full-disclosure - Re: Social flaws / vulnerabilities in 'Last account activity' on Gmail

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

Message-ID: <22515.1221966080@turing-police.cc.vt.edu>
Date: Sat, 20 Sep 2008 23:01:20 -0400
From: Valdis.Kletnieks@...edu
To: AaRoNg11 <aarong11@...il.com>
Cc: full-disclosure@...ts.grok.org.uk
Subject: Re: Social flaws / vulnerabilities in 'Last
	account activity' on Gmail

On Sat, 20 Sep 2008 21:47:55 BST, AaRoNg11 said:

> If the job was that sensitive of a job, do you really think they'd be using
> gmail to send important information?

Remember - n3td3v is in the British Isles, where clusterfuck IT is rampant in
the government sector.  You know, like "Let's lose the financial details of
*EVERY SINGLE FRIKKING FAMILY IN THE COUNTRY on an UNENCRYPTED DISK".

Oh, why was the disk unencrypted? Because the policy on how to securely
transfer the data was deemed so sensitive that it was only accessible to
upper management - the people *doing* the work didn't have access to the
policy of how to do it right.

Content of type "application/pgp-signature" skipped

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/