RE: Recent bugtraq postings

["Joe Pluta" <joepluta@xxxxxxxxxxxxxxxxx>]

> From: franz400
> 
> I could think of many reasons to attack a pc, in fact a compromised pc
> with
> a keyboard logger, phoning home could give someone a valid user id/pwd
to
> any system that pc accesses.

An excellent argument against single sign-on, by the way...

But the question is do you have the time to do that?  Would you risk
your job for it?  Do you know anybody who would?


> Joe (and others) - S3X & 400 programmers for
> years have been caught writing programs to capture info for their own
> purposes. I've seen a few walked to the door.
> Just like we keep saying Menu
> Security is no security, guessing the ethics of each employee is no
> security.

Yes indeed, there are morally bankrupt individuals in any field.  I
think those folks don't keep their jobs very long, though; the
combination of skill, intelligence, deception and lack of moral
structure required is rather unique.


> There is a market out there, or power to be gained for the inside info
of
> any company, big or small, and we have a world full of entrepreneurs,
> thrillseekers, and just very curious people.

And now an excellent argument against outsourcing, especially out of
your country's jurisdiction.  Here's a great story:

http://1010wins.com/topstories/local_story_106085053.html

Joe