Full Disclosure mailing list archives
Re: Responsibility
From: "Line Noise" <300baud () gmail com>
Date: Sun, 21 May 2006 16:52:36 -0700
On 5/21/06, Greg <full-disclosure3 () pchandyman com au> wrote:
Large motel/hotel chain I recently acquired wants to sue previous company who did their I.T. work for them as a customer's wifi connected machine infected their network and caused loss of booking data thus money.
Good thing I see you are in Australia, or I'd have believed you to be yet another wannabe. That said... How on earth did someone screw up so badly as to not be separating the hotel network and data from anything a guest could connect to? I can't believe someone designed such a thing, and I really can't believe that customers could connect to a network that is used for the hotel business.
My question then is - if you have done the utmost to lock down your customer but someone connects an infected machine and somehow it gets in, is the customer right in suing you? Eg, like a car mechanic, you do the best but
Which customer are you talking here? If I, as a hotel guest, got infected on the hotel network, I'd be pretty mad, and there might be a lawsuit. If I, as a hotel owner, got infected due to the incompetence and poor design of whoever set up the network in the first place, there would be (at least) a civil suit, not to mention a serious finger shaking.
you cannot be 100% sure that something else that was never a problem will now cause a problem (such as a new exploit in our case that wasn't known generally until 24 hours ago). Should you be sued at that point?
What's a new exploit got to do with this? Why do I feel you are leaving out details? Should *who* be sued; when you say "you" do you mean yourself, or the IT person?
Wondering whether to dump the guy at this point.
What guy? -- NO CARRIER _______________________________________________ Full-Disclosure - We believe in it. Charter: http://lists.grok.org.uk/full-disclosure-charter.html Hosted and sponsored by Secunia - http://secunia.com/
Current thread:
- Responsibility Greg (May 21)
- Re: Responsibility Line Noise (May 21)
- Re: Responsibility Paul Schmehl (May 21)
- Re: Responsibility Sol Invictus (May 22)
- Re: Responsibility <...> (May 23)
- Re: Responsibility Sean Comeau (May 23)
- <Possible follow-ups>
- RE: Responsibility Scott Forrest (May 25)
- Re: Responsibility Michael Holstein (May 25)
- RE: Responsibility Scott Forrest (May 25)
- Re: Responsibility Valdis . Kletnieks (May 25)
- Re: Responsibility gboyce (May 25)
- Re: Responsibility Valdis . Kletnieks (May 25)