Re: [vox] ucsb outlaws win2k and NT 4.0 from its resnet

[Rick Moen <rick@liMAPSnuxmafia.com>]

Quoting Peter Jay Salzman (p@dirac.org):

[Explanation from harried UCSB admin quoted.]

That's still dumb.  Here's the properly BOFHish solution:

1.  Whenever you detect that a student's machine has gone zombified or
is otherwise behaving an an aggressively antisocial manner, shut off 
its port.  Wait for the owner to call or drop by.

2.  Inform the owner that he (not the university) has a problem, and 
show him the log excerpts that prove it.  Tell him he's welcome to come
back when he feels he no longer has that problem, to get his port
re-enabled.  At that time, he'll have to put up a $100 deposit,
refundable at the end of the school year if there are no recurrences,
and only then will the port be re-enabled.

3.  When the student professes lack of accountability because he's 
hapless (or any equivalent excuse), tell him you're confident he'll
find some effective way to compensate for his inability to run a secure
system, because otherwise he's going to be $100 poorer and get the port
disabled again.  Which of course he can re-enable a second time upon 
posting a replacement $100 deposit.  Later, rinse, repeat.

4.  At the end of the school year, the sysadmins may well have beaucoup 
beer money.  And being a security problem will have become an expensive
mistake.  You win, and Papa Darwin wins.

-- 
Cheers,                                         kill -9 them all.               
Rick Moen                                       Let init sort it out.           
rick@linuxmafia.com
_______________________________________________
vox mailing list
vox@lists.lugod.org
http://lists.lugod.org/mailman/listinfo/vox