Some of the security weaknesses noted in the case study includes the fact that Sony was using an older version of software (Apache Web Server) which had known security issues. This impaired the security of their firewall, allowing hackers to get in. As for control weaknesses, there were obviously not the appropriate policies or organizational procedures in place, since Sony did not know what information was stolen from their servers, the fact that it took days for Sony to inform their customers of the breach immediately shows a lack of training of their management and staff and also Sony’s delay in shutting down all of their servers at the point when they learned of the attack. If the proper policies and organizational procedures were in place, perhaps it would not have been as dramatic for Sony. 2.
But this application is basically a malicious software application. It also shows itself to be protecting the hard drive, which is not the actual truth. This software application may delete all the downloaded files from the system. So, in that way, we may lose our important data from our PC. So, generally we should avoid downloading the Deep Freeze.
He said, the Telco has broken the law by doing this for a new web filtering product. Once the customers realized about this action, Telstra came out on their defense saying almost all of the URLs were being cleaned of personal information they might contain, but that was not the only problem. Also, they did not ask for the customer’s authorization of collecting and distributing the data and they were pulling out parts of network conversations and eavesdropping to forward it offshore. In the case previously described, it can be appreciated as a fact, how Telstra has been collecting user’s activities inside the network without their knowledge or concern and distributing them to a third party. This action involves some issues such as: information gathering without permission, violation of data confidentiality and unauthorized distribution of data which affects the Next G Smartphone users from Telstra.
Attorneys for the family against the machine manufacturer (AECL) The Therac-25 design eliminated many of the hardware safety features that been built into previous designs, assuming the software was functioning correctly and eliminated the need for safety features. Prior machines had been known to have software issues that would frequently shut down the machine. No overdoses were given because the hardware intervened. These features were eliminated in the Therac-25, an obvious example of poor judgment on the part of the manufacturer. The manufacturer of the machine responded irresponsibly in investigating incidents and in failing to make changes immediately after the very first incident.
Deanna Earle MGMT 1125 George Erwin September 6, 2012 Case Study 5: The HP Pretexting Predicament 1. What are the ethical issues in this case? In this case their wee a ethical issues that had to do with the corporation and the individuals involves with it. Board member were untrusting and also used work phones and emails to leak information to the public. George Keyworth was not a ethical person because he leaked confidential information and also let a investigation be opened, instead of being honest.
The degree of harm that could have happened to the company was not justified because when a search was made in an Internet search and the blog was not easily accessible in the public domain and this does not give the employer the just cause for termination of the employee. In case two, the manufacturer was encoding its ink cartridges so that they could not be sold in other regions. This demonstrates that the manufacturer did not apply the principles of utilitarianism in making the decision of coding their ink cartridges. We believe that this decision was unethical because this limits the customer on where they could shop for their ink cartridges and coerces the customer to spend more because of the region that they live in. This case is of high moral intensity because of this restriction.
The government does not pay employees to watch videos or send personal emails; it pays them to further the government's mission. Stealing time and electronic resources from the government can be just as costly as stealing physical equipment. The security risks posed by improper computer usage can also be extremely dangerous to the Army. Browsing unauthorized websites can expose a computer to viruses or attacks from malicious hackers. Even unclassified computers may contain sensitive or FOUO information which may harm the Army.
Vandivier realized irregularities on data, the calibrations were manipulated, he has two choices , to manipulate the data or defy his boss. Q3 : How did Sink and Warren looked at the matter? How would you evaluate their conduct? They weren’t faithfull at all, they just wanted to done with project without
To have such significant secrets hidden from the Tarian society would eventually cause the breakdown of the culture and rebellion would start. The first out break out rebellion started when Vima refused to have her head shaved, once she had announced that sudden statement gradually more people started refusing having their heads shaved therefore ‘joining the rebellion’. If the Governance Companions had answered their questions with a fully explained, reasonable answer this may not have happened. Updated technology on Taris is vital. If they want to prevent the collapse of Taris, they must have everything updated.
This includes hosts file poisoning, even though the hosts file is not properly part of the Domain Name System. Hosts file poisoning is discussed in the malware section since it involves changing a file on the user’s computer [14]. j) Content-Injection Phishing Describes the situation where hackers replace part of the content of a legitimate site with false content designed to mislead or misdirect the user into giving up their confidential information to the hacker. For example, hackers may insert malicious code to log user's credentials or an overlay which can secretly collect information and deliver it to the hacker's phishing server. k) Man-in-the-Middle Phishing This is harder to detect than many other forms of phishing.