lists.openwall.net   lists  /  announce  owl-users  owl-dev  john-users  john-dev  passwdqc-users  yescrypt  popa3d-users  /  oss-security  kernel-hardening  musl  sabotage  tlsify  passwords  /  crypt-dev  xvendor  /  Bugtraq  Full-Disclosure  linux-kernel  linux-netdev  linux-ext4  linux-hardening  linux-cve-announce  PHC 
Open Source and information security mailing list archives
 
Hash Suite: Windows password security audit tool. GUI, reports in PDF.
[<prev] [next>] [thread-next>] [day] [month] [year] [list]
Message-ID: <871080DEC5874D41B4E3AFC5C400611E03F602C4@UTDEVS02.campus.ad.utdallas.edu>
From: pauls at utdallas.edu (Schmehl, Paul L)
Subject: Zone Alarm

Yep, and I can assure you that when the firmware update fails (and it
will) they will not have a clue what to do next.  I've had this happen
to me, so I know that it occurs, and restoring the router to
functionality was not a task for the neophyte.

There *are* cases where "not so great" security is better than "really
great" simply because "really great" won't get used and "not so great"
is therefore better (than nothing.)  It's all well and good that experts
can use expert tools, but "normal" users are often better off with
something simple to use and easy to understand, even if it isn't the
latest, greatest fandangle.

Paul Schmehl (pauls@...allas.edu)
Adjunct Information Security Officer
The University of Texas at Dallas
AVIEN Founding Member
http://www.utdallas.edu/~pauls/ 

-----Original Message-----
From: Shawn McMahon [mailto:smcmahon@....com] 
Sent: Wednesday, June 04, 2003 2:20 PM
To: full-disclosure@...ts.netsys.com
Subject: Re: [Full-Disclosure] Zone Alarm

Although "fails open" is a pretty powerful argument against software
firewalls, it's probably easier to get a user to download and install a
new copy of Zone Alarm (especially if it has some kind of auto-update
feature, which I dunno since I don't use it), than it is to get them to
download a new firmware image for their hardware router and flash it.

Powered by blists - more mailing lists

Powered by Openwall GNU/*/Linux Powered by OpenVZ