[44705] in North American Network Operators' Group
Re: USGS returns to the Internet
daemon@ATHENA.MIT.EDU (Valdis.Kletnieks@vt.edu)
Mon Dec 10 12:17:59 2001
Message-Id: <200112101716.fBAHGqjP031217@foo-bar-baz.cc.vt.edu>
To: wb8foz@nrk.com
Cc: nanog@merit.edu (nanog list)
In-Reply-To: Your message of "Sun, 09 Dec 2001 21:54:31 EST."
<200112100254.VAA27351@sigma.nrk.com>
From: Valdis.Kletnieks@vt.edu
Mime-Version: 1.0
Content-Type: multipart/signed; boundary="==_Exmh_-1076322443P";
micalg=pgp-sha1; protocol="application/pgp-signature"
Content-Transfer-Encoding: 7bit
Date: Mon, 10 Dec 2001 12:16:51 -0500
Errors-To: owner-nanog-outgoing@merit.edu
--==_Exmh_-1076322443P
Content-Type: text/plain; charset=us-ascii
On Sun, 09 Dec 2001 21:54:31 EST, David Lesher <wb8foz@nrk.com> said:
> Unnamed Administration sources reported that Patrick Greenwell said:
> > page server" of the DOI had access to the Indian trust data. My
> > speculation would be that it does if it's Internet connected...
> I can see no reason why a server full of personal data would be.
Personally, given the amount and size of holes the court-appointed tiger
team found, and the fact that *previous* security audits going back as
far as 1989 (it appears) have found problems, I'd be surprised if they
had gotten it *right* and segregated that server from the Internet.
And of course, given the judge's wording, if the data server is on the
Internet, then every DoI host that's on the Internet has access to it - and
thus needs to have its plug pulled.
Bet somebody's wishing that server had been on a private network with
only several other dozen machines.... ;)
--
Valdis Kletnieks
Operating Systems Analyst
Virginia Tech
--==_Exmh_-1076322443P
Content-Type: application/pgp-signature
-----BEGIN PGP SIGNATURE-----
Version: PGP 6.5.8
Comment: Exmh version 2.5 07/13/2001
iQA/AwUBPBTuA3At5Vm009ewEQK45QCeIFTneYqL0jrbt9yf+p58KzdumP4An3IW
A/4vATngX3FqtBo7loILM6CQ
=VXHP
-----END PGP SIGNATURE-----
--==_Exmh_-1076322443P--
