Re: BBC-TV Computer Security Video For Non-Techies

From: Chuck (none_at_example.net)
Date: 04/26/05


Date: 25 Apr 2005 17:15:03 -0500

On Mon, 25 Apr 2005 23:45:22 +0200, "Andreas Rauer" <*email_address_deleted*>
wrote:

>Ian Kenefick wrote:
>> On Mon, 25 Apr 2005 21:48:36 +0100, "Jason Edwards" wrote:
>>> If I did then they'd insist on installing unnecessary personal
>>> firewall software that they wouldn't be able to use and would be
>>> calling me every other day about whether or not somewindowsapp.exe
>>> should be allowed to connect.
>>
>> Unnecessary? I think this is not correct. Everyone should use a
>> personal firewall. It's defense at the application level which in my
>> view is critical!
>
>Why not a simple resolution without adding more unstable and exploitable
>code to your system?

A perimeter defense is a necessity. But protecting yourself within your LAN is
a good idea too. Protecting yourself with just a perimeter firewall is a
security policy from 5 years ago. Times have changed, and the bad guys have
found new exploits. Layered security is a must.

>Just stop offering (unnecessary) network services to the internet.
>http://www.ntsvcfg.de/ntsvcfg_eng.html
>
>
>> Much progress has been made in firewalls which will
>> help the user to make the correct decision as to weather they should
>> leave an application access to external networks.
>
>If you don't trust a software, why did you install it?

Lots of software has programming design mistakes, that can be exploited by the
bad guys. You should protect yourself, even with software that you trust.

>
>> If your
>> client/friend is that important then you will take 5 mins to explain
>> how they can figure out what they should and shouldn't allow access.
>
>If the Windows standard installations wouldn't offer half a dozen (for home
>installations) unnecessary network services, we would have a lot less spam
>and virus/worm-mailings.

Every operating system, if improperly configured, will have security holes. Not
just Windows.

>And people shouldn't click on every colorful icon, which happens to be
>longer than half a microsecond under their cursor...

Layered security, properly applied, includes updating the CKI (Chair To Keyboard
Interface).

And it includes not posting your email address openly, which will get you more
unwanted email, than wanted email. Learn to munge your email address properly,
to keep yourself a bit safer when posting to open forums. Protect yourself and
the rest of the internet - read this article.
http://www.mailmsg.com/SPAM_munging.htm

-- 
Cheers,
Chuck 
Paranoia is not necessarily a bad thing - it comes from experience.
My        email         is          AT         DOT
   actual       address    pchuck       sonic      net.


Relevant Pages

  • Re: Alternative to Norton Internet Security?
    ... I have net experienced any viruses or other unwanted downloads / attacks. ... Is there an alternative security software/system available that is as good at protecting my system but without the cost in system performance? ... What WinXP's firewall does not do, is protect you from any Trojans or spyware that you might download and install inadvertently. ... it is incumbent upon each and every computer user to learn how to secure his/her own computer. ...
    (microsoft.public.windowsxp.general)
  • Re: Making Outpost work
    ... >> I am finding it quite hard configuring this firewall. ... Protecting a computer is a complex task, ... >> I do NOT REALLY NEED FEATURES for mail attachments, cookies, ActiveX, ... >> better than others but I would have like even more reporting tools). ...
    (comp.security.misc)
  • Re: Making Outpost work
    ... >> I am finding it quite hard configuring this firewall. ... Protecting a computer is a complex task, ... >> I do NOT REALLY NEED FEATURES for mail attachments, cookies, ActiveX, ... >> better than others but I would have like even more reporting tools). ...
    (comp.security.firewalls)
  • Re: Making Outpost work
    ... >> I am finding it quite hard configuring this firewall. ... Protecting a computer is a complex task, ... >> I do NOT REALLY NEED FEATURES for mail attachments, cookies, ActiveX, ... >> better than others but I would have like even more reporting tools). ...
    (alt.computer.security)
  • RE: [fw-wiz] CERT vulnerability note VU# 539363
    ... So will anything south of a firewall- hosts aren't immune to flooding ... firewall is doing its job- stopping packets when there's an attack- ... aren't "protecting" external services like Web servers. ... one detailed in the vulnerability note) immediately, ...
    (Firewall-Wizards)