From: "Sulfare.Jim.DMM"<jsulfare@harte-hanks.com>
Reply-To: plug@lists.nothinbut.net
To: <plug@lists.nothinbut.net>, <plug@lists.nothinbut.net>
Subject: [Plug] Re:NT/W95 Login Authentication Schemes
Date: Wed, 08 Sep 1999 15:55:33 -0500
I built a system and used the following security software.
http://www.fortres.com/
you can download a demo..
It has been running for two years now and has only been hacked once by a
student
(which he lost his summer job) it was possible because I didn't turn on the
BIOS
protection after working on the machine.
Oh yea it is cheap for schools..
Let me know what you think.. I may be able to help you with this.
-jimS
____________________Reply Separator____________________
Subject: [Plug] NT/W95 Login Authentication Schemes
Author: <plug@lists.nothinbut.net>
Date: 9/8/99 12:32 PM
(skip ahead to next paragraph for just the good stuff)
My high school is attempting to give every student a password for login
into
the school computers. This is login to do anything on the computers.
They've
already attempted to implement this, but the software they purchased proved
incompatible (hehehe). I am trying everything in my power to stop this from
happening as it's a really really bad idea. This isn't a college. This is a
high school. It also happens to be a high school with a rather large set of
computer literate malcontents (myself included). Within a very short amount
of time people would be logging in under other people's accounts and
violating policy. Therefore, I'm looking for a solution. Fortunately I'm on
very good terms w/ the head computer dude there and so we're going to try
to
put together a proposal for an alternative.
What I've came up with so far is:
s/key- I don't really know how this could be used for my situation
securID- That's a card that gives you a key. It changes every minute so
unlike a pass, if somebody steals just the number it gives, it's
practically
useless. A new card could be issued if the old one is lost. This solution
seems good, but expensive. Unfortunately Security Dynamics hung up on me
when they discovered I was a high school student. Idiots.
Challenge & Response- I've heard of this solution from Enigma, but I can't
access their web site as listed in yahoo. I'm not even sure what it is.
Some kind of keycard. I believe this just sends a string of text that can
be
captured into notepad or the like if borrowed. That shouldn't present too
much of a problem.
So if anybody can give me some more details such as price, other solutions,
and really anything else, please do. Just so you know, this must work for
about 1200 students plus faculty and hmm, I don't know how many computers.
Probably between 100 and 300.
-Laktar, a.k.a. Nick Rosen, laktar.dyndns.org
If I Ever Became An Evil Overlord:
32. I will not fly into a rage and kill a messenger who brings me bad news
just to illustrate how evil I really am. Good messengers are hard to come
by.
-- Peter's Evil Overlord List,
http://www.eviloverlord.com/lists/overlord.html
______________________________________________________
Get Your Private, Free Email at http://www.hotmail.com
_______________________________________________
Plug maillist - Plug@lists.nothinbut.net
http://lists.nothinbut.net/mail/listinfo/plug
<< RFC822.TXT >>