ok, we know that most win firewall apps can't stop windows from sucking.. they have md5 hashkeys for all major apps to stop them being replaced by trojans,
but windows can be tricked into allowing a trojan to talk though IE... big deal,, I have two antivirus apps on the PC, it'd have to be a damn new trojan to actually be savable to the hard disk. (which incidently is the recommended defence (antivir) that that article suggested.) one little point,, I wasn't aware that tiny firewall (linux) or InteractiveBastille did md5 hashkeys of executables at all... I actually think it would be fantastic if it did,, then we wouldn't have to worry so much about root kits... much of a muchance I think,, if you do the work, you can secure any OS to about 98 or so %... M$ just requires much more work.. and I keep saying this ITS BEHIND A LINUX FIREWALL, WITH SNORT and PORTSENTRY .... what more could I possibly do to secure this thing... grc (and my own port scanner tell me absolutly everything is blocked (and I scanned 64000 ports.).. thats about as good as I need to be.) rgds Frank -----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of Tom Brinkman Sent: Tuesday, 27 November 2001 8:41 PM To: [EMAIL PROTECTED] Subject: Re: [newbie] win32 badtrans worm. On Tuesday 27 November 2001 04:23 am, Franki wrote: > RE: [newbie] win32 badtrans worm.yeah, I agree,,, > > I hate microsoft as much as the next guy, probably more, but I > have to write perl scripts that work and are tested in windows and > linux, so I have to have a windows box.. > I also have a winmodem in my notebook that I need when out of town. > > so I loaded win2000 pro, then loaded all patches an service packs, > then turned off all the dangerous stuff in outlook and IE... > then loaded pccillin and innoculate PE (which is a free antivirus > for windows), then I downloaded the FREE Tiny firewall package, > which is regarded as being the > best firewall package for windows workstations.. http://www.zdnet.com/zdnn/stories/news/0,4586,5099447,00.html Franki, there's almost as many articles of this nature on the Net as there are constant reports of new security flaws in Windoze products. -- ������Tom Brinkman � � � � � � Galveston Bay, USA > > AND, > > This thing sits behind a linux masq box with a very tight firewall > (BASICALLY NO SERVICES OPEN. AND NO ICMP) and it also retrieves its > mail from another linux box running postfix that scans all incoming > and outgoing mail for > virus's, and doesn't let them though... (using amavis and the free > Trend filescan.) > > > So I don't know, I am fairly confident that I am not presently > hackable... > > GRC reports me as being entirely invisable... so its at least > fairly hard to do. which is more then anyone can ask nowdays. > > When I have no reason to use winblows, then I won't,,, but right > now thats not an option.. > > even if windows does suck, and we all know it does,, I have secured > it as much as possible and IT IS sitting behind a linux firewall > and MASQ ,,, > > I think it is pretty safe.. and I don't think I am fooling myself. > > Tell me how my security is Lax ??? > > > rgds > > Frank > -----Original Message----- > From: [EMAIL PROTECTED] > [mailto:[EMAIL PROTECTED]]On Behalf Of Harrison, Neil > Sent: Tuesday, 27 November 2001 8:39 AM > To: '[EMAIL PROTECTED]' > Subject: RE: [newbie] win32 badtrans worm. > > > You are a very angry, bitter man. > > See "y'all" later > > -----Original Message----- > From: Tom Brinkman [mailto:[EMAIL PROTECTED]] > Sent: Monday, November 26, 2001 10:19 AM > To: [EMAIL PROTECTED] > Subject: Re: [newbie] win32 badtrans worm. > > On Monday 26 November 2001 12:13 pm, Franki wrote: > > you might want to check your system Frank... > > Franki > > You need to check your system Franki since you sent with: > > X-Mailer: Microsoft Outlook IMO, Build 9.0.2416 (9.0.2911.0) > X-Mimeole: Produced By Microsoft MimeOLE V5.50.4807.1700 > Importance: Normal > > WHICH is a guaranteed virus transmission propagater to other > Windoze users, and pretty much fsck'ups the Net in general, even > fellow Linux users who have to put up with the damage y'all > propulgate to Net servers, and the stolen banwidth y'all suck up. > > I dunno how to convince y'all NEVER connect to the Net with, > any M$ product. There is no way to secure or defend an M$ system. > (period). You can only buy/beg/borrow a bunch of ineffective > firewalls and virus scanners for M$ crap. Then, the only thing > you've accomplished is to fool yourself. > > If you dual boot, delete anything Winblows has to do with > connecting to the Net, unplug the phone line. Then you've got > some security, at least till you buy a CD or floppy with a winblows > virus on it. Buy a real modem and use a real OS to connect. > > It amazes me that some people who do run Linux (part time), > believe that connecting with Windoze is a good, or even tolerable > idea. Specially on this (Linux) list. Winsux virus warnings to this > list are OFF TOPIC, immaterial, and border on ridiculous. Post > these warnings to (ignorant, computer illiterate) Winblows users > lists and newsgroups. You'll be very busy on a daily basis ... > mostly you'll be weeks, even months and years behind > > Jeez, in a perfect world, Winblows users wouldn't be allowed to > connect. > > ... there ought'a be a law > > -- > Tom Brinkman Galveston Bay, USA
Want to buy your Pack or Services from MandrakeSoft? Go to http://www.mandrakestore.com
