full-disclosure - Need some advice for a new customer

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [day] [month] [year] [list]

Message-ID: <43F0B18A.1020304@lava.net>
Date: Mon Feb 13 16:19:41 2006
From: prb at lava.net (Peter Besenbruch)
Subject: Need some advice for a new customer

> Here's the question:
> 
> Should the company notify their customers of a POSSIBLE compromise of their
> data? I have been trying to convince them that they should operate as though
> the data is compromised. Is that the right position to take as a security
> consultant?

What would be the consequence to their business be if the news of 
compromise came from a third party, and not the business itself? They 
need to get out front on this.
-- 
Hawaiian Astronomical Society: http://www.hawastsoc.org
HAS Deepsky Atlas: http://www.hawastsoc.org/deepsky