• by pavel_lishin on 1/16/2025, 4:07:28 PM

    > I was wondering how I should approach making my clients aware that they are vulnerable without making myself suspicious or overstepping the nature of our business relationships?

    There really isn't a way. If you're willing to deal with a lot of potential fallout in the name of helping strangers, sure - some would be very happy to hear that their back door doesn't lock properly, or that their wifi is unsecured. Some will straight up call the police.

    In your shoes, I would not point out anything that's not a direct hazard to life and limb.

  • by grajaganDev on 1/16/2025, 4:05:50 PM

    I struggle with the same thing but have concluded its best not to bring up security concerns unless life is at risk.

  • by Davidbrcz on 1/16/2025, 3:59:17 PM

    You tell them you have business as a security consultant, and you are willing to discuss their security situation for a fee.

    Might even give them one issue to show you are serious and know what you are doing.

  • by Peacefulz on 1/16/2025, 4:48:04 PM

    I appreciate the responses, folks. I will surely take it into consideration going forward.