Advice requested

Tue May 29 18:18:05 UTC 2007

Matthew Black wrote:
>
> What would you do if a major US computer security firm
> attempted to hack your site's servers and networks?
> Would you tell the company or let their experts figure
> it out?
>
> matthew black
> network services
> california state university, long beach
>
What happened to me one time was that one of my hosting customers hired
a firm to do a security check on their website.  This company ran a
whole battery of penetration tests against the server.  The bad news is
that the customer never told us this was going to happen.  The good news
was that we detected the "attack" and blackholed the tester's IP
address. :-)  We passed with flying colors.

Better check with your management to make sure that they haven't
authorized something.

Roy