full-disclosure - Re: Dumb question: Is Windows box behind a router safe ?

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite for Android: free password hash cracker in your pocket

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

Date: Tue, 22 Sep 2009 20:42:06 +0200 (CEST)
From: "Michael Fritscher" <michael@...tscher.net>
To: full-disclosure@...ts.grok.org.uk
Subject: Re: Dumb question: Is Windows box behind a router
 safe ?

Hi Steve,

I hope you haven't caused a storm with aggressive mails here^^
This maillinglist is more about now detected holes in soft- and hardware...

First, you certainly mean not a normal router (which is on most cases 100%
transparent in both directions), but a NAT-router.

What the NAT blocks (in most cases) are incomings connections - But
expecially since XP SP2 this is a very seldom used way to attack
computers.
Nowadays, most bad software use holes in apps - browser, office, flash and
so on which use outgoing connections - which are NOT blocked by a
NAT-router.
So, yes, a bot connectiong to a botnet could be installed if Firefox or a
plugin like Flash, Java, Quicktime and so on has a hole and you browse on
a "bad" site.

Btw, please read about NAT, routing, current bad software etc in the
internet - this will help you understanding the concerns.

Sincerly,
Michael

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/