Re: [funsec] This sounds like a security disaster just waiting to happen...

2009-04-29 Thread Juha-Matti Laurio
This link redirects to Windows homepage now. Juha-Matti Jon Kibler [jon.kib...@aset.com] kirjoitti: -BEGIN PGP SIGNED MESSAGE- Hash: SHA1 RE: Windows 7 Branch Cache http://www.microsoft.com/windows/enterprise/products/branchcache.aspx Okay, I admit I don't do Windows.

Re: [funsec] This sounds like a security disaster just waiting to happen...

2009-04-29 Thread Juha-Matti Laurio
Ooops, only with mobile browser, or a temporary error there... The link works now. Juha-Matti This link redirects to Windows homepage now. Juha-Matti Jon Kibler [jon.kib...@aset.com] kirjoitti: -BEGIN PGP SIGNED MESSAGE- Hash: SHA1 RE: Windows 7 Branch Cache

Re: [funsec] This sounds like a security disaster just waiting to happen...

2009-04-29 Thread Larry Seltzer
http://www.microsoft.com/windows/enterprise/products/branchcache.aspx This link redirects to Windows homepage now. Not for me. I'll violate some copyrights by reproducing the main text of the page here: Improve application responsiveness with BranchCache Increase branch office user

Re: [funsec] This sounds like a security disaster just waiting to happen...

2009-04-29 Thread Steve Pirk
On Wed, 29 Apr 2009, Larry Seltzer wrote: http://www.microsoft.com/windows/enterprise/products/branchcache.aspx This link redirects to Windows homepage now. Not for me. I'll violate some copyrights by reproducing the main text of the page here: Improve application responsiveness with

Re: [funsec] This sounds like a security disaster just waiting to happen...

2009-04-29 Thread Jeff Kell
Steve Pirk wrote: So, Microsoft has implemented a squid like server as part of their gateway solution for office connections to the net. If done correctly, sould be safe enough, no? You didn't catch the bit about using all the local user's caches in the common pool? One nice big fat file

Re: [funsec] This sounds like a security disaster just waiting to happen...

2009-04-29 Thread Larry Seltzer
So, Microsoft has implemented a squid like server as part of their gateway solution for office connections to the net. If done correctly, sould be safe enough, no? No, I think we should assume they can't possibly do it correctly because, well, they suck. Larry Seltzer Contributing Editor, PC

Re: [funsec] This sounds like a security disaster just waiting to happen...

2009-04-29 Thread Jason Ross
On Wed, Apr 29, 2009 at 15:27, Steve Pirk or...@pirk.com wrote: On Wed, 29 Apr 2009, Larry Seltzer wrote: ... When IT enables BranchCache, a copy of data accessed from an intranet web site or a file server is cached locally within the branch office. When another user on the same network

Re: [funsec] This sounds like a security disaster just waiting to happen...

2009-04-29 Thread Rich Kulawiec
On Wed, Apr 29, 2009 at 12:27:41PM -0700, Steve Pirk wrote: So, Microsoft has implemented a squid like server as part of their gateway solution for office connections to the net. If done correctly, sould be safe enough, no? Well...I'm not so sure. I mean, if we grant the done correctly part

Re: [funsec] This sounds like a security disaster just waiting to happen...

2009-04-29 Thread Steve Pirk
On Wed, 29 Apr 2009, Jeff Kell wrote: Steve Pirk wrote: So, Microsoft has implemented a squid like server as part of their gateway solution for office connections to the net. If done correctly, sould be safe enough, no? You didn't catch the bit about using all the local user's caches in the

Re: [funsec] This sounds like a security disaster just waiting to happen...

2009-04-29 Thread Valdis . Kletnieks
On Wed, 29 Apr 2009 15:49:44 EDT, Larry Seltzer said: So, Microsoft has implemented a squid like server as part of their gateway solution for office connections to the net. If done correctly, sould be safe enough, no? No, I think we should assume they can't possibly do it correctly

Re: [funsec] This sounds like a security disaster just waiting to happen...

2009-04-29 Thread Valdis . Kletnieks
On Wed, 29 Apr 2009 15:47:48 EDT, Jeff Kell said: One nice big fat file share with r/w/x access across the network, yeah, that's the ticket... ALL YOUR C:\ ARE BELONG TO US. I don't see a problem here? pgpLs3lAnBhPQ.pgp Description: PGP signature

[funsec] Turn Acrobat JS off to protect against Acrobat 0-day exploitation

2009-04-29 Thread Juha-Matti Laurio
Adobe Acrobat and Adobe Reader 0-day issues have not been mentioned yet - http://blogs.adobe.com/psirt/2009/04/update_on_adobe_reader_issue.html Adobe recommends to disable Acrobat JavaScript from the Preferences menu. Versions 9.x, 8.x and 7.x are affected. And your Windows, Mac and Linux

[funsec] A - It will provide publicity you could never buy.

2009-04-29 Thread Rob, grandpa of Ryan, Trevor, Devon Hannah
Q - What is the impetus behind putting an experimental system of natural language response on a TV game show, Alex? http://news.bbc.co.uk/2/hi/technology/8021774.stm In a head-to-head challenge of man versus machine, IBM will pit a supercomputer named Watson against human contestants [on the

Re: [funsec] This sounds like a security disaster just waiting to happen...

2009-04-29 Thread Steve Pirk
On Wed, 29 Apr 2009, Rich Kulawiec wrote: On Wed, Apr 29, 2009 at 12:27:41PM -0700, Steve Pirk wrote: ... embarassing comments deleted ... safe enough, no? Well...I'm not so sure. I mean, if we grant the done correctly part for the sake of argument, it sounds to me like a file F requested

Re: [funsec] This sounds like a security disaster just waiting to happen...

2009-04-29 Thread Jon Kibler
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Jason Ross wrote: SNIP! P2P squid. Now what happens when a user decides to inject malicious code into the cached files... SNIP! User injection of malicious code? The better question is what will happen when malware decides that it now has a new

Re: [funsec] This sounds like a security disaster just waiting to happen...

2009-04-29 Thread Paul Ferguson
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On Wed, Apr 29, 2009 at 3:44 PM, Jon Kibler jon.kib...@aset.com wrote: I guess that Windows 7 has now become the newest form of P2P malware! Sure, but at least they are disabling AUTORUN. ;-) - - ferg -BEGIN PGP SIGNATURE- Version: PGP

Re: [funsec] This sounds like a security disaster just, waiting to happen...

2009-04-29 Thread Susan Bradley
After I got up off the floor laughing at the who's on first beauty of the above logic chart, it hit me that this probably would not be limited to internet cached data, but possibly all internal web data as Rich says. Right away I thought of ACL content (auth/auth) that is web based

[funsec] Happy birthday

2009-04-29 Thread Chaim Rieger
World wide web Twas born today in '73 (I think) Sent via BlackBerry from T-Mobile ___ Fun and Misc security discussion for OT posts. https://linuxbox.org/cgi-bin/mailman/listinfo/funsec Note: funsec is a public and open mailing list.

Re: [funsec] Happy birthday

2009-04-29 Thread der Mouse
World wide web Twas born today in '73 (I think) No, that's much too early. See, for example, http://en.wikipedia.org/wiki/World_Wide_Web, which points out that the Web wasn't even a gleam in Berners-Lee's eye until 1980 or so and wasn't a proposal until late 1990. 1993, when CERN set it free,