Has Corporate Info Security Gotten Out of Hand?
KoshClassic asks: "What is the right balance between security and productivity, in the corporate IT environment? Looking back at my company, 10 years ago, our machines were connected directly to the Internet, no proxy, no firewall, no antivirus software. Today, my company's proxy server blocks access to: 'bad' web sites (such as Google Groups; our 'antivirus' software prevents our machines (even machines that host production applications) from carrying out legitimate functions, such as the sending of email via SMTP; and individual employees are forced to apply security patches with little or no notice, under threat of their machines loosing network access, if they do not comply by the deadline. On one hand, you can never be too secure, however on the other hand, have we become so secure that we're stifling our own ability to get things done? What is the situation like at other companies?"
- The reasons there are driving rules is because kars kan KILL people!!! Komputer security is mainly about defending ourselves from other komputer users!
- If your kar is speeding a kop kan chase you down and give you a tikket!
- You have a kourt where you kan go with your tikket and fight the tikket!
- You drive your kar so much because there are bigger and better highways, and that means you need better tires!
- You lokk your kar because anyone kan drive your kar anywhere and there are so many kars that noone can point out a stolen kar!
- You can get away with your kar after a theft!
- People die in kar accidents!
Some kuestions for u:1. How will u break speed limits in your komputer?
2. How kan u kill someone with your komputer? (other than hitting them on the head)
3. How kan u put a steering lokk in your komputer?
As car thefts become a norm, we must lock our cars, when that's not enough, we need to put on the steering lock, alarm, then immobalizer, and now the security datadot. However, I think overall we do benefit from the introduction of vehicles.
I kan't wait for the day when komputer theft bekomes a "norm". So much for an insightful komment!!!!
Companies today cannot afford to not be producing at 100% efficiency. With increasing competition from China, India, and numerous other nations, any large company that is not completely efficient will quickly run into problems, if not a swift bankruptcy.
Much like a nation should never trade freedom and liberty for security, a firm cannot trade efficiency for security. The end result is a defunct nation or firm, void of all it once stood for.
Cyric Zndovzny at your service.
[OK, this time in the right place - sorry, GP poster]
You do know there are no binaries on Google groups, right? And you do know that there are groups beginning with letters other than "alt", right? Like "sci" and "comp" and so forth, right? Or are you really that big a flaming turd?
"Is life so dear, or peace so sweet, as to be purchased at the price of chains and slavery?" - Patrick Henry
Yes, this is the case sometimes. But honestly... How many times does [using the internet become necessary for] anyone but the most radical coal-face level three network technician? And if you are one of those then I would imagine you know some of the dangers of providing this access to everyone!
The company I work at doesn't filter the web. We assume that all of our employees are adults, and treat them accordingly. I use the internet all the time to find answers to problems. It is usually much quicker than reading through documentation.
If your company is so filled with deadwood that you can't even trust people to use a web browser, you've got big problems. Or the kind of work you do is so menial that you need a slave-driver mentality to motivate people every day. Either way, I'd start learning how to speak Hindu or Mandarin, because you may need it in a few years.
As I said in another post in this thread If a analyst/tech/programmer can provide a good valid business reason to get access above what Joe in Marketing can then he should be allowed to create a tunnel. He should also be required to sign paper saying he won't abuse the tunnel as well.
What about taking a dump? This is also a risky activity, and I feel it should require a form to be filled out. Think about it-- there is the possibility of masturbation-- or of sexual encounters in the bathroom-- or any one of a number of inappropriate behaviors. If you don't trust or understand your employees, a mentality like this becomes "reasonable."
"Any connection between your reality and mine is purely coincidental." -Slashdot
I love all the "fuck you" I'm getting from M$ shills and fanboys. They are all so angry because their stuff does not work and everyone knows it.
If their stuff didn't work, and everyone knew it, then people would stop buying it. So, that means that you are stupid and a liar. Notice, I'm not defending Microsoft. I'm just stating the obvious flaw in your illogic.
Learn to love Alaska