Tuesday 25 November 2014

Principle of Insecurity


He was a computer service engineer. On a particular day he received a call from his Boss, asking him to look into the problem in the computer his Boss was working on. He diagnosed the problem in minutes and asked his Boss to take the computer to his service lab for half an hour for repairs. His Boss trusted him a lot and requested him to return the computer as soon as possible.

So when the computer of his Boss came into his possession, the first thing he did was to copy the users folder data into his external hard-disk. After that he fixed the simple problem he had diagnosed and then went back to Boss’s cabin to receive the accolades he knew he will get.

Few days later, the Boss was amazed to see a specific file sent from an undisclosed sender in his mail account. This was a confidential file which should not have been in the email. The Boss immediately understood the whole story. He summoned the service engineer and asked him about the file. The service engineer broke down very soon. He lost his job.

People who know the IT world will definitely believe this story easily. Data theft is being done by a large number of so called trusted people. In the above story the onus of the security error was not taken by the Boss. If I leave my house door open and go to the market, the chances of theft will increase manifolds. Every law of land will catch the thief and put him inside the jail. There is no law which says that if I have left my house door open and went to market, I can be punished. This principle of insecurity applies in relationship too. If relations in group of people are open in a way that outsiders take liberty to enter frequently, theft of peace is bound to happen. Let me leave this write up here to have a lot of food for your thoughts.

Dr. Sunil Ji Garg

No comments:

Post a Comment