the boss wrote:
And that is a reason why soo many companies and finiancial institues get compromised. Their logic of.."if its working, it needs no fixing of upgrading" creates a hacker haven on older OS versions whose vuneribility is well known...unless ur datacenter is not at all conntected to public networks and internet.. which these days is quite rare
|
No, the dumb terminal was not connected to the internet, it was connected to the mainframe.

Dumb terminals CAN'T be connected to the internet... they are... err, dumb.
And just because you use old hardware and software does not mean its insecure. In fact, security was so tight at the bank that only management had computers that could access the internet, and they were locked down computers with the latest hardware and the latest secure corporate OS. Employees in the data center could not access the internet at all. We had to go through 4 card readers, and go past 2 unarmed guards, a mantrap, and an armed guard just to get to the data center and we had to have our security badges with our pictures visible at all times. Older equipment was used in a physically secure environment where only authorized personel could type in a command line, and none of that equipment could access the internet or be accessed by the internet (or even be accessed by anyone outside the department). Millions of dollars was spent on security and anything that accessed the internet or was accessed by the internet was the latest hardware and software, or thoroughly patched and supported.
And what about people who don't access the internet. Did you know that my grandpa used a computer for years to write letters but had no interest on getting on the internet? His computer should shut off too, even though it still works as a word processor just fine?
You are assuming that all hardware is connected to the internet. Not necessarily so, and in secure environments, internet access is routed through gateways and firewalls and access is monitored and controlled. And some people, like my grandpa, didn't even have dial-up.
As far as my Windows 98 machine, it is behind a firewall, has the latest patches, and only checks on my web servers and web pages. It does not serve web pages to the internet and cannot be accessed by the internet (any attempt is blocked by the router's firewall) with the exception of responses to requests I have it make. It has an internal IP so it's ports can't be accessed from outside the router. Pretty secure since I don't do any risky behavior with it.
I can see what you are saying about some people using machinery insecurely, but quite frankly, those same people use NEW technology insecurely too. Do you know how many people I meet that have brand spanking new computers with the latest OS, and they have never run Windows Update or installed any patches? New hardware and software does not mean security. Far from it.
The problem isn't the hardware or the software, its the users. In the right hands, even Windows 95 can be made secure. In the wrong hands, Windows XP or even Windows Vista can be made insecure. Even Linux, which supposedly is more secure than Windows, can be made insecure if put into the wrong hands.
We shouldn't have to pay for a new computer and operating system every 2 years just because some people don't know what they are doing. And what about the people who it took them a year to save up for that computer. The retired? The poor? The student? You are saying it should just shut off on them and then they have to save up for another computer? I guess no computers for the poor then, huh?
Edited by wistex - 13 April 2006 at 10:17am