Comments on: Note to Fannie Mae: Dealing with Logic Bombs http://nofud.org/2009/01/31/note-to-fannie-mae-dealing-with-logic-bombs/ Information security analysis by Akshay Aggarwal Wed, 23 Feb 2011 20:46:58 +0000 hourly 1 http://wordpress.com/ By: Lewis http://nofud.org/2009/01/31/note-to-fannie-mae-dealing-with-logic-bombs/#comment-72 Fri, 27 Feb 2009 06:57:46 +0000 http://nofud.wordpress.com/2009/01/31/note-to-fannie-mae-dealing-with-logic-bombs/#comment-72 infosec…

Maybe, but I’m not sure it’for everyone….

]]> By: akshay aggarwal http://nofud.org/2009/01/31/note-to-fannie-mae-dealing-with-logic-bombs/#comment-65 Wed, 04 Feb 2009 06:00:59 +0000 http://nofud.wordpress.com/2009/01/31/note-to-fannie-mae-dealing-with-logic-bombs/#comment-65 Good point Kevin. I agree that changing admin passwords is the right way to go.
On another note, I have recently come across an instance where the employee did not destroy data but rather started leaking data via a logic bomb.

]]> By: Kevin Marquette http://nofud.org/2009/01/31/note-to-fannie-mae-dealing-with-logic-bombs/#comment-64 Tue, 03 Feb 2009 20:44:21 +0000 http://nofud.wordpress.com/2009/01/31/note-to-fannie-mae-dealing-with-logic-bombs/#comment-64 Change access credentials to critical systems if they had access to them. If you disable their account but they happen to have the local admin password on the servers they can still do a lot of damage.

I would even go as far as to say that if you are a system administrator and leave for whatever reason you should make your employeer change the passwords on all systems you know. That removes alot of liability off of your sholders if they get hacked later.

]]> By: Allen Taylor http://nofud.org/2009/01/31/note-to-fannie-mae-dealing-with-logic-bombs/#comment-63 Sat, 31 Jan 2009 18:31:18 +0000 http://nofud.wordpress.com/2009/01/31/note-to-fannie-mae-dealing-with-logic-bombs/#comment-63 Nice writing. You are on my RSS reader now so I can read more from you down the road.

Allen Taylor

]]>