[1549] in Privacy_Forum
[ PRIVACY Forum ] Customers angry at RSA over delay in admitting
daemon@ATHENA.MIT.EDU (privacy@vortex.com)
Wed Jun 8 19:06:46 2011
Date: Wed, 8 Jun 2011 15:37:51 -0700
To: privacy-list@vortex.com
Message-ID: <20110608223751.GB19315@vortex.com>
MIME-Version: 1.0
Content-Disposition: inline
From: privacy@vortex.com
Reply-To: PRIVACY Forum mailing list <privacy@vortex.com>
Content-Type: text/plain; charset="iso-8859-1"
Errors-To: privacy-bounces+privacy-forum=mit.edu@vortex.com
Content-Transfer-Encoding: 8bit
Customers angry at RSA over delay in admitting depth of breach
http://j.mp/j2IwKk (This message in Google Buzz)
- - -
http://j.mp/jlNAhg (New York Times)
"For now, however, the biggest worry for RSA is how to appease angry
customers as well as mollify computer security consultants, who have
been increasingly critical of how long it took the company to
acknowledge the severity of the problem."
- - -
Just a quick opinion: Once a firm has a reasonable handle on the depth
of a security problem that will affect customers, it is in both the
company's and the customers' best interests for the firm to "come
clean" at least regarding the seriousness of the situation, even if
all technical details are not yet available or in a form that can be
reasonably communicated with customers.
It is crucial that users understand to what extent they may have been
made vulnerable, so that they can take appropriate protective steps
themselves at least in the short run.
Most of all, trying to publicly minimize the seriousness of a
situation below the level you know to be true, or lying about how
serious matters really are, can be counted upon to make a bad
situation worse.
This applies pretty much equally in technology and in the rest of our
lives (just ask Rep. Anthony Weiner).
--Lauren--
Lauren Weinstein (lauren@vortex.com): http://www.vortex.com/lauren
Co-Founder: People For Internet Responsibility: http://www.pfir.org
Founder:
- Network Neutrality Squad: http://www.nnsquad.org
- Global Coalition for Transparent Internet Performance: http://www.gctip.org
- PRIVACY Forum: http://www.vortex.com
Member: ACM Committee on Computers and Public Policy
Blog: http://lauren.vortex.com
Twitter: https://twitter.com/laurenweinstein
Google Buzz: http://j.mp/laurenbuzz
Tel: +1 (818) 225-2800 / Skype: vortex.com
_______________________________________________
privacy mailing list
http://lists.vortex.com/mailman/listinfo/privacy
