[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: [Full-Disclosure] Need help in performing a remote vulnerability scan



On Wed, 25 Feb 2004 23:01:42 EST, Byron Copeland said:
> Sure...
> 
> I'd send them all a CD with an autorun file on it that would install any
> agent that you desired.

Make note of which remote sites do it without calling you on the phone and
verifying *all* of the following:

1) That you're the one who sent the CD
2) That HQ hired you as a security consultant
3) That HQ has already verified both 1 *and* 2.

Any sites that don't do that, tell HQ to have a chat with them about "social
engineering"....

Attachment: pgp00092.pgp
Description: PGP signature