Re: Remote Access (Again)

["Adam Lang" <aalang@xxxxxxxxxxxxxxxxxxxx>]

Fine.  We can even remove the packet sniffing scenario.

What about brute force attacks on your server to guess passwords?

And people DO perform industrial espionage.

We are not trying to  instill fear.  We are merely telling cardinal security
rules.  If people want to follow the, that is up to them, but I am not going
to tell them running one of the most insecure services over the public
internet is OK and they have nothing to worry about.

> The internet vandals and thieves will be seen as a business risk just like
> the real world vandals and thieves.

Yeah, but does that mean you shuold leave your door unlocked to your office
because of the odds fo someone walkign up inside and taking stuff is low?

On a further note, privacy of your data on the Internet is extremely
underappreciated.  With the amount of clear text that flows and the
increased amount fo ability the government is giving itself to probe
internet backbones for information, it IS soemthign people, especially IT
people, shuold keep in mind.

Adam Lang
Systems Engineer
Rutgers Casualty Insurance Company
http://www.rutgersinsurance.com
----- Original Message -----
From: "Booth Martin" <Booth@MartinVT.com>
To: <midrange-l@midrange.com>
Sent: Wednesday, December 04, 2002 3:00 PM
Subject: RE: Remote Access (Again)


>
>  Oh gosh Scott, thats like standing on a bridge over the LA Freeway and
> picking out cars by their license plate numbers.  Its possible, but how
real
> a threat is it for most businesses?
>
> If I am looking for data on a particular company I'll go to the company,
not
> try to scan the internet for their packets.
>
> The only reason I am pursuing these messages is because I believe these
> reactions are instilling a cult of fear into our IT departments, and in
the
> end business pressures are going to force us onto the web.  The risks will
> be taken and the IT people that act with fear and panic will be replaced.
> The internet vandals and thieves will be seen as a business risk just like

> the real world vandals and thieves.
>
> ---------------------------------------------------------
> Booth Martin   http://www.MartinVT.com
> Booth@MartinVT.com
> ---------------------------------------------------------