[5186] in Release_7.7_team
Re: VPN for Solaris
daemon@ATHENA.MIT.EDU (Jeffrey I. Schiller)
Wed Jun 29 20:57:18 2005
From: "Jeffrey I. Schiller" <jis@MIT.EDU>
To: Alex T Prengel <alexp@mit.edu>
Cc: release-team@mit.edu, ops@mit.edu, Jonathan Reed <jdreed@mit.edu>
In-Reply-To: <200506292336.j5TNaBha008914@dit.mit.edu>
Content-Type: text/plain
Message-Id: <1120093027.20989.2.camel@jis.tzo.com>
Mime-Version: 1.0
Date: Wed, 29 Jun 2005 20:57:07 -0400
Content-Transfer-Encoding: 7bit
X-Spam-Score: -2.599
X-Spam-Flag: NO
Do you know that the ACCESS DENIED is from interlopers rather then
legitimate users off-campus who are now locked out?
-Jeff
On Wed, 2005-06-29 at 19:36, Alex T Prengel wrote:
> >Of course this begs the obvious question. Why are we "imposing" these
> >restrictions in the first place (presumably we've been running fine for
> >years [if not decades] without them)?
>
> Because there's essentially nothing preventing anyone on the Internet
> from "borrowing" our licenses for these applications. All they need to
> know (in most cases) is the name of the relevant license server (and
> have access to the binaries, which is not hard to get). While security
> by obscurity works to some extent, it becomes increasingly ineffective
> as more and more MIT grads depart with this knowledge.
>
> I've already seen evidence that some unauthorized use may have taken
> place, and have seen numbers of "ACCESS DENIED" log records since the
> IP address limits have been in place, presumably blocking such use.
>
> Alex
--
=============================================================================
Jeffrey I. Schiller
MIT Network Manager
Information Services and Technology
Massachusetts Institute of Technology
77 Massachusetts Avenue Room W92-190
Cambridge, MA 02139-4307
617.253.0161 - Voice
jis@mit.edu
============================================================================
