🚀 go-pugleaf

RetroBBS NetNews Server

Inspired by RockSolid Light RIP Retro Guy

Article View: csu.general
Article #117

Re: Employees: Timesheet Maker on the Web!

#117
From: Marcio Teixeira
Date: Tue, 23 Jul 1996 00:00
41 lines
2567 bytes
Robert Ruth wrote:
> 
> A quick question and no I am not an employee, but I feel the
> question is valid. How secure under this system is the persons
> information?  Can someone gain access to the information while
> the person is online inputing it or after they have loged off?
> Time card information is considered private by many people and
> I for one have always had concerns when private information is
> gathered or processed on a network system.

Unfortunatly a temporary Postscript file is created locally (on our Web
server) as a result of a Print request. The client then retrieves the
Postscript file to display it. Obviously the data is vunerable during
that period and while it is in transit. It is only as secure as your
average Web form, which is to say, not very much.

You're right, some people might be unconfortable having the data come to
our server at all, so I'll put a message up making it clear that the
system is not bullet-proof. I will be making the Java opcodes/source
available soon, so people can at least run it off their own machines,
where it will be secure.

> I am not trying to make people paranoid, but I am rather interested
> in knowing how secure such information is when processed in this
> manner.

Well, thank you for pointing this out. I should have at least brought
the point up, since I realize not everyone is clear on the risks
involved with WWW forms.

Marcio Luis Teixeira

----
Marcio Luis Teixeira                               
marciot@vis.colostate.edu  
http://www.vis.colostate.edu/~marciot            
marciot@holly.colostate.edu  

    SURGEON GENERAL'S WARNING: Smoking may be hazardous to your health. 
                               Should you catch on fire, don't inhale.
Technical Details
Message-ID: <31F5529C.41C6@vis.colostate.edu>
Path: arc1-ca.pugleaf.net!unknown!not-for-mail
References: <31F5049C.41C6@vis.colostate.edu> <4t3dn2$337m@yuma.ACNS.ColoState.EDU>

Show Full Headers
Complete Article Headers
X-Google-Language: ENGLISH,ASCII-7-bit
X-Google-Thread: 10244d,265cca9493611d93
X-Google-Attributes: gid10244d,public
X-Google-Thread: 148df6,265cca9493611d93
X-Google-Attributes: gid148df6,public
X-Google-Thread: 15fcd9,265cca9493611d93
X-Google-Attributes: gid15fcd9,public
From: Marcio Teixeira <marciot@vis.colostate.edu>
Subject: Re: Employees: Timesheet Maker on the Web!
Date: 1996/07/23
Message-ID: <31F5529C.41C6@vis.colostate.edu>
X-Deja-AN: 169799001
references: <31F5049C.41C6@vis.colostate.edu> <4t3dn2$337m@yuma.ACNS.ColoState.EDU>
content-type: text/plain; charset=us-ascii
organization: Computer Visualization Lab, Colorado State University
mime-version: 1.0
newsgroups: csu.general,csu.cs,csu.lance
x-mailer: Mozilla 3.0b5aGold (X11; I; IRIX 5.3 IP22)