<html>
<body>
<font size=3>Its a simple matter as you know, to remove the drive, Norton
ghost it to another, and then the laptop could be returned, alleviating
fears of the data loss.<br>
Even more insidious, is they could just report it's been recovered.<br>
Then the culprits (assuming the data is their target) can have all the
time they want to use the data for whatever purposes.<br><br>
At 11:38 8/5/2006, you wrote:<br>
<blockquote type=cite class=cite cite="">Chris Walsh wrote:<br>
> According to the letter, a copy of which was obtained by the
Journal,<br>
> the computer was password protected and there is "no
evidence that<br>
> the hard drive has been inappropriately accessed.''<br><br>
It takes about 3 minutes to change the Administrator password (10 if
<br>
it's your first time) using a common tool found on the Internet if you
<br>
have physical access to the Windows PC. And without possession of
the <br>
laptop, how can they state that the hard drive has not been accessed in
<br>
any fashion, appropriate or inappropriate?<br><br>
George Toft, CISSP, MSIS<br>
My IT Department<br>
<a href="http://www.myitaz.com/" eudora="autourl">www.myITaz.com</a><br>
480-544-1067<br><br>
Confidential data protection experts for the financial industry.<br><br>
<br>
_______________________________________________<br>
Dataloss Mailing List (dataloss@attrition.org)<br>
<a href="http://attrition.org/errata/dataloss/" eudora="autourl">
http://attrition.org/errata/dataloss/</a></font></blockquote></body>
<br />--
<br />This message has been scanned for viruses and
<br />dangerous content by
<a href="http://www.mailscanner.info/"><b>MailScanner</b></a>, and is
<br />believed to be clean.
</html>