On Fri, 2005-12-09 at 10:58, Paul Smith wrote: > Thanks for the whole discussion. I was not aware of such security > vulnerabilities. > > Paul This is also why you should view security in layers not just on the perimeter. Good locks will provide the bulk of your security. Most security threats are not from external sources but from internal users/admins. You have to evaluate the threats in your environment and determine which are more likely to occur and what the costs are to mitigate those risks vs. not protecting your systems. Each situation will be different.
