Re: Linked-in and its Phishing-like contacts option!

"Paul D. Robertson" <[email protected]> Fri, 26 Apr 2013 00:35:30 -0400
Newsgroups gmane.comp.security.firewalls.wizards
Message-ID <[email protected]>
--===============1558806779==
Content-Type: multipart/alternative;
	boundary=Apple-Mail-CEFEBD69-BEE6-4258-AEBD-70E58D44953D
Content-Transfer-Encoding: 7bit


--Apple-Mail-CEFEBD69-BEE6-4258-AEBD-70E58D44953D
Content-Type: text/plain;
	charset=utf-8
Content-Transfer-Encoding: quoted-printable

Because the moderator is bored enough to entertain things outside the strict=
 boundaries if there isn't better stuff on the list (hint) and he's feeling l=
ike a particular topic may generate something or he may want to rail on some=
thing or for no particular reason.  There are a multitude of reasons general=
 INFOSEC stuff makes the list- and historically I'm fairly sure I've been co=
nsistently inconsistent on that point.

Paul
--
President and Chairman, FluidIT Group
Moderator, Firewall-Wizards
http://pauldrobertson.net
http://pauldrobertson.com
@compuwar

On Apr 24, 2013, at 15:26, "Gautier . Rich" <[email protected]> wrote:

> Thoughts? I=E2=80=99m wondering why User Operational Security falls under t=
he realm of Firewall Wizards..  Other than that, I=E2=80=99d say =E2=80=93 T=
hey=E2=80=99re not alone by any stretch of the imagination, and plenty of us=
ers seem to be perfectly willing to accept the risk (or be unaware of it).  H=
owever, not much you can do on the firewall side other than turning off webm=
ail access...
> =20
> Richard Gautier, CISSP
> Enterprise Architect, Federal Group
> <image002.png>
> 650 Massachusetts Avenue NW
> Suite 510
> Washington, DC 20001
> Office: (571) 226-8828  |  Cell: (703) 231-2156
> [email protected]  |  www.drc.com
> =20
> From: [email protected] [mailto:firewall-wiza=
[email protected]] On Behalf Of Mathew Want
> Sent: Monday, April 22, 2013 7:30 PM
> To: Firewall Wizards Security Mailing List
> Subject: [fw-wiz] Linked-in and its Phishing-like contacts option!
> =20
> Hiya all.
>=20
> Has anyone else noticed the option to see who else they know is connected o=
n Linked-in? Have you noticed that if you click on the outlook button it ask=
s you for your WORK EMAIL PASSWORD!!!!!
>=20
> Bloody hell! It's not like the job of getting users to not submit this inf=
ormation to other sites isn't already hard enough without this!!! The "can't=
 put brains in pumpkins " department must be having a field day over this.
>=20
> Am I the only one that think this is a touch negligent on the part of Link=
ed-in? Or should I just accept that it is corporate facebook, accepts that t=
hey have the dame moral fibre and move on?
>=20
> Maybe I am expecting too much? Thoughts?
> --
> Regards,
> M@
> --=20
> "Some things are eternal by nature,
> others by consequence"
> This electronic message transmission and any attachments that accompany it=
 contain information from DRC=C2=AE (Dynamics Research Corporation) or its s=
ubsidiaries, or the intended recipient, which is privileged, proprietary, bu=
siness confidential, or otherwise protected from disclosure and is the exclu=
sive property of DRC and/or the intended recipient. The information in this e=
mail is solely intended for the use of the individual or entity that is the i=
ntended recipient. If you are not the intended recipient, any use, dissemina=
tion, distribution, retention, or copying of this communication, attachments=
, or substance is prohibited. If you have received this electronic transmiss=
ion in error, please immediately reply to the author via email that you rece=
ived the message by mistake and also promptly and permanently delete this me=
ssage and all copies of this email and any attachments. We thank you for you=
r assistance and apologize for any inconvenience.
>=20
> _______________________________________________
> firewall-wizards mailing list
> [email protected]
> https://listserv.icsalabs.com/mailman/listinfo/firewall-wizards

--Apple-Mail-CEFEBD69-BEE6-4258-AEBD-70E58D44953D
Content-Type: text/html;
	charset=utf-8
Content-Transfer-Encoding: quoted-printable

<html><head><meta http-equiv=3D"content-type" content=3D"text/html; charset=3D=
utf-8"></head><body dir=3D"auto"><div>Because the moderator is bored enough t=
o entertain things outside the strict boundaries if there isn't better stuff=
 on the list (hint) and he's feeling like a particular topic may generate so=
mething or he may want to rail on something or for no particular reason. &nb=
sp;There are a multitude of reasons general INFOSEC stuff makes the list- an=
d historically I'm fairly sure I've been consistently inconsistent on that p=
oint.<br><br>Paul<br>--<div>President and Chairman, FluidIT Group<div>Modera=
tor, Firewall-Wizards</div><div><a href=3D"http://pauldrobertson.net">http:/=
/pauldrobertson.net</a></div></div><div><a href=3D"http://pauldrobertson.com=
">http://pauldrobertson.com</a></div><div>@compuwar</div></div><div><br>On A=
pr 24, 2013, at 15:26, "Gautier . Rich" &lt;<a href=3D"mailto:[email protected]=
om">[email protected]</a>&gt; wrote:<br><br></div><blockquote type=3D"cite"><=
div>

<meta http-equiv=3D"Content-Type" content=3D"text/html; charset=3Dus-ascii">=

<style>
<!--
@font-face
	{font-family:Calibri}
@font-face
	{font-family:Tahoma}
@font-face
	{font-family:"Trebuchet MS"}
p.MsoNormal, li.MsoNormal, div.MsoNormal
	{margin:0in;
	margin-bottom:.0001pt;
	font-size:12.0pt;
	font-family:"Times New Roman","serif"}
a:link, span.MsoHyperlink
	{color:blue;
	text-decoration:underline}
a:visited, span.MsoHyperlinkFollowed
	{color:purple;
	text-decoration:underline}
span.EmailStyle17
	{font-family:"Calibri","sans-serif";
	color:#1F497D}
.MsoChpDefault
	{font-family:"Calibri","sans-serif"}
@page WordSection1
	{margin:1.0in 1.0in 1.0in 1.0in}
div.WordSection1
	{}
-->
</style>


<div class=3D"WordSection1">
<p class=3D"MsoNormal"><span style=3D"font-size:11.0pt; font-family:&quot;Ca=
libri&quot;,&quot;sans-serif&quot;; color:#1F497D">Thoughts? I=E2=80=99m won=
dering why User Operational Security falls under the realm of Firewall Wizar=
ds..&nbsp; Other than that, I=E2=80=99d say =E2=80=93 They=E2=80=99re not al=
one by any stretch
 of the imagination, and plenty of users seem to be perfectly willing to acc=
ept the risk (or be unaware of it).&nbsp; However, not much you can do on th=
e firewall side other than turning off webmail access...</span></p>
<p class=3D"MsoNormal"><span style=3D"font-size:11.0pt; font-family:&quot;Ca=
libri&quot;,&quot;sans-serif&quot;; color:#1F497D">&nbsp;</span></p>
<p class=3D"MsoNormal"><b><span style=3D"font-size:8.0pt; font-family:&quot;=
Arial&quot;,&quot;sans-serif&quot;; color:navy">Richard Gautier, CISSP</span=
></b><span style=3D"font-family:&quot;Arial&quot;,&quot;sans-serif&quot;; co=
lor:navy">
</span></p>
<p class=3D"MsoNormal"><span style=3D"font-size:8.0pt; font-family:&quot;Ari=
al&quot;,&quot;sans-serif&quot;; color:navy">Enterprise Architect, Federal G=
roup</span><span style=3D"font-size:10.0pt; font-family:&quot;Arial&quot;,&q=
uot;sans-serif&quot;; color:navy"></span></p>
<p class=3D"MsoNormal">&lt;image002.png&gt;<span style=3D"font-size:2.0pt; f=
ont-family:&quot;Arial&quot;,&quot;sans-serif&quot;; color:navy"></span></p>=

<p class=3D"MsoNormal"><span style=3D"font-size:8.0pt; font-family:&quot;Ari=
al&quot;,&quot;sans-serif&quot;; color:navy">650 Massachusetts Avenue NW</sp=
an><span style=3D"font-size:8.0pt; color:#1F497D"></span></p>
<p class=3D"MsoNormal"><span style=3D"font-size:8.0pt; font-family:&quot;Ari=
al&quot;,&quot;sans-serif&quot;; color:navy">Suite 510</span></p>
<p class=3D"MsoNormal"><span style=3D"font-size:8.0pt; font-family:&quot;Ari=
al&quot;,&quot;sans-serif&quot;; color:navy">Washington, DC 20001</span><spa=
n style=3D"font-size:8.0pt; color:#1F497D"></span></p>
<p class=3D"MsoNormal"><span style=3D"font-size:8.0pt; font-family:&quot;Ari=
al&quot;,&quot;sans-serif&quot;; color:navy">Office: (571) 226-8828
</span><span style=3D"font-size:8.0pt; font-family:&quot;Arial&quot;,&quot;s=
ans-serif&quot;; color:#984806">&nbsp;<b>|</b></span><span style=3D"font-siz=
e:8.0pt; font-family:&quot;Arial&quot;,&quot;sans-serif&quot;; color:navy">&=
nbsp; Cell: (703) 231-2156</span></p>
<p class=3D"MsoNormal"><span style=3D"font-size:8.0pt; font-family:&quot;Ari=
al&quot;,&quot;sans-serif&quot;; color:#1F497D"><a href=3D"mailto:rgautier@d=
rc.com"><span style=3D"color:blue">[email protected]</span></a></span><span s=
tyle=3D"font-size:8.0pt; font-family:&quot;Arial&quot;,&quot;sans-serif&quot=
;; color:navy">&nbsp;
</span><b><span style=3D"font-size:8.0pt; font-family:&quot;Trebuchet MS&quo=
t;,&quot;sans-serif&quot;; color:#984806">|</span></b><b><span style=3D"font=
-size:8.0pt; font-family:&quot;Trebuchet MS&quot;,&quot;sans-serif&quot;; co=
lor:black">
</span></b><span style=3D"font-size:8.0pt; font-family:&quot;Arial&quot;,&qu=
ot;sans-serif&quot;; color:black">&nbsp;</span><span style=3D"font-size:11.0=
pt; font-family:&quot;Calibri&quot;,&quot;sans-serif&quot;; color:#1F497D"><=
a href=3D"../../Laura%20Smart/Local%20Settings/Temporary%20Internet%20Files/=
Content.IE5/T1YNUA8E/www.drc.com"><span style=3D"font-size:8.0pt; font-famil=
y:&quot;Arial&quot;,&quot;sans-serif&quot;; color:blue">www.drc.com</span></=
a></span><span style=3D"font-size:8.0pt; font-family:&quot;Arial&quot;,&quot=
;sans-serif&quot;; color:navy">
</span><span style=3D"font-size:8.0pt; font-family:&quot;Arial&quot;,&quot;s=
ans-serif&quot;; color:#1F497D"></span></p>
<p class=3D"MsoNormal"><span style=3D"font-size:11.0pt; font-family:&quot;Ca=
libri&quot;,&quot;sans-serif&quot;; color:#1F497D">&nbsp;</span></p>
<p class=3D"MsoNormal"><b><span style=3D"font-size:10.0pt; font-family:&quot=
;Tahoma&quot;,&quot;sans-serif&quot;">From:</span></b><span style=3D"font-si=
ze:10.0pt; font-family:&quot;Tahoma&quot;,&quot;sans-serif&quot;"> <a href=3D=
"mailto:[email protected]">firewall-wizards-bou=
[email protected]</a> [<a href=3D"mailto:firewall-wizards-bounces@l=
istserv.icsalabs.com">mailto:[email protected]<=
/a>]
<b>On Behalf Of </b>Mathew Want<br>
<b>Sent:</b> Monday, April 22, 2013 7:30 PM<br>
<b>To:</b> Firewall Wizards Security Mailing List<br>
<b>Subject:</b> [fw-wiz] Linked-in and its Phishing-like contacts option!</s=
pan></p>
<p class=3D"MsoNormal">&nbsp;</p>
<div>
<div>
<p class=3D"MsoNormal">Hiya all.</p>
<div>
<div>
<div>
<p class=3D"MsoNormal" style=3D"margin-bottom:12.0pt"><br>
Has anyone else noticed the option to see who else they know is connected on=
 Linked-in? Have you noticed that if you click on the outlook button it asks=
 you for your WORK EMAIL PASSWORD!!!!!</p>
</div>
<p class=3D"MsoNormal" style=3D"margin-bottom:12.0pt">Bloody hell! It's not l=
ike the job of getting users to not submit this information to other sites i=
sn't already hard enough without this!!! The "can't put brains in pumpkins "=
 department must be having a field
 day over this.</p>
</div>
<p class=3D"MsoNormal" style=3D"margin-bottom:12.0pt">Am I the only one that=
 think this is a touch negligent on the part of Linked-in? Or should I just a=
ccept that it is corporate facebook, accepts that they have the dame moral f=
ibre and move on?</p>
</div>
<div>
<p class=3D"MsoNormal">Maybe I am expecting too much? Thoughts?</p>
</div>
<p class=3D"MsoNormal">--</p>
</div>
<p class=3D"MsoNormal">Regards,<br>
M@</p>
<div>
<div>
<p class=3D"MsoNormal">-- <br>
"Some things are eternal by nature,<br>
others by consequence"</p>
</div>
</div>
</div>
</div>
<hr>
<font size=3D"small"></font>
<h5><font color=3D"gray">This electronic message transmission and any attach=
ments that accompany it contain information from DRC=C2=AE (Dynamics Researc=
h Corporation) or its subsidiaries, or the intended recipient, which is priv=
ileged, proprietary, business confidential,
 or otherwise protected from disclosure and is the exclusive property of DRC=
 and/or the intended recipient. The information in this email is solely inte=
nded for the use of the individual or entity that is the intended recipient.=
 If you are not the intended
 recipient, any use, dissemination, distribution, retention, or copying of t=
his communication, attachments, or substance is prohibited. If you have rece=
ived this electronic transmission in error, please immediately reply to the a=
uthor via email that you received
 the message by mistake and also promptly and permanently delete this messag=
e and all copies of this email and any attachments. We thank you for your as=
sistance and apologize for any inconvenience.
</font></h5><font color=3D"gray">
</font>


</div></blockquote><blockquote type=3D"cite"><div><span>____________________=
___________________________</span><br><span>firewall-wizards mailing list</s=
pan><br><span><a href=3D"mailto:[email protected]">fire=
[email protected]</a></span><br><span><a href=3D"https://li=
stserv.icsalabs.com/mailman/listinfo/firewall-wizards">https://listserv.icsa=
labs.com/mailman/listinfo/firewall-wizards</a></span><br></div></blockquote>=
</body></html>=

--Apple-Mail-CEFEBD69-BEE6-4258-AEBD-70E58D44953D--

--===============1558806779==
Content-Type: text/plain; charset="us-ascii"
MIME-Version: 1.0
Content-Transfer-Encoding: 7bit
Content-Disposition: inline

_______________________________________________
firewall-wizards mailing list
[email protected]
https://listserv.icsalabs.com/mailman/listinfo/firewall-wizards

--===============1558806779==--