>> I know for sure that I could install a keylogger on my colleagues 
>> computer
>> and get his password.  Does that mean that I should be allowed to do it
>> without permission from the system owners and send the results to my
>> friends, "for the sake of improving security"?  Absolutely no way, not in 
>> a
>> million years.
>
>  And exactly what are you doing to prevent some malicious person from
> doing so? Are you simply taking a "not my problem" stance?

Pretty much, yes, IT know the risk of the above and they have decided it's 
not worth doing anything extra, like putting bars on the windows, CCTV in 
all the offices, or reformatting the hard discs every night.  If I came 
across another security hole I didn't think they were aware of, of course I 
would inform them about it.

Like when someone nearly got their laptop stolen and I kept on about getting 
them all encrypted.  I didn't go and actually steal someones laptop then 
email confidential data to IT, I just informed them about the hole.  Now 
it's fixed and I didn't need to do anything illegal.

Post a reply to this message