full-disclosure - SP2 is killing me. Help?

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [day] [month] [year] [list]

Message-ID: <Pine.GSO.4.43.0408180950070.8935-100000@tundra.winternet.com>
From: dufresne at winternet.com (Ron DuFresne)
Subject: SP2 is killing me. Help? 

SANS weekly newsbytes relating to this topic;;

 --Microsoft Releases List of Products that Could Conflict with XP sp2
(16 August 2004)
Microsoft has issued a document that lists about 50 applications and
games that may have trouble with the recently released Windows XP
Service Pack 2.  Among the problems: the new firewall may limit the
ability of some applications to receive information from outside
networks.  Other companies have been posting information about
functionality problems encountered as a result of installing SP2.
http://zdnet.com.com/2102-1104_2-5311280.html?tag=printthis
[Editor's Note (Pescatore): Most SP2 compatibility problems are from the
Windows Firewall improvements and the changes in how RPCs are handled
in Windows. Since the Windows Firewall still doesn't enforce many policy
controls that enterprises require, and since the RPC fixes were badly
needed, most applications that don't work with SP2 were badly broken
from a security perspective anyway.]


And concerning the related thread whence folks wanted to know if the
windows firewall worked on outgoing patckets, and wrongly assumed it did;

 --Windows Firewall Lacks Outbound Traffic Blocking
(13/11 August 2004)
Though Windows Firewall, which arrived as part of Windows XP Service
Pack 2, is a welcome addition to PC security, it doesn't provide certain
functions expected from commercial firewalls.  Windows Firewall does not
block outbound traffic, a function which prevents computers from being
used as spam or denial-of-service zombies.  In addition, other
applications could potentially turn Windows Firewall off.
http://www.pcworld.com/resource/printable/article/0,aid,117380,00.asp
[Editor's Note (Tan): Security savvy users will either know how to get
a better firewall or safeguard their system from being trojanized. The
great improvement of this Windows Firewall is that it provides
protection before network starts up.
Editor's Note (Schultz): No security solution is perfect, nor can a
single control measure such as a host-based firewall do everything.
Critics often overlook the fact that Microsoft by all appearances is
making a very concerted effort to improve security in its products.
Perhaps WXP SP3 will be able to block outbound connections.]


Thanks,


Ron DuFresne
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
"Cutting the space budget really restores my faith in humanity.  It
eliminates dreams, goals, and ideals and lets us get straight to the
business of hate, debauchery, and self-annihilation." -- Johnny Hart
	***testing, only testing, and damn good at it too!***

OK, so you're a Ph.D.  Just don't touch anything.