Physical Security: NTK now, 2000-08-11 (fwd)

[William Knowles <wk () C4I ORG>]

[From the gang over at Need To Know: http://www.ntk.net comes this
article the lack of physical security at one of England's largest
ISP's. Its suprising how little attention is being placed on actually
locking down the servers in person since all the best firewalls in
the world will never protect a machine from being stolen. -WK]


         Despite the recent "online credit card details" hysteria
         (isn't it the merchants and CC companies who are liable for
         most fraudulent use, a fact they obviously prefer not to
         publicise), you can always rely on DEMON to come up with a
         more low-tech method of exposing that ultra-valuable customer
         info. Their latest exploit reportedly involved velvet-gloved
         cat-burglars, who "climbed up the scaffolding and nicked
         a NT server (which paged down but no on NOC duty knew what the
         machine did, so they did nothing)." Police were called to the
         scene, but after they left, the master-thieves (possibly "the
         same ones", our source believes) "climbed in again and nicked
         another NT server, this time one that holds company files,
         templates and manages office printers. Some staff then went
         home as they could no longer do their work."
         http://www.theregister.co.uk/content/1/12354.html
                 - hey, why not cancel your card every time you use it?
         http://www.the-times.co.uk/interface/insight/story764.html
                                       - it's the *only* way to be sure


                                 NEED TO KNOW
            THEY STOLE OUR REVOLUTION. NOW WE'RE STEALING IT BACK.
                         Archive - http://www.ntk.net/
              Unsubscribe? Mail ntknow-unsubscribe () lists ntk net
                Subscribe? Mail ntknow-subscribe () lists ntk net
     NTK now is supported by UNFORTU.NET, and by you: http://www.ntk.net/books

ISN is hosted by SecurityFocus.com
---
To unsubscribe email LISTSERV () SecurityFocus com with a message body of
"SIGNOFF ISN".