full-disclosure - Re: Microsoft Security? Real LANs

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [day] [month] [year] [list]

Message-ID: <Sea1-F82GzADBJWcNjO000559f6@hotmail.com>
From: randomisedletters at hotmail.com (Random Letters)
Subject: Re: Microsoft Security? Real LANs

>Random Letters said....
>
><snip>
>1. Home users - don't have adequate protection and get turned into zombies.
>They then bombard us. OK - this is dealt with by an externally facing
>firewall but see #2 below.
>
>2. Office workers with laptops or VPN connections to the internal LAN - get
>'infected' (see #1 above) and then connect to the internal LAN. They then
>bombard any newly set-up PC before we get a chance to patch it. BTW you
>still have to connect to a network if you have a SUS or SMS server.
></snip>
>
>By saying see #1 above you are comparing a corporate laptop to a home
>computer?  Or are you suggesting that sysadmins should allow remote users 
>to
>come in from any phone line/IP and or public computer.  The thought of
>allowing machines that do not belong to the company on the internal network
>does seem like suicide.
>

No,  but people do use their laptops outside the office. It can be quicker 
to get infected than get either Windows or virus updates. When they bring 
their laptop onto the LAN (either through VPN or physically) then they are 
an internal source of infection that an external firewall can't filter. 
(Sh)It happens.

>
><snip>
>The "need to patch before I put it on the network" / "need to put it on the
>network to get the patches" IS a real problem for many sysadmins.
></snip>
>
>Why?  They must not be keeping there install images up to date.
>

Guilty as charged. I do have other tasks to perform. :)

-----------------------------------------------
If you're happy and you know it clap your hands
-----------------------------------------------
   Does HoTMaiL come with a spell checker?

_________________________________________________________________
It's fast, it's easy and it's free. Get MSN Messenger today! 
http://www.msn.co.uk/messenger