I prefer the use of shoulder surfing over visual hacking, however it is a highly critical issue for security practitioners. First, lets examine the straightforward claim of teamwork and collaboration. The column assumes that everyone inside a company is entitled to see all information inside a company. Anyone who has been in a modern office environment knows that there is little privacy.
While some people might have data that is OK for the entire organization to know, there are visitors that can go through the facility. There are many areas where information should be restricted, such as accounting, human resources, engineering, legal, sales, customer data, vendor data, and any area where there is intellectual property of any note.
Leave a reply
