Re: Pen Test mistake

From: Gary Flynn (flynngnat_private)
Date: Thu Aug 21 2003 - 16:02:37 PDT

  • Next message: Jeffrey Gorton: "Re: Pen Test mistake"

    I think there is definitely some risk here so consulting
    with an attorney familiar with cyber law would be a good
    idea.
    
    However, consider this:
    
    1) You've performed a free security audit for them. Some organizations
        might be grateful.
    
    2) If you don't contact them and an audit or review of their logs
        discovers your entry at a later date its going to look worse.
    
    -- 
    Gary Flynn
    Security Engineer - Technical Services
    James Madison University
    
    Please R.U.N.S.A.F.E.
    http://www.jmu.edu/computing/runsafe
    
    
    ---------------------------------------------------------------------------
    Attend Black Hat Briefings & Training Federal, September 29-30 (Training), October 1-2 (Briefings) in Tysons Corner, VA; the world<92>s premier 
    technical IT security event.  Modeled after the famous Black Hat event in 
    Las Vegas! 6 tracks, 12 training sessions, top speakers and sponsors.  
    Symanetc is the Diamond sponsor.  Early-bird registration ends September 6 Visit: www.blackhat.com
    ----------------------------------------------------------------------------
    



    This archive was generated by hypermail 2b30 : Fri Aug 22 2003 - 08:12:54 PDT