Hi JayJay,

I have done this already at a client's site - just with their test
environment - not the production environment of course. I just shut down
the server and pulled the power plug - I used to call it PTP-Handling
(Pull The Plug).
Funny thing, when contacting the helpdesk to resolve the issue, they
needed a 5 hours check on all systems to realise that there was
something fishy with the machine itself. Nobody even bothered to ask the
most simple question... But ok, this is more service...
But while assessing their security, I was walking in and out at a
computing center hosting application and data for about 300 city
councils - doors were opened by friendly people, etc. nobody asked what
I carried in my bags, nothing in terms of common sense in security. And
managers told me that that building was a high security area.
As I understood, it is not only the software or hardware. It is the
'brainware' of a number of people...
Whatever we do to secure our applications as developers, architects,
etc. - the common basics are never met... Common basics beyond IT...
Cheers

BJ

-----Original Message-----
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of John Jenkins
Sent: Wednesday, 1 June 2005 4:08 PM
To: [email protected]
Subject: RE: [U2] Uniobjects hack (diverging into Outages I have known
and loved)

BJ

Yes I think it's pretty tight . I am sort of assuming everyone uses
ON.ERROR and ON.ABORT as a matter of course. (Otherwise they are
obviously not worried about security and keep their credit card PINS in
their wallets and leave them on the sidewalk.

On a sort-of-spin-off point - I (used to/another hat) test & demonstrate
RFS after I set it up and configured it for clients some years ago. -
How do you do that? .... pull out the server power supply cable of
course.

It was AMAZING how unwilling people were to check everything worked.
How Else?


---
This email and any files transmitted with it are confidential to the intended 
recipient and may be privileged. If you have received this email inadvertently 
or you are not the intended recipient, you may not disseminate, distribute, 
copy or in any way rely on it. Further, you should notify the sender 
immediately and delete the email from your computer. Whilst we have taken 
precautions to alert us to the presence of computer viruses, we cannot 
guarantee that this email and any files transmitted with it are free from such 
viruses.
-------
u2-users mailing list
[email protected]
To unsubscribe please visit http://listserver.u2ug.org/

Reply via email to