Full Disclosure mailing list archives

Re: Computer name should match with your real identity?


From: "Csirt, Star" <Star () delta com>
Date: Fri, 29 Apr 2011 15:31:08 -0400

Same here as well for an across the global organization naming convention.

W/S/L-workstation, server, laptop
P/T/I-Prod/Test/Itegration
BOS/HQ/FIN-Location or department
www/sql/orc/fp-web, db, file and print etc
lb01/hdn005-Load balanced, Help Desk North and numbers

ETC


-----Original Message-----
From: full-disclosure-bounces () lists grok org uk [mailto:full-disclosure-bounces () lists grok org uk] On Behalf Of 
Michael Holstein
Sent: Friday, April 29, 2011 3:17 PM
To: taneja.security () gmail com
Cc: full-disclosure () lists grok org uk
Subject: Re: [Full-disclosure] Computer name should match with your real identity?


I am not doing it 

You are free to reject corporate policy as you see fit.
Your personal effects will be at the security desk on Friday. We will
mail your last check.

it could be case of "information leakage"
  

Internal NETBIOS/DNS names are generally helpful for identification of
machines, and most places follow some soft of template of
location+type+model+serial .. just so the IT department doesn't have to
figure out some UNIX admin's scheme-de-jour of colors/gods/planets/whatever.

Really .. what's easier to find the location/function of .. the machine
named CORPHQWWWDEV1 or the one named "Aristotle".

Michael Holstein
Cleveland State University

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/


Current thread: