Re: Testing on colleagues

[Carlos Perez <carlos_perez () darkoperator com>]

1. Ask Permission
2. Define a scope for the demo and get all parties to agree on it.
3. Set boundaries and stay in those (VMs, test equipment)

Ensure that everything is documented and not word of mouth.

Sent from my iPhone

On Nov 24, 2012, at 10:02 AM, Jim Halfpenny <jim.halfpenny () gmail com> wrote:

> Seconded. I would steer well away from interfering with employee's personal equipment entirely. Bringing a personal 
> device to work does not implicitly give me employer the right to interfere with it and you could find yourself on 
> thin ice.
>
> Jim
>
> On Nov 24, 2012 1:57 PM, "allison nixon" <elsakoo () gmail com> wrote:
> > ask permission first.  
> >
> > On Fri, Nov 23, 2012 at 3:41 PM, Jason Jarvis <k41zen () me com> wrote:
> > > All,
> > >
> > > If I wanted to demonstrate real life attacks with my colleagues from a security awareness perspective but also an 
> > > educational one for the sales team, what else should I put in place to protect the company and myself on-top of 
> > > gaining their permission and awareness of such tests?
> > >
> > > For example I'd like to use Karmetasploit and their mobile devices that they bring to the office.
> > >
> > > Regards,
> > >
> > > K41zen
> > > _______________________________________________
> > > Pauldotcom mailing list
> > > Pauldotcom () mail pauldotcom com
> > > http://mail.pauldotcom.com/cgi-bin/mailman/listinfo/pauldotcom
> > > Main Web Site: http://pauldotcom.com
> >
> >
> >
> > -- 
> > _________________________________
> > Note to self: Pillage BEFORE burning.
> >
> > _______________________________________________
> > Pauldotcom mailing list
> > Pauldotcom () mail pauldotcom com
> > http://mail.pauldotcom.com/cgi-bin/mailman/listinfo/pauldotcom
> > Main Web Site: http://pauldotcom.com
> _______________________________________________
> Pauldotcom mailing list
> Pauldotcom () mail pauldotcom com
> http://mail.pauldotcom.com/cgi-bin/mailman/listinfo/pauldotcom
> Main Web Site: http://pauldotcom.com
_______________________________________________
Pauldotcom mailing list
Pauldotcom () mail pauldotcom com
http://mail.pauldotcom.com/cgi-bin/mailman/listinfo/pauldotcom
Main Web Site: http://pauldotcom.com