Your thoughts on my network security.

Your thoughts on my network security.

am 06.12.2006 12:48:50 von Jimmy White

Hi all,

Right, I have been reading up on wan/lan security and have setup what I
think is a secure environment and would like your opinions.

First I have a router connected to my cable modem, which is connected to a
second wireless router. I use one of the lan ports on the second router for
my Internet connection with a software firewall on my PC. The wireless part
of the second router has a 63 character, ascii, numbers random key using WPA
TKIP(PSK) for my laptop. Also when I'm doing online Banking I use VPN to
connect to my Banks site and they use SSL also.

For spyware, adware, malware and viruses I use spybot,ad-aware and AVG pro
edition.

I'm I secure enough ?

Jimmy White

Re: Your thoughts on my network security.

am 06.12.2006 13:00:49 von alf

Jimmy White wrote:
> The wireless part of the second router has a 63 character, ascii,
> numbers random key using WPA TKIP(PSK) for my laptop.

Can you use WPA2 or at least change TKIP to AES.

63 characters is max. Maybe somebody will hope that max key is used
(exeactly what paranoid unexperienced people do) so he might bruteforce
only 63 character keys. Change lenght for ex. 55, 57, 52 etc. If you
used key offered by Windows there is no symbols and capital letters you
should change that. So somebody will have to bruteforce higher range
(that will take too much time). If you are home user, probably no one
will spent too much time on you.

Re: Your thoughts on my network security.

am 06.12.2006 13:13:00 von unknown

Post removed (X-No-Archive: yes)

Re: Your thoughts on my network security.

am 06.12.2006 13:28:30 von TheDog

> Also when I'm doing online Banking I use VPN to
> connect to my Banks site and they use SSL also.

That's worthless as the Bank site must have a valid VPN end point. In
order for there to be a valid VPN connection, there must be two valid
VPN end points. One VPN end point is on your side and the other one is
on the bank's side. The bank side doesn't have VPN for a customer
contact with its network or Website. What the bank has is HTTPS on their
side and your browser goes into a HTTPS session with their Web site and
your browser.
>
> For spyware, adware, malware and viruses I use spybot,ad-aware and AVG pro
> edition.

Other than AVG, the anti virus, the rest of the stuff is snake-oil
running on the machine that can be circumvented and defeated, easily,
even the personal FW. Anything that's running with the O/S can be
fooled, circumvented, attacked and defeated.

>
> I'm I secure enough ?

As long as you have wireless in the mix, you're never going to be secure
enough
as a wireless hacker, with any expertise, can hack the wireless side of
your network and join it with them being all over the top of your
machines wired or wireless.

As long has you are depending upon snake-oil solutions to protect the
machine, then you're never going to be secure enough.

Where you need to start is with the O/S, secure the O/S as much as
possible to attack.

http://labmice.techtarget.com/articles/winxpsecuritychecklis t.htm

You should practice safehex as much as possible.

http://www.claymania.com/safe-hex.html

You should use other tools to help you in the detection and look around
on the machine with the tools from time to time, instead of depending
upon the snake-oil 100%, everything is okey dokey.

Long
http://www.windowsecurity.com/articles/Hidden_Backdoors_Troj an_Horses_and_Rootkit_Tools_in_a_Windows_Environment.html

Short
http://tinyurl.com/klw1

If the router can broadcast the syslog, then use something like
Wallwatcher or something similar, to watch the traffic too and from the
network, instead of flying blind.

http://www.sonic.net/wallwatcher/

Re: Your thoughts on my network security.

am 06.12.2006 13:31:04 von Jimmy White

> Did you change the default subnet on the first NAT Router?

Yes

> Did you change the default subnet on the Wireless Router?

Yes

> Did you change the SSID, Disable broadcasting of the SSID, change the
> default channel?

Yes, disabled.

> Did you enter a strong admin password for both routers?

Yes, very strong


> What PFW solution are you using and do you check the rules frequently to
> make sure that nothing has been created without your permission?

Kerio personal firewall

> What bank allows users to VPN into it? SSL should be enough without the
> VPN.

Ok, I VPN to an anonymous proxy, which then allows me onto the net, this
hides what I'm doing to my ISP, BUT I'm not doing anything but surf and
online banking, I just dont like people watching what I'm doing. I know the
connection from the anonymous proxy to my Bank is open until the SSL link is
made, but that's ok.

> Are you running as a local admin?

No

> Are you visiting questionable sites?

No

> Do you allow anyone else to use the same computer?

No

> Do you block all attachments in email?

No

> Do you ban the use of IM type applications?

No

> Do you ban the use of P2P Applications?

No


Jimmy White

Re: Your thoughts on my network security.

am 06.12.2006 13:33:47 von unknown

Post removed (X-No-Archive: yes)

Re: Your thoughts on my network security.

am 06.12.2006 13:34:12 von Weeble

On Wed, 06 Dec 2006 11:48:50 GMT, "Jimmy White"
wrote:

>Hi all,
>
>Right, I have been reading up on wan/lan security and have setup what I
>think is a secure environment and would like your opinions.
>
>First I have a router connected to my cable modem, which is connected to a
>second wireless router. I use one of the lan ports on the second router for
>my Internet connection with a software firewall on my PC. The wireless part
>of the second router has a 63 character, ascii, numbers random key using WPA
>TKIP(PSK) for my laptop. Also when I'm doing online Banking I use VPN to
>connect to my Banks site and they use SSL also.
>
>For spyware, adware, malware and viruses I use spybot,ad-aware and AVG pro
>edition.
>
>I'm I secure enough ?
>
secure for what ?
for the NSA to break in ?
for the BFSA (Burkina Fasso Security Agency) to break in ?
for your neighbor to use your wireless access ?
for you using the computers for MSN chat ?
for your 4-year old daughter to get out on the net ?

Re: Your thoughts on my network security.

am 06.12.2006 13:44:29 von Jimmy White

>You might want to get your email filtered or scanned for malware BEFORE
>it reaches your system. We block all attachments that could contain
>malware.

Now installed K9 and removed attachments in OE

>IM apps are the most common infection method I've seen (other than email
>and bad websites) in years - in fact, since most people have a buddy
>list they tend to over-trust links sent by friends - and that gets them
>compromised.

Removed from PC

>Many P2P apps and files downloaded contain malware, we ban/block their
>use/installation on all computers.

Now blocked and removed as I don't use them.

Jimmy White

Re: Your thoughts on my network security.

am 06.12.2006 15:53:41 von unknown

Post removed (X-No-Archive: yes)

Re: Your thoughts on my network security.

am 06.12.2006 16:34:54 von Jimmy White

>Where are you secure? You open remote security holes and privilege
>escalation with a "software firewall" which most likely is none, you mess
>up your computer with Spybot S&D and Ad-Aware, and you obviously don't have
>any real security concept against malicious code.
>
>Neither didn't you understand key management in WPA. Or the problems with
>SSL-Cas.

Well from what I've read about internet and home network security (over 200
documents), also from the advice of 2 internet security experts, one works
for Telewest broadband and the other sets up bank security both have said
that the my connection is unhackable from the internet side and as I'm using
a completely random 63 character password WPA-PSK (example key:
C>KgRiKC_1ftZ:_]\!1T6`Q]>OX,3|92P.AdCXiZFy!c%bn4mR?SC i3W-BeLOq) mean that
my wireless setup is also uncrackable, as it would take someone sniffing
your connection years to even get near that type of password. Also listened
to www.grc.com security now which he also confirms that a password like the
above is currently uncrackable.

However I know that it's still easy to get viruses,spyware,adware etc by
simply surfing the net, I reduce this by not using Internet Explorer, I also
disable JAVA script on all but sites I believe to be safe.

In regards to Spybot, ad-adware they are recommended by 100s of sites to
help find and remove problems with spyware etc and with my anti virus I am
well covered.

In regards to SSL-Cas, I've not really read enough about this concept so I
won't comment until I've read up on the subject ;)

Jimmy White

Re: Your thoughts on my network security.

am 06.12.2006 17:37:36 von alf

Jimmy White wrote:
> a completely random 63 character password WPA-PSK (example key:
> C>KgRiKC_1ftZ:_]\!1T6`Q]>OX,3|92P.AdCXiZFy!c%bn4mR?SC i3W-BeLOq) mean that
> my wireless setup is also uncrackable,

This is sample of good key. But note that there are others ways to hack you.

http://news.com.com/Breaking+into+a+laptop+via+Wi-Fi/2100-73 49_3-6101523.html?tag=nl

You are never uncrackable.

Re: Your thoughts on my network security.

am 06.12.2006 18:00:49 von unknown

Post removed (X-No-Archive: yes)

Re: Your thoughts on my network security.

am 06.12.2006 18:59:17 von unknown

Post removed (X-No-Archive: yes)

Re: Your thoughts on my network security.

am 06.12.2006 19:23:02 von TheDog

Jimmy White wrote:
>>Where are you secure? You open remote security holes and privilege
>>escalation with a "software firewall" which most likely is none, you mess
>>up your computer with Spybot S&D and Ad-Aware, and you obviously don't have
>>any real security concept against malicious code.
>>
>>Neither didn't you understand key management in WPA. Or the problems with
>>SSL-Cas.
>
>
> Well from what I've read about internet and home network security (over 200
> documents), also from the advice of 2 internet security experts, one works
> for Telewest broadband and the other sets up bank security both have said
> that the my connection is unhackable from the internet side and as I'm using
> a completely random 63 character password WPA-PSK (example key:
> C>KgRiKC_1ftZ:_]\!1T6`Q]>OX,3|92P.AdCXiZFy!c%bn4mR?SC i3W-BeLOq) mean that
> my wireless setup is also uncrackable, as it would take someone sniffing
> your connection years to even get near that type of password. Also listened
> to www.grc.com security now which he also confirms that a password like the
> above is currently uncrackable.

The fact that you have even mentioned that *clown* Gibson says it all.

And about your wireless security and your key, why don't you hope over
to alt.internet.wireless where the wireless experts and hackers frequent.

>
> However I know that it's still easy to get viruses,spyware,adware etc by
> simply surfing the net, I reduce this by not using Internet Explorer, I also
> disable JAVA script on all but sites I believe to be safe.
>
> In regards to Spybot, ad-adware they are recommended by 100s of sites to
> help find and remove problems with spyware etc and with my anti virus I am
> well covered.

No you're not as malware can circumvent and defeat every last bit of it.

Re: Your thoughts on my network security.

am 06.12.2006 23:59:00 von alf

Jimmy White wrote:
>> your connection years to even get near that type of password. Also listened
> to www.grc.com security now which he also confirms that a password like the
> above is currently uncrackable.

I checked this site, and I think that, beside this one, you should read
something else as well.

For wireless security, this might be good start

http://www.wirelessdefence.org/index.htm

For network security I belive that you can start from here

http://www.governmentsecurity.org/

If somebody have better suggestions just shoot, I'm no expert or hacker,
only a home user.

Re: Your thoughts on my network security.

am 07.12.2006 11:03:21 von Weeble

Fear has the evolutionary function to keep living entities alive.

So the minute you think you are safe, you become vulnerable.

Re: Your thoughts on my network security.

am 07.12.2006 13:01:42 von Jimmy White

From what I've read and learnt your statement is correct, I'm just trying to
make myself and my family safer while online.

I think I've done all I can for a home user account?

Jimmy White

"Osiris" wrote in message
news:gkpfn297njvrn1hph59rl5cf37m55d0v2n@4ax.com...
> Fear has the evolutionary function to keep living entities alive.
>
> So the minute you think you are safe, you become vulnerable.

Re: Your thoughts on my network security.

am 07.12.2006 15:19:23 von Kinski

On Wed, 6 Dec 2006 18:59:17 +0100, Sebastian Gottschalk
wrote:


>Actually just the claim of removal makes them totally unserious. At any
>rate, why don't read a nice article about Ad-Aware on
>, which describes how fucked up this thing actually
>is?

Got a link? I searched through the blogs and forums and found nothing
on Adaware.

Re: Your thoughts on my network security.

am 07.12.2006 16:44:41 von unknown

Post removed (X-No-Archive: yes)

Re: Your thoughts on my network security.

am 07.12.2006 17:27:24 von Weeble

On Thu, 07 Dec 2006 12:01:42 GMT, "Jimmy White"
wrote:

>From what I've read and learnt your statement is correct, I'm just trying to
>make myself and my family safer while online.
>
>I think I've done all I can for a home user account?
>
>Jimmy White
>
>"Osiris" wrote in message
>news:gkpfn297njvrn1hph59rl5cf37m55d0v2n@4ax.com...
>> Fear has the evolutionary function to keep living entities alive.
>>
>> So the minute you think you are safe, you become vulnerable.
>

I see there is only one PC in the house. That is neat, for now you
can put it in the living room, for all to see the screen. So the kids
can't surf to porn sites.

rules of thumb:
0: backup, but not too often. You might overwrite a good backup with a
bad one.
1: Don't give anyone the admin password or access to the FW settings.
2: trust the kids, but verify.
3: Give em all their own id and password
4: nobody can get anywhere unless you say so. not: they all can go
everywhere unless you stop them.
5: no P2P
6: put up something like Netnanny or whatever.
7: have virusscan scan anything that comes in.
8: nobody installs software but you.
9: fear, but don't let it keep you from being happy. there are no VERY
many people that are interested in the contents of your HD, unless you
work for the CIA.
10: backup.

Re: Your thoughts on my network security.

am 07.12.2006 17:33:43 von Weeble

>a completely random 63 character password WPA-PSK (example key:
>C>KgRiKC_1ftZ:_]\!1T6`Q]>OX,3|92P.AdCXiZFy!c%bn4mR?SC i3W-BeLOq) mean that


How in the world are you going to retype that password ?????
cut&paste don't always work with passwords....
Much better to use a sentence, eg. from your favorite book. As long as
it is long enough, you 're ok. Even more ok if you spoke swahili or
Sioux or inuit.
You don't have state secrets on your machine, do you ?

Re: Your thoughts on my network security.

am 07.12.2006 17:47:45 von unknown

Post removed (X-No-Archive: yes)

Re: Your thoughts on my network security.

am 07.12.2006 18:16:33 von unknown

Post removed (X-No-Archive: yes)

Re: Your thoughts on my network security.

am 07.12.2006 18:17:14 von unknown

Post removed (X-No-Archive: yes)

Re: Your thoughts on my network security.

am 07.12.2006 18:19:20 von Weeble

On Thu, 07 Dec 2006 16:47:45 GMT, Leythos wrote:

>In article ,
>nono@hotmail.com says...
>> 0: backup, but not too often. You might overwrite a good backup with a
>> bad one.
>
>LOL - it's best to ALWAYS assume a backup is BAD until you've verified
>it, and it's always best to have more than one backup. That's a generic
>rule of thumb.

point is, that sometimes discover a system to be corrupt after some
time, in which time you might have made (and overwritten) one or more
backups. So you do not use only two CD/CDRW/tape, to make DAILY
backups.
But you knew that...
Some people don't....

Re: Your thoughts on my network security.

am 07.12.2006 19:33:48 von unknown

Post removed (X-No-Archive: yes)

Re: Your thoughts on my network security.

am 07.12.2006 19:52:39 von rpaque

Sebastian Gottschalk wrote:

>> 2: trust the kids, but verify.
>
> Don't trust the kids. Supervise them.

Unfortunately, I have to agree with this one. I know how *I* was when
I was younger. If they CAN do it, they will be tempted TO do it. But,
I think you are both saying the same thing essentially.

>> 5: no P2P
>
> Why not?

Aside from the legal implications? You are opening up connections to
MANY unknown computers and giving them access to write files onto your
hard drive...


>> 8: nobody installs software but you.
>
> Well, what about enforcing that policy?

That would be why everybody has their own user ID. And none of the
accounts has software install privilages.

Re: Your thoughts on my network security.

am 07.12.2006 20:47:50 von Weeble

hihi

Re: Your thoughts on my network security.

am 07.12.2006 20:49:04 von Weeble

>
>> 2: trust the kids, but verify.
>
>Don't trust the kids. Supervise them.
>

you missed this one....

Re: Your thoughts on my network security.

am 07.12.2006 21:13:14 von Weeble

On Thu, 7 Dec 2006 18:17:14 +0100, Sebastian Gottschalk
wrote:

>Osiris wrote:
>
>>>a completely random 63 character password WPA-PSK (example key:
>>>C>KgRiKC_1ftZ:_]\!1T6`Q]>OX,3|92P.AdCXiZFy!c%bn4mR?SC i3W-BeLOq) mean that
>>
>> How in the world are you going to retype that password ?????
>
>I'd say: never.
>
>> cut&paste don't always work with passwords....
>
>It does.
>

you haven't seen much of the ICT world then...

>> You don't have state secrets on your machine, do you ?
>
>What's that stupid question supposed to mean?

I have to spell everything ?

Re: Your thoughts on my network security.

am 07.12.2006 21:17:54 von Weeble

On Thu, 7 Dec 2006 18:16:33 +0100, Sebastian Gottschalk
wrote:

>Osiris wrote:
>
>> 0: backup, but not too often. You might overwrite a good backup with a
>> bad one.
>
>Bullshit. A backup should never overwrite a previous one.
>
>> 1: Don't give anyone the admin password or access to the FW settings.
>
>Which is equivalent.

how so ?

>
>> 2: trust the kids, but verify.
>
>Don't trust the kids. Supervise them.
>
>> 5: no P2P
>
>Why not?
>

You haven't been around much...

>> 6: put up something like Netnanny or whatever.
>
>And you'll see how easily they circumvent it. That's why personal
>supervision is unavoidable.

like the key to your front door: easy to break a window pane.

>
>> 7: have virusscan scan anything that comes in.
>
>As it this would actually work...

define work

>
>> 8: nobody installs software but you.
>
>Well, what about enforcing that policy?

penalty by death or grounding for a week ?

>
>> 9: fear, but don't let it keep you from being happy. there are no VERY
>> many people that are interested in the contents of your HD, unless you
>> work for the CIA.
>
>But computing resources and bandwidth.
>
>> 10: backup.
>
>Shouldn't this be rule 0, 1 and 2?

Backup three times in a row ? overkill maybe... esp. if u use the same
CDRW/tape...


Get a life....

Re: Your thoughts on my network security.

am 07.12.2006 23:32:04 von unknown

Post removed (X-No-Archive: yes)

Re: Your thoughts on my network security.

am 07.12.2006 23:36:25 von unknown

Post removed (X-No-Archive: yes)

Re: Your thoughts on my network security.

am 07.12.2006 23:44:13 von unknown

Post removed (X-No-Archive: yes)

Re: Your thoughts on my network security.

am 08.12.2006 00:21:42 von Weeble

On Thu, 7 Dec 2006 23:36:25 +0100, Sebastian Gottschalk
wrote:

>Osiris wrote:
>
>>>> cut&paste don't always work with passwords....
>>>
>>>It does.
>>>
>>
>> you haven't seen much of the ICT world then...
>
>Too bad that I manage all my passwords via copy&paste. Especially in my
>local machine. I wonder why exactly copy&paste shouldn't work there...
>
>>
>>>> You don't have state secrets on your machine, do you ?
>>>
>>>What's that stupid question supposed to mean?
>>
>> I have to spell everything ?
>
>You're imposing something like "oh, it's not so important, maybe you should
>leave away some security measures". This is blatantly dangerous. A proper
>attitude would be to always practice and use the same strong security
>mechanisms regardless of the situation - thus you'll never have to think
>about if it's actually worth it, but therefore you can't make any wrong
>decision towards weaker security.

bull
limiting factors are, amongst others:
1: price,
2: effort to be invested
3: knowledge to be acquired
4: value of data
5: time = money
To ignore these factors is blatantly stupid.

Re: Your thoughts on my network security.

am 08.12.2006 01:50:10 von unknown

Post removed (X-No-Archive: yes)

Re: Your thoughts on my network security.

am 08.12.2006 10:21:08 von Weeble

On Fri, 8 Dec 2006 01:50:10 +0100, Sebastian Gottschalk
wrote:

>Osiris wrote:
>
>>>>>> You don't have state secrets on your machine, do you ?
>>>>>
>>>>>What's that stupid question supposed to mean?
>>>>
>>>> I have to spell everything ?
>>>
>>>You're imposing something like "oh, it's not so important, maybe you should
>>>leave away some security measures". This is blatantly dangerous. A proper
>>>attitude would be to always practice and use the same strong security
>>>mechanisms regardless of the situation - thus you'll never have to think
>>>about if it's actually worth it, but therefore you can't make any wrong
>>>decision towards weaker security.
>>
>> bull
>> limiting factors are, amongst others:
>> 1: price,
>> 2: effort to be invested
>> 3: knowledge to be acquired
>> 4: value of data
>> 5: time = money
>> To ignore these factors is blatantly stupid.
>
>For the common scenarios non of these are any hard limits, and are alomost
>negligible. Paying attention to usually irrelevant factors is blatantly
>stupid.
>
>As as example: passwords (creation, usage, management). Now tell me which
>of these factors is reasonably relevant.

silly man. spending your entire monthly income on securing your home
MSN-pc....
silly man, not understanfding that there are no hard limits in life...
Silly man, not understanding the concept of satisficing...

If only you could be introduced to the silly and wonderful life
outside of Usenet....

Is there hope, we might wonder...

Re: Your thoughts on my network security.

am 08.12.2006 15:00:53 von Kinski

On Thu, 7 Dec 2006 16:44:41 +0100, Sebastian Gottschalk
wrote:

>Kinski wrote:
>
>> On Wed, 6 Dec 2006 18:59:17 +0100, Sebastian Gottschalk
>> wrote:
>>
>>>Actually just the claim of removal makes them totally unserious. At any
>>>rate, why don't read a nice article about Ad-Aware on
>>>, which describes how fucked up this thing actually
>>>is?
>>
>> Got a link? I searched through the blogs and forums and found nothing
>> on Adaware.
>
>

Thanks. I'll take a look at it.

Re: Your thoughts on my network security.

am 08.12.2006 16:53:39 von mario.rosen

Do not trust wireless connections.

Jimmy White ha escrito:

> Hi all,
>
> Right, I have been reading up on wan/lan security and have setup what I
> think is a secure environment and would like your opinions.
>
> First I have a router connected to my cable modem, which is connected to a
> second wireless router. I use one of the lan ports on the second router for
> my Internet connection with a software firewall on my PC. The wireless part
> of the second router has a 63 character, ascii, numbers random key using WPA
> TKIP(PSK) for my laptop. Also when I'm doing online Banking I use VPN to
> connect to my Banks site and they use SSL also.
>
> For spyware, adware, malware and viruses I use spybot,ad-aware and AVG pro
> edition.
>
> I'm I secure enough ?
>
> Jimmy White

Re: Your thoughts on my network security.

am 08.12.2006 17:51:19 von rpaque

Sebastian Gottschalk wrote:
> Ryan P. wrote:
>
>>>> 5: no P2P
>>> Why not?
>> Aside from the legal implications?
>
> What legal implications? Oh, wait, not every country has a relatively sane
> legal system...

Okay, legal implications in nations that actually have copyright and
theft laws that are enforced.

>
>> You are opening up connections to
>> MANY unknown computers and giving them access to write files onto your
>> hard drive...
>
> You give them access to read files from specific folders, nothing else. You
> may yourself download data from them to write them to a specific folder. So
> far, this isn't any security problem.

You are putting software onto your computer from an unknown source.
How is that not a security problem?

>
>>>> 8: nobody installs software but you.
>>> Well, what about enforcing that policy?
>> That would be why everybody has their own user ID. And none of the
>> accounts has software install privilages.
>
> There is no such thing like "software install privileges". There's some
> software that installs fine without admin rights. There's so much software
> that runs without installation. Almost any installed software can be made
> run without installation.
>
> A proper enforcement would be: No one can execute any program, this is
> enforced by the kernel and the shell. Like, under Unix, mounting a drive
> no-exec, or, under Windows, Software Restriction Policies.

No argument here.

Re: Your thoughts on my network security.

am 08.12.2006 19:22:52 von unknown

Post removed (X-No-Archive: yes)

Re: Your thoughts on my network security.

am 08.12.2006 22:21:00 von Weeble

On 8 Dec 2006 07:53:39 -0800, "mario.rosen@gmail.com"
wrote:

>Do not trust wireless connections.
>

if you have state secrets or information that would compromise your
marriage on you r computer,

Re: Your thoughts on my network security.

am 08.12.2006 22:52:36 von rpaque

Sebastian Gottschalk wrote:
> Ryan P. wrote:

>> Okay, legal implications in nations that actually have copyright and
>> theft laws that are enforced.
>
> OK, why should someone use P2P for copyright violations? Seems rather
> stupid. In my country, downloading from a not obviously illegitimate source
> is considered legal. As well as sharing within a very limit range of
> persons in a community. And sharing incomplete files isn't seen as an
> infringement. My P2P client enforces these rules.
>
> And how can someone commit theft via P2P? Sounds like you're drunk.

The majority of children who use P2P applications (children being
anybody who is not an adult) are using them to download copyrighted
music. In the US, this practice is in legal limbo at the moment, with
many people being successfully prosecuted, and many not.

There ARE legitimate uses, of course. But I'll wager that far more
people use it for illegal purposes (downloading copyrighted music and
software).

Just check out the files available via Limewire or various Bittorrent
sites. Chock full of files for anybody to download that the copyright
holders have explicitly said they didn't not want available.

>
>> You are putting software onto your computer from an unknown source.

{snip}

>
> Or what else do you mean? Installing the software downloaded via P2P? Well,
> of course, this would be generally a totally stupid idea. But, as described
> below, users should not be able to run arbitrary code at all.

We agree on that.

> And well, there are verifiable ways to distribute software via P2P, if it's
> the vendor of the software who does so.

If its coming from the vendor only, I would consider it a trusted
source (to a point). But one has to configure their software to only
d/l from that source. Most P2P software defaults to "find anyone on the
internet that has the same file name available for sharing" which is
clearly dangerous.

Re: Your thoughts on my network security.

am 08.12.2006 23:48:37 von unknown

Post removed (X-No-Archive: yes)

Re: Your thoughts on my network security.

am 09.12.2006 09:05:27 von Weeble

>
>In most P2P networks files are indexed by cryptographically secure
>checksums. Bogus data are trivially and reliably detected.

on the P2P nets, Bogus data is also indexed by cryptographically
secure checksums

As was found in tests:
people THINK they know a lot about things they know little or nothing
about, and THINK they know little about things they know a lot
about...

Re: Your thoughts on my network security.

am 09.12.2006 18:48:37 von unknown

Post removed (X-No-Archive: yes)

Re: Your thoughts on my network security.

am 09.12.2006 21:13:27 von unknown

Post removed (X-No-Archive: yes)

Re: Your thoughts on my network security.

am 10.12.2006 10:14:17 von Weeble

On Sat, 9 Dec 2006 18:48:37 +0100, Sebastian Gottschalk
wrote:

>Osiris wrote:
>
>>>In most P2P networks files are indexed by cryptographically secure
>>>checksums. Bogus data are trivially and reliably detected.
>>
>> on the P2P nets, Bogus data is also indexed by cryptographically
>> secure checksums
>
>And because it's a cryptographic checksum, no bogus data can have the same
>checksum as the original. The vendor provides the checksum(s) (ed2k link,

not THAT many VENDORs on P2P...
And anyone can checksum their files.


>torrent file, ...), and by these the data are retrieved and verified. Sure,
>you can send bogus data upon requests, but the checksum won't match and the
>bogus data will be discarded.

ever heard about fake lists ?

>
>> As was found in tests:
>> people THINK they know a lot about things they know little or nothing
>> about, and THINK they know little about things they know a lot
>> about...
>
>Indeed. And you should really stick to your own advice.

Re: Your thoughts on my network security.

am 10.12.2006 14:18:52 von unknown

Post removed (X-No-Archive: yes)

Re: Your thoughts on my network security.

am 11.12.2006 15:32:16 von Mak

Sebastian Gottschalk wrote:
> Kinski wrote:
>
>> On Wed, 6 Dec 2006 18:59:17 +0100, Sebastian Gottschalk
>> wrote:
>>
>>> Actually just the claim of removal makes them totally unserious. At any
>>> rate, why don't read a nice article about Ad-Aware on
>>> , which describes how fucked up this thing actually
>>> is?
>> Got a link? I searched through the blogs and forums and found nothing
>> on Adaware.
>
>
jesus, is there any decent software out there?

what do You use to find spyware, malware etc.
(I know, you're gonna say: why do you have this crap on your system in the first place)
let's just say a customer needs your help and flattening is not an option (yet)-
what would you use to clean the system.

M

Re: Your thoughts on my network security.

am 11.12.2006 20:40:30 von unknown

Post removed (X-No-Archive: yes)