[OPLINTECH] Patrons bypassing computer sign-in system

[Andy Gunsch]

An issue I've run into in the past: Some keyboards have one touch application buttons to open email, browser, calculater etc... Using these buttons would allow you to open the browser on top of the session management. This was a nifty trick for some sly teenagers to bypass the session management. That was until I swapped out the keyboards.


Andy Gunsch

IT Manager
Mentor Public Library
8215 Mentor Avenue
Mentor OH 44060

440.255.8811 x228
www.mentorpl.org



From: oplintech-bounces at lists.oplin.org [mailto:oplintech-bounces at lists.oplin.org] On Behalf Of Bob Neeper
Sent: Thursday, May 29, 2014 12:00 PM
To: Amy Deuble; oplintech at lists.oplin.org
Subject: Re: [OPLINTECH] Patrons bypassing computer sign-in system

I don't know anything about SAM but is it possible just plugging in a USB stick opens Windows explorer?
It will depend on how SAM is written.

Explorer allows browsing in your PC, where Internet Explorer (or almost anything) could be started.

You can test this easily enough with a USB stick.
If you see this, click on the icon.

[cid:image001.png at 01CF7B35.D0D69280]


R. W. (Bob) Neeper

Community Library<http://sunbury.cool-cat.org>

44 Burrer Dr.  Map<http://maps.google.com/maps?q=40.243961,+-82.863007>

Sunbury, Oh 43074

Tel:  (740)-965-3901



[cid:image002.jpg at 01CF7B35.D0D69280]<http://info.cool-cat.org>
On 5/29/2014 10:40 AM, Amy Deuble wrote:
We are using Comprise's SAM for public computer sign-up. For the most part it works fine, but we are beginning to notice an increase in patrons bypassing the system most likely by running an app from a USB drive or Smartphone. Occasionally, when a patron has bypassed SAM we find the computer hung up with a message saying the version of Windows is invalid. The only way to reset the computer is by unplugging it. Shutdown or pressing the power button doesn't work. The computers all have Deep Freeze installed and work fine once they have been reset.
Any ideas on how to prevent this from happening? We don't want to turn off the USB ports since a patron may legitimately need to save something to a USB drive. The odds seem to be stacked against us when companies like LastPass (https://lastpass.com/go-premium/) offer tools like the one described below. This makes it sound like they can bypass not only SAM but our filters as well.  Certainly makes things more interesting for us! :)
Tools for Locked-Down Computers
Does your workplace prohibit downloads? Or block access to most external sites? Utilize LastPass for Applications or IE Anywhere to hook into your browser by running LastPass from a USB thumb drive, so you can still access your important data where you need it.
Amy Deuble
Marion Public Library
Marion, Ohio
adeuble at marion.lib.oh.us<mailto:adeuble at marion.lib.oh.us>
740-383-9722






_______________________________________________

OPLINTECH mailing list

OPLINTECH at lists.oplin.org<mailto:OPLINTECH at lists.oplin.org>

http://lists.oplin.org/mailman/listinfo/oplintech

Search: http://oplin.org/techsearch

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.oplin.org/pipermail/oplintech/attachments/20140529/6241bc83/attachment-0001.html>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: image001.png
Type: image/png
Size: 32648 bytes
Desc: image001.png
URL: <http://lists.oplin.org/pipermail/oplintech/attachments/20140529/6241bc83/attachment-0001.png>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: image002.jpg
Type: image/jpeg
Size: 7840 bytes
Desc: image002.jpg
URL: <http://lists.oplin.org/pipermail/oplintech/attachments/20140529/6241bc83/attachment-0001.jpg>