Re: "Selling" a code-audit and politics

Atom 'Smasher' <[email protected]> Sun, 26 Sep 2004 17:41:05 -0400 (EDT)
Newsgroups gmane.comp.security.programming
Message-ID <20040926153206.O94659@willy_wonka>
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

On Thu, 23 Sep 2004, Richard Rager wrote:

>  Well the contractor is mad at us because I point out a problem they 
> caused.  The client stop using the palms computers.  It was a pet 
> project of the CEO and the IT staff did not have the resources or skills 
> to fix all the problems.  CFO said they did not have the money to fix to 
> problems.  So I scare the hell out of them.  They removed the contractor 
> and us.  So every one is mad at us.  We can not go directly to the 
> client because of contracts.  So that is the way the cookies crumbles.
==============

IANAL. TINLA.

if you are aware of a violation of law (HIPAA, in this case) then you may 
be legally required to report that violation to proper authorities (who 
enforces HIPAA?). talk to a lawyer.

DO NOT mention your intent to report the violation to the contractor that 
hired you; even with the best of intentions (to have the problem solved) 
it is likely to be misinterpreted as a threat or blackmail. simply report 
it to the appropriate authorities. if you are an employee you may be 
legally protected as a whistle-blower. talk to a lawyer.


         ...atom

  _________________________________________
  PGP key - http://atom.smasher.org/pgp.txt
  762A 3B98 A3C3 96C9 C6B7 582A B88D 52E4 D9F5 7808
  -------------------------------------------------

 	"Take sides. Neutrality helps the oppressor, never the victim.
 	 Silence encourages the tormentor, never the tormented."
 		-- Elie Wiesel
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.3.6 (FreeBSD)
Comment: What is this gibberish?
Comment: http://atom.smasher.org/links/#digital_signatures

iQEcBAEBCAAGBQJBVzd3AAoJEAx/d+cTpVciVdIIAJ7r0TNXkDACizRX8DZCMci1
ZSxK6ZJWIyjPiODfDSYCHe3iL6rB14lQ4x1ATNCq7wJwXtgP+In8yF6yWtw63pJ7
Eeicn7TJ+hkm5Q3On+WPpOzKNo+r1IBPOm/cIB3NVJh4Znonfnd8FzFUyZBjmm36
XUh6SRM5f2cuPo5enaokq6x2X7QOkZkXxKmqFybddS4drxs/ZEN3nQTRGVQrq5dl
bHFeojVvvGT8GarXDhGAtpyP+MZEiV2VPMcmvlnWbkZt0r40gcEwyPLLdICLJhVl
/QF5h5Vgnur0tKoankV+eA8Xl/wdnDGwUKjus+JsejrRhLVKU58yJ8qooLBzQl8=
=8o3E
-----END PGP SIGNATURE-----