BNA_flyer

Depends on how diligent he/she is in securing it. The BBs I've used have been set so that if I leave it locked and requiring a password to use (assuming I've taken advantage of that feature and it's set to lock itself after X number of minutes), ten incorrect password entries results in the BB wiping itself. But to get back to the story...

You're correct about the illusion of security--I am on the security workgroup of a healthcare organization that shall not be named, and it's hard to get people there to understand that all the technical measures in the world won't help if the human factors aren't addressed. It would be simple for anyone to talk his way into our building (particularly if he were a recently termed employee and looked familiar), loiter around our cube farm until he picked up a list of high-level users of our system off someone's desk, and then make conversation until he picked up on how simple some of our standard initial passwords are. Eventually a determined person will talk his way into the system so that the system doesn't even notice.

I called a pharmacy yesterday on behalf of my wife, who needed to track down the name of an antibiotic she'd taken two months ago for a week, so she could tell her PCP. I called them up and mentioned that this was for my spouse and that I understood if they couldn't give the information over the phone, and they simply asked me: "Last name?" "(fairly uncommon last name)." "Oh, (firstname)?" "Yep, that's her." "OK, she had two prescriptions, they were (X) and (Y)." I could have been anyone.

Sorry to hijack the thread, my mind has been on this issue a lot lately...