Re: Whitelist of update servers

2012-03-12 Thread -Hammer-
Can you be a little more specific? Otherwise I think your answer would be The Internet -Hammer- I was a normal American nerd -Jack Herer On 3/12/2012 3:05 PM, Maverick wrote: Is there a whitelist that applications have to talk to in order to update themselves?

Re: Whitelist of update servers

2012-03-12 Thread Paul Graydon
On 03/12/2012 10:05 AM, Maverick wrote: Is there a whitelist that applications have to talk to in order to update themselves? Which applications? What updates?

Re: Whitelist of update servers

2012-03-12 Thread Keegan Holley
2012/3/12 Maverick myeaddr...@gmail.com Is there a whitelist that applications have to talk to in order to update themselves? sometimes

Re: Whitelist of update servers

2012-03-12 Thread goemon
vague question gets vague answer. yes -Dan On Mon, 12 Mar 2012, Maverick wrote: Is there a whitelist that applications have to talk to in order to update themselves?

Re: Whitelist of update servers

2012-03-12 Thread Maverick
Like list of sites that operating systems or applications installed on your machines go to update themselves. One way could be to go on each vendors site and look at their update servers like microsoft.update.com but it would be good if there is a list of such servers for all OS and applications

Re: Whitelist of update servers

2012-03-12 Thread Keegan Holley
2012/3/12 Maverick myeaddr...@gmail.com Like list of sites that operating systems or applications installed on your machines go to update themselves. One way could be to go on each vendors site and look at their update servers like microsoft.update.com but it would be good if there is a list

Re: Whitelist of update servers

2012-03-12 Thread Peter Kristolaitis
I'm trying to determine if this is supposed to be an exercise in How To Annoy Your Sysadmins or How To Do Network Security The Really, Really Wrong Way or some combination of the two - Pete On 12-03-12 04:34 PM, Maverick wrote: Like list of sites that operating systems or

Re: Whitelist of update servers

2012-03-12 Thread William Herrin
On Mon, Mar 12, 2012 at 4:40 PM, Peter Kristolaitis alte...@alter3d.ca wrote: On 12-03-12 04:34 PM, Maverick wrote: Like list of sites that operating systems or applications installed on your machines go to update themselves. One way could be to go on each vendors site and look at their update

Re: Whitelist of update servers

2012-03-12 Thread Peter Kristolaitis
On 12-03-12 04:53 PM, William Herrin wrote: On Mon, Mar 12, 2012 at 4:40 PM, Peter Kristolaitisalte...@alter3d.ca wrote: On 12-03-12 04:34 PM, Maverick wrote: Like list of sites that operating systems or applications installed on your machines go to update themselves. One way could be to go

Re: Whitelist of update servers

2012-03-12 Thread Paul Graydon
On 03/12/2012 10:53 AM, William Herrin wrote: On Mon, Mar 12, 2012 at 4:40 PM, Peter Kristolaitisalte...@alter3d.ca wrote: On 12-03-12 04:34 PM, Maverick wrote: Like list of sites that operating systems or applications installed on your machines go to update themselves. One way could be to go

Re: Whitelist of update servers

2012-03-12 Thread Randy Bush
i tend to two defenses o if it is not an urgent update, i wait to hear from peers that it is safe. o i generally do not accept pop-up updates. if one looks tasty, when possible i navigate directly to the site (yes, i know about dns spoofing) and download. randy

Re: Whitelist of update servers

2012-03-12 Thread Jeff Kell
An IP-based whitelist is pretty much doomed from the start. Many vendors use content delivery networks and that is too large and volatile to chase. We have had some success in captive portal environments with DNS manipulation, allowing only certain domains to resolve, and redirecting everything