And the simple fact is that if I allow Internet browsing from a machine
which also has access to confidential data, it is VERY difficult to keep
the user of that machine from transferring the data outside the company.
Aside from that you have things like USB disks, pcmcia disks, email,
etc.  It is very like law enforcement....police officers can do little
to directly prevent crime.  They can only hope to catch the perpetrators
after the fact.  Ditto for sys/security admins.

------------------------------------------------------------------------
Jim Wildman, CISSP                                      [EMAIL PROTECTED]
http://www.rossberry.com

On Wed, 2 Oct 2002 [EMAIL PROTECTED] wrote:

> On Wed, 2 Oct 2002, Stephen Liu wrote:
> 
> > Hi Ken,
> > 
> > Thanks for your response.
> > 
> > By adding some specific features, I think, LTSP can be a versatile 
> > application not only confined to school.
> 
> True, we do need some security features added in, but who says it is
> currently confined to schools ?
> 
> There are corporations (some very large) all over the world using
> LTSP.
> 
> Jim McQuillan
> [EMAIL PROTECTED]
> 
> 
> 
> > 
> > Stephen
> > 
> > 
> > At 10:50 AM 10/1/2002 -0700, Ken Barber wrote:
> > >On Monday 30 September 2002 09:00 pm, Stephen Liu wrote:
> > >
> > > > But if users are allowed to browse Internet and send email that may create
> > > > a hole.  Confidential data can be dumped to streets as attachment to email
> > > > or webmail or even copied to their body.  Is there any technical remedy
> > > > without scarifying users from browsing or emailing?
> > >
> > >Stephen,
> > >
> > >I've been thinking about this myself for the last few months.  I'm a 
> > >certified
> > >security expert (GSEC) and I believe that LTSP can be made reasonably secure.
> > >
> > >I hope to look into this sometime in the next few months.
> > >
> > >Ken Barber
> > >--
> > >"If you spend more on coffee than on IT security, then you will be hacked.
> > >What's more, you deserve to be hacked."
> > >         -- Richard Clarke, White House Chief of Cyber Security (USA)
> > 
> > 
> > 
> > 
> > -------------------------------------------------------
> > This sf.net email is sponsored by: DEDICATED SERVERS only $89!
> > Linux or FreeBSD, FREE setup, FAST network. Get your own server 
> > today at http://www.ServePath.com/indexfm.htm
> > _____________________________________________________________________
> > Ltsp-discuss mailing list.   To un-subscribe, or change prefs, goto:
> >       https://lists.sourceforge.net/lists/listinfo/ltsp-discuss
> > For additional LTSP help,   try #ltsp channel on irc.openprojects.net
> > 
> 
> 



-------------------------------------------------------
This sf.net email is sponsored by:ThinkGeek
Welcome to geek heaven.
http://thinkgeek.com/sf
_____________________________________________________________________
Ltsp-discuss mailing list.   To un-subscribe, or change prefs, goto:
      https://lists.sourceforge.net/lists/listinfo/ltsp-discuss
For additional LTSP help,   try #ltsp channel on irc.openprojects.net

Reply via email to