I must somewhat disagree with my esteemed colleague's opinion. While, yes, I would say there would be some no small satisfaction in 'throwing egg in the face' of a former employer, I feel he was acting in the greater good of advising these customers of a viable security flaw within a system. The fact that Tornado did nothing to correct this flaw A YEAR AFTER IT WAS REVEALED TO THEM tells me they could have cared less about their customer's safety IRT their electronic mediums.

A system administrators duty may well be first to those who employ him, but also to those whose trust that he/she will do their utmost in protecting their interests as well. I applaud Mr. McDaniel's efforts and wish him luck in his endeavors.

[ reply ]

Link to this comment: http://www.securityfocus.com/comments/articles/6643/21531#21531