Re: March 29, 2006 total eclipse - IT admin's WORST NIGHTMARE

From: Somebody. (somebody._at_spamout.russdoucet.com)
Date: 10/11/05 

Date: Tue, 11 Oct 2005 10:03:19 -0400

"Owl Jolsen" <owljolsen@nym.alias.net> wrote in message
news:20051011022456.31811.qmail@nym.alias.net...
> "Leythos" <void@nowhere.lan> wrote in message
> news:wsC2f.31126$tD4.4678@tornado.ohiordc.rr.com...
>> In article <20051010225903.16559.qmail@nym.alias.net>,
>> owljolsen@nym.alias.net says...
>> > Also, as far as anything going on in Europe, partcularly the
>> > 29th March solar eclipse in Africa goes, a lot of cell phones in
>> > Europe now have high-speed internet access built-in. Someone who
>> > REALLY wanted to sneak on from work could unplug from the company
>> > LAN, and plug their office PC into their cell phone, and sign on that
>> > way.
>>
>> If the user doesn't have local administrator access then they won't be
>> able to change the Proxy settings and won't be able to use the Cell
>> Phone method - and once again, a properly setup network won't all your
>> crap to be accessed.
>
>
> However, local adminstrator access inside the PC can be hacked.
> There are hacking tools out there that will let you get local
> administrator access to the PC, without compromising the company
> network. You just disconnect from the network, before hacking your
> way into local adminstrator access. There are enough security holes
> in Windows that any NT, XP, 2000, 2003, or Vista box could be hacked
> to allow you local administrator access without compromising the
> network or leaving any telltale entries in the logs. As long as you
> are not connected to the network when you break into local administrator
> access on the PC, they will never know, a standalone XP machine does
> not keep any logs, so there is no POSSIBLE way for them to know you
> have broken into administrator access on the local machine, as long
> as you are not plugged into the network when you do it. And before
> anyone says "keylogger", there are programs that can hunt down and
> destroy any keylogging software installed on your PC, and once you
> have hacked into administrator acceess on the local PC, you can run
> one of these programs and destroy the keyloging software.
> You are talking about stuff that is our BREAD AND BUTTER. And we
> stand to make even more money from subscription video for various
> sporting events worldwide. Unfortunately, we will not be able to
> do Olympics until AT LEAST 2012, becuase the American NBC network
> stubbournly
> refuses to carry the Olympics in the USA, if any Internet outlet
> is allowed to carry audio or video over the internet of the event.
> NBC bascially has the IOC over a barrell over this one until the
> current contract expires after the 2010 Olympics. We will, however,
> still provide IRC-based live commentary from the Games. That is still
> allowed.

Alright, so you're telling us, that your BREAD AND BUTTER depends on:

1. somebody disconnecting their box from the corporate network
2. hacking local administrator acess
3. heavily modifying local secuity settings
4. leaving no entries in the logs (hello... where did the logs go? hmm)
5. sniffing out and destroying keyloggers (helo... where did our keyloggers
go? hmm)
6. using some cell phone network access or other 3rd part service
7. destroying all cache records on the local machine (hello, where did the
cache go? hmm)
8. secure erasing destroyed cache records on the local machine (hello, why
was a secure eraser used here? hmm)
9. reconnecting to the network after undoing all the above.
10. Coming up with some sort of excuse as to why their computer dropped off
the lan for X hours

To watch... figure skating?! An eclipse?!

Dude, find a new hobby.

-Russ.

Quantcast