Re: FWD: Real world ethical questions

Subject: Re: FWD: Real world ethical questions
From: "Mike O." <obie1121 -at- yahoo -dot- com>
To: "TECHWR-L" <techwr-l -at- lists -dot- raycomm -dot- com>
Date: Mon, 14 Apr 2003 08:51:24 -0700 (PDT)


Anonymous wrote:
> the product uses Internet Explorer as the interface. It's easy
> to bypass the system. I documented that, but the product manager
> told me to take it out, not because it wasn't true, but because
> he didn't want people to know it worked that way.

I'd leave it out. It's probably a well-known IE vulnerability and if
it's important, your customers will bring it to your manager's
attention shortly.

It's also possible the system is intended to be deployed with other
security features on the network that you may not even know about that
will prevent the hole from being exploited.

If the security problem is fixed by a future patch to IE you will have
fallen on your sword in vain.

Security by obscurity is not a best practice, but if that's what your
boss wants, that's what you should give them.

Mike O.


__________________________________________________
Do you Yahoo!?
Yahoo! Tax Center - File online, calculators, forms, and more
http://tax.yahoo.com

^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
Purchase RoboHelp X3 in April and receive a $100 mail-in
rebate, plus FREE RoboScreenCapture and WebHelp Merge Module.
Order here: http://www.ehelp.com/techwr-l/


Help celebrate TECHWR-L's 10th Anniversary starting this month!
Check out the contests at http://www.raycomm.com/techwhirl/special/contests/
Happy birthday to you, happy birthday to you, happy birthday TECHWR-L....

---
You are currently subscribed to techwr-l as:
archive -at- raycomm -dot- com
To unsubscribe send a blank email to leave-techwr-l-obscured -at- lists -dot- raycomm -dot- com
Send administrative questions to ejray -at- raycomm -dot- com -dot- Visit
http://www.raycomm.com/techwhirl/ for more resources and info.



Previous by Author: Re: Who cares about ethics? (regulatory body)
Next by Author: Re: Tech writer/ Documentation Specialist
Previous by Thread: Re: FWD: Real world ethical questions
Next by Thread: RE: Real world ethical questions


What this post helpful? Share it with friends and colleagues:


Sponsored Ads