Re: [Full-disclosure] Need some help with management

2008-05-25 Thread Elazar Broad
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Yup, CCEs and default configurations/passwords are definitely quite common. The folks over at gnucitizen have been hitting on this for some time with their work on the bt home hub... Elazar On Fri, 23 May 2008 12:16:45 -0400 Paul Schmehl <[EMAIL PROT

Re: [Full-disclosure] Need some help with management

2008-05-23 Thread Paul Schmehl
--On Friday, May 23, 2008 11:56:15 -0400 Elazar Broad <[EMAIL PROTECTED]> wrote: > -BEGIN PGP SIGNED MESSAGE- > Hash: SHA1 > > Its not even funny how often this happens. I have a friend who does > some consulting work for small businesses, and the amount of times > that he has come across

Re: [Full-disclosure] Need some help with management

2008-05-23 Thread Elazar Broad
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Its not even funny how often this happens. I have a friend who does some consulting work for small businesses, and the amount of times that he has come across medical practices that run their billing and record keeping software on the same "fully-loade

Re: [Full-disclosure] Need some help with management

2008-05-23 Thread Paul Schmehl
--On Thursday, May 22, 2008 20:45:06 -0700 coderman <[EMAIL PROTECTED]> wrote: > On Thu, May 22, 2008 at 9:51 AM, Daniel Sichel <[EMAIL PROTECTED]> > wrote: >> My management here wants to put a server on our LAN, not administered by us >> ... > > all of the responses to this are retarded. > > tell

Re: [Full-disclosure] Need some help with management

2008-05-23 Thread Marcus Graf
Hi Izaac, >> it's not documented anywhere. So, please help me explain why >> netbios and file shares on machines not within your network are bad >> ideas. > > This situation is ultimately and entirely your fault. > > You, i.e. your IT department, has failed to provide the services and > resourc

Re: [Full-disclosure] Need some help with management

2008-05-23 Thread Castigliola, Angelo
] From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Daniel Sichel Sent: Thursday, May 22, 2008 12:51 PM To: full-disclosure@lists.grok.org.uk Subject: [Full-disclosure] Need some help with management My management here wants to put a server on our LAN, not administered by

Re: [Full-disclosure] Need some help with management

2008-05-23 Thread Izaac
On Thu, May 22, 2008 at 09:51:01AM -0700, Daniel Sichel wrote: > it's not documented anywhere. So, please help me explain why netbios and > file shares on machines not within your network are bad ideas. This situation is ultimately and entirely your fault. You, i.e. your IT department, has failed

Re: [Full-disclosure] Need some help with management

2008-05-23 Thread Jesse Bacon
;liability argument. Managers understand liability and the bottom line. >- - Original Message - >From: Daniel Sichel >To: full-disclosure@lists.grok.org.uk >Sent: Thursday, May 22, 2008 12:51 PM >Subject: [Full-disclosure] Need some help with management >My management

Re: [Full-disclosure] Need some help with management

2008-05-22 Thread Tremaine Lea
Hi Daniel, There are a great many reasons why this is a bad idea, and I'm sure you actually know most of them. If your management isn't buying the rationale behind not allowing untrusted systems on the network, my suggestion would be to put them on the spot and ask them to absolve you, and your t

Re: [Full-disclosure] Need some help with management

2008-05-22 Thread coderman
On Thu, May 22, 2008 at 9:51 AM, Daniel Sichel <[EMAIL PROTECTED]> wrote: > My management here wants to put a server on our LAN, not administered by us > ... all of the responses to this are retarded. tell him to setup a server. dare him. double dog dare! when it pings, load it full of goatse.c

Re: [Full-disclosure] Need some help with management

2008-05-22 Thread Garrett M. Groff
ssage - From: Daniel Sichel To: full-disclosure@lists.grok.org.uk Sent: Thursday, May 22, 2008 12:51 PM Subject: [Full-disclosure] Need some help with management My management here wants to put a server on our LAN, not administered by us (the IT department) and use a share on it to serve file

Re: [Full-disclosure] Need some help with management

2008-05-22 Thread Kurt Dillard
] [mailto:[EMAIL PROTECTED] On Behalf Of Paul Schmehl Sent: Thursday, May 22, 2008 2:25 PM To: full-disclosure@lists.grok.org.uk Subject: Re: [Full-disclosure] Need some help with management --On Thursday, May 22, 2008 09:51:01 -0700 Daniel Sichel <[EMAIL PROTECTED]> wrote: > > > M

Re: [Full-disclosure] Need some help with management

2008-05-22 Thread Paul Schmehl
--On Thursday, May 22, 2008 09:51:01 -0700 Daniel Sichel <[EMAIL PROTECTED]> wrote: > > > My management here wants to put a server on our LAN, not administered by us > (the IT department) and use a share on it to serve files and data to our > workstations. They do not understand why having a ser

Re: [Full-disclosure] Need some help with management

2008-05-22 Thread Hoss Cartwright
adam, hoss and lil joe (and ben) say yeeha! lets pown your ponderosa! ;) ___ Full-Disclosure - We believe in it. Charter: http://lists.grok.org.uk/full-disclosure-charter.html Hosted and sponsored by Secunia - http://secunia.com/

Re: [Full-disclosure] Need some help with management

2008-05-22 Thread Valdis . Kletnieks
On Thu, 22 May 2008 09:51:01 PDT, Daniel Sichel said: > bad idea to drive on the left hand side of the road. It's just so basic > it's not documented anywhere. So, please help me explain why netbios and > file shares on machines not within your network are bad ideas. Ask him if he issues building

[Full-disclosure] Need some help with management

2008-05-22 Thread Daniel Sichel
My management here wants to put a server on our LAN, not administered by us (the IT department) and use a share on it to serve files and data to our workstations. They do not understand why having a server with a file share that is NOT part of our secure infrastructure represents a threat to the c