linux-kernel - Re: [OT] Vacation message heckling (Was: Re: Richard Dent

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

Date:	Tue, 18 Jul 2006 10:43:50 -0400
From:	Valdis.Kletnieks@...edu
To:	Thomas Tuttle <thinkinginbinary@...il.com>
Cc:	linux-kernel@...r.kernel.org
Subject: Re: [OT] Vacation message heckling (Was: Re: Richard Dent - Annual Leave)

On Tue, 18 Jul 2006 09:27:04 EDT, Thomas Tuttle said:

> > This e-mail is confidential and privileged. 
> Funny.  Has anyone figured out if license agreements on email messages work?

The little case law that exists tends towards the view that if your site
is claiming that an out-of-clue message sent to 30K people is confidential,
you don't have a f**king *clue* what's actually confidential.  This has a
number of interesting potential outcomes:

1) If you're a publicly traded company, a shareholder's lawsuit against the
CIO for mismanaging corporate sensitive data.

2) The possibility that "overwarning" (especially at the *end* of the message
where you've already looked at the contents) will negate any benefit of the
warning. (Basically, the legal variant of "the boy who cried wolf").

3) At least one lawyer has speculated that an opposing legal team could
try the following strategy:  (a) show that *this* disclaimer must be a bogus
one the company attaches to *non* sensitive mail, (b) imply that actual
sensitive mail must therefor have a different disclaimer, and then (c)
subpoena all the e-mail with this disclaimer, since it's obviously not
considered *really* privileged by the company.  Of course, if you're actually
using a one-size-fits-none disclaimer, you're in trouble then... :)

> contents: to do so is strictly prohibited and may be unlawful. Please
> inform us that this message has gone astray before deleting it. Thank you
> for your co-operation.

Let's all inform him his message went astray - obviously it was intended for
a recipient that lives in a universe where posting an e-mail to 30K people you
don't know is still confidential.... :)

Content of type "application/pgp-signature" skipped