lists.openwall.net   lists  /  announce  owl-users  owl-dev  john-users  john-dev  passwdqc-users  yescrypt  popa3d-users  /  oss-security  kernel-hardening  musl  sabotage  tlsify  passwords  /  crypt-dev  xvendor  /  Bugtraq  Full-Disclosure  linux-kernel  linux-netdev  linux-ext4  linux-hardening  linux-cve-announce  PHC 
Open Source and information security mailing list archives
 
Hash Suite: Windows password security audit tool. GUI, reports in PDF.
[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]
Message-ID: <001101c5032e$d9c284f0$6500a8c0@p43400>
From: chows at ozemail.com.au (Gregh)
Subject: hushmail.com, is this true? 


----- Original Message ----- 
From: <Valdis.Kletnieks@...edu>
To: "james edwards" <hackerwacker@...ermesa.com>
Cc: <full-disclosure@...ts.netsys.com>
Sent: Wednesday, January 26, 2005 9:13 AM
Subject: Re: [Full-Disclosure] hushmail.com, is this true? 

> > On Tue, 25 Jan 2005 14:51:07 MST, james edwards said:

> > No business can ignore a judges orders to produce whatever required
> > information.
> > The business can contest the request but if it is proven out the information
> > must be produced.

> So tell me - what do you do when you get served a subpoena requesting all
> your records regarding the development of a specified drug by Pfeizer?

> Oh. You never *had* those records, because you don't keep them?  I see.... ;)

> They can't force you to produce information you can prove you don't have... 


Sorry for requoting in it's entirety but I couldn't find a way to snip that missed vital info if someone starts reading at this point.

My question to you, Valdis, is how the heck can you prove something DOESN'T exist such as a record? You would have to prove that whatever it is, I.T. related or even drug company drugs related, that you didn't keep records for all similar things and then that would not be believed anyway.

You could, however, produce faked records supporting anything you want these days. Give a reasonable (not great) web site builder an official looking domain name and 5 minutes and that person can be making the most outlandish statements from a web site that shows itself looking respectable.

The only true way an investigator has of proving a point is their own ability to judge a situation, the people and their knowledge of the field they investigate. "Trust me". :)

Greg.



Powered by blists - more mailing lists