From:	Ereskanti <Ereskanti@***.COM>
Subject:	Re: Altering security tallies (was Re: Weird Campaigns)
Date:	Sun, 24 May 1998 01:58:09 EDT

In a message dated 5/23/98 8:21:27 PM US Eastern Standard Time,
gurth@******.NL writes:

> Why? Legitimate users don't build up security tallies, and how are you
> going to check if the decker attempting to modify the ST has Masking in
> the deck? Plus it would mean the real sysadmin needs a deck with Masking
> in it to do something that looks to me like normal system maintenance...
>
No it doesn't, it means that a person who consistently uses clearance codes of
one level to attempt to hack into another level they aren't cleared for rings
up a "stupid user tally" (sorry, had to put it that way) that would likely
ring up activities all over the place.

The Real Sysadmin wouldn't need Masking -EXCEPT- for the fact that they (the
all Omnipotent -THEY- mind you) want to keep an eye on all their users without
them knowing about it. Also, if the Sysadmin is possibly going to be dealing
with "outside intrusions", then yes they are going to want to have, or even
-need- to have, weapons of equal power to those coming in at them.

-K