<?xml version="1.0" encoding="UTF-8"?>
<?xml-stylesheet href="https://shkspr.mobi/blog/wp-content/themes/edent-wordpress-theme/rss-style.xsl" type="text/xsl"?>
<rss version="2.0"
	xmlns:content="http://purl.org/rss/1.0/modules/content/"
	    xmlns:wfw="http://wellformedweb.org/CommentAPI/"
	     xmlns:dc="http://purl.org/dc/elements/1.1/"
	   xmlns:atom="http://www.w3.org/2005/Atom"
	     xmlns:sy="http://purl.org/rss/1.0/modules/syndication/"
	  xmlns:slash="http://purl.org/rss/1.0/modules/slash/"
	>
<channel>
	<title>ukgc18 &#8211; Terence Eden’s Blog</title>
	<atom:link href="https://shkspr.mobi/blog/tag/ukgc18/feed/" rel="self" type="application/rss+xml" />
	<link>https://shkspr.mobi/blog</link>
	<description>Regular nonsense about tech and its effects 🙃</description>
	<lastBuildDate>Mon, 20 Jan 2025 12:41:26 +0000</lastBuildDate>
	<language>en-GB</language>
	<sy:updatePeriod>hourly</sy:updatePeriod>
	<sy:updateFrequency>1</sy:updateFrequency>
	<generator>https://wordpress.org/?v=6.9.4</generator>

<image>
	<url>https://shkspr.mobi/blog/wp-content/uploads/2023/07/cropped-avatar-32x32.jpeg</url>
	<title>ukgc18 &#8211; Terence Eden’s Blog</title>
	<link>https://shkspr.mobi/blog</link>
	<width>32</width>
	<height>32</height>
</image> 
	<item>
		<title><![CDATA[The Policy Hack]]></title>
		<link>https://shkspr.mobi/blog/2018/01/the-policy-hack/</link>
					<comments>https://shkspr.mobi/blog/2018/01/the-policy-hack/#comments</comments>
				<dc:creator><![CDATA[@edent]]></dc:creator>
		<pubDate>Sat, 20 Jan 2018 20:31:55 +0000</pubDate>
				<category><![CDATA[Uncategorised]]></category>
		<category><![CDATA[barcamp]]></category>
		<category><![CDATA[govcamp]]></category>
		<category><![CDATA[ukgc18]]></category>
		<guid isPermaLink="false">https://shkspr.mobi/blog/?p=29040</guid>

					<description><![CDATA[I&#039;ve found a delightfully exploitable social hack which I presented at UK GovCamp.  It applies to any uncooperative bureaucracy.  Here&#039;s how it works.  You ask someone to do something and they reply with &#34;I&#039;m sorry sir, that&#039;s against our policy.&#34;  You should say &#34;I&#039;m sorry to hear that. Please can you send me a copy of the policy?&#34;  Turns out, most times, there is no policy!    Shocking, I know. …]]></description>
										<content:encoded><![CDATA[<p>I've found a delightfully exploitable social hack which I presented at <a href="https://www.ukgovcamp.com/">UK GovCamp</a>. 
It applies to any uncooperative bureaucracy.</p>

<p>Here's how it works.  You ask someone to do something and they reply with "I'm sorry sir, that's against our policy."</p>

<p>You should say "I'm sorry to hear that. Please can you send me a copy of the policy?"</p>

<p>Turns out, most times, <strong>there is no policy!</strong></p>

<img src="https://shkspr.mobi/blog/wp-content/uploads/2018/01/There-Is-No-Spoon.gif" alt="Clip from the film &quot;The Matrix&quot; - a young bald boy is saying &quot;There is no spoon.&quot;" width="245" height="180" class="aligncenter size-full wp-image-29041">

<p>Shocking, I know. So much of modern life rests on the whim of whichever call-centre worker you happen to get. If they can't be bothered to do something, they can hide behind a non-existent policy.</p>

<p>Here are a few examples where it has worked for me.</p>

<p>A supplier refused to issue documentation via email and insisted on posting it out. Why? "It's our security policy."</p>

<p>I asked for a copy of the policy - so I could understand why I was allowed to send them documentation via "insecure" email, but they couldn't reciprocate. Of course, there was no policy. They just didn't know how to do email attachments.</p>

<p>A previous employer had an internal system which insisted that password could only be 8 alphabetic characters. No number, no special characters. Oh, and it had to change every 28 days.  Again, asking for the policy showed that it was one person's "overenthusiastic"  interpretation of the IT department's actual policy.</p>

<p>This happens repeatedly.</p>

<h2 id="caveats"><a href="https://shkspr.mobi/blog/2018/01/the-policy-hack/#caveats">Caveats</a></h2>

<p>This isn't a foolproof technique. Sometimes there <em>is</em> a genuine and well thought out policy in place.</p>

<p>A few examples of where it hasn't worked.</p>

<ul>
<li>"My manager won't let us share it." (So I escalate to the manager and we repeat the process.)</li>
<li>"Sorry sir, that's an internal policy and we can't share it." (At which point you can apply for a Subject Access Request under the Data Protection Act to see how the decision was made.)</li>
<li>"Certainly sir. Here is the policy which has been thoroughly reviewed by our lawyers." (Fair enough, I guess!)</li>
</ul>

<p>Anyway, this technique is now yours to try.  See what works and report back.</p>

<h2 id="warnings"><a href="https://shkspr.mobi/blog/2018/01/the-policy-hack/#warnings">Warnings</a></h2>

<p>Two important points to consider.</p>

<ol>
<li>This works for me. Of course, <a href="https://web.archive.org/web/20170909201819/https://twitter.com/geekylonglegs/status/557966555313868800">I have the confidence of a mediocre white man</a> - your success may vary depending on your level of privilege.</li>
<li>It's rarely the fault of the person blocking your way. They're stuck in a dystopian system which rewards them for denying you access. Don't get angry with them - fix the system instead.</li>
</ol>

<h2 id="share-and-enjoy"><a href="https://shkspr.mobi/blog/2018/01/the-policy-hack/#share-and-enjoy">Share and Enjoy</a></h2>

<blockquote class="social-embed" id="social-embed-954683443358650368" lang="en" itemscope="" itemtype="https://schema.org/SocialMediaPosting"><header class="social-embed-header" itemprop="author" itemscope="" itemtype="https://schema.org/Person"><a href="https://twitter.com/edent" class="social-embed-user" itemprop="url"><img class="social-embed-avatar social-embed-avatar-circle" src="data:image/webp;base64,UklGRkgBAABXRUJQVlA4IDwBAACQCACdASowADAAPrVQn0ynJCKiJyto4BaJaQAIIsx4Au9dhDqVA1i1RoRTO7nbdyy03nM5FhvV62goUj37tuxqpfpPeTBZvrJ78w0qAAD+/hVyFHvYXIrMCjny0z7wqsB9/QE08xls/AQdXJFX0adG9lISsm6kV96J5FINBFXzHwfzMCr4N6r3z5/Aa/wfEoVGX3H976she3jyS8RqJv7Jw7bOxoTSPlu4gNbfXYZ9TnbdQ0MNnMObyaRQLIu556jIj03zfJrVgqRM8GPwRoWb1M9AfzFe6Mtg13uEIqrTHmiuBpH+bTVB5EEQ3uby0C//XOAPJOFv4QV8RZDPQd517Khyba8Jlr97j2kIBJD9K3mbOHSHiQDasj6Y3forATbIg4QZHxWnCeqqMkVYfUAivuL0L/68mMnagAAA" alt="" itemprop="image"><div class="social-embed-user-names"><p class="social-embed-user-names-name" itemprop="name">Terence Eden is on Mastodon</p>@edent</div></a><img class="social-embed-logo" alt="Twitter" src="data:image/svg+xml,%3Csvg%20xmlns%3D%22http%3A%2F%2Fwww.w3.org%2F2000%2Fsvg%22%0Aaria-label%3D%22Twitter%22%20role%3D%22img%22%0AviewBox%3D%220%200%20512%20512%22%3E%3Cpath%0Ad%3D%22m0%200H512V512H0%22%0Afill%3D%22%23fff%22%2F%3E%3Cpath%20fill%3D%22%231d9bf0%22%20d%3D%22m458%20140q-23%2010-45%2012%2025-15%2034-43-24%2014-50%2019a79%2079%200%2000-135%2072q-101-7-163-83a80%2080%200%200024%20106q-17%200-36-10s-3%2062%2064%2079q-19%205-36%201s15%2053%2074%2055q-50%2040-117%2033a224%20224%200%2000346-200q23-16%2040-41%22%2F%3E%3C%2Fsvg%3E"></header><section class="social-embed-text" itemprop="articleBody">My cheat for <a href="https://twitter.com/hashtag/ukgc18">#ukgc18</a>.<br><br>When someone says "I'm sorry, that's against our policy."<br><br>You should say "I'm sorry to hear that. Please can you send me a copy of the policy?"<br><br>Turns out, most times, there is no policy stopping you from doing the thing.<br><br>Do the thing anyway.</section><hr class="social-embed-hr"><footer class="social-embed-footer"><a href="https://twitter.com/edent/status/954683443358650368"><span aria-label="237 likes" class="social-embed-meta">❤️ 237</span><span aria-label="14 replies" class="social-embed-meta">💬 14</span><span aria-label="0 reposts" class="social-embed-meta">🔁 0</span><time datetime="2018-01-20T11:54:04.000Z" itemprop="datePublished">11:54 - Sat 20 January 2018</time></a></footer></blockquote>
<img src="https://shkspr.mobi/blog/wp-content/themes/edent-wordpress-theme/info/okgo.php?ID=29040&HTTP_REFERER=RSS" alt="" width="1" height="1" loading="eager">]]></content:encoded>
					
					<wfw:commentRss>https://shkspr.mobi/blog/2018/01/the-policy-hack/feed/</wfw:commentRss>
			<slash:comments>1</slash:comments>
		
		
			</item>
	</channel>
</rss>
