Security Basics mailing list archives
Re: application for an employment
From: Cesc <cesc.santa () gmail com>
Date: Tue, 28 Mar 2006 17:12:21 +0200
May i propose a different view? If you set up a server connected to the public internet with a few services available ... wouldn't it be a valid analogy to say that you have several gates to you house, where each is guarded (or should be) by a bouncer/guard. Me, standing on the public sidewalk, not only have the right to see and check which and how many gates you have, but also is no crime to approach the bouncer/guard and talk to him/her. No crime in talking ... which following the analogy, i would consider as connecting or sending probe packets. If the house owner did not educate well enough the bouncers to not give out information to passers by is not "my" fault. Just random thoughts ... Cesc On 3/28/06, Craig Wright <cwright () bdosyd com au> wrote:
Actually I see this as a Very good analogy. It also has the legal issues covered. If you break the window you are liable for "Criminal damage" and this is a risk you take. If you do not break the window (using small stones or small clumps of dirt for example) you are not legally liable - though the owner of the window may still not be happy. Than again, sometimes the vase inside the open window gets broken..... Regards Craig -----Original Message----- From: David Gillett [mailto:gillettdavid () fhda edu] Sent: 28 March 2006 6:18 To: 'Craddock, Larry'; security-basics () securityfocus com Subject: RE: application for an employment It's more like throwing a stone at a window to see if it's open. Sometimes the stone bounces off the closed window, sometimes it sails through the open window, and sometimes it *breaks* the window. "I only wanted to find out if the window was open or closed" is not generally considered an excuse to avoid responsibility for the broken pane.... David Gillett-----Original Message----- From: Craddock, Larry [mailto:l_craddock () wfec com] Sent: Friday, March 24, 2006 11:59 AM To: security-basics () securityfocus com Subject: RE: application for an employment Seems to me port scanning is neither picking a lock or seeing a door hanging wide open but more like rattling a door to see if it is unlocked. I don't know about you, but if someone comes by my house andrattles the door to check whether or not it's locked I'm going to assume he has bad intentions whether he does or not and he'll need to be prepared for my response. -----Original Message----- From: L G [mailto:nitziya74 () hotmail com] Sent: Wednesday, March 22, 2006 6:23 PM To: security-basics () securityfocus com Subject: Re: application for an employment This is a good thread which begs further discussion. I guess the crudest part of my question is, was Mathias picking a lock, or did he see a door hanging wide open? And at what point is someone going through an open door versus lookingin a window versus admiring someone's architecture from the street? lg -------------------------------------------------------------- ------------- EARN A MASTER OF SCIENCE IN INFORMATION ASSURANCE - ONLINE The NorwichUniversity program offers unparalleled Infosec management education and the case study affords you unmatched consulting experience. Tailor your education to your own professional goals with degree customizations including Emergency Management, Business Continuity Planning, Computer Emergency Response Teams, and Digital Investigations. http://www.msia.norwich.edu/secfocus -------------------------------------------------------------- ------------------------------------------------------------------------------------- --- EARN A MASTER OF SCIENCE IN INFORMATION ASSURANCE - ONLINE The Norwich University program offers unparalleled Infosec management education and the case study affords you unmatched consulting experience. Tailor your education to your own professional goals with degree customizations including Emergency Management, Business Continuity Planning, Computer Emergency Response Teams, and Digital Investigations. http://www.msia.norwich.edu/secfocus ------------------------------------------------------------------------ --- Liability limited by a scheme approved under Professional Standards Legislation in respect of matters arising within those States and Territories of Australia where such legislation exists. DISCLAIMER The information contained in this email and any attachments is confidential. If you are not the intended recipient, you must not use or disclose the information. If you have received this email in error, please inform us promptly by reply email or by telephoning +61 2 9286 5555. Please delete the email and destroy any printed copy. Any views expressed in this message are those of the individual sender. You may not rely on this message as advice unless it has been electronically signed by a Partner of BDO or it is subsequently confirmed by letter or fax signed by a Partner of BDO. BDO accepts no liability for any damage caused by this email or its attachments due to viruses, interference, interception, corruption or unauthorised access. --------------------------------------------------------------------------- EARN A MASTER OF SCIENCE IN INFORMATION ASSURANCE - ONLINE The Norwich University program offers unparalleled Infosec management education and the case study affords you unmatched consulting experience. Tailor your education to your own professional goals with degree customizations including Emergency Management, Business Continuity Planning, Computer Emergency Response Teams, and Digital Investigations. http://www.msia.norwich.edu/secfocus ---------------------------------------------------------------------------
--------------------------------------------------------------------------- EARN A MASTER OF SCIENCE IN INFORMATION ASSURANCE - ONLINE The Norwich University program offers unparalleled Infosec management education and the case study affords you unmatched consulting experience. Tailor your education to your own professional goals with degree customizations including Emergency Management, Business Continuity Planning, Computer Emergency Response Teams, and Digital Investigations. http://www.msia.norwich.edu/secfocus ---------------------------------------------------------------------------
Current thread:
- RE: application for an employment, (continued)
- RE: application for an employment Murad Talukdar (Mar 28)
- RE: application for an employment Soderland, Craig (Mar 27)
- RE: application for an employment Craig Wright (Mar 27)
- RE: application for an employment David Gillett (Mar 27)
- RE: application for an employment Craig Wright (Mar 27)
- RE: application for an employment Andrew Williams (Mar 27)
- RE: application for an employment Craig Wright (Mar 28)
- RE: application for an employment Craig Wright (Mar 28)
- RE: application for an employment Craig Wright (Mar 28)
- RE: application for an employment Craig Wright (Mar 28)
- Re: application for an employment Cesc (Mar 29)
- RE: application for an employment Craig Wright (Mar 29)
- RE: Spam:RE: application for an employment Mark Gorman (Mar 29)
- Re: Spam:RE: application for an employment Ian Scott (Mar 30)
- RE: Spam:RE: application for an employment Mark Gorman (Mar 29)
- RE: application for an employment Craig Wright (Mar 29)
- RE: application for an employment Murad Talukdar (Mar 29)
- RE: application for an employment Craddock, Larry (Mar 29)
- Re: application for an employment Ansgar -59cobalt- Wiechers (Mar 30)
- RE: application for an employment David Gillett (Mar 30)
- Re: application for an employment Ansgar -59cobalt- Wiechers (Mar 30)
- RE: application for an employment David Gillett (Mar 31)
- Re: application for an employment Ansgar -59cobalt- Wiechers (Mar 30)