4 ms·

He didn't configure exim4, for which he was hired. He wasn't hired to investigate the compromise, which he did do.

• song 12y ago
  Still, he provided a service that was important for the customer. And, the customer wanted him to configure exim4 because a lot of the emails sent were marked as spam. The compromise was most likely the biggest reason for that.
  • acveilleux 12y ago
    Sometimes it's like that. He could try and get the customer to pay him for this but he might lose on the long term if they've been a recurring customer for a long time.
    • shaftoe 12y ago
      Let's be honest. The moment he discovered an attacker he should have been on the phone with the client explaining the situation and asking how to proceed. If the client wanted him to shut down and clean up the hack, he should be charging for that. If not, he should have done nothing. Transparency resolves most problems.