Re: xp security vulnerabilities?

From: Robert Moir (bofh_at_mvps.org)
Date: 02/21/04


Date: Sat, 21 Feb 2004 11:15:04 -0000

joe wrote:
> OK - please don't flame me for a newbie dumbass question but I have
> been searching the net for a while now without finding a clear answer
> to the following, and I am hoping you can help.
> I have recently changed from Win98SE to WinXP corp pro, running Norton
> Internet Security 2003. Under Win98 I had Atguard and BlackIce
> running in addition to NIS and I came up undetected at every security
> test site I could find. I understand that WinXP has some (many?)
> holes and was wondering:
> 1. How important is it to install the SP's from MS, and what
> "surprises" should I expect from them?

Vital in my opinion.

> 2. What additional software should I have and/or what settings should
> I change in WinXP to be invisible on the net?

"Invisible on the net" is a myth. You'll want to keep some kind of firewall
running sure enough but you need to balance a need to get work done with a
need to stay safe. A good firewall and virus scanner is a good start but
there is no substitute for good common sense.

> 3. Does Steve Gibson know what he's talking about or not?

Ask 10 people that question and you might get 10 different answers. My
Opinion: He has one or two facts but he buries them in BS and hyperbole. His
site is helpful to beginners perhaps but I don't know anyone in the security
industry who takes him very seriously.

Ask yourself this question - Steve went on about how Raw Sockets in XP would
cause the Internet to explode as soon as XP was released; How old is XP? And
if you can read this reply, did the Internet blow up or not?

-- 
-- 
Rob Moir, Microsoft MVP for servers & security
Website - http://www.robertmoir.co.uk
Virtual PC 2004 FAQ - http://www.robertmoir.co.uk/win/VirtualPC2004FAQ.html
Kazaa - Software update services for your Viruses and Spyware.
> I have also recently changed from dial-up to DSL, hence my increased
> concern.
If you intend to be connected for long periods of time I'd suggest getting a
DSL router/modem that includes a built in firewalling facility of some kind.


Relevant Pages

  • Re: Newbie question abt Win XP and firewall
    ... > I now have Windows XP and the internal firewall is activated. ... > I wonder if I should get another product (Zone Alarm?). ... No, if it's home, you don't need that much security. ... I'd say use the winXP ...
    (comp.security.firewalls)
  • [REVS] Bypassing Client Application Protection Techniques
    ... Get your security news from a reliable source. ... protection programs. ... * Kerio Personal Firewall 4.0 ... And we got actually nothing in the field of client application ...
    (Securiteam)
  • Re: Recycler security issues on IIS server
    ... > latest upates to the server. ... > like to see the server put behind our firewall, ... other software, install all patches, IISlockdown, URLscan, use the correct ... the procedures you follow may vary depending on your security needs. ...
    (microsoft.public.inetserver.iis.security)
  • Why hasnt Symantec addressed nastier Messenger spoofs
    ... Norton / Symantec has been silent on whether Norton Internet Security ... DSL firewall will stop these kinds of pop-ups. ... major ISPs and broadband systems. ...
    (comp.security.misc)
  • Re:RE : suggestions on a good firewall
    ... Subject: RE: suggestions on a good firewall ... CheckPoint does! ... with a url-filtering server. ... IT Technical Security Officer ...
    (Security-Basics)