Re: How to block, but not block?!
On Thu, Jun 17, 2010 at 07:31, Ben Scott mailvor...@gmail.com wrote: On Thu, Jun 17, 2010 at 9:45 AM, Daniel Rodriguez drod...@gmail.com wrote: There is a Java based Excel Application. It is actually part of Open Office. This will allow the users to open, view, and edit the Excel Spreadsheet, but when the user 'saves' the spreadsheet, it will be saved back to it's source, which would be the server. That leaves copy-and-paste and screen captures to worry about on the computer. (Just saying.) He knows of a way to keep pictures from being taken, but requires application of a substance on the actual screen. He is trying to get a name of the product. Fascinating. Please do post if you find out; I'm intrigued. -- Ben Whiteout. ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~
Re: How to block, but not block?!
Well said. He needs to choose a dollar amount (because FREE is not an option here), and a percentage of effectiveness (because 100% is not an option here) If it is worth his time to spend, say, $10-20K to address 70-80% of his concern, then he might be able to find several solutions. If he want so spend either less money, or get a higher percentage of the stated requirement (the big hole is external cameras), then he may not be so happy. -ASB: http://XeeSM.com/AndrewBaker On Wed, Jun 16, 2010 at 8:12 PM, Kurt Buff kurt.b...@gmail.com wrote: He seems to be unclear on the concept of you can't have your cake and eat it too. I would lay out the threats you're finding in this string of mail, and suggest that implementing all of the the countermeasures for them will destroy the business, then ask him to pick the one or two or three that he fears the most and for which the countermeasures won't kill the goose that lays the golden egg... Kurt On Wed, Jun 16, 2010 at 09:13, gro...@beachcomp.com wrote: Hi all, I have been asked to provide a solution which I don't think can be provided, but figured I'd get your input any see if you know of anything out there. The concept is as follows: There is an excel file which is highly secretive and guarded. The CEO wants to make sure people have no way of leaking it out of the company, but be free to use it. He wants to know if anyone prints it, or saves it externally, or e-mails it. This would be fine if the user was on a locked down machine, but he wants them to be able to do this on their daily use workstations. Anyone have any thoughts or ideas? Thanks! ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~
Re: How to block, but not block?!
Have a friend, that I talk to, and he recommends the following; There is a Java based Excel Application. It is actually part of Open Office. This will allow the users to open, view, and edit the Excel Spreadsheet, but when the user 'saves' the spreadsheet, it will be saved back to it's source, which would be the server. It may require some programming changes to the Java code, itself. However, you would be able to limit user access by limiting access to the application itself and restricting options to save to only a specified location. He knows of a way to keep pictures from being taken, but requires application of a substance on the actual screen. He is trying to get a name of the product. On Thu, Jun 17, 2010 at 7:58 AM, Andrew S. Baker asbz...@gmail.com wrote: Well said. He needs to choose a dollar amount (because FREE is not an option here), and a percentage of effectiveness (because 100% is not an option here) If it is worth his time to spend, say, $10-20K to address 70-80% of his concern, then he might be able to find several solutions. If he want so spend either less money, or get a higher percentage of the stated requirement (the big hole is external cameras), then he may not be so happy. -ASB: http://XeeSM.com/AndrewBaker On Wed, Jun 16, 2010 at 8:12 PM, Kurt Buff kurt.b...@gmail.com wrote: He seems to be unclear on the concept of you can't have your cake and eat it too. I would lay out the threats you're finding in this string of mail, and suggest that implementing all of the the countermeasures for them will destroy the business, then ask him to pick the one or two or three that he fears the most and for which the countermeasures won't kill the goose that lays the golden egg... Kurt On Wed, Jun 16, 2010 at 09:13, gro...@beachcomp.com wrote: Hi all, I have been asked to provide a solution which I don't think can be provided, but figured I'd get your input any see if you know of anything out there. The concept is as follows: There is an excel file which is highly secretive and guarded. The CEO wants to make sure people have no way of leaking it out of the company, but be free to use it. He wants to know if anyone prints it, or saves it externally, or e-mails it. This would be fine if the user was on a locked down machine, but he wants them to be able to do this on their daily use workstations. Anyone have any thoughts or ideas? Thanks! ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~
Re: How to block, but not block?!
On Thu, Jun 17, 2010 at 9:45 AM, Daniel Rodriguez drod...@gmail.com wrote: There is a Java based Excel Application. It is actually part of Open Office. This will allow the users to open, view, and edit the Excel Spreadsheet, but when the user 'saves' the spreadsheet, it will be saved back to it's source, which would be the server. That leaves copy-and-paste and screen captures to worry about on the computer. (Just saying.) He knows of a way to keep pictures from being taken, but requires application of a substance on the actual screen. He is trying to get a name of the product. Fascinating. Please do post if you find out; I'm intrigued. -- Ben ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~
RE: How to block, but not block?!
Don't forget pencil and paper? -Original Message- From: Ben Scott [mailto:mailvor...@gmail.com] Sent: Thursday, June 17, 2010 9:31 AM To: NT System Admin Issues Subject: Re: How to block, but not block?! On Thu, Jun 17, 2010 at 9:45 AM, Daniel Rodriguez drod...@gmail.com wrote: There is a Java based Excel Application. It is actually part of Open Office. This will allow the users to open, view, and edit the Excel Spreadsheet, but when the user 'saves' the spreadsheet, it will be saved back to it's source, which would be the server. That leaves copy-and-paste and screen captures to worry about on the computer. (Just saying.) He knows of a way to keep pictures from being taken, but requires application of a substance on the actual screen. He is trying to get a name of the product. Fascinating. Please do post if you find out; I'm intrigued. -- Ben ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~
RE: How to block, but not block?!
The nearest you can get to fulfilling his request is with a fully featured DLP product, rather than looking at application level DRM. This will cost you money, but it will prevent pretty much any host based way of getting the data (and everything the OP mentioned). The mobile phone camera shot could only be protected against by physical buildings controls (ie. security at the door banning such devices). Scoff you may, but it's appropriate in some environments. Removing clothing, searching, and putting on cleared clothing is appropriate entry/exit procedure for some environments!! All down to how much you want to spend and how you want to treat your employees. a -Original Message- From: Erik Goldoff [mailto:egold...@gmail.com] Sent: 16 June 2010 17:40 To: NT System Admin Issues Subject: RE: How to block, but not block?! From a security standpoint, wouldn't you also need to block screen prints/screen captures with the spreadsheet open ? Erik Goldoff IT Consultant Systems, Networks, Security ' Security is an ongoing process, not a one time event ! ' -Original Message- From: gro...@beachcomp.com [mailto:gro...@beachcomp.com] Sent: Wednesday, June 16, 2010 12:13 PM To: NT System Admin Issues Subject: How to block, but not block?! Hi all, I have been asked to provide a solution which I don't think can be provided, but figured I'd get your input any see if you know of anything out there. The concept is as follows: There is an excel file which is highly secretive and guarded. The CEO wants to make sure people have no way of leaking it out of the company, but be free to use it. He wants to know if anyone prints it, or saves it externally, or e-mails it. This would be fine if the user was on a locked down machine, but he wants them to be able to do this on their daily use workstations. Anyone have any thoughts or ideas? Thanks! ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ WARNING: The information in this email and any attachments is confidential and may be legally privileged. If you are not the named addressee, you must not use, copy or disclose this email (including any attachments) or the information in it save to the named addressee nor take any action in reliance on it. If you receive this email or any attachments in error, please notify the sender immediately and then delete the same and any copies. CLS Services Ltd × Registered in England No 4132704 × Registered Office: Exchange Tower × One Harbour Exchange Square × London E14 9GE ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~
Re: How to block, but not block?!
On 17 Jun 2010 at 14:57, Terry Dickson wrote: Don't forget pencil and paper? This thread reminds of an episode of The Man from U.N.C.L.E. when Ilya Kuryakin and Napoleon Solo needed to smuggle some paperwork out of the secured document facility at U.N.C.L.E. -- all paper in the secure facility was treated and it set off magnetic-field alarms on the way out. They figured out a hole in the security -- social-engineering played a big part in it -- and smuggled out the document. Of course, this was pre-cell-phone-cameras, but I'm sure no personal recording or communicating device of any type (pens, paper, pocket radios [Open channel D], etc.) were allowed in the facility. -- Angus Scott-Fleming GeoApps, Tucson, Arizona 1-520-290-5038 Security Blog: http://geoapps.com/ ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~
Re: How to block, but not block?!
The secure environments that I have seen use clean desktop environments with security cameras. Employees are not allowed to bring anything into the secure area. The desktops must remain clear at all times and cameras watch for any rule breakages. -Bill On Thu, Jun 17, 2010 at 9:09 AM, Angus Scott-Fleming angu...@geoapps.comwrote: On 17 Jun 2010 at 14:57, Terry Dickson wrote: Don't forget pencil and paper? This thread reminds of an episode of The Man from U.N.C.L.E. when Ilya Kuryakin and Napoleon Solo needed to smuggle some paperwork out of the secured document facility at U.N.C.L.E. -- all paper in the secure facility was treated and it set off magnetic-field alarms on the way out. They figured out a hole in the security -- social-engineering played a big part in it -- and smuggled out the document. Of course, this was pre-cell-phone-cameras, but I'm sure no personal recording or communicating device of any type (pens, paper, pocket radios [Open channel D], etc.) were allowed in the facility. -- Angus Scott-Fleming GeoApps, Tucson, Arizona 1-520-290-5038 Security Blog: http://geoapps.com/ ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~
Re: How to block, but not block?!
On the first part, he states that since it is Java based, that you can turn off the copy capabilities. He says that you can keep the Java app from copying to the local machine, but you can copy and paste within the application, should you want to manipulate the data of the spreadsheet. But, if you attempt to copy anything within the spreadsheet, you won't be able to paste it into another window. As for the second, he says that there is this product, he thinks its called 'Glare Goop'(?). When it is applied to a monitor screen, you can visually see the information on the screen, but you are not able to take pictures of that screen using a digital(?) camera. It somehow refracts the light and keeps the camera from actually making out what is displayed on the screen. I trust him at his word. He is an electrical engineer and a programmer. Very smart guy. On Thu, Jun 17, 2010 at 10:31 AM, Ben Scott mailvor...@gmail.com wrote: On Thu, Jun 17, 2010 at 9:45 AM, Daniel Rodriguez drod...@gmail.com wrote: There is a Java based Excel Application. It is actually part of Open Office. This will allow the users to open, view, and edit the Excel Spreadsheet, but when the user 'saves' the spreadsheet, it will be saved back to it's source, which would be the server. That leaves copy-and-paste and screen captures to worry about on the computer. (Just saying.) He knows of a way to keep pictures from being taken, but requires application of a substance on the actual screen. He is trying to get a name of the product. Fascinating. Please do post if you find out; I'm intrigued. -- Ben ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~
Re: How to block, but not block?!
Might be pertinent to your project: http://preview.tinyurl.com/29gc7lh Die dulci fruere! Roger Wright ___ On Wed, Jun 16, 2010 at 12:13 PM, gro...@beachcomp.com wrote: Hi all, I have been asked to provide a solution which I don't think can be provided, but figured I'd get your input any see if you know of anything out there. The concept is as follows: There is an excel file which is highly secretive and guarded. The CEO wants to make sure people have no way of leaking it out of the company, but be free to use it. He wants to know if anyone prints it, or saves it externally, or e-mails it. This would be fine if the user was on a locked down machine, but he wants them to be able to do this on their daily use workstations. Anyone have any thoughts or ideas? Thanks! ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~
RE: How to block, but not block?!
Cool! Thanks and thank you to everyone else who has chimed in so far. -Original Message- From: Roger Wright [mailto:rhw...@gmail.com] Sent: Thursday, June 17, 2010 2:59 PM To: NT System Admin Issues Subject: Re: How to block, but not block?! Might be pertinent to your project: http://preview.tinyurl.com/29gc7lh Die dulci fruere! Roger Wright ___ On Wed, Jun 16, 2010 at 12:13 PM, gro...@beachcomp.com wrote: Hi all, I have been asked to provide a solution which I don't think can be provided, but figured I'd get your input any see if you know of anything out there. The concept is as follows: There is an excel file which is highly secretive and guarded. The CEO wants to make sure people have no way of leaking it out of the company, but be free to use it. He wants to know if anyone prints it, or saves it externally, or e-mails it. This would be fine if the user was on a locked down machine, but he wants them to be able to do this on their daily use workstations. Anyone have any thoughts or ideas? Thanks! ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~
Re: How to block, but not block?!
Now here's an idea -- have the screen display something that can only be seen when you wear these: DECODER GLASSES http://www.rainbowsymphony.com/decoder-glasses.html Video monitoring of the secure area would mean you would be able to catch anyone putting glasses on their digital camera ;-) -- Angus Scott-Fleming GeoApps, Tucson, Arizona 1-520-290-5038 Security Blog: http://geoapps.com/ ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~
Re: How to block, but not block?!
What about using something like pgp desktop ? Sent using MOTOBLUR™ on T-Mobile -Original message- From: gro...@beachcomp.com To: NT System Admin Issues ntsysadmin@lyris.sunbelt-software.com Sent: Wed, Jun 16, 2010 10:09:18 CDT Subject: How to block, but not block?! Hi all, I have been asked to provide a solution which I don't think can be provided, but figured I'd get your input any see if you know of anything out there. The concept is as follows: There is an excel file which is highly secretive and guarded. The CEO wants to make sure people have no way of leaking it out of the company, but be free to use it. He wants to know if anyone prints it, or saves it externally, or e-mails it. This would be fine if the user was on a locked down machine, but he wants them to be able to do this on their daily use workstations. Anyone have any thoughts or ideas? Thanks! ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~
RE: How to block, but not block?!
http://office.microsoft.com/en-us/excel-help/information-rights-management-in-the-2007-microsoft-office-system-HA010102918.aspx John Hornbuckle MIS Department Taylor County School District www.taylor.k12.fl.us -Original Message- From: gro...@beachcomp.com [mailto:gro...@beachcomp.com] Sent: Wednesday, June 16, 2010 12:13 PM To: NT System Admin Issues Subject: How to block, but not block?! Hi all, I have been asked to provide a solution which I don't think can be provided, but figured I'd get your input any see if you know of anything out there. The concept is as follows: There is an excel file which is highly secretive and guarded. The CEO wants to make sure people have no way of leaking it out of the company, but be free to use it. He wants to know if anyone prints it, or saves it externally, or e-mails it. This would be fine if the user was on a locked down machine, but he wants them to be able to do this on their daily use workstations. Anyone have any thoughts or ideas? Thanks! ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ NOTICE: Florida has a broad public records law. Most written communications to or from this entity are public records that will be disclosed to the public and the media upon request. E-mail communications may be subject to public disclosure. ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~
RE: How to block, but not block?!
Good stuff but I did forget to add something. A user taking a screenshot of the spreadsheet, then saving it. So while they are locked down from doing any mods on the file, they can always screenshot and retype. Plot thickens. -Original Message- From: John Hornbuckle [mailto:john.hornbuc...@taylor.k12.fl.us] Sent: Wednesday, June 16, 2010 12:30 PM To: NT System Admin Issues Subject: RE: How to block, but not block?! http://office.microsoft.com/en-us/excel-help/information-rights-management-i n-the-2007-microsoft-office-system-HA010102918.aspx John Hornbuckle MIS Department Taylor County School District www.taylor.k12.fl.us -Original Message- From: gro...@beachcomp.com [mailto:gro...@beachcomp.com] Sent: Wednesday, June 16, 2010 12:13 PM To: NT System Admin Issues Subject: How to block, but not block?! Hi all, I have been asked to provide a solution which I don't think can be provided, but figured I'd get your input any see if you know of anything out there. The concept is as follows: There is an excel file which is highly secretive and guarded. The CEO wants to make sure people have no way of leaking it out of the company, but be free to use it. He wants to know if anyone prints it, or saves it externally, or e-mails it. This would be fine if the user was on a locked down machine, but he wants them to be able to do this on their daily use workstations. Anyone have any thoughts or ideas? Thanks! ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ NOTICE: Florida has a broad public records law. Most written communications to or from this entity are public records that will be disclosed to the public and the media upon request. E-mail communications may be subject to public disclosure. ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~
RE: How to block, but not block?!
From a security standpoint, wouldn't you also need to block screen prints/screen captures with the spreadsheet open ? Erik Goldoff IT Consultant Systems, Networks, Security ' Security is an ongoing process, not a one time event ! ' -Original Message- From: gro...@beachcomp.com [mailto:gro...@beachcomp.com] Sent: Wednesday, June 16, 2010 12:13 PM To: NT System Admin Issues Subject: How to block, but not block?! Hi all, I have been asked to provide a solution which I don't think can be provided, but figured I'd get your input any see if you know of anything out there. The concept is as follows: There is an excel file which is highly secretive and guarded. The CEO wants to make sure people have no way of leaking it out of the company, but be free to use it. He wants to know if anyone prints it, or saves it externally, or e-mails it. This would be fine if the user was on a locked down machine, but he wants them to be able to do this on their daily use workstations. Anyone have any thoughts or ideas? Thanks! ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~
RE: How to block, but not block?!
And cell phone cameras. -Original Message- From: Erik Goldoff [mailto:egold...@gmail.com] Sent: Wednesday, June 16, 2010 12:40 PM To: NT System Admin Issues Subject: RE: How to block, but not block?! From a security standpoint, wouldn't you also need to block screen prints/screen captures with the spreadsheet open ? Erik Goldoff IT Consultant Systems, Networks, Security ' Security is an ongoing process, not a one time event ! ' -Original Message- From: gro...@beachcomp.com [mailto:gro...@beachcomp.com] Sent: Wednesday, June 16, 2010 12:13 PM To: NT System Admin Issues Subject: How to block, but not block?! Hi all, I have been asked to provide a solution which I don't think can be provided, but figured I'd get your input any see if you know of anything out there. The concept is as follows: There is an excel file which is highly secretive and guarded. The CEO wants to make sure people have no way of leaking it out of the company, but be free to use it. He wants to know if anyone prints it, or saves it externally, or e-mails it. This would be fine if the user was on a locked down machine, but he wants them to be able to do this on their daily use workstations. Anyone have any thoughts or ideas? Thanks! ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~
RE: How to block, but not block?!
If they can get it on their monitor, it can leak. Screen capture, digital or cell cameras, photocopy machines... *** Charlie Kaiser charl...@golden-eagle.org Kingman, AZ *** -Original Message- From: gro...@beachcomp.com [mailto:gro...@beachcomp.com] Sent: Wednesday, June 16, 2010 9:38 AM To: NT System Admin Issues Subject: RE: How to block, but not block?! Good stuff but I did forget to add something. A user taking a screenshot of the spreadsheet, then saving it. So while they are locked down from doing any mods on the file, they can always screenshot and retype. Plot thickens. ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~
RE: How to block, but not block?!
So you're saying you can put your monitor on the photocopy machine to copy the data ? grin Erik Goldoff IT Consultant Systems, Networks, Security ' Security is an ongoing process, not a one time event ! ' -Original Message- From: Charlie Kaiser [mailto:charl...@golden-eagle.org] Sent: Wednesday, June 16, 2010 12:53 PM To: NT System Admin Issues Subject: RE: How to block, but not block?! If they can get it on their monitor, it can leak. Screen capture, digital or cell cameras, photocopy machines... *** Charlie Kaiser charl...@golden-eagle.org Kingman, AZ *** -Original Message- From: gro...@beachcomp.com [mailto:gro...@beachcomp.com] Sent: Wednesday, June 16, 2010 9:38 AM To: NT System Admin Issues Subject: RE: How to block, but not block?! Good stuff but I did forget to add something. A user taking a screenshot of the spreadsheet, then saving it. So while they are locked down from doing any mods on the file, they can always screenshot and retype. Plot thickens. ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~
RE: How to block, but not block?!
Those have a special reflective ink inside from what I read. -Original Message- From: James Kerr [mailto:cluster...@gmail.com] Sent: Wednesday, June 16, 2010 12:55 PM To: NT System Admin Issues Subject: Re: How to block, but not block?! You beat me too it. That reminds me, I always laugh when I see cars with the bar code on the side off them that lets them enter their homes complex. What's to stop someone from taking a photo it it and printing it on their printer and sticking it on the side of their own car? - Original Message - From: Kennedy, Jim kennedy...@elyriaschools.org To: NT System Admin Issues ntsysadmin@lyris.sunbelt-software.com Sent: Wednesday, June 16, 2010 12:45 PM Subject: RE: How to block, but not block?! And cell phone cameras. -Original Message- From: Erik Goldoff [mailto:egold...@gmail.com] Sent: Wednesday, June 16, 2010 12:40 PM To: NT System Admin Issues Subject: RE: How to block, but not block?! From a security standpoint, wouldn't you also need to block screen prints/screen captures with the spreadsheet open ? Erik Goldoff IT Consultant Systems, Networks, Security ' Security is an ongoing process, not a one time event ! ' -Original Message- From: gro...@beachcomp.com [mailto:gro...@beachcomp.com] Sent: Wednesday, June 16, 2010 12:13 PM To: NT System Admin Issues Subject: How to block, but not block?! Hi all, I have been asked to provide a solution which I don't think can be provided, but figured I'd get your input any see if you know of anything out there. The concept is as follows: There is an excel file which is highly secretive and guarded. The CEO wants to make sure people have no way of leaking it out of the company, but be free to use it. He wants to know if anyone prints it, or saves it externally, or e-mails it. This would be fine if the user was on a locked down machine, but he wants them to be able to do this on their daily use workstations. Anyone have any thoughts or ideas? Thanks! ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~
RE: How to block, but not block?!
Quiz time! There are seldom technological solutions to . -Original Message- From: Kennedy, Jim [mailto:kennedy...@elyriaschools.org] Sent: Wednesday, June 16, 2010 12:46 PM To: NT System Admin Issues Subject: RE: How to block, but not block?! And cell phone cameras. -Original Message- From: Erik Goldoff [mailto:egold...@gmail.com] Sent: Wednesday, June 16, 2010 12:40 PM To: NT System Admin Issues Subject: RE: How to block, but not block?! From a security standpoint, wouldn't you also need to block screen prints/screen captures with the spreadsheet open ? Erik Goldoff IT Consultant Systems, Networks, Security ' Security is an ongoing process, not a one time event ! ' -Original Message- From: gro...@beachcomp.com [mailto:gro...@beachcomp.com] Sent: Wednesday, June 16, 2010 12:13 PM To: NT System Admin Issues Subject: How to block, but not block?! Hi all, I have been asked to provide a solution which I don't think can be provided, but figured I'd get your input any see if you know of anything out there. The concept is as follows: There is an excel file which is highly secretive and guarded. The CEO wants to make sure people have no way of leaking it out of the company, but be free to use it. He wants to know if anyone prints it, or saves it externally, or e-mails it. This would be fine if the user was on a locked down machine, but he wants them to be able to do this on their daily use workstations. Anyone have any thoughts or ideas? Thanks! ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~
Re: How to block, but not block?!
On Wed, Jun 16, 2010 at 12:13 PM, gro...@beachcomp.com wrote: He wants to know if anyone prints it, or saves it externally, or e-mails it. Hire security guards to stand behind each user and make sure they don't do anything improper. Also, give each user a lobotomy before they leave the building. Otherwise, they might remember something. Anyone have any thoughts or ideas? My thought is your CEO is going to be unhappy. There are DRM-type solutions for Office, but regard the whole idea of DRM as fundamentally broken. You can't both distribute information and not distribute it, no matter how much the marketing brochure says you can. -- Ben ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~
Re: How to block, but not block?!
Im gonna have to test that theory out. I thought I saw a car with one downstairs in our parking lot. - Original Message - From: gro...@beachcomp.com To: NT System Admin Issues ntsysadmin@lyris.sunbelt-software.com Sent: Wednesday, June 16, 2010 1:06 PM Subject: RE: How to block, but not block?! Those have a special reflective ink inside from what I read. -Original Message- From: James Kerr [mailto:cluster...@gmail.com] Sent: Wednesday, June 16, 2010 12:55 PM To: NT System Admin Issues Subject: Re: How to block, but not block?! You beat me too it. That reminds me, I always laugh when I see cars with the bar code on the side off them that lets them enter their homes complex. What's to stop someone from taking a photo it it and printing it on their printer and sticking it on the side of their own car? - Original Message - From: Kennedy, Jim kennedy...@elyriaschools.org To: NT System Admin Issues ntsysadmin@lyris.sunbelt-software.com Sent: Wednesday, June 16, 2010 12:45 PM Subject: RE: How to block, but not block?! And cell phone cameras. -Original Message- From: Erik Goldoff [mailto:egold...@gmail.com] Sent: Wednesday, June 16, 2010 12:40 PM To: NT System Admin Issues Subject: RE: How to block, but not block?! From a security standpoint, wouldn't you also need to block screen prints/screen captures with the spreadsheet open ? Erik Goldoff IT Consultant Systems, Networks, Security ' Security is an ongoing process, not a one time event ! ' -Original Message- From: gro...@beachcomp.com [mailto:gro...@beachcomp.com] Sent: Wednesday, June 16, 2010 12:13 PM To: NT System Admin Issues Subject: How to block, but not block?! Hi all, I have been asked to provide a solution which I don't think can be provided, but figured I'd get your input any see if you know of anything out there. The concept is as follows: There is an excel file which is highly secretive and guarded. The CEO wants to make sure people have no way of leaking it out of the company, but be free to use it. He wants to know if anyone prints it, or saves it externally, or e-mails it. This would be fine if the user was on a locked down machine, but he wants them to be able to do this on their daily use workstations. Anyone have any thoughts or ideas? Thanks! ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~
RE: How to block, but not block?!
...behavioral problems. Then my addition always is except for the electric chair. For technical support and questions do not contact technicians directly. Teachers please contact your Media Department. Administrative Staff please email the IT Services Support address in Outlook. -Original Message- From: Carl Houseman [mailto:c.house...@gmail.com] Sent: Wednesday, June 16, 2010 1:14 PM To: NT System Admin Issues Subject: RE: How to block, but not block?! Quiz time! There are seldom technological solutions to . -Original Message- From: Kennedy, Jim [mailto:kennedy...@elyriaschools.org] Sent: Wednesday, June 16, 2010 12:46 PM To: NT System Admin Issues Subject: RE: How to block, but not block?! And cell phone cameras. -Original Message- From: Erik Goldoff [mailto:egold...@gmail.com] Sent: Wednesday, June 16, 2010 12:40 PM To: NT System Admin Issues Subject: RE: How to block, but not block?! From a security standpoint, wouldn't you also need to block screen prints/screen captures with the spreadsheet open ? Erik Goldoff IT Consultant Systems, Networks, Security ' Security is an ongoing process, not a one time event ! ' -Original Message- From: gro...@beachcomp.com [mailto:gro...@beachcomp.com] Sent: Wednesday, June 16, 2010 12:13 PM To: NT System Admin Issues Subject: How to block, but not block?! Hi all, I have been asked to provide a solution which I don't think can be provided, but figured I'd get your input any see if you know of anything out there. The concept is as follows: There is an excel file which is highly secretive and guarded. The CEO wants to make sure people have no way of leaking it out of the company, but be free to use it. He wants to know if anyone prints it, or saves it externally, or e-mails it. This would be fine if the user was on a locked down machine, but he wants them to be able to do this on their daily use workstations. Anyone have any thoughts or ideas? Thanks! ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~
Re: How to block, but not block?!
I've never heard it called a monitor before. :) On Wed, Jun 16, 2010 at 1:02 PM, Erik Goldoff egold...@gmail.com wrote: So you're saying you can put your monitor on the photocopy machine to copy the data ? grin Erik Goldoff IT Consultant Systems, Networks, Security ' Security is an ongoing process, not a one time event ! ' -Original Message- From: Charlie Kaiser [mailto:charl...@golden-eagle.org] Sent: Wednesday, June 16, 2010 12:53 PM To: NT System Admin Issues Subject: RE: How to block, but not block?! If they can get it on their monitor, it can leak. Screen capture, digital or cell cameras, photocopy machines... *** Charlie Kaiser charl...@golden-eagle.org Kingman, AZ *** -Original Message- From: gro...@beachcomp.com [mailto:gro...@beachcomp.com] Sent: Wednesday, June 16, 2010 9:38 AM To: NT System Admin Issues Subject: RE: How to block, but not block?! Good stuff but I did forget to add something. A user taking a screenshot of the spreadsheet, then saving it. So while they are locked down from doing any mods on the file, they can always screenshot and retype. Plot thickens. ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~
Re: How to block, but not block?!
Found one, the sticker itself appears to be reflective but that maybe just so it can be read at night. - Original Message - From: James Kerr cluster...@gmail.com To: NT System Admin Issues ntsysadmin@lyris.sunbelt-software.com Sent: Wednesday, June 16, 2010 1:23 PM Subject: Re: How to block, but not block?! Im gonna have to test that theory out. I thought I saw a car with one downstairs in our parking lot. - Original Message - From: gro...@beachcomp.com To: NT System Admin Issues ntsysadmin@lyris.sunbelt-software.com Sent: Wednesday, June 16, 2010 1:06 PM Subject: RE: How to block, but not block?! Those have a special reflective ink inside from what I read. -Original Message- From: James Kerr [mailto:cluster...@gmail.com] Sent: Wednesday, June 16, 2010 12:55 PM To: NT System Admin Issues Subject: Re: How to block, but not block?! You beat me too it. That reminds me, I always laugh when I see cars with the bar code on the side off them that lets them enter their homes complex. What's to stop someone from taking a photo it it and printing it on their printer and sticking it on the side of their own car? - Original Message - From: Kennedy, Jim kennedy...@elyriaschools.org To: NT System Admin Issues ntsysadmin@lyris.sunbelt-software.com Sent: Wednesday, June 16, 2010 12:45 PM Subject: RE: How to block, but not block?! And cell phone cameras. -Original Message- From: Erik Goldoff [mailto:egold...@gmail.com] Sent: Wednesday, June 16, 2010 12:40 PM To: NT System Admin Issues Subject: RE: How to block, but not block?! From a security standpoint, wouldn't you also need to block screen prints/screen captures with the spreadsheet open ? Erik Goldoff IT Consultant Systems, Networks, Security ' Security is an ongoing process, not a one time event ! ' -Original Message- From: gro...@beachcomp.com [mailto:gro...@beachcomp.com] Sent: Wednesday, June 16, 2010 12:13 PM To: NT System Admin Issues Subject: How to block, but not block?! Hi all, I have been asked to provide a solution which I don't think can be provided, but figured I'd get your input any see if you know of anything out there. The concept is as follows: There is an excel file which is highly secretive and guarded. The CEO wants to make sure people have no way of leaking it out of the company, but be free to use it. He wants to know if anyone prints it, or saves it externally, or e-mails it. This would be fine if the user was on a locked down machine, but he wants them to be able to do this on their daily use workstations. Anyone have any thoughts or ideas? Thanks! ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~
Re: How to block, but not block?!
then there is always the Camera in their cell phones as well. - Original Message - From: gro...@beachcomp.com To: NT System Admin Issues ntsysadmin@lyris.sunbelt-software.com Sent: Wednesday, June 16, 2010 12:37:54 PM GMT -05:00 US/Canada Eastern Subject: RE: How to block, but not block?! Good stuff but I did forget to add something. A user taking a screenshot of the spreadsheet, then saving it. So while they are locked down from doing any mods on the file, they can always screenshot and retype. Plot thickens. ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~
Re: How to block, but not block?!
behavioral problems. - Original Message - From: Carl Houseman c.house...@gmail.com To: NT System Admin Issues ntsysadmin@lyris.sunbelt-software.com Sent: Wednesday, June 16, 2010 1:14:25 PM GMT -05:00 US/Canada Eastern Subject: RE: How to block, but not block?! Quiz time! There are seldom technological solutions to . -Original Message- From: Kennedy, Jim [mailto:kennedy...@elyriaschools.org] Sent: Wednesday, June 16, 2010 12:46 PM To: NT System Admin Issues Subject: RE: How to block, but not block?! And cell phone cameras. -Original Message- From: Erik Goldoff [mailto:egold...@gmail.com] Sent: Wednesday, June 16, 2010 12:40 PM To: NT System Admin Issues Subject: RE: How to block, but not block?! From a security standpoint, wouldn't you also need to block screen prints/screen captures with the spreadsheet open ? Erik Goldoff IT Consultant Systems, Networks, Security ' Security is an ongoing process, not a one time event ! ' -Original Message- From: gro...@beachcomp.com [mailto:gro...@beachcomp.com] Sent: Wednesday, June 16, 2010 12:13 PM To: NT System Admin Issues Subject: How to block, but not block?! Hi all, I have been asked to provide a solution which I don't think can be provided, but figured I'd get your input any see if you know of anything out there. The concept is as follows: There is an excel file which is highly secretive and guarded. The CEO wants to make sure people have no way of leaking it out of the company, but be free to use it. He wants to know if anyone prints it, or saves it externally, or e-mails it. This would be fine if the user was on a locked down machine, but he wants them to be able to do this on their daily use workstations. Anyone have any thoughts or ideas? Thanks! ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~
Re: How to block, but not block?!
I've heard: One exception being the Electric Chair. --Matt Ross Ephrata School District - Original Message - From: Mike Tavares [mailto:miketava...@comcast.net] To: NT System Admin Issues [mailto:ntsysad...@lyris.sunbelt-software.com] Sent: Wed, 16 Jun 2010 10:54:39 -0700 Subject: Re: How to block, but not block?! behavioral problems. - Original Message - From: Carl Houseman c.house...@gmail.com To: NT System Admin Issues ntsysadmin@lyris.sunbelt-software.com Sent: Wednesday, June 16, 2010 1:14:25 PM GMT -05:00 US/Canada Eastern Subject: RE: How to block, but not block?! Quiz time! There are seldom technological solutions to . -Original Message- From: Kennedy, Jim [mailto:kennedy...@elyriaschools.org] Sent: Wednesday, June 16, 2010 12:46 PM To: NT System Admin Issues Subject: RE: How to block, but not block?! And cell phone cameras. -Original Message- From: Erik Goldoff [mailto:egold...@gmail.com] Sent: Wednesday, June 16, 2010 12:40 PM To: NT System Admin Issues Subject: RE: How to block, but not block?! From a security standpoint, wouldn't you also need to block screen prints/screen captures with the spreadsheet open ? Erik Goldoff IT Consultant Systems, Networks, Security ' Security is an ongoing process, not a one time event ! ' -Original Message- From: gro...@beachcomp.com [mailto:gro...@beachcomp.com] Sent: Wednesday, June 16, 2010 12:13 PM To: NT System Admin Issues Subject: How to block, but not block?! Hi all, I have been asked to provide a solution which I don't think can be provided, but figured I'd get your input any see if you know of anything out there. The concept is as follows: There is an excel file which is highly secretive and guarded. The CEO wants to make sure people have no way of leaking it out of the company, but be free to use it. He wants to know if anyone prints it, or saves it externally, or e-mails it. This would be fine if the user was on a locked down machine, but he wants them to be able to do this on their daily use workstations. Anyone have any thoughts or ideas? Thanks! ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~
Re: How to block, but not block?!
There are several good technology solutions to address much of your requirement. But not all of it. -ASB: http://XeeSM.com/AndrewBaker Sent from my Motorola Droid On Jun 16, 2010 12:13 PM, gro...@beachcomp.com wrote: Hi all, I have been asked to provide a solution which I don't think can be provided, but figured I'd get your input any see if you know of anything out there. The concept is as follows: There is an excel file which is highly secretive and guarded. The CEO wants to make sure people have no way of leaking it out of the company, but be free to use it. He wants to know if anyone prints it, or saves it externally, or e-mails it. This would be fine if the user was on a locked down machine, but he wants them to be able to do this on their daily use workstations. Anyone have any thoughts or ideas? Thanks! ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~
Re: How to block, but not block?!
You might want to see what the CIA, FBI, NSA or other organizations do with their sensitive information... :-) On Wed, Jun 16, 2010 at 12:13 PM, gro...@beachcomp.com wrote: Hi all, I have been asked to provide a solution which I don't think can be provided, but figured I'd get your input any see if you know of anything out there. The concept is as follows: There is an excel file which is highly secretive and guarded. The CEO wants to make sure people have no way of leaking it out of the company, but be free to use it. He wants to know if anyone prints it, or saves it externally, or e-mails it. This would be fine if the user was on a locked down machine, but he wants them to be able to do this on their daily use workstations. Anyone have any thoughts or ideas? Thanks! ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~
Re: How to block, but not block?!
Yeah go watch a few seasons of 24. On 6/16/2010 2:59 PM, Jonathan Link wrote: You might want to see what the CIA, FBI, NSA or other organizations do with their sensitive information... :-) On Wed, Jun 16, 2010 at 12:13 PM, gro...@beachcomp.com mailto:gro...@beachcomp.com wrote: Hi all, I have been asked to provide a solution which I don't think can be provided, but figured I'd get your input any see if you know of anything out there. The concept is as follows: There is an excel file which is highly secretive and guarded. The CEO wants to make sure people have no way of leaking it out of the company, but be free to use it. He wants to know if anyone prints it, or saves it externally, or e-mails it. This would be fine if the user was on a locked down machine, but he wants them to be able to do this on their daily use workstations. Anyone have any thoughts or ideas? Thanks! ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~
RE: How to block, but not block?!
Actually if he uses Microsoft's IRM solution it locks out the screenshot functions so they wouldn't be able to do that. It's surprisingly good. However...there is still no defense (short of the aforementioned personal supervision) to prevent them from taking a picture of the screen with a camera. Ben M. Schorr Chief Executive Officer __ Roland Schorr Tower www.rolandschorr.com b...@rolandschorr.com Twitter: http://www.twitter.com/bschorr Facebook: http://www.facebook.com/rolandschorr -Original Message- From: gro...@beachcomp.com [mailto:gro...@beachcomp.com] Sent: Wednesday, June 16, 2010 06:38 To: NT System Admin Issues Subject: RE: How to block, but not block?! Good stuff but I did forget to add something. A user taking a screenshot of the spreadsheet, then saving it. So while they are locked down from doing any mods on the file, they can always screenshot and retype. Plot thickens. -Original Message- From: John Hornbuckle [mailto:john.hornbuc...@taylor.k12.fl.us] Sent: Wednesday, June 16, 2010 12:30 PM To: NT System Admin Issues Subject: RE: How to block, but not block?! http://office.microsoft.com/en-us/excel-help/information-rights-manageme nt-i n-the-2007-microsoft-office-system-HA010102918.aspx John Hornbuckle MIS Department Taylor County School District www.taylor.k12.fl.us -Original Message- From: gro...@beachcomp.com [mailto:gro...@beachcomp.com] Sent: Wednesday, June 16, 2010 12:13 PM To: NT System Admin Issues Subject: How to block, but not block?! Hi all, I have been asked to provide a solution which I don't think can be provided, but figured I'd get your input any see if you know of anything out there. The concept is as follows: There is an excel file which is highly secretive and guarded. The CEO wants to make sure people have no way of leaking it out of the company, but be free to use it. He wants to know if anyone prints it, or saves it externally, or e-mails it. This would be fine if the user was on a locked down machine, but he wants them to be able to do this on their daily use workstations. Anyone have any thoughts or ideas? Thanks! ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ NOTICE: Florida has a broad public records law. Most written communications to or from this entity are public records that will be disclosed to the public and the media upon request. E-mail communications may be subject to public disclosure. ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~
Re: How to block, but not block?!
On Wed, Jun 16, 2010 at 3:14 PM, Ben Schorr b...@rolandschorr.com wrote: Actually if he uses Microsoft's IRM solution it locks out the screenshot functions so they wouldn't be able to do that. It's surprisingly good. FWIW, Microsoft's own marketing page says it may not be effective against third-party screenshot tools. -- Ben ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~
RE: How to block, but not block?!
Well, I haven't seen it tested against every possible tool but I've seen it tested against most of the major ones and it worked. I think they're just covering the possibility that somebody may figure out a way to create a purpose-built tool that gets around it. Your mileage may vary, of course. In any event, it's still not a perfect solution because there are still ways around it. Ben M. Schorr Chief Executive Officer __ Roland Schorr Tower www.rolandschorr.com b...@rolandschorr.com Twitter: http://www.twitter.com/bschorr Facebook: http://www.facebook.com/rolandschorr -Original Message- From: Ben Scott [mailto:mailvor...@gmail.com] Sent: Wednesday, June 16, 2010 09:36 To: NT System Admin Issues Subject: Re: How to block, but not block?! On Wed, Jun 16, 2010 at 3:14 PM, Ben Schorr b...@rolandschorr.com wrote: Actually if he uses Microsoft's IRM solution it locks out the screenshot functions so they wouldn't be able to do that. It's surprisingly good. FWIW, Microsoft's own marketing page says it may not be effective against third-party screenshot tools. -- Ben ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~
Re: How to block, but not block?!
They put you in jail for leaking it. They also implement extensive and expensive background checks, not to mention data segregation. You can only access the data if you need it. Just because you have clearance doesn't mean you can access all data that is rated at that clearance level. On Wed, Jun 16, 2010 at 2:59 PM, Jonathan Link jonathan.l...@gmail.comwrote: You might want to see what the CIA, FBI, NSA or other organizations do with their sensitive information... :-) On Wed, Jun 16, 2010 at 12:13 PM, gro...@beachcomp.com wrote: Hi all, I have been asked to provide a solution which I don't think can be provided, but figured I'd get your input any see if you know of anything out there. The concept is as follows: There is an excel file which is highly secretive and guarded. The CEO wants to make sure people have no way of leaking it out of the company, but be free to use it. He wants to know if anyone prints it, or saves it externally, or e-mails it. This would be fine if the user was on a locked down machine, but he wants them to be able to do this on their daily use workstations. Anyone have any thoughts or ideas? Thanks! ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~
RE: How to block, but not block?!
Which can probably be duplicated if you are serious enough to want to so it. Sent using MOTOBLUR™ on T-Mobile -Original message- From: gro...@beachcomp.com To: NT System Admin Issues ntsysadmin@lyris.sunbelt-software.com Sent: Wed, Jun 16, 2010 11:03:09 CDT Subject: RE: How to block, but not block?! Those have a special reflective ink inside from what I read. -Original Message- From: James Kerr [mailto:cluster...@gmail.com] Sent: Wednesday, June 16, 2010 12:55 PM To: NT System Admin Issues Subject: Re: How to block, but not block?! You beat me too it. That reminds me, I always laugh when I see cars with the bar code on the side off them that lets them enter their homes complex. What's to stop someone from taking a photo it it and printing it on their printer and sticking it on the side of their own car? - Original Message - From: Kennedy, Jim kennedy...@elyriaschools.org To: NT System Admin Issues ntsysadmin@lyris.sunbelt-software.com Sent: Wednesday, June 16, 2010 12:45 PM Subject: RE: How to block, but not block?! And cell phone cameras. -Original Message- From: Erik Goldoff [mailto:egold...@gmail.com] Sent: Wednesday, June 16, 2010 12:40 PM To: NT System Admin Issues Subject: RE: How to block, but not block?! From a security standpoint, wouldn't you also need to block screen prints/screen captures with the spreadsheet open ? Erik Goldoff IT Consultant Systems, Networks, Security ' Security is an ongoing process, not a one time event ! ' -Original Message- From: gro...@beachcomp.com [mailto:gro...@beachcomp.com] Sent: Wednesday, June 16, 2010 12:13 PM To: NT System Admin Issues Subject: How to block, but not block?! Hi all, I have been asked to provide a solution which I don't think can be provided, but figured I'd get your input any see if you know of anything out there. The concept is as follows: There is an excel file which is highly secretive and guarded. The CEO wants to make sure people have no way of leaking it out of the company, but be free to use it. He wants to know if anyone prints it, or saves it externally, or e-mails it. This would be fine if the user was on a locked down machine, but he wants them to be able to do this on their daily use workstations. Anyone have any thoughts or ideas? Thanks! ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~
Re: How to block, but not block?!
They just let the Chinese look at everything, no copying allowed! John W. Cook Systems Administrator Partnership for Strong Families From: Jonathan Link jonathan.l...@gmail.com To: NT System Admin Issues ntsysadmin@lyris.sunbelt-software.com Sent: Wed Jun 16 14:59:01 2010 Subject: Re: How to block, but not block?! You might want to see what the CIA, FBI, NSA or other organizations do with their sensitive information... :-) On Wed, Jun 16, 2010 at 12:13 PM, gro...@beachcomp.commailto:gro...@beachcomp.com wrote: Hi all, I have been asked to provide a solution which I don't think can be provided, but figured I'd get your input any see if you know of anything out there. The concept is as follows: There is an excel file which is highly secretive and guarded. The CEO wants to make sure people have no way of leaking it out of the company, but be free to use it. He wants to know if anyone prints it, or saves it externally, or e-mails it. This would be fine if the user was on a locked down machine, but he wants them to be able to do this on their daily use workstations. Anyone have any thoughts or ideas? Thanks! ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ CONFIDENTIALITY STATEMENT: The information transmitted, or contained or attached to or with this Notice is intended only for the person or entity to which it is addressed and may contain Protected Health Information (PHI), confidential and/or privileged material. Any review, transmission, dissemination, or other use of, and taking any action in reliance upon this information by persons or entities other than the intended recipient without the express written consent of the sender are prohibited. This information may be protected by the Health Insurance Portability and Accountability Act of 1996 (HIPAA), and other Federal and Florida laws. Improper or unauthorized use or disclosure of this information could result in civil and/or criminal penalties. Consider the environment. Please don't print this e-mail unless you really need to. This email and any attached files are confidential and intended solely for the intended recipient(s). If you are not the named recipient you should not read, distribute, copy or alter this email. Any views or opinions expressed in this email are those of the author and do not represent those of the company. Warning: Although precautions have been taken to make sure no viruses are present in this email, the company cannot accept responsibility for any loss or damage that arise from the use of this email or attachments. ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~
RE: How to block, but not block?!
Paper and pencil... -Original Message- From: Kennedy, Jim [mailto:kennedy...@elyriaschools.org] Sent: Wednesday, June 16, 2010 9:46 AM To: NT System Admin Issues Subject: RE: How to block, but not block?! And cell phone cameras. -Original Message- From: Erik Goldoff [mailto:egold...@gmail.com] Sent: Wednesday, June 16, 2010 12:40 PM To: NT System Admin Issues Subject: RE: How to block, but not block?! From a security standpoint, wouldn't you also need to block screen prints/screen captures with the spreadsheet open ? Erik Goldoff IT Consultant Systems, Networks, Security ' Security is an ongoing process, not a one time event ! ' -Original Message- From: gro...@beachcomp.com [mailto:gro...@beachcomp.com] Sent: Wednesday, June 16, 2010 12:13 PM To: NT System Admin Issues Subject: How to block, but not block?! Hi all, I have been asked to provide a solution which I don't think can be provided, but figured I'd get your input any see if you know of anything out there. The concept is as follows: There is an excel file which is highly secretive and guarded. The CEO wants to make sure people have no way of leaking it out of the company, but be free to use it. He wants to know if anyone prints it, or saves it externally, or e-mails it. This would be fine if the user was on a locked down machine, but he wants them to be able to do this on their daily use workstations. Anyone have any thoughts or ideas? Thanks! ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~
RE: How to block, but not block?!
Security clearances.. but even then info gets out! From: Jonathan Link [mailto:jonathan.l...@gmail.com] Sent: Wednesday, June 16, 2010 11:59 AM To: NT System Admin Issues Subject: Re: How to block, but not block?! You might want to see what the CIA, FBI, NSA or other organizations do with their sensitive information... :-) On Wed, Jun 16, 2010 at 12:13 PM, gro...@beachcomp.com wrote: Hi all, I have been asked to provide a solution which I don't think can be provided, but figured I'd get your input any see if you know of anything out there. The concept is as follows: There is an excel file which is highly secretive and guarded. The CEO wants to make sure people have no way of leaking it out of the company, but be free to use it. He wants to know if anyone prints it, or saves it externally, or e-mails it. This would be fine if the user was on a locked down machine, but he wants them to be able to do this on their daily use workstations. Anyone have any thoughts or ideas? Thanks! ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~
Re: How to block, but not block?!
He seems to be unclear on the concept of you can't have your cake and eat it too. I would lay out the threats you're finding in this string of mail, and suggest that implementing all of the the countermeasures for them will destroy the business, then ask him to pick the one or two or three that he fears the most and for which the countermeasures won't kill the goose that lays the golden egg... Kurt On Wed, Jun 16, 2010 at 09:13, gro...@beachcomp.com wrote: Hi all, I have been asked to provide a solution which I don't think can be provided, but figured I'd get your input any see if you know of anything out there. The concept is as follows: There is an excel file which is highly secretive and guarded. The CEO wants to make sure people have no way of leaking it out of the company, but be free to use it. He wants to know if anyone prints it, or saves it externally, or e-mails it. This would be fine if the user was on a locked down machine, but he wants them to be able to do this on their daily use workstations. Anyone have any thoughts or ideas? Thanks! ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~ ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/ ~
