Windows flaw reaches beyond XP

TalkBack 33 of 57:

Next »

« Previous

• Thread View
• Flat View

Sorry, but....

"I was securing systems when some of the folks around here understood "the Net" to mean that thing their parents put across the top landing of the stairs to keep them from tripping over their full diapers and tumbling down into the kitchen."

Yes, perhaps even *I* was in diapers when you were first secuiring systems, but so what? I've met plenty of IT people with years more experience than me that don't know their elbow from IPSEC.

"Just implement IPSEC and "problem solved," eh? It's not like IPSEC doesn't have its OWN share of vulnerabilities:"

Gee, with a defeatist attitude like that, what's the point of even trying to secure a server? Should we all stop using linux/BSD because OpenSSH had a vulnerability once? For sensitive services (like RDP facing the internet) IPSEC should be deployed regardless of any known vulnerability. It's just good security practice.

"While the above vulnerability evidently doesn't affect Windows, who's to say that when MS implements their "fix" for the DoS mentioned in this article that it won't blow holes in other parts of your VPN?"

What does any of this have to do with VPNs? IPSEC or RDP sure doesn't.

"Oh, and BTW, I didn't say I was going to kill RDP on all the servers I have a hand in administering, I said it was what MS was suggesting (Billy and Stevie)."

Well, turning off the service is the easiest thing to do, and also the safest, so it's logical that Microsoft would recommend that you turn it off. WHen I run a security audit on my ports on FreeBSD, if a port is found to have a known vulnerability, the audit utility advises that you may want to "unistall the application immediately". And remember, we are talking about Microsoft Windows here - the platform with tons of clueless admins.

Posted by: toadlife   Posted on: 07/19/05 You are currently: a Guest | Members login | Terms of Use

Alert moderator to an offensive message

Subscribe to this discussion via Email or RSS

SponsoredWhite Papers, Webcasts, and Downloads

• The Impact of Virtualization Software on Operating Environments VMware Today's use of virtualization technology allows IT professionals to ... Download Now
• Three Steps You Need to Know to Stop Data Loss Varonis Sensitive data exposed to misuse or loss... it is the stuff of nightmares ... Download Now
• Five Steps to Determine When to Virtualize YourServers VMware Server virtualization isn't just for big companies. Entry-level ... Download Now