Re: Is additional firewall necessary?

Sebastian Gottschalk <seppi@xxxxxxxxx> wrote in
news:51n0g0F1k8uh1U1@xxxxxxxxxxxxx:


Well, yes, because you're not running windows.

This is especially true for Windows, since all those "desktop
firewalls" for Windows are totally broken.

I don't know why you keep saying that.

Maybe you're like my son, who choked on a taco shell when he was 3. To
this day, he'll be 18 in Feb., he won't eat hard shell tacos.

Maybe you had one bad experience with ZoneAlarm v1.0, or something
similar, eons ago and can not accept that anyhting may have fixed.

So v1.0 8 yrs ago messed up something in your little Win98 box....boo hoo
hoo. Get over it.

Weighing benefit against problems usually isn't the driving point for
most organizations. Insurance companies demanding to add such a stuff
(without even understanding the technical implications) usually is.
The admin generally complains.

The more competent organizations who don't live in such bounds
generally don't adhere to "desktop firewalls" and hardly adhere to
virus scanners. They simply utilize competent and serious security
mechanisms like No-Exec-Policies, competent management of ACLs and
other security policies, NIDS...

Are you serious ?! How many organizations have you toured the IT
department and were told...'We use no AV here' ?

But please, just state how such "simpler malware" could successfully
exploited a fully patched Windows XP SP2 in standard configuration.

Oh, how bout the day after the next 0day exploit is released for it,
and before the update cycle?

A 0day exploit for what program or subsystem?

It doesn't matter what OS. The O/S in question is Windows XP.

I've got more questions....I'll ask them all in this post.

1) How do you install a Windows program, then configure it w/o starting
the program ?

2) What was the file xxxxx.xxxx.crack.exe doing in a zip file you had.
According to you, you would not ever trust any program you had not
written (it seems), and I think any program named crack.exe would be
something not written by you, and should NOT on your computer.

3) How can you say that programs don't try to 'call home'. Automatic
updates of programs is the rage, and I always turn ALL that off.

.