You could argue that this is a classic case where a "security policy" was needed. The father could easily teach his daughter that the PC is not for her use and that tampering with the machine would have consequences (i.e. no drivers license, grounded, etc.) However, its seems to me Dad should be happy his daughter is hacking PCs. She could be rotting her brain out on reality television and Britney Spears. ------------------------------------ Andrew Plato, CISSP President / Principal Consultant Anitian Corporation (503) 644-5656 office (503) 201-0821 cell http://www.anitian.com ------------------------------------ -----Original Message----- From: Rosenquist, Matthew [mailto:matthew.rosenquist@private] Sent: Friday, January 03, 2003 8:42 AM To: 'crime@private' Cc: 'emetzler@private' Subject: RE: CRIME Microsoft Windows XP question Following this thread has been quite entertaining. I have witnessed a group of technologists attempting to derive technical solutions, essentially barriers, to help one father protect his PC from his daughter. Very creative, complex, and expensive ideas have surfaced, been torpedoed, and subsequently raised again in a different incarnation. Yet, we miss the obvious. In this case, as in others we rarely speak of, it is most efficient to interdict the attacker. No complex configurations, hardware upgrades, or additional locking mechanisms necessary. She has physical access to the PC, and could rebuild the system, soak it in the bathtub, put refrigerator magnets on the hard drive, etc. Practically, she will always have access to the PC. The answer: Remove the threat through behavior modification. Tell the daughter, if she does it again, she will not be allowed to obtain a drivers license until she is 18 years of age (or substitute deterrent message of fathers choosing). If given the choice of being able to deter an attack or hardening the system, I choose effective deterrence every time. My humble opinion. (and yes, I realize the various side threads of this discussion scales beyond the original issue, but so does what I am saying) M.Rosenquist
This archive was generated by hypermail 2b30 : Fri Jan 03 2003 - 18:54:34 PST