Re: SOAPBOX (was Re:Password Testing)

[Bayard Coolidge USG ZKO3-3/S20]

Paul Lussier <[EMAIL PROTECTED]> said, in part,:
>>> but if they can walk into the courthouse and get the password file,

All too true, I'm sorry to say... When I was working in the field,
many of our larger customers hired security consultants and the
bottom line was always *physical* security. I've worked on a lot of
operating systems and a lot of different hardware, and in just about
every case, if someone could physically access the system and manually
reboot it, and intercept control of the boot process (i.e., put it
in single-user mode, and/or boot off of a floppy), or boot it off
of an installation disk, well, you could just write it all off.

I know that seems like an enethema in our open-source/free-beer
world, but the reality is, there are bad people out there, and many
of them are very computer-literate and could do some interesting
things by rebooting a system and sticking in their own floppy...

Bayard

**********************************************************
To unsubscribe from this list, send mail to
[EMAIL PROTECTED] with the following text in the
*body* (*not* the subject line) of the letter:
unsubscribe gnhlug
**********************************************************