AT&T MERLIN LEGEND Release 3.0 Installation Manual page 518

Customer Support Information
The Remote Access feature, as designed, helps the customer, through
proper administration, to minimize the ability of unauthorized persons to
gain access to the network. Most commonly, phone numbers and codes
are compromised when overheard in a public location, through theft of a
wallet or purse containing access information, or through carelessness (for
example, writing codes on a piece of paper and improperly discarding it).
Additionally, hackers may use a computer to dial an access code and then
publish the information to other hackers. Enormous charges can be run up
quickly. It is the customer's responsibility to take the appropriate steps to
properly implement the features, evaluate and administer the various
restriction levels, protect access codes, and distribute access codes only
to individuals who have been fully advised of the sensitive nature of the
access information.
Common carriers are required by law to collect their tariffed charges.
While these charges are fraudulent charges made by persons with
criminal intent, applicable tariffs state that the customer of record is
responsible for payment of all long-distance or other network charges.
AT&T cannot be responsible for such charges and will not make any
allowance or give any credit for charges that result from unauthorized
access.
To minimize the risk of unauthorized access to your communications
system:
Use a nonpublished Remote Access number.
Assign access codes randomly to users on a need-to-have basis,
keeping a log of all authorized users and assigning one code to
one person.
Use random-sequence access codes, which are less likely to be
easily broken.
Deactivate all unassigned codes promptly.
Ensure that Remote Access users are aware of their responsibility
to keep the telephone number and any access codes secure.
A–12 Maintenance and Troubleshooting