FW: Lost mail on security-basics today

["David Fore" <wdfore () d4consulting biz>]

Yes, firing is way too harsh, unless of course is was intentional or
done with malice. I would say however, that this is a great opportunity
to learn from the mistake. Many organizations perform an after-incident
analysis in order to get to the root problem or issue. Not that somebody
entered an incorrect command, but why was it done. Too big a workload,
insufficient training, unauthorized person working on the box, whatever.
This can be very useful so as not to repeat the mistake again or to
shore up an already week area. If I had a dollar for each wrong box I
screwed up or wrong command parameter I (or somebody I know) entered, I
would be retired by now! 

David

-----Original Message-----
From: Allen K [mailto:gorebofh () comcast net] 
Sent: Sunday, September 26, 2004 1:27 PM
To: security-basics () securityfocus com
Subject: Re: Lost mail on security-basics today


HAha, oh man I've done that before. I was logged in through SSH on my
slackware box, from my Other Slackware box, and on my SUSE box (I like
to play ;) ) anyway, I went to shut down one box into run level 3 and it
spanked the wrong box into 3, I had all my homework and things loaded on
the Slackware 10 machine and it dropped to text mode. I was like ohhhh
maaaaaaan lol. I laughed about it though, I just stayed on run level
three and did my homework in Vim. :)

Unless it was intentional, I don't think anyone should get punished to
badly for it, maybe like a talking to and tell themnot to do this again,
but not fired or written up, that's way to harsh in my eyes. Of course
it's only my opinion, I'm not the boss, but if it was my choice I'd say
have a talk and leave it at that :)

On Thu, 2004-09-23 at 23:55, Byron Copeland wrote:
> Yeah I a gree, don't be too hash.  I've made mistakes in the past 
> myself, like being ssh'd into a firewall someplace and not paying 
> attention and thinking I was on my own box after working with multiple

> servers in multiple windows and issue a "shutdown -h now" command in 
> that window. Doh!
>
> -b
>
> On Sat, 2004-09-18 at 06:58, Allen wrote:
> > On Friday 17 September 2004 15:43, Kelly Martin wrote:
> > > Hi Everyone,
> > >
> > > One of our mail admins made a big mistake today and we lost all 
> > > the mail on one of the outgoing SecurityFocus mail servers... all 
> > > of our 31 mailing lists were affected including this one.
> >
> > Everyone makes mistakes
> >
> > > Sincere apologies, but these things happen.
> > > And to Unix administrators everywhere, please remember that 'sudo'

> > > is your friend, education is key, and that playing around with 
> > > production machines as 'root' is a very bad way to learn from your

> > > mistakes.
> >
> > LOL, everyone who has ever had root access to a UNIX machine has 
> > done
> > something like this once at least. I know I have, and I just hope
the person 
> > who did this wasn't fired, or punished harshly. It's not like you
have to pay 
> > to sign up so I don't see a big deal with it, mistakes happen, and
everyone 
> > has made them. :)
> >
> > > Best regards,
> > > Moderator
> > >
> > > --8<--cut here---8<---
> > > Kelly Martin kel () securityfocus com http://www.SecurityFocus.com 
> > > SecurityFocus Infocus - content editor ph+001 (403) 261-5468
> > >
> > > ------------------------------------------------------------------
> > > ---------
> > > Computer Forensics Training at the InfoSec Institute. All of our
class
> > > sizes are guaranteed to be 12 students or less to facilitate
one-on-one
> > > interaction with one of our expert instructors. Gain the in-demand
skills
> > > of a certified computer examiner, learn to recover trace data left
behind
> > > by fraud, theft, and cybercrime perpetrators. Discover the source
of
> > > computer crime and abuse so that it never happens again.
> http://www.infosecinstitute.com/courses/computer_forensics_training.htm
l
> > >
------------------------------------------------------------------------
---
> > > -
> >
> > --------------------------------------------------------------------
> > -------
> > Computer Forensics Training at the InfoSec Institute. All of our
class sizes
> > are guaranteed to be 12 students or less to facilitate one-on-one
> > interaction with one of our expert instructors. Gain the in-demand
skills of
> > a certified computer examiner, learn to recover trace data left
behind by
> > fraud, theft, and cybercrime perpetrators. Discover the source of
computer
> > crime and abuse so that it never happens again.
> >
> > http://www.infosecinstitute.com/courses/computer_forensics_training.
> > html
------------------------------------------------------------------------
----
-- 
----------------------------------
http://www.cannibalholocaust.net
http://www.misfits.com
http://www.onethirtyeight.net
http://www.suse.com
http://www.slackware.com
http://www.linux.org
http://www.linuxiso.org
http://www.gnu.org
http://www.freebsd.org
http://www.bsd.org
http://www.antionline.com