full-disclosure - A rather newbie question

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite for Android: free password hash cracker in your pocket

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

Message-ID: <200405031304.08713.dlhane@sbcglobal.net>
From: dlhane at sbcglobal.net (David Hane)
Subject: A rather newbie question

On Monday 03 May 2004 12:43, Harlan Carvey wrote:
> > While I think you have a point I also think Ethan
> > has one too. It is important
> > to remember that users are generally clueless and/or
> > unconcerned with
> > security. Of course I'm grossly generalizing but I
> > think you get my point.
>
> Yes, I can agree with that...I do get the point.  But
> who are the users?  Say you're an admin at a law
> firm...if the users are supposed to be
> security-conscious (face it, a great many admins lack
> even the most rudimentary security awareness), then
> shouldn't the admins be required to have a law degree,
> also?  How about a hospital...shouldn't each admin
> then have to have a medical degree?
>

God I hope not. I don't want a PhD in genetics. Let my bosses play god. I'll 
just tech support god.

Generally though, you are expected to have some expertise in the area that 
your employer specializes. That's been my experience at least. I would have 
never gotten this job had I not had experience in a biological laboratory 
environment. And any jobs I do see for law firms, accounting firms, and 
medical firms all require previous experience in those areas. But they'll 
expect to let everyone and their brother (sometimes literally) use the 
systems.

> I agree that harmless joking is fine...but I've seen
> instances in which that harmless joking became part of
> the admin's vocabulary, even in front of those same
> users.

OUCH! Now that's just unprofessional and very bad form. I do admit to having 
been around quite a few "IT Nazis". I don't even like those guys.

Cheers