[EAS] Password cracking basics

[Tom Taggart]

"If all network access EXCEPT the web interface is disabled,
then you have restricted the hacker to guessing the password
(fixed by decent passwords... at least if they aren't shared
with your office computer!), and the vulnerability of the
web software and perhaps some one or two other software
packages on the 
box." 

All very well, but totally unrealistic.  If the FCC walks in
and wants your operator to send an RWT--how do they do it?
Go walking back to the rack room? (no-one is going to buy
six of these things just to have one for each station in a
cluster).  For that matter, how do you retrieve the log from
the Endec?

The problem is not the box.  The problem is using the
internet to communicate with the box.