Home page logo

fulldisclosure logo Full Disclosure mailing list archives

Re: REWMF Risk Analysis for Win9X anyone ?
From: Mark <fd () mchsi com>
Date: Sat, 07 Jan 2006 07:59:19 -0600

Rodrigo Barbosa wrote:
On Fri, Jan 06, 2006 at 03:50:39PM -0500, Technica Forensis wrote:

What ARE the real risks (or lack of them) for Win9X/ME systems ?

I think the risk he is that they are running Win9x/ME.

You are so right. I mean, it is not as if one of my clients had
a US$ 300K HPLC connected to a Win98 computer, with software that will
not run on a newer version of Windows. It makes total send for him
to ditch the HPLC, buy a new one, just so he can upgrade to a new
version of MS pet OS.

True, these situations do exist, but might I suggest that such a machine
shouldn't be used for web surfing or checking email but dedicated to the
HPLC application it was intended for?

In fact, it probably deserves to be on it's own protected network with
only limited access in and out to the resources it absolutely needs.
(if it needs network access at all)  I would think this would provide
the greatest protection for what is pretty much an unsecureable O/S.


Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/

  By Date           By Thread  

Current thread:
[ Nmap | Sec Tools | Mailing Lists | Site News | About/Contact | Advertising | Privacy ]