RE: [Full-Disclosure] Emailing SSN info

From: Hunter, Laura E. (hunter_at_sfs.upenn.edu)
Date: 03/18/04

  • Next message: Nick FitzGerald: "RE: [inbox] [Full-Disclosure] malware added in transit" 
    To: full-disclosure@lists.netsys.com
Date: Thu, 18 Mar 2004 17:37:59 -0500

    > Now they want to know if there are any laws pertaining to the emailing of
    SSN info.

    Answer this question with the phrase "I recommend you consult the school
    board counsel's office", since you're no more qualified to authoritatively
    answer this question than an attorney would be qualified to answer a
    question about <insert name of OS> installation/administration on -your-
    behalf.

    Any question that involves legal obligation is one that I will almost
    immediately shunt to counsel, since it's just too tricky/dangerous to be
    wrong.

    Laura

    _______________________________________________
    Full-Disclosure - We believe in it.
    Charter: http://lists.netsys.com/full-disclosure-charter.html

  • Next message: Nick FitzGerald: "RE: [inbox] [Full-Disclosure] malware added in transit"

    Relevant Pages

    • Re: Password Policy best Practice...
      ... I recommend that you use pass phrases instead of passwords. ... There is a limitation in Windows that up to 15 characters the password can be extracted from the database. ... I can argue that a 15+ position pass phrase is unbreakable, especially if you institute a lock out policy, but changing it on a regular schedule is still a good idea. ...
      (microsoft.public.windows.server.sbs)
    • Re: Password Policy best Practice...
      ... I concur with Larry and even backed by a Microsoft document..lol ... I recommend that you use pass phrases instead of passwords. ... I use the "same" pass phrase on every server that I administer. ... Company + Location + 8 weird characters. ...
      (microsoft.public.windows.server.sbs)
    • Re: Can you help with a rather short translation, but into as many languages as possible?
      ... Swedish   ... recommend that you try to participate in that project yet, ... many different languages as possible. ... post the phrase and in what language it is in. ...
      (sci.lang.translation)
    • Re: Password Policy best Practice...
      ... I agree completely with Larry except that I also recommend intentional missspells and char substitutions. ... There is a limitation in Windows that up to 15 characters the password can be extracted from the database. ... I can argue that a 15+ position pass phrase is unbreakable, especially if you institute a lock out policy, but changing it on a regular schedule is still a good idea. ...
      (microsoft.public.windows.server.sbs)
    • Re: [opensuse] umask
      ... recommend you Google the phrase "umask and nfs". ...
      (SuSE)