my profile | my password | search | faq & rules | forum home

» Film-Tech Forum ARCHIVE   » Operations   » Digital Cinema Forum   » How much access should the end user have??? (Page 3)

This topic comprises 3 pages: 1  2  3

Author Topic: How much access should the end user have??? Marcel Birgelen Film God Posts: 3357 From: Maastricht, Limburg, Netherlands Registered: Feb 2012 posted 12-31-2018 02:21 AM                     My opinion might, again, be a little bit different... I think it's fine that factory default service accounts are changeable, but there should be documented reset procedures for those passwords. In my opinion, once you have physical access to the equipment, you already have the proverbial super-power to screw things up. I think this should not only be true for DCI equipment, but for practically all "IT equipment", maybe with the sole exception for devices that really store sensitive data and your average DCI setup stores none of such data. I've been in too many situations, where the previous guy who ran the technical show left and nobody knows anything about "passwords" or "access credentials". Restoring access to all the gizmos in a modern production environment can be quite a challenge, including lots of wasted hours on trying to password reset thingy X or gadget Y. For starters, try to get any Android device running that was registered to an unknown Google account, but somebody decided to factory reset...  |  IP: Logged Dave Macaulay Film God Posts: 2321 From: Toronto, Canada Registered: Apr 2001 posted 12-31-2018 09:55 AM                     Linux is fairly secure. If someone changes the root password, you are not going to easily recover control of the system. For Doremi where the root password is relatively public, that means replacing the flash drive. Barco does not give away their root passwords and they should be able to recover a projector with the admin password changed but I have never askex for that. The Christie TPC runs on Windows, much easier to crack.  |  IP: Logged Scott Norwood Film God Posts: 8146 From: Boston, MA. USA (1774.21 miles northeast of Dallas) Registered: Jun 99 posted 12-31-2018 11:27 AM                        Actually, it should be fairly easy to re-set the root password on a Doremi if it can boot from an external device (or the internal CD drive). It should be a five-minute (more-or-less) process.  |  IP: Logged Mark Gulbrandsen Resident Trollmaster Posts: 16657 From: Music City Registered: Jun 99 posted 12-31-2018 11:31 AM                     You would need to see whats in your contract. It may well just say leave the booth in the condition you found it, or it may say train the next guy taking the position. Of course once you leave I'd block their number so they can't call you with questions. If you are Barco trained and the new guy is not then don't hand out any passwords! Let them send him to Barco school. Mark  |  IP: Logged Steve Guttag We forgot the crackers Gromit!!! Posts: 12814 From: Annapolis, MD Registered: Dec 1999 posted 12-31-2018 12:55 PM                     With Barco, oddly enough, passwords are tied to the software program on YOUR computer, not the projector so if you have physical connection and you have a service level password, you can get into any projector. The only time one needs a root password is to clear out a service user from one of their touchpanels. The root password is a temporary item to allow this and does not require Barco involvement, if you know what you are doing and are trained in the procedure.  |  IP: Logged Mark Gulbrandsen Resident Trollmaster Posts: 16657 From: Music City Registered: Jun 99 posted 12-31-2018 01:58 PM                     Irregardless of that he still needs to know exactly whats in his contract and not provide any more or any less than what it says. Mark  |  IP: Logged Carsten Kurz Film God Posts: 4340 From: Cologne, NRW, Germany Registered: Aug 2009 posted 12-31-2018 10:06 PM                     Most support contracts do not contains such details, because those who work out the contracts do not know anything about work details. - Carsten  |  IP: Logged Mark Gulbrandsen Resident Trollmaster Posts: 16657 From: Music City Registered: Jun 99 posted 01-01-2019 11:26 AM                     quote: Carsten Kurz Most support contracts do not contains such details, because those who work out the contracts do not know anything about work details. Yes, fortunately, sometimes. The incoming director obviously hasn't a clue either.  |  IP: Logged Rick Raskin Phenomenal Film Handler Posts: 1100 From: Manassas Virginia Registered: Jan 2003 posted 01-01-2019 04:25 PM                     quote: Steve Guttag At the very least, there should be a means to reset them to factory defaults by the right entities (even if that is the manufacturer because, again, they would only have access if the company gave it to them). Agree -- In my TELCO experience that was often by means of a serial port on the affected hardware. We did often set them up so we could telnet in remotely.  |  IP: Logged

All times are Central (GMT -6:00)

This topic comprises 3 pages: 1  2  3

Printer-friendly view of this topic

Hop To: Select a Forum: Category: Operations -------------------- Digital Cinema Forum Film Handlers' Forum Large Format Forum Ground Level Feature Info, Trailer Attachments & REAL Credit Offsets Category: Community -------------------- Film-Yak Film Handlers' Movie Reviews The Afterlife Bob Maar's Joke-A-Thon Category: Classified -------------------- Equipment and Supplies Wanted/For Sale Help Wanted/Seeking Employment Category: System -------------------- Software Beta Testing Forum

The Film-Tech Forums are designed for various members related to the cinema industry to express their opinions, viewpoints and testimonials on various products, services and events based upon speculation, personal knowledge and factual information through use, therefore all views represented here allow no liability upon the publishers of this web site and the owners of said views assume no liability for any ill will resulting from these postings. The posts made here are for educational as well as entertainment purposes and as such anyone viewing this portion of the website must accept these views as statements of the author of that opinion and agrees to release the authors from any and all liability.