full-disclosure - Re: Computer name should match with your real identity?

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

Date: Fri, 29 Apr 2011 15:31:08 -0400
From: "Csirt, Star" <Star@...ta.com>
To: 'Michael Holstein' <michael.holstein@...ohio.edu>,
	"taneja.security@...il.com" <taneja.security@...il.com>
Cc: "full-disclosure@...ts.grok.org.uk" <full-disclosure@...ts.grok.org.uk>
Subject: Re: Computer name should match with
	your	real	identity?

Same here as well for an across the global organization naming convention.

W/S/L-workstation, server, laptop
P/T/I-Prod/Test/Itegration
BOS/HQ/FIN-Location or department
www/sql/orc/fp-web, db, file and print etc
lb01/hdn005-Load balanced, Help Desk North and numbers

ETC

-----Original Message-----
From: full-disclosure-bounces@...ts.grok.org.uk [mailto:full-disclosure-bounces@...ts.grok.org.uk] On Behalf Of Michael Holstein
Sent: Friday, April 29, 2011 3:17 PM
To: taneja.security@...il.com
Cc: full-disclosure@...ts.grok.org.uk
Subject: Re: [Full-disclosure] Computer name should match with your real identity?

> I am not doing it 

You are free to reject corporate policy as you see fit.
Your personal effects will be at the security desk on Friday. We will
mail your last check.

> it could be case of "information leakage"
>   

Internal NETBIOS/DNS names are generally helpful for identification of
machines, and most places follow some soft of template of
location+type+model+serial .. just so the IT department doesn't have to
figure out some UNIX admin's scheme-de-jour of colors/gods/planets/whatever.

Really .. what's easier to find the location/function of .. the machine
named CORPHQWWWDEV1 or the one named "Aristotle".

Michael Holstein
Cleveland State University

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/