On Mon, 22 Jul 2002, Thomas Charron wrote:

>   The *ONLY* concern I've had with it is ease of subverting security.
> Primarily, reseting the admin password is as easy as pushing a little button
> with a pencil top, and pushing it again twice, then holding it down.  This
> resets the admin password..  No way to disable this 'feature'.  Not to bad,
> but it's a pet peeve I guess..

Ken's (security) rule-of-thumb: if you don't have physical security,
you don't have security.  Period.  Looked at a different way, I -like-
being able to reset passwords easily through a button: makes it easy to
re-configure those pesky <generic network function> boxen.  I just make
*sure* that it's under lock and key.  Granted, if you're in a -really-
small office, it's pretty much a non-issue, but if you're in a mid-sized
one, you really should have restricted physical access to servers.  And,
heck, even in a small office, if it's out of the way, the cleaners won't
run over ther power cord with a vacuum cleaner.

-Ken


*****************************************************************
To unsubscribe from this list, send mail to [EMAIL PROTECTED]
with the text 'unsubscribe gnhlug' in the message body.
*****************************************************************

Reply via email to