BBC News : Congestion charges face legal challenge

Nexus nexus at patrol.i-way.co.uk
Mon, 15 Jul 2002 15:43:58 +0100


----- Original Message -----
From: "Ian Jackson" <ijackson@chiark.greenend.org.uk>
Newsgroups: chiark.mail.ukcrypto
To: <ukcrypto@chiark.greenend.org.uk>
Sent: Monday, July 15, 2002 2:50 PM
Subject: Re: BBC News : Congestion charges face legal challenge
[snip]

> flat-out evil systems are a minority; what I read David as talking
> about are the majority of `ordinary' software and installations which
> tend to keep much more data for much longer - and more accessibly -
> than really ideal.
>

I see this quite a lot, usually as the result of a "lowest common
denominator" of who actually needs the information.
Some examples that spring to mind are a company that prefers it's 3rd
parties to upload/download via SCP but has to support FTP because of those
that can't handle SCP (despite point & drool GUI's), managers with admin
rights so that they can get what they want as they are a manager and should
have it anyway (and then give their PA's etc all their passwords for when
they are away)   Funniest recent example happened to be gaining full
read/write access to a database (corporate crown jewels) after finding a
Windows account that worked for the AS400 cluster... turns out the account
belonged to the receptionist - everyone had full rights over everything ;-)
That's one of the problems I was alluding to.   Now I just have to wait for
the Local Authorities requesting web access to this database......

Cheers,
            JJ