full-disclosure - Re: Dumb question: Is Windows box behind a router safe ?

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives
Hash Suite: Windows password security audit tool. GUI, reports in PDF.
[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]
Date: Tue, 22 Sep 2009 15:16:10 -0500
From: Rohit Patnaik <quanticle@...il.com>
To: "full-disclosure@...ts.grok.org.uk" <full-disclosure@...ts.grok.org.uk>
Subject: Re: Dumb question: Is Windows box behind a router
 safe ?

Yeah, but the original poster made it clear that the box was running 
Windows XP Service Pack 2, so both your comments are largely irrelevant. :)

--Rohit Patnaik

yersinia wrote:
> On Tue, Sep 22, 2009 at 9:11 PM, Abhijeet Jain 
> <abhijeet.ecstatic@...il.com <mailto:abhijeet.ecstatic@...il.com>> wrote:
>
>     Myth No. 2- Using Firefox does not make you safe! In fact, IE 7/8
>     is the safest browser when used with Windows Vista because it runs
>     on lower privileges.
>
> Not on Linux(Fedora) with Selinux Enabled, better if you run with the 
> guest_u selinux usr.
>
>
>     On Tue, Sep 22, 2009 at 1:57 PM, Kos <kpo.mail.list@...il.com
>     <mailto:kpo.mail.list@...il.com>> wrote:
>
>         Ancompuger behind a router/firewall does not make it safe.
>         Vulnerabilities and exploits are not limited to a network
>         level, which
>         is generally what a firewall is used for. Vulnerabilities sent
>         via any
>         protocol used (http, imap, pop, other protocols that may be in
>         use)
>         are not suddenly secure.
>
>         An example, there are PDFs that will trigger adobe to run,
>         whcih can
>         be exploited easily.
>         Someone can send your father an email with a malicious
>         attatchment,
>         and a firewall isn't going to preven him from clicking and
>         running it.
>         Anti-virus is a good start, but will only go so far.
>         There are phishing sites too.
>         The ways to get owned are countless, regardless of a firewall
>         or not.
>
>         You should keep the system maintained and up to date (run system
>         updates and applications undated regularly).
>
>         So no, a firewall will not prevent a computer from being
>         compromised.
>
>         Other opinions?
>
>         Kos
>
>         On Sep 22, 2009, at 11:29 AM, Steven Anders
>         <anderstev@...il.com <mailto:anderstev@...il.com>> wrote:
>
>         > I received great responses and am very grateful to the help from
>         > community of this list. Thank you.
>         >
>         >
>         > I have a dumb question: Is a Windows box behind a router safe ?
>         >
>         > It is my father's PC and the Windows OS was not updated
>         regularly.
>         > The Windows box was connected through wire (RJ45) to the
>         router. The
>         > router is then connected to the DSL modem.
>         > The Windows Box has SP2 installed and the default Windows
>         firewall
>         > enabled - and I think was last updated from Windows Update on in
>         > 2008. It has AVG anti virus.
>         > The PC was never moved anywhere and is always behind the
>         router. The
>         > router has default settings, which I believe has no ports open.
>         >
>         > He never installed any applications or downloads anything
>         off the
>         > net - mainly it is used for emails and general web browsing
>         (using
>         > Firefox, not IE). I informed him to use Firefox, since IE has so
>         > many security issues.
>         >
>         >
>         > My questions are:
>         >
>         > 1.  There are many exploits and vulnerabilities of Windows,
>         but I
>         > was wondering if outdated Windows box behind router generally
>         > safe ?  Since, the Windows box was not updated with the latest
>         > updates.
>         >
>         > I have always thought that having a computer behind the router
>         > (since router has firewall) is generally safe, but I would
>         love to
>         > hear insights or thoughts.
>         >
>         >
>         > 2. If a Windows box is behind a router, could a botnet be
>         installed
>         > to it ? Assuming, the end user does not install/download any
>         > applications from the Internet and always use Firefox.
>         >
>         >
>         > Thank you all in advance.
>         > steve
>         >
>         > _______________________________________________
>         > Full-Disclosure - We believe in it.
>         > Charter: http://lists.grok.org.uk/full-disclosure-charter.html
>         > Hosted and sponsored by Secunia - http://secunia.com/
>
>         _______________________________________________
>         Full-Disclosure - We believe in it.
>         Charter: http://lists.grok.org.uk/full-disclosure-charter.html
>         Hosted and sponsored by Secunia - http://secunia.com/
>
>
>
>
>     -- 
>     1q4!7EEf71!u
>
>     _______________________________________________
>     Full-Disclosure - We believe in it.
>     Charter: http://lists.grok.org.uk/full-disclosure-charter.html
>     Hosted and sponsored by Secunia - http://secunia.com/
>
>
> ------------------------------------------------------------------------
>
> _______________________________________________
> Full-Disclosure - We believe in it.
> Charter: http://lists.grok.org.uk/full-disclosure-charter.html
> Hosted and sponsored by Secunia - http://secunia.com/

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/