Quote:
Originally Posted by popper
which seems to imply they already know what the illlegal stance was as they didnt want to include inhouse employees for legal reasons later perhaps!
|
Tempting though it is to agree with you, BT Retail has always been a bit of a law unto iteself regarding design. It's only been in the last year or so that the e2e design team have taken over from all other areas, but there are still little 'in-house' design teams dotted around (although there shouldn't be as this situation has proved).
The original design of the test *could* have pre-dated the carte-blanche approach to designs going through the e2e team. Mind you, if it had then the issues would have been raised in-house and no-one would have gone to the press with their 'fait-accompli'. They [BT Retail] get 10/10 for being underhanded imho.
No, my bigger concern was that the security community seemed a bit taken aback when the news first broke on the register, and a comment was made in The Reg's article about the reaction of the security team. There then immediately followed a posting on the BT Security mailing list about the comment and a very heavy sounding 'anyone found commenting on BT internal stuff will be investigated and stuffed' email.