- Thread starter rlarino
- Start date
- Status
Big Poppa
Well-known member
Do you guys understand that if forumites access previously intentionally published photos
in directories that we use for confidential internal marketing conversations that I will be forced to discontinue the practice of posting ANY photos.
WE are getting one step closer to Taylor and PRS everyday. Between being openly attacked and now the spying (even if it was easy) I am just about through.
in directories that we use for confidential internal marketing conversations that I will be forced to discontinue the practice of posting ANY photos.
WE are getting one step closer to Taylor and PRS everyday. Between being openly attacked and now the spying (even if it was easy) I am just about through.
fsmith
Well-known member
I don't know what was posted, but I do remember him giving Scott a heads up about something being accessible when it probably shouldn't have been.
To then go back and post it knowing it was probably confidential is unethical and possibly bordering on illegal. Being the IT Security Officer at UMB I would have had his ass on the carpet. I'm going to be really pissed if one or two knuckleheads screw up a great thing.
fred
To then go back and post it knowing it was probably confidential is unethical and possibly bordering on illegal. Being the IT Security Officer at UMB I would have had his ass on the carpet. I'm going to be really pissed if one or two knuckleheads screw up a great thing.
fred
Last edited:
Big Poppa
Well-known member
Ok I think that UVA really means well and Im sorry that this happened. I just look at it like this...Uva says that Chewie told him that it was OK...Chewie said he wasnt asked about unpublished pix..and distribution.. and now I have to pay Chewie to talk to forumites. Should the IT admiin have a responsibility to talk to the customers? I dont think so. I just think that common sense and respect for the information should kick in at some point. I have never had an issue with Chewie...is it fair to either one of us that we have our first over an overzealous forunite?
Look its over and I deleted it before some really ugly things got seen by too many people so can we just take this as a lesson that:
1. If anyone discovers that you can see things thatyou shouldnt please
a. Do not post a public thread on it advertising the breech.
b. send a pm to a moderator and we will send you wonderwips or t shirts
2. Please do not call the admin guy to chat. He is swamped and I already pay about a dozen people to participate here....so I dont want communicating with forumites to be one of his duties
3. If you see something that you shouldnt dont post it even if you think that the admin gave you permission....
4. Respect that we have to have some internal room to work.
Now lets get back to the silo BFR. Yes there will be some at the NAM show as there will be many one offs BFRs in addition to the Jp and LUke ones that are regular productions under the BFR moniker.
Lets all have a nice weekend and live and learn!
Look its over and I deleted it before some really ugly things got seen by too many people so can we just take this as a lesson that:
1. If anyone discovers that you can see things thatyou shouldnt please
a. Do not post a public thread on it advertising the breech.
b. send a pm to a moderator and we will send you wonderwips or t shirts
2. Please do not call the admin guy to chat. He is swamped and I already pay about a dozen people to participate here....so I dont want communicating with forumites to be one of his duties
3. If you see something that you shouldnt dont post it even if you think that the admin gave you permission....
4. Respect that we have to have some internal room to work.
Now lets get back to the silo BFR. Yes there will be some at the NAM show as there will be many one offs BFRs in addition to the Jp and LUke ones that are regular productions under the BFR moniker.
Lets all have a nice weekend and live and learn!
Last edited:
mantrarock
Well-known member
I seriously admire the way you turn something bad in a gain for the forum, like this or the BFR pics issue. Hats off to BP
Chewie
Well-known member
Miscommunication with Uvacom. Uvacom is just another EBMM fanboy and can't blame him for being so. That's fanboy in the good sense.
We have a place for employees to upload pictures so we can share things with you on the forum. It's a photobucket if you will for EBMM employees.
Stuff uploaded was supposed to be public, just pics for the forums. In this case there was something uploaded that wasn't intended to be public. The directories that pictures we're uploaded to were browseable, now they're not.
We have a place for employees to upload pictures so we can share things with you on the forum. It's a photobucket if you will for EBMM employees.
Stuff uploaded was supposed to be public, just pics for the forums. In this case there was something uploaded that wasn't intended to be public. The directories that pictures we're uploaded to were browseable, now they're not.
beej
Moderator
Good catch then. I've mistakenly done that in Apache a bunch of times and left directories viewable ... it happens to everyone 
morsecode
Well-known member
Very good post BP.
Such is the nature and risks with modern communications (i.e. the internet). Everyone just needs to use some common sense and respect the sensitivity of the info they may find they have at hand.
Where I work privacy and protection of sensitive internal information is first and foremost with the organization I work for.
Such is the nature and risks with modern communications (i.e. the internet). Everyone just needs to use some common sense and respect the sensitivity of the info they may find they have at hand.
Where I work privacy and protection of sensitive internal information is first and foremost with the organization I work for.
Colin
Well-known member
Oh No! I hope they weren't the naked pics of me smeared in Vegemite that I sent to Sterling?
BP - I apologize for blowing the lid off of this one. I meant no harm to your company.
However, anybody who thinks those photos were private (whether they were intended to be or not) is mistaken. They were in a public directory, I didn't have to bypass any sort of security to reach them and in fact I warned the admin when I noticed the directory was public, and I did send another message to chewie about unpublished photos to which I did not receive a reply. I waited a couple days, and decided ebmm didn't mind either way since nobody was discouraging me from looking that area of the webspace and/or making others aware of it's existence. There is absolutely nothing illegal about what I did, and whether those photos were intended to be confidential, their location made them anything but - "public" is not an ambiguous term when it comes to network access privileges. I'm truly sorry that this upset BP, but I do feel irked about people talking about ethical issues, and I think it was a mistake to put anything confidential in a public directory, because it can and eventually will be accessed by anybody who feels like looking.
Again, the message I want to convey is that I'm sorry - I did not mean any harm. We all know a little more about security than we did before, and hopefully we can take that away from this minor debacle instead of anything negative.
*Edit - I just saw Chewie's post - thanks. I don't mean to point the finger at you for this, if I had told you that I intended to post pics from those directories the response probably would have been different. Tbh the thought hadn't crossed my mind until we had already exchanged messages, and by that time I thought I knew what the "official" position was. If I sound a little hot about this, it's just the perception that I was snooping or something - to the layperson doing what I did might seem like that, but it really was as simple as right clicking one of the bfr pics, pasting the link into my browser, and deleting the name of the file.
However, anybody who thinks those photos were private (whether they were intended to be or not) is mistaken. They were in a public directory, I didn't have to bypass any sort of security to reach them and in fact I warned the admin when I noticed the directory was public, and I did send another message to chewie about unpublished photos to which I did not receive a reply. I waited a couple days, and decided ebmm didn't mind either way since nobody was discouraging me from looking that area of the webspace and/or making others aware of it's existence. There is absolutely nothing illegal about what I did, and whether those photos were intended to be confidential, their location made them anything but - "public" is not an ambiguous term when it comes to network access privileges. I'm truly sorry that this upset BP, but I do feel irked about people talking about ethical issues, and I think it was a mistake to put anything confidential in a public directory, because it can and eventually will be accessed by anybody who feels like looking.
Again, the message I want to convey is that I'm sorry - I did not mean any harm. We all know a little more about security than we did before, and hopefully we can take that away from this minor debacle instead of anything negative.
*Edit - I just saw Chewie's post - thanks. I don't mean to point the finger at you for this, if I had told you that I intended to post pics from those directories the response probably would have been different. Tbh the thought hadn't crossed my mind until we had already exchanged messages, and by that time I thought I knew what the "official" position was. If I sound a little hot about this, it's just the perception that I was snooping or something - to the layperson doing what I did might seem like that, but it really was as simple as right clicking one of the bfr pics, pasting the link into my browser, and deleting the name of the file.
Last edited:
Big Poppa
Well-known member
now you tell people who may not know how how to do it.
You cannot believe that what you posted was publc.....
If we took a few days to get to it...maybe we are busy.....your posts made us drop everything to fix it. You had to know that it was at least greyotherwise why the calls to admin and the thread?
LEts have some fun now and .......
Lets move on.....
You cannot believe that what you posted was publc.....
If we took a few days to get to it...maybe we are busy.....your posts made us drop everything to fix it. You had to know that it was at least greyotherwise why the calls to admin and the thread?
LEts have some fun now and .......
Lets move on.....
Last edited:
- Status
