RE: CRIME Computers vulnerable at Oregon department

From: MAGEE Rob (Rob.Magee@ODE-EX1.ODE.STATE.OR.US)
Date: Tue Sep 24 2002 - 14:28:29 PDT

  • Next message: Crispin Cowan: "Re: CRIME better computing for oregon using open source"

    Some recent examples:
    	"Do we have to have passwords expire so often (90 days)? Couldn't we
    make it a year or so, and why can't we reuse our passwords?"
    	"Wouldn't it cut down on network administration if we had a generic
    login for all employees?"
    	"You know, that wireless stuff is neat! I got one at home. We could
    really save a lot if we didn't have to run cable around the building."
    	"We can't afford overtime for you, so you will have to cut out the
    non-essential tasks, such as trying to apply all those patches to all the
    servers"
    	"You know, several of us use AIM in our work. Since the firewall has
    been installed, it hasn't worked. You need to make it work again!"
    	
    Complaints from superiors threaten their jobs. Enough complaints from staff
    generate complaints from superiors, which threaten their jobs. Thus,
    measures such as limiting login hours, stronger passwords, and tighter
    permissions on files/resources and controlling users' ability to install any
    program on their computers (admin rights) become difficult, if not
    impossible to implement.
    
    -----Original Message-----
    From: T. Kenji Sugahara [mailto:sugahara@private]
    
    Rob Magee- Could you expound on "management makes decisions based on
    as much convenience as they can get away with."  I'm curious to know 
    what exactly this means.
    



    This archive was generated by hypermail 2b30 : Tue Sep 24 2002 - 14:54:14 PDT