[entwisi]

The problem with Wide Area Intranets is that they often don't consider security as important as if something was 'Internet'. i.e. they think its 'internal' non public so security isn't as great a consideration. problem is anyone with a network tap can listen to every package bouncing around the network. I've even sat in the doctors and spotted their wifi networks and have the tools on my phone to potentially crack the encryption if I wanted to.....

As soon as you shove something Internet wide then you immediately start thinking about security at a paranoid level, Intranets are thought of as in house so IT bods can be a little lax in considering security.

I'd love to see a full penetration attack report on my local docs...