Re: Interesting discussion on ServerFault regarding an idiotic auditor ...

I don't know, but the poster sure thought the guy was being serious.
Serious enough that the company lost a customer to PayPal.

--
Mike Wills
http://mikewills.me



On Wed, Jul 27, 2011 at 9:20 PM, Douglas Handy <[email protected]> wrote:
> Jim,
>
> I would think that kind of request is a hacker seeing how stupid a securi=
ty
>> manager can be..
>>
>
> It is either that, or an attempt to determine if the security manager can=
 be
> "socially engineered" and persuaded to give up information he shouldn't. =
=A0It
> at least has a small chance of really being part of what they are testing.
>
> But I give it much higher chances of being a hacker, and not really even
> from the alleged audit firm.
>
> I give it a near zero chance of being a serious auditor who is serious ab=
out
> requesting the information. =A0What probably troubles me the most is this
> security manager would even consider trying to fake some data to hand ove=
r,
> instead of steadfastly refusing to comply and informing higher ups and the
> legal beagles.
>
> Doug
> _______________________________________________
> This is the Security Administration on the AS400 / iSeries (Security400) =
mailing list
> To post a message email: Security400-Zwy7GipZuJhWk0Htik3J/[email protected]
> To subscribe, unsubscribe, or change list options,
> visit: http://lists.midrange.com/mailman/listinfo/security400
> or email: Security400-request-Zwy7GipZuJhWk0Htik3J/[email protected]
> Before posting, please take a moment to review the archives
> at http://archive.midrange.com/security400.
>
>
_______________________________________________
This is the Security Administration on the AS400 / iSeries (Security400) ma=
iling list
To post a message email: Security400-Zwy7GipZuJhWk0Htik3J/[email protected]
To subscribe, unsubscribe, or change list options,
visit: http://lists.midrange.com/mailman/listinfo/security400
or email: Security400-request-Zwy7GipZuJhWk0Htik3J/[email protected]
Before posting, please take a moment to review the archives
at http://archive.midrange.com/security400.