18 May
2004
18 May
'04
3:37 p.m.
On Tue, 18 May 2004 14:31:21 CDT, Steve Drees said:
if I 0wn your mail gateway I can generate a list of valid accounts over time. On a busy host over a short period of time.
So your auditor wouldn't mind if you kept an unencrypted list of credit card numbers on a DMZ box, because if somebody hacks the box they can gather those over time? :)