🚀 go-pugleaf

-----BEGIN PGP SIGNED MESSAGE-----

people?


                             Driver's Seat
                             -------- ----

Both sites started with a bang.

The smaller site had two security incidents within the first three hours.

Two different format (Microsoft Access DB, Excel spreadsheet) copies of
employee social security numbers and other personal personnel information
flew out of the smaller site's Internet connection.

Internet firewalls have no protection against file transfer via email.
Yet companies often disallow FTP, another command for transferring files.

ALL email is transferred as a file.

My two managers shook their heads at people being so stupid as to mail
company confidential information over the Internet in the clear.

Their security rule was "Don't send it out over the Internet unless it's
okay to read about in the next day's paper."

The transmissions included the managers' social security numbers too.

For non-U.S. people: a defacto key for accessing all of ones personal records.


And why did I create and turn on email monitoring at that site?

Well, those business magazines for the computer industry like to sell big
screaming "Internet Security: the Sky is Falling!!!" covers now and then.

So, one triggered the Chairman to start making strange noises about shutting
down the Internet connection for security reasons. Also said something about
having email printed out at the Internet system and hand-delivered.

Now THAT scared the hell out of the rest of us, from geeks to managers, so,
being the hired gun for doing Internet security, I created some capture code.
All email in and out of the firm was now being copied to a 'save' directory.

Each night I went over it - all email traffic - with the aid of my analytics:
keyword spotting and keyword excluding software.

I had never heard of ECHELON or DICTIONARY or anythi


-----BEGIN PGP SIGNATURE-----
Version: PGPfreeware 2.9.1

+joLQ3IJCyeqicbzl0oEs8vypmGIQW47tjFYjgOnNFQygtOFZubhVyHbmp5TtH0B
BkQabiT0Kac90K26DB3zj8lBBcqGCJf5J5WVMAxtzgcLdwI5PokW8mJA5E0PmT5t
uPwquQEyDOtYiJWWeuSH2OlwJX93BtEMzqSedj5sdiNJYzk2cNbH6nY9vnzuWCmw
aHNPF0HvG7cp73L+yW==
=8rqs
-----END PGP SIGNATURE-----