RE: Client Access bypass signon (Dan Bale)

I love the smell of LAN in the morning.


Ryan

-----Original Message-----
From: Jones, John (US) [mailto:John.Jones@xxxxxxxxxxxxxxxxxxxxxxx] 
Sent: Friday, July 30, 2004 10:00 AM
To: Midrange Systems Technical Discussion
Subject: RE: Client Access bypass signon (Dan Bale)

Anyone who sniffs the LAN can pick up the contents of the batch file.

John A. Jones
Americas Security Officer
Jones Lang LaSalle, Inc.
V: +1-630-455-2787 F: +1-312-601-1782
John.Jones@xxxxxxxxxxxxxxxxxxxxxxx

-----Original Message-----
From: Dan Bale [mailto:dbale@xxxxxxxxxxxxx]
Sent: Friday, July 30, 2004 9:45 AM
To: Midrange Systems Technical Discussion
Subject: RE: Client Access bypass signon (Dan Bale)

> -----Original Message-----
> From: midrange-l-bounces@xxxxxxxxxxxx / Steve Martinson
> Sent: Friday, July 30, 2004 10:25 AM
>
> So, you've "automated" your signon to the system via a clear-text 
> batch file.  That doesn't violate your organization's security policy?

> Bad enough that your doing that, but the batch file resides on the
network?
> That's even worse.

Hi Steve,

As I mentioned in my post, the batch file (CWB4dbale.bat) which holds the 
password is in my private network folder.  It is secured so that no one can get 
at it except me and the security administrator, otherwise they'll get an 
"access denied" message.

Maybe I should have said "private & secured" in my post.  Can I trust that 
security?  If not, please educate me.

Thanks,
db


This email is for the use of the intended recipient(s) only.  If you have 
received this email in error, please notify the sender immediately and then 
delete it.  If you are not the intended recipient, you must not keep, use, 
disclose, copy or distribute this email without the author's prior permission.  
We have taken precautions to minimize the risk of transmitting software 
viruses, but we advise you to carry out your own virus checks on any attachment 
to this message.  We cannot accept liability for any loss or damage caused by 
software viruses.  The information contained in this communication may be 
confidential and may be subject to the attorney-client privilege. If you are 
the intended recipient and you do not wish to receive similar electronic 
messages from us in future then please respond to the sender to this effect.

--
This is the Midrange Systems Technical Discussion (MIDRANGE-L) mailing list To 
post a message email: MIDRANGE-L@xxxxxxxxxxxx To subscribe, unsubscribe, or 
change list options,
visit: http://lists.midrange.com/mailman/listinfo/midrange-l
or email: MIDRANGE-L-request@xxxxxxxxxxxx Before posting, please take a moment 
to review the archives at http://archive.midrange.com/midrange-l.