Mr. Rose, since 1997 the BNSF has allowed access to crew
information via the Internet and I might add that it was very much appreciated.
Around March 1, 2001 they did a software update that has raised
some concerns. The first time an employee logs on to the new version they must grant
permission to access files on the employees computer. The BNSF computer people did flash a
memo that said, “This new process is non-intrusive and does not allow access to any
PC configuration files.”
Access to PC
configuration files is not the problem. The issue is the potential for abuse
and unauthorized access to personal files on the users computer. The Spec-Sheet provided
by Open Connect Systems the vendor of the software states that, “the program allows your Java applet or application programs to
interact with host systems”. Any moderately talented hacker could write an
application that could collect and report the files on the employees computer.
Any rational person would ask, “Why
would a company like the BNSF want to do that?” I have to ask, “Why does the
BNSF use a spider program to view every file and directory on my web server?”
The solution would be to let the user choose between
the old and new version. Currently if you do not grant the permission the person has to
deal with less than what the old version provided.
Yours Truly,
/s/JL Schollmeyer
Vice General
Chairman
cc:
Byron A. Boyd, Jr.
Clinton J.
Miller, III
John O’B.
Clarke, Jr.
JD Fitzgerald
BNSF General
Chairpersons
Sample of access log for jaysworks.com, note the IP address
(170.49.43.2)
