Re: Access Workgroup File

From: Tim Ferguson (FergusonTG_at_softhome.net)
Date: 07/26/04


Date: Mon, 26 Jul 2004 10:28:06 -0700


"Larry Linson" <bouncer@localhost.not> wrote in
news:uyGhTyqcEHA.212@TK2MSFTNGP12.phx.gbl:

> "Tim Ferguson" wrote
>
> > There is no legitimate use for such a
> > utility:
>
> it may well be used by people who legitimately have lost
> the password, had a developer leave under a cloud, etc..

Okay: it may be a counsel of perfection about documenting UserIDs, PINs and
so on, but it is repeated all over all the documentation and instructions
for setting up Access security. I would guess that the care taken is pretty
much in proportion to the value of the encrypted data.

>
> There aren't any
> applications done in Access so secure that US$150 will not get you the
> data

Last time I asked whether anyone had _first hand_ experience of a properly
secured Access database being cracked, Rebecca R was the only one who
replied, saying she knew of someone who has seen it happen. Has time moved
on so that this is now reliably confirmed?

Not that I disbelieve it, I am just trying to get a grip on the reality of
the situation. Should we be advising friends/ colleagues/ clients to move
away from Access for sensitive data? Ok -- that is far too vague a question
to get a sensible answer, but you can see what I am getting at.

> Your data can be made much more secure by putting it on a server,
> using a good server database, and using the server OS and server DB
> security.

Agreed absolutely.

B Wishes

Tim F



Relevant Pages

  • Re: [Full-Disclosure] SQL Slammer - lessons learned
    ... so would be expected to run on a server port. ... acceptable to filter dialup/home users and protect all those insecure ... legitimate servers; The only place to close ports to inbound traffic is ...
    (Full-Disclosure)
  • Already Activated
    ... I have a new client who had a server installed for them. ... the .bak file did not exist. ... The client has a legitimate License and CD key. ...
    (microsoft.public.windows.server.general)
  • Already Activated
    ... I have a new client who had a server installed for them. ... the .bak file did not exist. ... The client has a legitimate License and CD key. ...
    (microsoft.public.win2000.setup)
  • Explorer question
    ... Every time I turn on my computer, ZA Pro asks if I want Windows Explorer to ... act as a server. ... I checked and it is the legitimate explorer.exe ...
    (alt.computer.security)
  • Windows 2003 Enterprise Server - Online update Validation error
    ... I have purchased a Server with Windows 2003 Enterprise Server already ... The Validation report states that the ActiveX control encountered an error. ... legitimate version of the OS already installed. ...
    (microsoft.public.windowsupdate)