full-disclosure - [inbox] Re: This sums up Yahoo!s security policy to a -T-

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

Message-ID: <NMEAJDJMDLJLOIOCIKJJOEABFOAA.exibar@thelair.com>
From: exibar at thelair.com (Exibar)
Subject: [inbox] Re: This sums up Yahoo!s security
	policy to a -T-

  His parents become the gardians of his estate by default (assuming he
wasn't married or had children).  His parents now own everything that man
had while alive, digital and physical.

  Same thing as if I had died, my wife would inherit everything that I own.
Yahoo's only in need of a legal document stating that, then they will have
to relinquish the password for his account.  If they do so before they
receive this document, then they are breaking their own policies.

  Exibar
  -----Original Message-----
  From: Bart.Lansing@...ls.com [mailto:Bart.Lansing@...ls.com]
  Sent: Friday, December 24, 2004 10:41 AM
  To: Exibar
  Cc: full-disclosure@...ts.netsys.com;
full-disclosure-bounces@...ts.netsys.com; morning_wood
  Subject: [inbox] Re: [Full-Disclosure] This sums up Yahoo!s security
policy to a -T-




  Exibar wrote on 12/23/2004 09:36:40 AM:

  > I applaud Yahoo for adhearing to their policies.  All the familly has to
do
  > is send legal documents of their son's death, and legal documents
stating
  > who they are.  At that point I'm sure the account information will be
  > released as per Yahoo's policy.
  >
  >   Instead of trying to get the media involved, they should be getting
their
  > laywer involved as the clock's ticking on the 90 no-activity delete.
Their
  > lawyer will know the correct documents to send over to yahoo as proof of
  > their son's death and that his parents have control over their dead
son's
  > belongings/estate.
  >
  >   Perhaps what yahoo *could* do, or *should* do, is remove the 90 day
  > time-out on their son's e-mail account until they can have a chance of
going
  > through the courts.  Perhaps extend it up to 365 days...
  >
  >   Exibar

  We're goint to disagree here...

  His parents have no right to access his mail account, period. It's not
theirs, and unless he stated in a will or prior release that these
electronic records should be released...and to whom...they should vanish
when his account does.

  These are not memoirs or a diary, or a bundle of written letters which
could be argued was knowingly left behind with a high probability of
discovery.  These are electronic records deposited with a trusted entity
with the expectation of safekeeping and privacy.

  Yahoo "should" violate their own policies in order to facilitate releasing
this email into the hands of people who are not owners of those records?  I
think not.

  >
  > ----- Original Message -----
  > From: "morning_wood" <se_cur_ity@...mail.com>
  > To: <full-disclosure@...ts.netsys.com>
  > Sent: Wednesday, December 22, 2004 8:59 PM
  > Subject: Re: [Full-Disclosure] This sums up Yahoo!s security policy to
a -T-
  >
  >
  > > > If their refusal to release that mail even after their customer is
dead
  > is
  > > > an indication as to their privacy practices, three cheers for Yahoo.
  > > >
  > > > Don't you get the whole "slippery slope" thing?  If it's ok when
you're
  > > > dead (which it's not, my stuff is my stuff...destroy it when you're
sure
  > > > I've really shuffled off elsewhere, unless I gave you very specific
  > > > instructions otherwise) then maybe it's ok if you are in a
coma...then
  > > > maybe it's ok if you are really sick and someone else is your legal
  > > > guardian becaue you've been declared non-compos mentis...then maybe
it's
  > > > ok if it's your parents...or your wife...or a concerned neighbor...
  > > >
  > > > What's in that mailbox is/was mine, none of your business unless I
chose
  > > > to share it.
  > >
  > > i couldnt agree more... another case of lame, illogical media bullshit
  > > BRAVO YAHOO
  > >
  > > happy hollidays,
  > >
  > > m.w
  > > _______________________________________________
  > > Full-Disclosure - We believe in it.
  > > Charter: http://lists.netsys.com/full-disclosure-charter.html
  > >
  > >
  >
  > _______________________________________________
  > Full-Disclosure - We believe in it.
  > Charter: http://lists.netsys.com/full-disclosure-charter.html
        CONFIDENTIALITY NOTICE:
        This is a transmission from Kohl's Department Stores, Inc.
        and may contain information which is confidential and proprietary.
        If you are not the addressee, any disclosure, copying or
distribution or use of the contents of this message is expressly prohibited.
        If you have received this transmission in error, please destroy it
and notify us immediately at 262-703-7000.

        CAUTION:
        Internet and e-mail communications are Kohl's property and Kohl's
reserves the right to retrieve and read any message created, sent and
received. Kohl's reserves the right to monitor messages by authorized Kohl's
Associates at any time
        without any further consent.

-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://lists.grok.org.uk/pipermail/full-disclosure/attachments/20041225/75550c24/attachment.html