Quote:
|
Originally Posted by carlingman
I for one see the publshing of the results via the tools sent to the customer via email as a positive step in the right direction from NTL.
 |
Right let me make myself clear.
Those reports contain some non-customer specific information which is best kept out of the public domain - bluntly I don't feel comfortable with anyone interested knowing which version of uBR code is running on our network, especially with recent security issues. Not to mention corporate confidentiality, if Cisco build a custom IOS for us for bug fixing, etc, it's not really our business to be broadcasting that they have, which member of staff built it for us, when it was built, and what code train it's based on.
The rest I really don't care about which is why only the IOS version was edited out at my request last night.
The other issue is that this being in the public domain like this some people will google like crazy to find out what it means, possibly misunderstand what they read or form an opinion based on the lovely ideal figures you find on the web that don't take account of real life conditions and generate further calls to the TSB. This I'm not fussed about as I'm not customer facing. The idea of some script kiddie looking around the web for IOS exploits for version x.x on the other hand I do care about as it could cause me rather a lot of grief, and I'm quite busy enough without that.
As far as the tech in question goes, yes I have his name, will he get into hot water? No. Not really necessary is it? Will be mentioned why this isn't the best idea and be asked not to do it, that's all really.