🚀 go-pugleaf

RetroBBS NetNews Server

Inspired by RockSolid Light RIP Retro Guy

Article View: comp.security.misc
Article #432

Re: Security Policy

#432
From: Rob J. Nauta
Date: Thu, 20 Aug 1992 21:02
26 lines
1773 bytes
Why not just use the good old fascist method ? It's used by 90% of
the sites connected, so it's been proven to be effective (although not
very satisfactory for the users).
In general, start out with no rules. If someone offends or annoys the
operator (detection is based on luck/chance), a punishment is found,
based on a whim, the mood of the operator at the moment, etc.
Don't bother with letting the user explain why he ran the 'crontab'
command, if he knows how it works, he's obviously a hacker, and you'd
better shut them up. Ridiculize the offender in public, eg. if he
uses too many diskspace, or uses ftp too much, remind users in the
/etc/motd to be careful with ftp'ing GIF's, or they will end up
as J. Random User, who lost his account for using the company's system
for collecting pornography.

Right now, you must think I'm crazy, that nobody has this system.
Well, you are wrong, most system admins start out this way, with
no written rules, rules that are hastily created and applied to cover
past actions. The EFF can tell you thousands of stories, collected
from people who lost their account on a whim of the mighty root.

Rob
-- 
/-----------------------------------------------\	Never		   ,==.
| Rob J. Nauta, UNIX computer security expert.	| 	 Apologize,	  /@  |
| rob@wzv.win.tue.nl, Phone: +31-40-837549	| 	  Never		 /_  <
| Feel free to email me for free advice		|	   Explain.	=" `g'
Technical Details
Message-ID: <3748@wzv.win.tue.nl>
Path: arc1-ca.pugleaf.net!sparky!uunet!mcsun!sun4nl!tuegate.tue.nl!svin02!wzv!rob
References: <1992Aug19.195116.1885@zia.aoc.nrao.edu>

Show Full Headers
Complete Article Headers
Path: arc1-ca.pugleaf.net!sparky!uunet!mcsun!sun4nl!tuegate.tue.nl!svin02!wzv!rob
From: rob@wzv.win.tue.nl (Rob J. Nauta)
Newsgroups: comp.security.misc
Subject: Re: Security Policy
Message-ID: <3748@wzv.win.tue.nl>
Date: 20 Aug 92 21:02:37 GMT
References: <1992Aug19.195116.1885@zia.aoc.nrao.edu>
Organization: Sex, UNIX & Rock 'n Roll
Lines: 26