[Wolves] Consultancy work thingie for union office.

[Old Dan]

Hi all

I've been asked to do a security consultancy thingie for a union buddy 
of mine who works as a part-time union official in a particularly 
bolshie union office.

They have this problem - they believe their computers are being spied on 
by management.  I think I concur - I looked at the machines a few months 
ago and found WinVNC running on them.  The computers belong to the union 
office, not the organisation, but they have a service agreement with 
them which restricts what they can do.

Now I've got rid of WinVNC from their machines but they still are 
paranoid management are nicking off with their files when they aren't 
there.  What they want is unmonitored (at least by management) internet 
access and a way to secure their files so management don't get a 
look-see.  I was thinking smoothie for the internet access and maybe the 
use of an external hosting service running tikiwiki or somesuch for the 
files - it will slow them down I know but at least they'd be sure there 
is no snooping going on, and they'd have external access.  (I'll give 
them a crash course in secure passwords... :) )  They are running XP.

Another alternative I was considering was installing cygwin on their 
machines and running X over XDMCP(in SSH of course) - but then I've been 
obsessed with that lately and the more I think about it the more it 
seems like a bad idea as the files would still be stored locally.  I 
suppose we could use an encrypted filesystem or something on their 
machines, but that probably breaks the terms of their support contract.

Has anyone had any experience of anything like this?

-- 
Dan