Ethical Hacking

Learn to find vulnerabilities before the bad guys do! Gain real world hands on hacking experience in our state of the art hacking lab. Course designed and taught by expert instructors with years of penetration testing experience. 12 student maximum in every class. Certification attempt included in every package.
Computer Forensics Training at InfoSec Institute

Gain the in-demand skills of a certified computer examiner, learn to recover trace data left behind by fraud, theft, and cybercrime perpetrators. Discover the source of computer crime and abuse at your organization so that it never happens again. All of our class sizes are guaranteed to be 12 students or less to facilitate one-on-one interaction with one of our expert instructors.




Network Security FullDisclosure
[Top] [All Lists]

Re: [Full-Disclosure] This sums up Yahoo!s security policy to a -T-

Subject: Re: [Full-Disclosure] This sums up Yahoo!s security policy to a -T-
Date: Fri, 24 Dec 2004 09:40:51 -0600

Exibar wrote on 12/23/2004 09:36:40 AM:

I applaud Yahoo for adhearing to their policies.  All the familly has to 
do
is send legal documents of their son's death, and legal documents 
stating
who they are.  At that point I'm sure the account information will be
released as per Yahoo's policy.

  Instead of trying to get the media involved, they should be getting 
their
laywer involved as the clock's ticking on the 90 no-activity delete. 
Their
lawyer will know the correct documents to send over to yahoo as proof of
their son's death and that his parents have control over their dead 
son's
belongings/estate.

  Perhaps what yahoo *could* do, or *should* do, is remove the 90 day
time-out on their son's e-mail account until they can have a chance of 
going
through the courts.  Perhaps extend it up to 365 days...

  Exibar

We're goint to disagree here...

His parents have no right to access his mail account, period. It's not 
theirs, and unless he stated in a will or prior release that these 
electronic records should be released...and to whom...they should vanish 
when his account does. 

These are not memoirs or a diary, or a bundle of written letters which 
could be argued was knowingly left behind with a high probability of 
discovery.  These are electronic records deposited with a trusted entity 
with the expectation of safekeeping and privacy.

Yahoo "should" violate their own policies in order to facilitate releasing 
this email into the hands of people who are not owners of those records? I 
think not. 


----- Original Message ----- 
From: "morning_wood" <se_cur_ity@hotmail.com>
To: <full-disclosure@lists.netsys.com>
Sent: Wednesday, December 22, 2004 8:59 PM
Subject: Re: [Full-Disclosure] This sums up Yahoo!s security policy to a 
-T-


If their refusal to release that mail even after their customer is 
dead
is
an indication as to their privacy practices, three cheers for Yahoo.

Don't you get the whole "slippery slope" thing?  If it's ok when 
you're
dead (which it's not, my stuff is my stuff...destroy it when you're 
sure
I've really shuffled off elsewhere, unless I gave you very specific
instructions otherwise) then maybe it's ok if you are in a 
coma...then
maybe it's ok if you are really sick and someone else is your legal
guardian becaue you've been declared non-compos mentis...then maybe 
it's
ok if it's your parents...or your wife...or a concerned neighbor...

What's in that mailbox is/was mine, none of your business unless I 
chose
to share it.

i couldnt agree more... another case of lame, illogical media bullshit
BRAVO YAHOO

happy hollidays,

m.w
_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.netsys.com/full-disclosure-charter.html



_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.netsys.com/full-disclosure-charter.html


CONFIDENTIALITY NOTICE: 
This is a transmission from Kohl's Department Stores, Inc.
and may contain information which is confidential and proprietary.
If you are not the addressee, any disclosure, copying or distribution or use of 
the contents of this message is expressly prohibited.
If you have received this transmission in error, please destroy it and notify 
us immediately at 262-703-7000.

CAUTION:
Internet and e-mail communications are Kohl's property and Kohl's reserves the 
right to retrieve and read any message created, sent and received.  Kohl's 
reserves the right to monitor messages by authorized Kohl's Associates at any 
time
without any further consent.
_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.netsys.com/full-disclosure-charter.html
<Prev in Thread] Current Thread [Next in Thread>