[10537] in bugtraq
Re: Sun Microsystems Leaks extensive Amounts of Information About
daemon@ATHENA.MIT.EDU (Alan Coopersmith)
Thu May 13 18:06:56 1999
Mime-Version: 1.0
Content-Type: text/plain; charset=US-ASCII
Content-Transfer-Encoding: 7bit
Message-Id: <199905121656.JAA09353@godzilla.EECS.Berkeley.EDU>
Date: Wed, 12 May 1999 09:56:00 -0700
Reply-To: Alan Coopersmith <alanc@GODZILLA.EECS.BERKELEY.EDU>
From: Alan Coopersmith <alanc@GODZILLA.EECS.BERKELEY.EDU>
X-To: RobsonK@EBRD.COM
To: BUGTRAQ@NETSPACE.ORG
In-Reply-To: <B8DF496810E5D211B23F00805FA7CEBA9EA061@ldn1exm2.ebrd.com> from
"Robson, Ken" at "May 11, 1999 07:22:59 pm"
> When logging a support call I do not often consider what might happen to the
> call notes. I am sure that Sun are not the only company doing this and this
> is not aimed at Sun in particular, they are just an example. Serious
> consideration should be given to what information you are prepared to pass
> to those who support you - do you trust the rest of their customers (at
> best) or the entire internet (at worst).
The actual service order notes are not available to customers through SunSolve
- but parts of bug reports that may be generated by them are. At least a few
years ago when I worked in SunService they reminded us not to put customer
information in the public part of bug reports, but there was no review system
to make sure we didn't screw up. If you want to protect yourself, make sure
that if your call results in a bug report you go to SunSolve and review the
public copy to make sure there's nothing in there you wouldn't want others to
see and if there is, call up your service rep and make them move it to the
sun-internal-access-only section of the bug report.
Disclaimer: I no longer work in Tech Support at Sun and do not and cannot
speak for SunService or whatever they're called after the latest "realignment
of the Sun planets".
--
________________________________________________________________________
Alan Coopersmith alanc@godzilla.EECS.Berkeley.EDU
Univ. of California at Berkeley http://soar.Berkeley.EDU/~alanc/
aka: alanc@{CSUA,OCF,CS,BMRC,EECS,ucsee.eecs,cory.eecs}.Berkeley.EDU
