"Bill Noble" wrote:

this is not a microsoft problem - you put a program on a machine and allow
me access, I'll change it. There is no reason that any USB port on any
production machine should be open. There is no reason that any production
facility should have a pathway to the internet - there should always be an
air gap. The simplest possible security practices completely eliminate this
threat


Hell, my engineers don't want my assembly cells connected to the corporate network. Do
you have any idea how disruptive it is when some pin head at corporate decides to push out
a patch to a system running production? I had a cell a few years ago that died every
patch tuesday at 11:50 PM. Updating a winbox while programming asics isn't a great idea.
Nor is it a great idea when testing the performance of said asics in the next station
using another winbox.

Here is another corporate brain storm. PC's used to access the corporate network must
have a screen saver installed with a corporate mandated timeout value. Really sucks when
the PC is connected to air gaging and the operator has to do the mouse shake to gage parts
after he can see the screen again. LCD screens, how much are they saving? We got the
microsoft windows crawly thing going on so even the backlight is powered up.

We can't get that one changed. They have software that enforces corporate registry
settings.


Wes
--
"Additionally as a security officer, I carry a gun to protect
government officials but my life isn't worth protecting at home
in their eyes." Dick Anthony Heller