Penetration Testing: Re: EXAMPLE: Why OOO is *BAD* [WAS: Re: OOO FLAME]

[Trygve Aasheim <trygve () pogostick net>]

Goes into my collection of terrible scenarios...a company that doesn't 
follow any guidelines on good security at all.
Helpdesk employee with access to shadow files on servers?
Wake up...
Helpdesk employee that forwards sensitive information to @hotmail 
accounts on request from people that actually say they don't work there?
Hard to belive.

That company has bigger issues than OOO.

Sorry, but it sounds like a fib....
If it is true, then holy...

Cheers,
T



Michael Boman wrote:
> On Sun, Sep 14, 2008 at 10:19 PM, Jon Kibler <Jon.Kibler () aset com> wrote:
> > Okay, since I started this, you're on!
> >
> > Real world example...
> That one goes into my collection of good scenarios. Thanks for sharing.
>
> Best regards
> Michael Boman
------------------------------------------------------------------------
This list is sponsored by: Cenzic

Top 5 Common Mistakes in 
Securing Web Applications
Get 45 Min Video and PPT Slides

www.cenzic.com/landing/securityfocus/hackinar
------------------------------------------------------------------------