New Security Team's Overzealous Tactics Spark Chaos in BOFH Episode

The latest episode of the Bastard Operator From Hell (BOFH) series, published June 12, 2026, by The Register, depicts a new security team's aggressive overhaul of company policies, leading to a calculated countermove by Mission Control. The story centers on the Head of Security intercepting the PFY as he attempts to remove a PC from the office, claiming it needs to be erased and reset to factory defaults.

The new security team, hired after HR discovered empty liquor bottles and evidence of pirated movies from the previous crew, has implemented strict measures including a separate internet feed and equipment recording. The Head of Security, described as a "keen new broom," refuses to let the PFY take the machine, insisting he can handle the IT security himself.

Mission Control's Counterstrike

The PFY and the Boss, aware of the new security chief's overconfidence, set a trap. The PFY deliberately left the office with a high-end PC, knowing the Head of Security would intercept him. The Boss then calls the PFY, confirming the Head of Security's belief that he has everything under control. The PFY returns to Mission Control, where he and the lead candidate for 2IC of Security wait for a ping from the compromised machine.

• The new security team isolated their network from the rest of the company.
• They began recording all equipment leaving the building, a move unpopular with laptop users.
• The PFY warns that the PC might have malware on its recovery partition, but the Head of Security dismisses the concern.
• The Boss backs the Head of Security after a brief phone call, judging his competence.
• The PFY and the 2IC candidate plan to let the Head of Security upgrade his machine with the infected PC, then watch as it trashes the security network.

Implications for IT Security Culture

The episode highlights the dangers of overzealous security teams who prioritize control over collaboration. The new Head of Security's refusal to follow established procedures, such as erasing machines on a DMZ segment, creates a vulnerability that Mission Control exploits. The PFY's comment about security types "shaving with Occam's razor" underscores the tendency to assume theft rather than a setup.

As the story closes, the PFY receives a ping from the compromised machine, indicating the Head of Security has plugged it into the network. The 2IC candidate is advised to wait half an hour before heading downstairs to confront the resulting chaos. The episode serves as a cautionary tale about the risks of hubris in IT security management.