Re: Security-Compromised NT System [what can they see?]
From: Hugo Wilkinson (hugowilkinson@yahoo.co.uk)Date: 02/20/02
- Next message: Jim MacArthur: "Re: Security-Compromised NT System [what can they see?]"
- Previous message: SN: "Security-Compromised NT System [what can they see?]"
- In reply to: SN: "Security-Compromised NT System [what can they see?]"
- Next in thread: Jim MacArthur: "Re: Security-Compromised NT System [what can they see?]"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
From: Hugo Wilkinson <hugowilkinson@yahoo.co.uk> Date: Wed, 20 Feb 2002 08:10:23 GMT
SN wrote:
Hi...
>Hey all you Windows/NT gurus out there. Can you shed some light on
>this issue for me.
>
>I work on a company provided Windows NT4.0 computer that I didn't
>install the OS and the Administrator password [was] known by more than
>one person, although the computer is primarily to be used by me only
>as a development machine. It just so happens that I sometimes do
>fairly personal thing on this computer, e.g. read my web based email,
>etc. Since the computer is compromised. Can they also see what I am
>reading in my emails? (assuming these people don't have access to the
>company routers/firewalls which would have been easy to see all the
>webpage that I watched). They only have access to my computer, and I
>assume they have planted Trojan horses and stuffs.
>
>Am I safe to secure my files using PGP conventional encryption, ie. no
>keys lying around anywhere on the computer. However when I encrypt
>the important files I have to type in the password using the keyboard.
> Can they install a program to watch what I typed when I keyed in my
>password [passphrase] when I conventionally encrypt a sensitive file
>using PGP??
>
>How do I implement counter-measures, any softwares that will let me
>know if my keypress are being logged? Unfortunately I am not allowed
>to reinstall Windows NT on this system, I once brought in softwares to
>reinstall but the enemy had the management ordered me to stop. Until
>I find a new job (I am working on this), I need some kind of
>counter-measures. Any advice? THanks in advance.
It should not be possible to see what you are reading in your e-mails
unless they have installed some software which keeps a copy of all the
sites you've been too and what they contained - but this is unlikely
unless they really have something against you.
Any good anti-virus software should be able to alert you to the
presence of any trojans and eradicate them for you. You could use the
justification that as you do use the web, anti-virus software may be a
good idea so as to protect the companies property..
PGP in this case is probably no good as they too have access to your
machine - and the key will have to be there somewhere so as to decrypt
emails when they come back...
Additionally, its sadly a bit of a fact that companies almost have the
right to spy on whatever they like on your computer at work. Emails,
web surfing, txt files you leave around on local/network drives,
floppy disks entered into the machine.. the list goes on..
Hope I've given you some joy!!
Hugo
- Next message: Jim MacArthur: "Re: Security-Compromised NT System [what can they see?]"
- Previous message: SN: "Security-Compromised NT System [what can they see?]"
- In reply to: SN: "Security-Compromised NT System [what can they see?]"
- Next in thread: Jim MacArthur: "Re: Security-Compromised NT System [what can they see?]"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
Relevant Pages
|
|
