Author |
Topic  |
laser
Advanced Member
    
Australia
3859 Posts |
Posted - 22 October 2004 : 16:23:28
|
Those were the days taropatch A single 5.25" disk was GOLD, and there was no worries about viruses - but then there was no laptops; external HDDs; and USB was not even a twinkle in someone's eye |
 |
|
Doug G
Support Moderator
    
USA
6493 Posts |
|
Da_Stimulator
DEV Team Forum Moderator
    
USA
3373 Posts |
Posted - 22 October 2004 : 23:30:47
|
quote: Originally posted by Doug G
When I was in high school I got to spend two nights a week in downtown Denver learning how to program this:
http://research.microsoft.com/~gbell/craytalk/sld024.htm
looks more like a radio or something... what functionality did that thing have? |
-Stim |
 |
|
MarkJH
Senior Member
   
United Kingdom
1722 Posts |
|
Doug G
Support Moderator
    
USA
6493 Posts |
|
laser
Advanced Member
    
Australia
3859 Posts |
Posted - 23 October 2004 : 18:59:42
|
I notice Dave hasn't posted here in a while, maybe he sees it from the other side now. |
 |
|
Dave.
Senior Member
   
USA
1037 Posts |
Posted - 23 October 2004 : 20:35:35
|
quote: Originally posted by laser
I notice Dave hasn't posted here in a while, maybe he sees it from the other side now.
Or he realizes that he worded things wrong and he made himself look like a stuck-up arsehole. :/ |
 |
|
laser
Advanced Member
    
Australia
3859 Posts |
Posted - 24 October 2004 : 04:55:36
|
So your first post isn't a true reflection of the actual events that occurred ? |
 |
|
Dave.
Senior Member
   
USA
1037 Posts |
Posted - 24 October 2004 : 12:21:38
|
quote: Originally posted by Dave.
So today I'm in my third period class, it had just started so I wasn't working yet. I had my laptop in my lap (My IEP says I'm allowed to use a laptop), and I have my CAT5 cable going under the table to the network jack. I also had my external 40GB HD (Power-over-USB) connected to the school computer in front of me. (Just plugged it in, waiting for it to be detected by Windows 2000)
I had just booted my laptop up, and I was sitting at the desktop - the IT woman walks in and I quickly close my screen - I'm really supposed to be programming - she then says something like "He's hiding something, he just closed it". At this point I panic and pull out my network cable and kick it under the table.
I always close my laptop when anyone walks by, Usually this nosy teacher from the typing class in the next room comes back and looks at what we are doing. At first, I didn't know it was the I person.
I was never asked "Hey, what are you doing?" or anything of the sort. I've also seen a lot of other students connect to the network, it's not like they try to stop them. I disconnected my network cable because I panic'd, what can I say?
I put my laptop and HD away, realizing they are pissed off. So about 10mins later, my "administrator" (assistant principal) comes in, and asks me to come with him, and takes the names down of 4 others in the class. You know, the network admin walked into my 2nd period class same room, I sit 6 computers over) and had to check a serial number on the printer next to me, he picked up my drive, and moved it 6in to the side....That right there tells me it's just fine to use it. If he didn't ant me to, he'd have said so then and there.
I'm walked to the office and he says to put my backpack in this room... I say that he can't made me leave my property in a location that is not secure, he responds with "I can do whatever I want, I run this school." What the hell? I have to leave my $1,700 laptop in a room because you are a moron? How is that right? I then am made to wait in the office for 20 minutes (I'm now missing my 4th period class... heh). I noticed this network woman go into the room with my backpack, but I don't think they went through it.
I was still never provided with a reason as to why my stuff is separated from me, and I don't think they had any grounds for that.
Eventually I'm called into his office, where the two IT people are and him. He asks me to boot my laptop and let them "see what I have," doesn't that require a search warrant? I can't see them having the power to search my personal property. After I show them that I have no "hacking tools" (Hehe, what fools, I have Putty.exe on my desktop yes, I know it's only a telnet/SSH client. I'm saying that it's the only thing I'd need to connect to an outside resource (a Linux system)). What they think I had, I have no idea. This woman now asks me what "player.exe" is on my desktop, and asks me to run it. (What the hell could she think it is? Some hacking tool? lol!) My hand-coded media player opens, and she is impressed with my skill (Heh, 4 Hours total).
Now they want to see the contents of my external HD, yet they fail to see my "E:" partition on my main drive... I try to explain that I just replaced my HD with a new, 80GB one and put the 40GB one in this external USB shell. I open explorer and show them the F: drive, explaining that it's a windows XP installation and that there is nothing to see. Then, this woman asks for "a print out of all the files on the drive," I basically say "Um, no" while thinking "Wow, you are a moron, you are the IT manager?!" I knew that there was NO WAY they could request such a thing. however, if they insisted I'd have printed out pagefile.sys from notepad. :D
I was then told that I could not connect my laptop to their network and that I was not to connect my HD to any of the computers either. However ti is okay to use our USB-Flash drivers (Some of my friends and I have Sandisk Cruzer Micro drives that we use to transfer data). That shows again how foolish they are, I can have a 1GB (Mine is 256mb, but they come in 1GB+) flash drive, but not a 40GB external HD? What the hell do they think I would do?
After all this happened, I can quite confidently say that I am more certified to run our schools' network than any of them are. (Considering I administrate the WindowsNT domain at work, and Linux/Windows server systems at home)
How about a list of just a few things that should be secured but are not:
Windows 2000 Guest account enabled on all computers. All users have full Read/Write access to c:. If you connect to the network without one of their computers, there is no proxy server enforced. All data on all ports is allowed, no attempt to block MSN and AIM clients. Access to installation service is granted to all users. I can jump down to command.com and and run commands. If I kill off explorer.exe, then restart it, I have right-click enabled, and I can use 'Windows Explorer' to move around the hard disk and edit security permissions. If I shell("cmd.exe /k <command>") I can run any command once, and get the output before cmd.exe says that it has been disabled by the administrator. Any system files can be modified by any user.
I could prevent all those things, they don't even make an attempt at security. THAT is why I say I'm better qualified to run this network.
|
 |
|
Roland
Advanced Member
    
Netherlands
9335 Posts |
Posted - 24 October 2004 : 12:46:58
|
Dave, I do believe they had every right and reason to take away your computer and HDD and see what was on it. If they didn't ask you what you were doing and why you were doing "it", they did do something wrong as you have every rihgt to explain what you were doing.
What I think you should do now is simple: first ask whoever is in charge to set up rules to make clear to everyone what is and isn't allowed. That way you and your buddies can be sure what happened to you won't happen again without good reason. Then inform your principal and network admin about the horrendously bad security. If anything, you'll show them you don't want to do anything bad and are willing to help make the network better secured. Heck, it might even help your grades in the end (a little sucking up never hurts ) |
 |
|
Jotts
New Member

77 Posts |
Posted - 24 October 2004 : 14:41:26
|
This may be alittle late but if you read the fine print on the "Emergency Cards" That you must sign and write info down on. It is as good as a search warrant. havn't seen one in awhile but it does say. By signing this we have the right to search all belongings and lockers if a appropriate threat is made. |
 |
|
laser
Advanced Member
    
Australia
3859 Posts |
Posted - 24 October 2004 : 17:02:30
|
quote: How about a list of just a few things that should be secured but are not: . . . . I could prevent all those things, they don't even make an attempt at security. THAT is why I say I'm better qualified to run this network.
OK, so I can see by this that your attitude hasn't changed at all. I've been a technical computer consultant for over 10 yrs now (worked at Oracle for 5.5 yrs), so I see it from your side all the time. The angle is that the IT experts WANT the network like that (for various reasons) and they usually don't cater for a unknown computer to be connected.
Sorry, but I still think your reactions and your attitude are the two things that have landed you in the most hot water. Others with their flash drives, etc, probably don't shut them down when any staff member enters the room.
|
Edited by - laser on 24 October 2004 17:04:58 |
 |
|
Dave.
Senior Member
   
USA
1037 Posts |
Posted - 24 October 2004 : 23:10:02
|
I'd be interested in your reasoning why anyone would want those security 'holes' in their network. |
 |
|
seahorse
Senior Member
   
USA
1075 Posts |
Posted - 24 October 2004 : 23:16:28
|
Legal contraints not related to system hardware/software would be one possibility. |
Ken =============== Worldwide Partner Group Microsoft |
 |
|
pdrg
Support Moderator
    
United Kingdom
2897 Posts |
Posted - 25 October 2004 : 04:28:10
|
Ostrich approach to security, perhaps? |
 |
|
Topic  |
|