RE: Win2k SP3
From: Tim Donahue (TDonahue@haynesconstruction.com)Date: 08/20/02
- Previous message: George Chip Smith: "Re: Backups"
- Maybe in reply to: RUSSELL T. LEWIS: "Win2k SP3"
- Next in thread: Derek Hamilton: "Re: Win2k SP3"
- Reply: Derek Hamilton: "Re: Win2k SP3"
- Reply: Robert McIntyre: "RE: Win2k SP3"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
From: Tim Donahue <TDonahue@haynesconstruction.com> To: 'Rob Fogle' <rob@deltaed.com>, Chris Norris <chris.norris@cpnmedia.co.uk>, security-basics@securityfocus.com Date: Tue, 20 Aug 2002 14:39:21 -0400
If it follows the same methods that Windows XP uses, then MS does not
initiate the connection. The computer that SP3 is running on will contact
MS to look for the latest updates (could be turned off in Windows XP, not
sure about SP3) in the same fashion that MS uses for Windows Update. I also
wouldn't worry about MS recording the information that is transmitted, there
was a court ruling (sorry don't have a link to it anymore) a few years back
that prohibited them from keeping a record of who downloads what information
from Windows Update.
Tim Donahue
-----Original Message-----
From: Rob Fogle [mailto:rob@deltaed.com]
Sent: Monday, August 19, 2002 10:47 AM
To: Chris Norris; security-basics@securityfocus.com
Subject: RE: Win2k SP3
I am more worried about some hacker breaking the code that allows M$ access
to you system. Once they have broken that (which they will inevitably do)
they will have access to the data.
Rob Fogle
Director of Information Technology
Delta Educational Systems
-----Original Message-----
From: Chris Norris [mailto:chris.norris@cpnmedia.co.uk]
Sent: Friday, August 16, 2002 1:50 PM
To: security-basics@securityfocus.com
Subject: FW: Win2k SP3
"Accepting the EULA and giving M$ the right to 'monitor and update W2k
components'"
What puzzles me is how this EULA is enforced. How does MS get the
information? Through the internet obviously, unless crack teams of MS
engineers slip into your company at night and stealthily gather information.
So why not block MS servers at the firewall? Why would any ordinary user
need to access MS on the net? Well you could say to use Windows Updates. But
most corporates do that as part of sys admin and install patches as and
when. So you could have your own PC and your PC only allowed to access MS.
But then, would that be 'illegal' under the EULA terms? Would that be a
breach of the agreement? So then, how will MS get this info? As I've said
before, I've put SP3 on all the W2K servers and I've had no problem. I'm not
worried about MS looking at the servers except it will be in the
firewall/proxy logs and I would simply block em.
Chris Norris
- Previous message: George Chip Smith: "Re: Backups"
- Maybe in reply to: RUSSELL T. LEWIS: "Win2k SP3"
- Next in thread: Derek Hamilton: "Re: Win2k SP3"
- Reply: Derek Hamilton: "Re: Win2k SP3"
- Reply: Robert McIntyre: "RE: Win2k SP3"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
Relevant Pages
|