Zone Labs jumps on new Windows security API, but do we need more?

TalkBack 40 of 79:

Next »

« Previous

• Thread View
• Flat View

admin is needed

"Once hostile code has gained root access to your system, you've already lost. Any firewall can be easily disabled or cicumvented with only a few lines of code."

Is this the case even if you aren't logged in as an admin?

No, only admins can (or should be able to) manipulate firewall settings, and if you are logged on as a regular user, any program you execute should not be able to shut down or modify your firewall. The problem is that almost every home Windows user, and sadly most corporate windows users do log on as administrators. To complicate matters, Microsoft makes it a pain in the rear to adminster the Windows firewall when you are not logged on as an admin. Apple has the right idea with OSX, by requesting a password when the user tries to do something that makes a system-wide change.

As for what happened to you, I would suggest you not use IE. It's just one big exploit waiting to happen. The outbound blocking helped you, but you are not the average PC user. The fact that you have the ability to look up an IP address' owner shows me that you care about keeping yourself secure, and take initiative when you have too. The average windows user would never have had zone alarm installed, and even if Windows firewall had outbound blocking, they probably would have just clicked yes to get rid of those "annoying" firewall prompts - never realizing what they were doing.

Perhaps I'm being too cynical, but in dealing with corporate windows users every day at work, my experience has shown me that 99% of windows users don't even read the prompts they are given, let alone understand them.

Dumb terminals for our users at work are an appealing though to me some days.

Posted by: toadlife   Posted on: 08/09/04 You are currently: a Guest | Members login | Terms of Use

Alert moderator to an offensive message

Subscribe to this discussion via Email or RSS

SponsoredWhite Papers, Webcasts, and Downloads

• Three Steps You Need to Know to Stop Data Loss Varonis Sensitive data exposed to misuse or loss... it is the stuff of nightmares ... Download Now
• VMware Infrastructure: A Guide to Bottom-Line Benefits VMware Frustrated by the costs of maintain ever larger data centers?or building ... Download Now
• Why Isn't Server Virtualization Saving Us More? A Few Small Changes May Dramatically Increase Your Efficiency VMware Companies have rapidly adopted server virtualization over the past few ... Download Now