Comments on: No, that’s never happened to me http://www.mckeay.net/2007/07/30/no-thats-never-happened-to-me/ The views of one man on security, privacy and anything else that catches his attention Sat, 30 Aug 2008 11:04:27 +0000 http://wordpress.org/?v=abc By: Josh http://www.mckeay.net/2007/07/30/no-thats-never-happened-to-me/#comment-942 Josh Tue, 31 Jul 2007 02:50:08 +0000 http://www.mckeay.net/2007/07/30/no-thats-never-happened-to-me/#comment-942 Wow, doesn't the confidentiality imposed on us security professionals suck? I have so many good stories. The one I can tell was from ten years ago when I was offshoring some programing to an Isreali company. My name's Josh, and apparently so was their lawyer's. I accidentally got cc'ed on an email from the CEO of this company to a VP that basically said, "We meet with the client to get signoff on the second milestone (which includes 1/3 of the payment.) We haven't begun programming yet. What can we tell him that will sound good and won't be technically a lie?" Since then my policy has always been, "if your life would suck if it got sent to everyone in the world, don't put it in an email." Wow, doesn’t the confidentiality imposed on us security professionals suck? I have so many good stories. The one I can tell was from ten years ago when I was offshoring some programing to an Isreali company. My name’s Josh, and apparently so was their lawyer’s. I accidentally got cc’ed on an email from the CEO of this company to a VP that basically said, “We meet with the client to get signoff on the second milestone (which includes 1/3 of the payment.) We haven’t begun programming yet. What can we tell him that will sound good and won’t be technically a lie?”

Since then my policy has always been, “if your life would suck if it got sent to everyone in the world, don’t put it in an email.”

]]>