Re: Pen Test mistake

From: Gary Flynn (flynngn@jmu.edu)
Date: Thu Aug 21 2003 - 19:02:37 EDT


I think there is definitely some risk here so consulting
with an attorney familiar with cyber law would be a good
idea.

However, consider this:

1) You've performed a free security audit for them. Some organizations
    might be grateful.

2) If you don't contact them and an audit or review of their logs
    discovers your entry at a later date its going to look worse.

-- 
Gary Flynn
Security Engineer - Technical Services
James Madison University
Please R.U.N.S.A.F.E.
http://www.jmu.edu/computing/runsafe
---------------------------------------------------------------------------
Attend Black Hat Briefings & Training Federal, September 29-30 (Training), October 1-2 (Briefings) in Tysons Corner, VA; the world<92>s premier 
technical IT security event.  Modeled after the famous Black Hat event in 
Las Vegas! 6 tracks, 12 training sessions, top speakers and sponsors.  
Symanetc is the Diamond sponsor.  Early-bird registration ends September 6 Visit: www.blackhat.com
----------------------------------------------------------------------------


This archive was generated by hypermail 2.1.7 : Sat Apr 12 2008 - 10:53:38 EDT