Full Disclosure mailing list archives
Re: Should I Be Worried?
From: David <david () hayes-family org>
Date: Tue, 9 May 2006 14:09:03 -0500
On Wednesday 26 April 2006 02:27 pm, CrYpTiC MauleR wrote:
Forgot to say that the VP of Software Dev who is in charge of the site
said he would do an emergency fix in 6 hours to fix the problem. As I expected the problem is still there. Either he is a moron and didn't understand me or they just tried to give the impression they were fixing it. I usually believe in full disclosure, but you're jumping here when it's not necessary. You got a "yes" answer. Why are you in such a hurry to hear it as a "no"? Take the man at his word until he proves himself untrustworthy. For now, believe that he is interested and does want to fix it. Possibility A: He misunderstood Go meet with him again, and explain the problem. Make yourself some drawings or notes to explain what the problem is. If you think you might want to offer to demonstrate the problem, be sure you bring someone with you to act as a witness. If the school gets upset, you may need to prove you acted with the VP's consent. Keep copies of whatever drawing or notes you give as part of your explanation of the problem. Possibility B: It's more complicated than a 6-hour fix He's already had the staff take a swipe at fixing it, but it couldn't be done for some reason. A fix takes more than just coding the fix. Meet with the VP, and also with whatever IT engineer he assigned to handle the issue. Try to understand what roadblocks they ran into. Either way, go back and meet with the VP. He's your ally right now. You both have the same interest, fixing the problem. Work with him until he demonstrates that he's not interested in a fix. -- David Hayes _______________________________________________ Full-Disclosure - We believe in it. Charter: http://lists.grok.org.uk/full-disclosure-charter.html Hosted and sponsored by Secunia - http://secunia.com/
Current thread:
- Re: Should I Be Worried? David (May 09)
- <Possible follow-ups>
- Re: Should I Be Worried? Rajesh V (May 12)