RE: Contact for va.gov

Is tracking down the original user and letting them know about the config leak a standard practice, necessary or "the right thing to do"?

Municipal networks often provide some emergency services, and we all know what the VA provides. Once you know whose gear it is, I guess you have to decide if you'd be willing to have a little bit of that organization's (or their patrons) blood on your hands. Especially in the case of the VA, for me, the answer is 'hell no'. If it was "Joes defunct sprocket startup", I'd likely just format flash: and move on. Nathan