Other asleep hon channels will demonstrate sternly for incidences.

complaint.

Anyway, I take advantage of the screwed up situation to explain to you what
it means to be monitored by powerful keyword monitoring software.

All company names are real.

All people's names in security incident reports are changed, as are any
proprietary data/numbers.

Any personal-personal traffic (the person's own words with outside friends)
is changed so it is not the actual traffic that went across, but it will have
the same visceral-word impact as the original.

Picture yourself inside a company. You are an office worker. Like everyone
else you have a desktop computer. It is on the company network. The company
has an Internet connection. You can send/receive email over the Internet.

Ready?

Ready to keyword monitor roughly seven thousand people?


Driver's Seat
-------- ----

Both sites started with a bang.

The smaller site had two security incidents within the first three hours.

Two different format (Microsoft Access DB, Excel spread***) copies of
employee social security numbers and other personal personnel information
flew out of the smaller site's Internet connection.

Internet firewalls have no protection against file transfer via email.
Yet companies often disallow FTP, another command for transferring files.

ALL email is transferred as a file.

My two managers shook their heads at people being so stupid as to mail
company confidential information over the Internet in the clear.

Their security rule was "Don't send it out over the Internet unless it's
okay to read about in the next day's paper."

The transmissions included the managers' social security numbers too.

For non-U.S. people: a defacto key for accessing all of ones personal records.


And why did I create and turn on email monitoring at that site?

Well, those business magazines for the computer industry like to sell


.