When a security auditor asks these kind of questions, get rid of the service he is auditing for (via Server Fault)
Posted by jpluimers on 2013/11/01
An interesting read, especially to see what parts should and should not be part of security auditing practice.
–jeroen






Leave a comment