How do I give our security auditor the information he wants? (2011)

Re:How do I give our security auditor the information he wan... by gtf21 on Tuesday September 06, 2016 @04:21AM (#12434389)

This looks more like a phishing scam than a security audit. Anyone asking for things like plain-text passwords sounds a bit fishy to me.

[ Parent | on HN ]

Re:How do I give our security auditor the information he wan... by richman777 on Wednesday September 07, 2016 @12:17AM (#12440936)

Almost all security audits in an enterprise/corporate setting are done in good faith. This is a person they hired and I'm assuming have spoken on the phone with so it's not unsolicited.

Trust me, I've had similar things happen. I don't know how there can be security auditors who don't even understand how password encryption works but I've had to explain it a few times. It's awful.

[ Parent | on HN ]