[net.unix-wizards] Controlling system security with a keyswitch

jbn@wdl1.UUCP (John B. Nagle) (06/26/84)

     One key turns on all PDP11s and VAXen.  Sorry, no security that way.

jso@edison.UUCP (07/01/84)

Not only is the same key distributed with all PDPs, VAXen, (even PDP-8s!),
but any round key will work: a friend of mine uses the key of his
bicycle lock, and I've seen red plastic keys that say "d|i|g|i|t|a|l"
on them, and have no notches at all.

John Owens
...!{ {duke mcnc}!ncsu!uvacs houxm brl-bmd scgvaxd }!edison!jso

dave@uwvax.ARPA (07/03/84)

I think your facts are a bit off here (using a bike key on
*any* DEC equipment).  All the larger systems use the standard
DEC barrel key.  The 730, though, will open with anything.
This is what that red plastic key was made for.  If DEC has
changed all of its systems to use the plastic key, we haven't
gotten any of these in yet, and we got some new 750's only
a few weeks ago and they took the regular key.

-- 
Dave Cohrs @ wisconsin
...!{allegra,heurikon,ihnp4,seismo,sfwin,ucbvax,uwm-evax}!uwvax!dave
dave@wisc-rsch.arpa

geoff@callan.UUCP (07/06/84)

The systems we build here at Callan are also controlled with a keyswitch, and
they, too, use the same key for all units.  Disregarding this, the keyswitch
*does* provide some security (if you are interested in details, mail me).
However, as has been pointed out previously, anyone with physical access to
the system can get around the keyswitch.  On our machine, for example, you
could simply take off the covers and short out the appropriate poles of the
switch.  Assuming that what you are interested in is stealing data, you could
also simply remove the four 5-1/4" Winchesters and walk away with them, later
hooking them onto your own machine as add-on units, and read them that way.

So why did we put the keyswitch on there?  Because most people won't go to that
much trouble.  The keyswitch will stop the casual intruder.  A non-casual one
can't be stopped by the computer manufacturer;  the only real solution is good
control of physical access to the machine.
-- 

	Geoff Kuenning
	Callan Data Systems
	...!ihnp4!wlbr!callan!geoff

zellich@ALMSA-1.ARPA@sri-unix.UUCP (07/22/84)

From:      Rich Zellich <zellich@ALMSA-1.ARPA>

I still don't know why anyone would want to \use/ a keyswitch on a terminal,
workstation, or computer and I've never seen any of ours turned off, much less
have the key removed from the lock, but as to why a manufacturer would \provide/
a key lock that's simple:  too many false-security-minded people insist on
having them and you can't sell a box that doesn't have one if the invitation
to bid (or whatever) calls for it.  We spent a small fortune having a bunch
of our older terminals retro-fitted because somebody who was appointed to
a security position, but didn't understand security, insisted the DoD and Army
regulations mandated key locks (they don't; it's just one of many things you
\may/ do to provide physical security according to the applicable reg's).