Re: Responsibility

[gboyce <gboyce () badbelly com>]

On Thu, 25 May 2006, Valdis.Kletnieks () vt edu wrote:

> On Thu, 25 May 2006 12:27:07 EDT, Scott Forrest said:
>
> > I would think it would be a matter of negligence if the previous IT
> > Consultant setup wireless access for Hotel Customers to use that also
> > had direct access to the Hotel's network in some way that a virus could
> > jump to their business servers. That just doesn't sound like "sound" or
> > "secure" planning.
>
> All too many networks are set up by a McSE (You want fries with that?) who
> wouldn't know a secure network if it bit them on the ass.  And having been
> bitten, they'd remove all the secure network's teeth to prevent further bites.

Ahh yes.  I've known too many MCSEs who seem to be under the impression 
that if you can't authenticate to the domain, you're not "on the network", 
and you're not able to do any damage.

--
Greg

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/