[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: [Full-disclosure] Social flaws / vulnerabilities in 'Last account activity' on Gmail



On Sat, 20 Sep 2008 21:47:55 BST, AaRoNg11 said:

> If the job was that sensitive of a job, do you really think they'd be using
> gmail to send important information?

Remember - n3td3v is in the British Isles, where clusterfuck IT is rampant in
the government sector.  You know, like "Let's lose the financial details of
*EVERY SINGLE FRIKKING FAMILY IN THE COUNTRY on an UNENCRYPTED DISK".

Oh, why was the disk unencrypted? Because the policy on how to securely
transfer the data was deemed so sensitive that it was only accessible to
upper management - the people *doing* the work didn't have access to the
policy of how to do it right.

Attachment: pgpafHlWU75CA.pgp
Description: PGP signature

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/