will be out of a job soon but want to see what can be done to prevent/detect it...
Time can’t really be detected from inside a system. Only from outside. Because the system can’t tell that time is changing. It has no means of observing it.
-
So an external system that monitors the time could work. But it would be simpler to just get a functional time clock system. Recording the time externally is definitely the easy answer.
-
@scottalanmiller said in Prevent users on local workstations from changing the time:
So an external system that monitors the time could work. But it would be simpler to just get a functional time clock system. Recording the time externally is definitely the easy answer.
Agreed!
-
@ccwtech said in Prevent users on local workstations from changing the time:
@dbeato Yes, but they move the clock back 10 minutes, clock in, and then they move it back to the real time.
The backend should be the one setting the time when saving to the db. Why accept the time from the clients if it could easily be modified like this.
-
@romo said in Prevent users on local workstations from changing the time:
@ccwtech said in Prevent users on local workstations from changing the time:
@dbeato Yes, but they move the clock back 10 minutes, clock in, and then they move it back to the real time.
The backend should be the one setting the time when saving to the db. Why accept the time from the clients if it could easily be modified like this.
Yes, the program is supposed to pull the server time but is not doing that for some reason. I am working on that angle as well.
-
@ccwtech said in Prevent users on local workstations from changing the time:
@romo said in Prevent users on local workstations from changing the time:
@ccwtech said in Prevent users on local workstations from changing the time:
@dbeato Yes, but they move the clock back 10 minutes, clock in, and then they move it back to the real time.
The backend should be the one setting the time when saving to the db. Why accept the time from the clients if it could easily be modified like this.
Yes, the program is supposed to pull the server time but is not doing that for some reason. I am working on that angle as well.
Probably triggers NTP from time to time and they hit it in between the cycles.
-
