full-disclosure - MS Anti Virus?

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

Message-ID: <20040617200214.57F9.0@argo.troja.mff.cuni.cz>
From: peak at argo.troja.mff.cuni.cz (Pavel Kankovsky)
Subject: MS Anti Virus?

On Thu, 17 Jun 2004, joe wrote:

> Home users never should have been impacted as they should be running
> firewall software on the internet connections. The fact that they don't
> isn't MS's fault, however MS is stepping up with XP SP2 to help out. On top
> of that they should be patching when necessary.

But it is their fault they release OS with ~5 hard-to-deactivate plus ~5
almost-impossible-to-deactivate dangerous but mostly useless (*) network
services enabled by default that is guaranteed to be owned within 10
minutes after you plug it to the network unless you 1. install extra
firewalling software, or (assuming you got the version with a builtin
packet filter) 2. smoke enough grass to be able to grok their own
configuration dialog windows (**).

Indeed other vendors made the same stupid mistake in the past (and some
of them insist on repeating it).

(*) Who needs network accessible MS RPC services on a home PC?

(**) I admit I am talking about the Czech version. Maybe the English
version, not affected by the "creativity" of any localization team, is
somewhat more understandable.

--Pavel Kankovsky aka Peak  [ Boycott Microsoft--http://www.vcnet.com/bms ]
"Resistance is futile. Open your source code and prepare for assimilation."