[LINK] [PRIVACY] SMH: Federal Commissioner and First State Super

[Stephen Wilson]

Actually I read FSS's letter in a less cynical way.  It looks like a 
good result all round.  I accept the rationale that to have not called 
the police to assess independently what had gone on, would have put 
customers and the company at risk.  If the consultant was inconvenienced 
by the police investigation, it's got more to do with the over-the-top 
way in which he demonstrated the vulnerability at the expense of 
hundreds of other customers. I would have written the script and then 
offered to run it in front of FSS officers, on their premises.

Cheers,

Steve Wilson
Lockstep
http://lockstep.com.au


On 20/10/2011 12:15 PM, Tom Koltai wrote:
> I just love the following Para: Quote/ First State Super appreciates 
> that the actions of the person involved has allowed us to address an 
> undetected weakness in our online security. Subject to his compliance 
> and cooperation in ensuring that the unauthorised statements he 
> downloaded have been destroyed, we have no intention of taking any 
> other action against him. /Quote Carrot and Shtick. In other words, 
> after making his life hell, because the Police are not following 
> through with criminal charges... They are unable to do anything else 
> to punish him for showing up their weaknesses. I expect this episode 
> will ensure that crowd sourced voluntary security advisory by the 
> public is pretty much out the window. The public are learning that it 
> doesn't pay to help. Biting the hands of your customers did not prove 
> to be a positive commercial success for the music biz. I wonder when 
> the Class Action will be filed ? TomK 
> _______________________________________________ Link mailing list 
> Link at mailman.anu.edu.au http://mailman.anu.edu.au/mailman/listinfo/link