Re: Is there anything that actually gets users to fix their computers?

2003-10-09 Thread Michael Painter
http://www.wired.com/news/digiwood/0,1412,60613,00.html When students first register on the network, they are required to read about peer-to-peer networks and certify that they will not share copyright files. Icarus then scans their computer, detects any worms, viruses or programs that act as

Re: Is there anything that actually gets users to fix their computers?

2003-10-09 Thread Howard C. Berkowitz
At 3:26 PM -1000 10/9/03, Michael Painter wrote: http://www.wired.com/news/digiwood/0,1412,60613,00.html When students first register on the network, they are required to read about peer-to-peer networks and certify that they will not share copyright files. Icarus then scans their computer,

Re: Security v. Privacy (was Re: Is there anything that actually gets users to fix their computers?)

2003-10-06 Thread Matthew Sullivan
Sean Donelan wrote: The difference being campus machines are null routed rather than disconnected, and they are not reconnected until checked and clean. And once again, the question: how do you know the machines have been checked and cleaned before they are reconnected? Do you take the

Re: Is there anything that actually gets users to fix their computers?

2003-10-06 Thread Kee Hinckley
At 8:15 PM -0400 10/6/03, Jeffrey S. Young wrote: It's a difficult thing for all of us when j.random users start to discover things like personal firewall. I had one threaten me personally with 'investigation' by the FBI because my system was attempting to break into his PC He sent it to my

Security v. Privacy (was Re: Is there anything that actually gets users to fix their computers?)

2003-10-05 Thread Sean Donelan
On Sun, 5 Oct 2003, Suresh Ramasubramanian wrote: Kee Hinckley [05/10/03 00:57 -0400]: Bringing this back to the more relevant topic. Is there something that ISPs could do to notify users and get in their face more without shutting off their connection? Perhaps a custom piece of I have

Re: Security v. Privacy (was Re: Is there anything that actually gets users to fix their computers?)

2003-10-05 Thread Suresh Ramasubramanian
Sean Donelan [05/10/03 16:49 -0400]: There are some differences between private networks and public networks. In a company, the company is the owner of the PCs and employees (in the Very true - and that was the context I mentioned this in. So from an ISPs point of view, is there a way for

Re: Security v. Privacy (was Re: Is there anything that actually gets users to fix their computers?)

2003-10-05 Thread Sean Donelan
On Sun, 5 Oct 2003, Suresh Ramasubramanian wrote: So from an ISPs point of view, is there a way for the ISP to quickly tell the customer if the particular computer is fixed without unduly Isolate his IP and have all outbound http redirected to a page that says please call [escalated tech

Re: Security v. Privacy (was Re: Is there anything that actually gets users to fix their computers?)

2003-10-05 Thread Suresh Ramasubramanian
Sean Donelan [05/10/03 17:44 -0400]: What happens a few hours later when you start getting complaints again about the same customer? Do you turn the connection off again. And Sure, turn it off again. And again. Sooner or later, it will dawn on the customer that no, his system is not fixed.

Re: Security v. Privacy (was Re: Is there anything that actually gets users to fix their computers?)

2003-10-05 Thread Matthew Sullivan
Suresh Ramasubramanian wrote: Sean Donelan [05/10/03 17:44 -0400]: What happens a few hours later when you start getting complaints again about the same customer? Do you turn the connection off again. And Sure, turn it off again. And again. Sooner or later, it will dawn on the

Re: Security v. Privacy (was Re: Is there anything that actually gets users to fix their computers?)

2003-10-05 Thread Suresh Ramasubramanian
Matthew Sullivan [06/10/03 11:38 +1000]: Third time their account is deleted. I am yet to have one that has reached the third time - 85k users here. Let me guess - that'd mostly be dialup users, right? Or maybe simply email users? Not (say) T1 and larger users? -- srs

Re: Security v. Privacy (was Re: Is there anything that actually gets users to fix their computers?)

2003-10-05 Thread Valdis . Kletnieks
On Mon, 06 Oct 2003 02:43:48 -, Suresh Ramasubramanian said: Matthew Sullivan [06/10/03 11:38 +1000]: Third time their account is deleted. I am yet to have one that has reached the third time - 85k users here. Let me guess - that'd mostly be dialup users, right? Or maybe simply

Re: Security v. Privacy (was Re: Is there anything that actually gets users to fix their computers?)

2003-10-05 Thread Matthew Sullivan
Suresh Ramasubramanian wrote: Matthew Sullivan [06/10/03 11:38 +1000]: Third time their account is deleted. I am yet to have one that has reached the third time - 85k users here. Let me guess - that'd mostly be dialup users, right? Or maybe simply email users? Not (say) T1 and larger

Re: Is there anything that actually gets users to fix their computers?

2003-10-05 Thread Robert Boyle
At 12:57 AM 10/5/2003, you wrote: At 2:11 AM + 10/5/03, Suresh Ramasubramanian wrote: For more fun, consider that you are [EMAIL PROTECTED], and get those It's the anti-virus ones that drive me nuts. Someone in your domain sent us a virus which always forges the from line, but we're going

Re: Is there anything that actually gets users to fix their computers?

2003-10-05 Thread Valdis . Kletnieks
On Mon, 06 Oct 2003 00:12:07 EDT, Robert Boyle [EMAIL PROTECTED] said: What gets me is the moron admins who track down every attack they see. Attacks such as ICMP echo requests, Port 80 connections, etc. If they get huge logs that's one thing, but for four pings from a windows box or a

Re: Is there anything that actually gets users to fix their computers?

2003-10-05 Thread Suresh Ramasubramanian
Robert Boyle [10/6/2003 9:42 AM] : What gets me is the moron admins who track down every attack they see. Attacks such as ICMP echo requests, Port 80 connections, etc. If they get huge logs that's one thing, but for four pings from a windows box or a mistyped IP address in a URL and they are

Re: Security v. Privacy (was Re: Is there anything that actually gets users to fix their computers?)

2003-10-05 Thread Sean Donelan
The difference being campus machines are null routed rather than disconnected, and they are not reconnected until checked and clean. And once again, the question: how do you know the machines have been checked and cleaned before they are reconnected? Do you take the customers word, or do you

RE: Is there anything that actually gets users to fix their computers?

2003-10-04 Thread Kee Hinckley
At 8:02 PM -0400 10/3/03, Terry Baranski wrote: Obviously, this is by no means specific to computer patching. People are either busy, lazy, apathetic, etc. Most don't pay attention until I've played the user-notification game myself in fighting hoaxes (do a search on [EMAIL PROTECTED]

Re: Is there anything that actually gets users to fix their computers?

2003-10-04 Thread Suresh Ramasubramanian
Kee Hinckley [04/10/03 13:01 -0400]: I've played the user-notification game myself in fighting hoaxes (do a search on [EMAIL PROTECTED] sometime--and consider what happens when tens of thousands of people add it to their address book and then forward the latest joke/hoax/virus to everyone

Re: Is there anything that actually gets users to fix their computers?

2003-10-04 Thread Mike Nice
We created a set of RAS filters that we can call up in the user's RADIUS record - Block ICMP request, Block SMTP outgoing, etc. When the user has a virus we just set the filter. They can still get on without doing any damage, yet still download fixes, etc. They might call if they need to

Re: Is there anything that actually gets users to fix their computers?

2003-10-04 Thread Kee Hinckley
At 2:11 AM + 10/5/03, Suresh Ramasubramanian wrote: For more fun, consider that you are [EMAIL PROTECTED], and get those It's the anti-virus ones that drive me nuts. Someone in your domain sent us a virus which always forges the from line, but we're going to tell you anyway because we'd

Is there anything that actually gets users to fix their computers?

2003-10-03 Thread Sean Donelan
Short of turning off their network access, why won't users fix their computers when the computer is infected or needs a patch? The University of Massachusetts posted bulletins, sent an email to all incoming students, included an alert when they connected. Nevertheless, almost three months after

Re: Is there anything that actually gets users to fix their computers?

2003-10-03 Thread Daniel Karrenberg
On 03.10 04:12, Sean Donelan wrote: Short of turning off their network access, why won't users fix their computers when the computer is infected or needs a patch? Hey, it's working! If it ain't broken Related question for network engineers: When did you have your last medical

Re: Is there anything that actually gets users to fix their computers?

2003-10-03 Thread Daniel Karrenberg
On 03.10 10:36, Erik-Jan Bos wrote: Hey, it's working! If it ain't broken I doubt this. Recently, I worked with a couple of people that each had their PCs infected. Their own virtual neighborhood complained to them, and they surely were embaressed about the situation, but... They

Re: Is there anything that actually gets users to fix their computers?

2003-10-03 Thread Sean Donelan
On Fri, 3 Oct 2003, Erik-Jan Bos wrote: I doubt this. Recently, I worked with a couple of people that each had their PCs infected. Their own virtual neighborhood complained to them, and they surely were embaressed about the situation, but... They just did not know how to fix it, i.e. where to

Re: Is there anything that actually gets users to fix their computers?

2003-10-03 Thread Erik-Jan Bos
Sean Donelan wrote: On Fri, 3 Oct 2003, Erik-Jan Bos wrote: I doubt this. Recently, I worked with a couple of people that each had their PCs infected. Their own virtual neighborhood complained to them, and they surely were embaressed about the situation, but... They just did not know how to fix

Re: Is there anything that actually gets users to fix their computers?

2003-10-03 Thread Daniel Karrenberg
On 03.10 10:59, Erik-Jan Bos wrote: Perhaps an auto club for PC-users: You call and within the next 24 or 48 hours, depending on your subscription, an expert would dial in or come by to get you on the virtual road again. If this was a viable business proposition, it would exist. My

RE: Is there anything that actually gets users to fix their computers?

2003-10-03 Thread John Renwick
Sean, Ok, not everyone is a computer expert. If their TV, VCR or car started belching smoke and flames, and they didn't know how to fix it, what would they do? Take it to a repair shop? If you get a flat tire, pull off to the side of the road and either repair the tire or call the auto

Re: Is there anything that actually gets users to fix their computers?

2003-10-03 Thread David Lesher
Speaking on Deep Background, the Press Secretary whispered: Short of turning off their network access, why won't users fix their computers when the computer is infected or needs a patch? Hey, it's working! If it ain't broken And when you DO patch it, then it REALLY breaks.

Re: Is there anything that actually gets users to fix their computers?

2003-10-03 Thread Jack Bates
John Renwick wrote: You've put your finger on it. ISPs have to help users understand that their machines are broken in a way that makes them unable to gain access to the Internet -- then most will take them to the shop PDQ, and hopefully get them back with some protection installed. While

RE: Is there anything that actually gets users to fix their computers?

2003-10-03 Thread Terry Baranski
Daniel Karrenberg wrote: There is that too; but I have frequently observed people not doing it even when provided detailed step-by-step instructions. On the other hand they would proceed relatively quickly once it stopped working, e.g. the Internet plug was pulled. Some of them would use

Re: Is there anything that actually gets users to fix their computers?

2003-10-03 Thread Laurence F. Sheldon, Jr.
Terry Baranski wrote: Obviously, this is by no means specific to computer patching. People are either busy, lazy, apathetic, etc. Most don't pay attention until they're forced to; i.e., when their system stops working because a virus broke it or because their network access is shut off.