Click to See Complete Forum and Search --> : Weak security programming...
The告lent|3lade
04-10-2003, 10:16 PM
I am amazed by the weak security of the program that they use at my local library.. It only allows you to use their specifically programmed browser and not anything else. You are supposed to login and after you do it gives you a countdown timer and that gives you one hour. Once the timer reaches 0 it closes everything and logs you off. The security of this web program is less than that of a program that I would write. All that is required to circumvent all of their security is to press ctrl-alt-del. It gives you the NT taskmanager which gives you complete control of the machine. I seem to find this lack of security in programs being sold today and i think it is pitifully lacking on the part of software designers today.. Any thoughts on this?
The告lent|3lade
"Veni, Vidi, Vici."
DocEvi1
04-11-2003, 05:36 AM
:t Welcome to Sysopt :t
There are two things to point out,
1) People who use Library computers (in the UK) are usually respectful of the equipment as it is their only access to the internet
2)People who use Library computers are generally less computer-literate than you or I.
Security is difficult to implement and takes time. When out-sourcing it turns out to be very expensive task for a very little used aspect of the program.
I can almost garuntee that you don't have complete control over the PC. The user you will be logged on as will have limited priveledges anyway.
Stefan
fishybawb
04-11-2003, 11:32 AM
Originally posted by The告lent|3lade
I seem to find this lack of security in programs being sold today and i think it is pitifully lacking on the part of software designers today.. Any thoughts on this?
The告lent|3lade
"Veni, Vidi, Vici."
It's a *library*, not the Pentagon. As DocEvi1 points out, most patrons have a bit of respect.
The告lent|3lade
04-11-2003, 04:58 PM
Thank you all for the welcome, I know it is just a library but I know that if I was providing a service I would want to be secure against people with harmful intentions. Personally all I want to do at the library is check my e-mail and do a little research, really playing with things where I might mess something up is for my own equipment. But this is a major lack. I could access every file and directory of the local drive in addition to multiple network drives with full access. All of this stumbled upon by accident when my browser froze and I tried to close it and restart it. It wouldn't take much to do what I did, or much knowledge. It just seems to me that security programs only protect the very basics and not more of the really important things.
The告lent|3lade
"Veni, Vidi, Vici."
qball
04-11-2003, 11:01 PM
Ok...
any chance since you "use" library and find it a resource...
that you can offer some service to "give" back to library?
non-malicious, of course.
why are using such a "unsecure" library!
terminate library card and report to the proper authorities.
?
SysOpt.com
Copyright Internet.com Inc. All Rights Reserved.