mailing list archives
Re: Re: Microsoft Security, baby steps ?
From: Simon Richter <Simon.Richter () hogyros de>
Date: Wed, 17 Mar 2004 16:43:11 +0100
When you want to be the leader, you don't ask questions like that. You
recognize problems and you solve them and one of the problems today for
Windows is that MS is making it very difficult to keep patched if the user
doesn't want to put the machine on the net BEFORE it's fully patched. (a
valid security oriented attitude)
Hrm, how about inventing an option (at install time) that places a very
restrictive firewall on the network connection by default, say, only
outgoing port 80 to windowsupdate.com (or even better, only let it
establish a secure tunnel there), so you can patch and then loosen the
firewall settings after that?
Granted, you won't be able to install AntiSpy or sth. like that from
the 'net, then, but the < $1 for a CD-R shouldn't really matter if you
have just bought Windows.
GPG Fingerprint: 040E B5F7 84F1 4FBC CEAD ADC6 18A0 CC8D 5706 A4B4
Description: Digital signature
RE: Re: Microsoft Security, baby steps ? Nick FitzGerald (Mar 17)
RE: Re: Microsoft Security, baby steps ? Stuart Fox (DSL AK) (Mar 17)
RE: Re: Microsoft Security, baby steps ? John . Airey (Mar 17)
RE: Re: Microsoft Security, baby steps ? Jos Osborne (Mar 17)