Re: [newbie] [OT] Dumbest question ever asked

2004-08-27 Thread Vincent Voois

BJ Tracy wrote:
Hello All,
Quick question, I know someone has asked this before and I thought I saved it 
but do not seem to find it.

I still have one (1) desktop running XP in my office,  how do I turn off 
automatic updates on that pc?
Start - Control Panel - Administrative tools - Services - Automatic Updates.
The dumbest question is a question which isn't posted (always).


Want to buy your Pack or Services from MandrakeSoft? 
Go to http://www.mandrakestore.com
Join the Club : http://www.mandrakeclub.com



Re: [newbie] [OT] Dumbest question ever asked

2004-08-26 Thread BJ Tracy
Hello All,

Quick question, I know someone has asked this before and I thought I saved it 
but do not seem to find it.

I still have one (1) desktop running XP in my office,  how do I turn off 
automatic updates on that pc?

I hope do get around to making it a dual boot system but have not had time and 
it belongs to my supreme commander (wife).
Thanks in advance,
bj

ps  is there documentation for emacs in mdk10,if so where?

Snip
On Saturday 14 August 2004 05:11 pm, Bryan Phinney wrote:
 On Saturday 14 August 2004 01:20 am, Charlie Mahan wrote:
  Personal experience as of 42 minutes 38 seconds ago. Virgin install of XP
  on a virgin drive, new system. The new owner picked it up from me this
  afternoon, took it home and decided to get the installation out of the
  way before dinner so that he wouldn't have to use his wife and kids
  system.
SNIP
 If you HAVE to run XP, 2000 etc., there is absolutly no reason to torture
 yourself by doing it the hard way.



Want to buy your Pack or Services from MandrakeSoft? 
Go to http://www.mandrakestore.com
Join the Club : http://www.mandrakeclub.com



Re: [newbie] [OT] Dumbest question ever asked

2004-08-26 Thread frankieh
BJ Tracy wrote:
Hello All,
Quick question, I know someone has asked this before and I thought I saved it 
but do not seem to find it.

I still have one (1) desktop running XP in my office,  how do I turn off 
automatic updates on that pc?

I hope do get around to making it a dual boot system but have not had time and 
it belongs to my supreme commander (wife).
Thanks in advance,
bj

ps  is there documentation for emacs in mdk10,if so where?
Snip
On Saturday 14 August 2004 05:11 pm, Bryan Phinney wrote:
On Saturday 14 August 2004 01:20 am, Charlie Mahan wrote:
Personal experience as of 42 minutes 38 seconds ago. Virgin install of XP
on a virgin drive, new system. The new owner picked it up from me this
afternoon, took it home and decided to get the installation out of the
way before dinner so that he wouldn't have to use his wife and kids
system.
SNIP
If you HAVE to run XP, 2000 etc., there is absolutly no reason to torture
yourself by doing it the hard way.

In the control panel, click on System and then select the automatic 
updates tab, you can turn it on and off there.
(at least thats what it is like here, but I put SP2 on this machine, 
which changes things abit.) I had to try SP2, because I'm bound to be 
asked about it by clients. and I always have to know more then they do. :-)

rgds
Franki
htmlfixit.com

Want to buy your Pack or Services from MandrakeSoft? 
Go to http://www.mandrakestore.com
Join the Club : http://www.mandrakeclub.com



Re: [newbie] [OT] Dumbest question ever asked

2004-08-26 Thread BJ Tracy
On Thursday 26 August 2004 03:36 pm, frankieh wrote:
 BJ Tracy wrote:

  I still have one (1) desktop running XP in my office,  how do I turn off
  automatic updates on that pc?

  ps  is there documentation for emacs in mdk10,if so where?
 
Snip
 In the control panel, click on System and then select the automatic
 updates tab, you can turn it on and off there.
 (at least thats what it is like here, but I put SP2 on this machine,
 which changes things abit.) I had to try SP2, because I'm bound to be
 asked about it by clients. and I always have to know more then they do. :-)

 rgds

 Franki
 htmlfixit.com
Thanks,  did it.
bj


Want to buy your Pack or Services from MandrakeSoft? 
Go to http://www.mandrakestore.com
Join the Club : http://www.mandrakeclub.com



Re: [newbie] [OT] Dumbest question ever asked

2004-08-26 Thread Lanman
BJ Tracy wrote:
On Thursday 26 August 2004 03:36 pm, frankieh wrote:
BJ Tracy wrote:

I still have one (1) desktop running XP in my office,  how do I turn off
automatic updates on that pc?

ps  is there documentation for emacs in mdk10,if so where?
Snip
In the control panel, click on System and then select the automatic
updates tab, you can turn it on and off there.
(at least thats what it is like here, but I put SP2 on this machine,
which changes things abit.) I had to try SP2, because I'm bound to be
asked about it by clients. and I always have to know more then they do. :-)
rgds
Franki
htmlfixit.com
Thanks,  did it.
bj
BJ; That procedure only turns of one part of Automatic Updates. On your 
desktop, right-click My Computer, and click on Manage. Once the new 
panel opens, expand Services and Applications, and then click on 
Services.

Once inside this new panel, find Automatic Updates, right-click it and 
click on Properties. In the new panel, change Automatic or Manual to 
Disabled and click the Stop button as well. Close that and return to 
the main services section, find a service called Messenger and do the 
same with it, just like Automatic Updates - ie; stop and disabled. That 
will also prevent a lot (But not all) of Pop-Ups from appearing on 
your screen whenever you're browsing. Once this has been stopped and 
disabled, exit from all these panels back to your desktop, and enjoy!

BTW, You might also want to turn off Error Reporting which can be 
accessed from the properties panel of My Computer. After all, why send a 
bunch of your personal info to Microsoft so that they can learn a lot 
more about you and your system? You might see Error Reporting in the 
services panel I mentioned above as well. Consider turning that off and 
disabling it as well.

Microsoft leaves these background services running in case other users 
ever use your WindowsXP system, in which case, the updates are performed 
regardless of the fact that you turned them off on your desktop. If you 
only use the option for turning it off which is inside My Computer, it 
is only turned off for you but not for other users on that system, in 
which case, everyone still receives the so-called Benefits of those 
updates!

Just though you should know.
Lanman

Want to buy your Pack or Services from MandrakeSoft? 
Go to http://www.mandrakestore.com
Join the Club : http://www.mandrakeclub.com



Re: [newbie] [OT] Dumbest question ever asked

2004-08-26 Thread Hoyt Bailey
On Thursday 26 August 2004 13:45, BJ Tracy wrote:
 Hello All,

 Quick question, I know someone has asked this before and I thought I
 saved it but do not seem to find it.

 I still have one (1) desktop running XP in my office,  how do I turn
 off automatic updates on that pc?
An M80 duct taped to the processor will do it.

 I hope do get around to making it a dual boot system but have not had
 time and it belongs to my supreme commander (wife).
 Thanks in advance,
 bj

 ps  is there documentation for emacs in mdk10,if so where?

 Snip

 On Saturday 14 August 2004 05:11 pm, Bryan Phinney wrote:
  On Saturday 14 August 2004 01:20 am, Charlie Mahan wrote:
   Personal experience as of 42 minutes 38 seconds ago. Virgin
   install of XP on a virgin drive, new system. The new owner picked
   it up from me this afternoon, took it home and decided to get the
   installation out of the way before dinner so that he wouldn't
   have to use his wife and kids system.

 SNIP

  If you HAVE to run XP, 2000 etc., there is absolutly no reason to
  torture yourself by doing it the hard way.

-- 
Regards:
Hoyt
Registered Linux User # 363264
http://counter.li.org


Want to buy your Pack or Services from MandrakeSoft? 
Go to http://www.mandrakestore.com
Join the Club : http://www.mandrakeclub.com



Re: [newbie] [OT] Dumbest question ever asked

2004-08-26 Thread Bryan Phinney
On Thursday 26 August 2004 02:45 pm, BJ Tracy wrote:
 Hello All,

 Quick question, I know someone has asked this before and I thought I saved
 it but do not seem to find it.

 I still have one (1) desktop running XP in my office,  how do I turn off
 automatic updates on that pc?

 I hope do get around to making it a dual boot system but have not had time
 and it belongs to my supreme commander (wife).
 Thanks in advance,
 bj

Control Panel, System, Properties, Updates IIRC.
-- 
Bryan Phinney



Want to buy your Pack or Services from MandrakeSoft? 
Go to http://www.mandrakestore.com
Join the Club : http://www.mandrakeclub.com



Re: [newbie] [OT] Dumbest question ever asked

2004-08-26 Thread Stephen Kühn
On Fri, 2004-08-27 at 04:45, BJ Tracy wrote:
 Hello All,
 
 Quick question, I know someone has asked this before and I thought I saved it 
 but do not seem to find it.
 
 I still have one (1) desktop running XP in my office,  how do I turn off 
 automatic updates on that pc?

Right click My Computer - Properties - Automatic Updates - Here is
where you can turn it off; as well, if you go into the System Services
you can turn it off there as well...

--
stephen kuhn - proprietor
__
illawarra computer services :: a kuhn media australia venture
http://kma.0catch.com  :: mobile 0410.728.389
Serving Sydney, The Illawarra, South Coast and Rural NSW
__
  * This message was composed on a 100% Microsoft free computer *
  We expressly refuse to utilise Microsoft DRM encoded documents
__
  Mandrake GNU/Linux 10.0 OE/Kernel 2.6.3-7/ No Viruses here. 

You, the first person to encounter my chronicles for at least four
thousand years, beware. Do not feel honored by your primacy in reading
the revelations of my Ixian storehouse. You will find much pain in it.
Other than the few glimpses required to assure me that the Golden Path
continued. I never wanted to peer beyond those four millennia.
Therefore, I am not sure what the events in my journals may signify to
your times. I only know that my journals have suffered oblivion and that
the events which I recount have undoubtedly been submitted to historical
distortion for eons. I assure you that the ability to view our futures
can become a bore. Even to be thought of as a god, as I certainly was,
can become ultimately boring. It has occurred to me more than once that
holy boredom is good and sufficient reason for the invention of free
will. -Inscription on the storehouse at bar-es-Balat



Want to buy your Pack or Services from MandrakeSoft? 
Go to http://www.mandrakestore.com
Join the Club : http://www.mandrakeclub.com



Re: [newbie] [OT] Dumbest question ever asked

2004-08-26 Thread BJ Tracy
On Thursday 26 August 2004 04:51 pm, Lanman wrote:
 BJ Tracy wrote:
  On Thursday 26 August 2004 03:36 pm, frankieh wrote:
 BJ Tracy wrote:
 I still have one (1) desktop running XP in my office,  how do I turn off
 automatic updates on that pc?
 
 
 ps  is there documentation for emacs in mdk10,if so where?
 
  Snip
 
 In the control panel, click on System and then select the automatic
 updates tab, you can turn it on and off there.
 (at least thats what it is like here, but I put SP2 on this machine,
 which changes things abit.) I had to try SP2, because I'm bound to be
 asked about it by clients. and I always have to know more then they do.
  :-)
 
 rgds
 
 Franki
 htmlfixit.com
 
  Thanks,  did it.
  bj

 BJ; That procedure only turns of one part of Automatic Updates. On your
 desktop, right-click My Computer, and click on Manage. Once the new
 panel opens, expand Services and Applications, and then click on
 Services.

 Once inside this new panel, find Automatic Updates, right-click it and
 click on Properties. In the new panel, change Automatic or Manual to
 Disabled and click the Stop button as well. Close that and return to
 the main services section, find a service called Messenger and do the
 same with it, just like Automatic Updates - ie; stop and disabled. That
 will also prevent a lot (But not all) of Pop-Ups from appearing on
 your screen whenever you're browsing. Once this has been stopped and
 disabled, exit from all these panels back to your desktop, and enjoy!

 BTW, You might also want to turn off Error Reporting which can be
 accessed from the properties panel of My Computer. After all, why send a
 bunch of your personal info to Microsoft so that they can learn a lot
 more about you and your system? You might see Error Reporting in the
 services panel I mentioned above as well. Consider turning that off and
 disabling it as well.

 Microsoft leaves these background services running in case other users
 ever use your WindowsXP system, in which case, the updates are performed
 regardless of the fact that you turned them off on your desktop. If you
 only use the option for turning it off which is inside My Computer, it
 is only turned off for you but not for other users on that system, in
 which case, everyone still receives the so-called Benefits of those
 updates!

 Just though you should know.
 Lanman
Snip
Thanks, did that too.
bj


Want to buy your Pack or Services from MandrakeSoft? 
Go to http://www.mandrakestore.com
Join the Club : http://www.mandrakeclub.com



Re: [newbie] [OT] Dumbest question ever asked

2004-08-15 Thread Carroll Grigsby
On Sunday 15 August 2004 04:39 pm, Charlie Mahan wrote:

 snip

 I know, I know; it pays the bills. But it still makes me feel like a
 streetwalker in a seedy area of a crappy city. g

 Charlie


Charlie:
You're OK so long as you don't cut your rates after midnight.
-- cmg



Want to buy your Pack or Services from MandrakeSoft? 
Go to http://www.mandrakestore.com
Join the Club : http://www.mandrakeclub.com



Re: [newbie] [OT] Dumbest question ever asked

2004-08-14 Thread Paul
Op Sat, 14 Aug 2004 00:44:35 -0400 schreef Carroll Grigsby:

Any one want to get up a pool on how long it will take until the script
kiddies exploit that hole? According to an article on /. a while back,
if you connect a virgin XP install to the web using a wideband
connection, the break in attempts can start within a minute or two.
Scary. Very scary.

A colleague of mine broke that record. 45 seconds after being online on
ADSL, his PC got hit several times. Sasser made his PC reboot (while he
was downloading software to prevent Sasser to reboot his PC...)

Paul

-- 
The only fun about your own mistakes is
that sometimes you make others happy with them.

http://www.nlpagan.net/linux.htm
Have you visited http://twiki.mdklinuxfaq.org yet?


Want to buy your Pack or Services from MandrakeSoft? 
Go to http://www.mandrakestore.com
Join the Club : http://www.mandrakeclub.com



Re: [newbie] [OT] Dumbest question ever asked

2004-08-14 Thread Paul
Op Sat, 14 Aug 2004 12:13:52 +1000 schreef Stephen Kühn:

 More on the complete stupidity of SP2 for XP:
 
 http://www.pcworld.com/news/article/0,aid,117380,00.asp


And it is not safe to assume that it will work either:

www.crn.com/sections/breakingnews/breakingnews.jhtml?articleId=23905071

Paul


Want to buy your Pack or Services from MandrakeSoft? 
Go to http://www.mandrakestore.com
Join the Club : http://www.mandrakeclub.com



Re: [newbie] [OT] Dumbest question ever asked

2004-08-14 Thread Stephen Kühn
On Sat, 2004-08-14 at 14:50, Lyvim Xaphir wrote:

 You mean like sendmail? ;)

Cheap potshot; can't help it mate. Just cuz I'm familiar with it and I
feel it does what I WANT it to do quite quickly...NYAH!
--
stephen kuhn - proprietor
__
illawarra computer services :: a kuhn media australia venture
http://kma.0catch.com  :: mobile 0410.728.389
Serving Sydney, The Illawarra, South Coast and Rural NSW
__
  * This message was composed on a 100% Microsoft free computer *
  We expressly refuse to utilise Microsoft DRM encoded documents
__
  Mandrake GNU/Linux 10.0 OE/Kernel 2.6.3-7/ No Viruses here. 

A free society is one where it is safe to be unpopular. -- Adlai
Stevenson



Want to buy your Pack or Services from MandrakeSoft? 
Go to http://www.mandrakestore.com
Join the Club : http://www.mandrakeclub.com



Re: [newbie] [OT] Dumbest question ever asked

2004-08-14 Thread Lyvim Xaphir
On Sat, 2004-08-14 at 04:08, Stephen Kühn wrote:
 On Sat, 2004-08-14 at 14:50, Lyvim Xaphir wrote:
 
  You mean like sendmail? ;)
 
 Cheap potshot; can't help it mate. Just cuz I'm familiar with it and I
 feel it does what I WANT it to do quite quickly...NYAH!

I did put a winkie in after all. g

My subliminal point was however that you could potentially place
sendmail in a class with M$ in the regard that it will always need
fixing and therefore you guarantee residuals.

LX

 --
 stephen kuhn - proprietor
 __




Want to buy your Pack or Services from MandrakeSoft? 
Go to http://www.mandrakestore.com
Join the Club : http://www.mandrakeclub.com



Re: [newbie] [OT] Dumbest question ever asked

2004-08-14 Thread JoeHill
On Sat, 14 Aug 2004 00:44:35 -0400
Carroll Grigsby disseminated the following:

 According to an article on /. a while back, if you connect a virgin XP install
 to the web using a wideband connection, the break in attempts can start within
 a minute or two. Scary. Very scary.

...seen it happen with me own eyes, matey. Windows Messenger pops up, and if you
click 'Ok'...well, you're fscked.

-- 
JoeHill RLU #282046 /  www.freeyourmachine.org
08:46:48 up 10 days, 8:29, 8 users, load average: 0.31, 0.10, 0.02
+++
If the Nuremberg laws were applied, then every post-war American president
would have been hanged. -- Noam Chomsky


Want to buy your Pack or Services from MandrakeSoft? 
Go to http://www.mandrakestore.com
Join the Club : http://www.mandrakeclub.com



Re: [newbie] [OT] Dumbest question ever asked

2004-08-14 Thread jeff nault
  According to an article on /. a while back, if you connect a virgin XP install
  to the web using a wideband connection, the break in attempts can start within
  a minute or two. Scary. Very scary.

I recently did a fresh install of xp (slipstreamed with SP1) on a
machine for a client (like some of the other posters, I love M$
because I make a lot of money fixing spyware / virii / etc. infected
machines). I am on dial up at home, and I _forgot_ to turn on the xp
firewall before connecting. I was literally infected with sasser  10
seconds after connection. I suppose it was my own fault, but it does
go to show the level of vulnerability in a windows xp box. You really
can't even patch them without getting infected first, unless you are
carefully firewalled.

Jeff


Want to buy your Pack or Services from MandrakeSoft? 
Go to http://www.mandrakestore.com
Join the Club : http://www.mandrakeclub.com



Re: [newbie] [OT] Dumbest question ever asked

2004-08-14 Thread BJ Tracy
On Friday 13 August 2004 10:13 pm, Stephen Kühn wrote:
 On Sat, 2004-08-14 at 11:49, JoeHill wrote:
  Is Microsoft's Firewall Secure?

SNIP
Hello All,
Question for the group.  With Linux,  do you need a firewall on every PC??  In 
my office I have a LAN set up and with that I have a (hard wired) Router 
going out to my DSL.  I thought in this way I was protected.  Also do I need 
to install Virus Protection on my new Linux PC's ( I have been using Linux 
going on 6 weeks now and trying to learn as much as possible).  If so,  do I 
install DR. WEB that came with my MDK 10?
Please Advise.

My thoughts:
I thought that since I switched to Linux and had a Router(hard wired) as a 
firewall, I was protected from most of this. 
bj

  ...and yeah, Stephen, it's this kind of crap what pays them bills, eh?

 As usual, Microsoft puts out a product that is already broken. And I'm
 sure a slew of patches are in the making as we speak.

 I'm still surprised that a vast majority of the public even bothers with
 Microsoft products and it´s high maintenance scheme - then again, I
 shouldn't whinge about it because I do need the money.

 --
 stephen kuhn - proprietor
 __
 illawarra computer services :: a kuhn media australia venture
 http://kma.0catch.com  :: mobile 0410.728.389
 Serving Sydney, The Illawarra, South Coast and Rural NSW
 __
   * This message was composed on a 100% Microsoft free computer *
   We expressly refuse to utilise Microsoft DRM encoded documents
 __
   Mandrake GNU/Linux 10.0 OE/Kernel 2.6.3-7/ No Viruses here.

 Perhaps I am flogging a straw herring in mid-stream, but in the light
 of what is known about the ubiquity of security vulnerabilities, it
 seems vastly too dangerous for university folks to run with their heads
 in the sand. -- Peter G. Neumann, RISKS moderator, about the Internet
 virus


Want to buy your Pack or Services from MandrakeSoft? 
Go to http://www.mandrakestore.com
Join the Club : http://www.mandrakeclub.com



Re: [newbie] [OT] Dumbest question ever asked

2004-08-14 Thread Lanman
JoeHill wrote:
Is Microsoft's Firewall Secure?
More on the complete stupidity of SP2 for XP:
http://www.pcworld.com/news/article/0,aid,117380,00.asp
...and yeah, Stephen, it's this kind of crap what pays them bills, eh?
Interesting article, but then again, every article about M$ seems 
interesting in one way or another! I especially appreciated the humour 
regarding how this new firewall doesn't stop or manage outbound traffic.

We maintain a resource server here, so that all M$ downloads are stored 
locally, allowing us to install updates, service packs and complimentary 
applications without needing to access the Internet to get them. One of 
the few pieces of Microsoft software that actually works fairly well is 
their pre-installation kit. No surprise there!

But the most ironic thing is that Ad-Aware always finds 2 pieces of 
spyware pre-installed on every system, and this is prior to installing 
any service packs, or updates. Once those are done (again the updates 
are accessed locally and not from the Internet), more spyware is found, 
typically up to 7 pieces, including registry hacks.

Creating a firewall which blocks or alerts the user to outgoing traffic 
would effectively block spyware which Microsoft has obviously placed 
inside their operating systems themselves for their own purposes.

Also, if Microsoft built a firewall that actually did block outgoing 
traffic, how would they receive user data? Their own product would be 
blocking the data transmissions that they seem to desperately need.

It's a quick education to anyone who installs Windows, as to the type 
and nature of traffic generated by a completely fresh install, if they 
pre-install Zone Alarm before connecting the machine to the Internet!

It actually borders on infuriating when you consider the number of 
transmission attempts that Windows will try to make as soon as Zone 
Alarm is installed, and the number of times you have to click to allow 
or deny the transmission of that data.

Of course, Microsoft set their marketing hounds on ways to justify this 
type of firewall bahaviour, by blaming the remainder of the problem on 
ISV's and the fact that it's their responsibility and not Microsoft's.

Once again, Redmond has found another way to piss off a large number of 
people and customers all at the same time without breaking a sweat!

Fortunately, these are exactly the types of tactics that any dying 
creature starts to use, just before it realizes that it's been fatally 
wounded. Take heart fellow Linux enthusiasts! The end is near! Another 
10 or 20 years of this crap and they'll be out of the game completely!

The next death scream you will hear should come right around the time 
that Microsoft releases the next evolution of Windows (codenamed 
Longhorn and rumored to be a 3-CD version!). By the time they get around 
to releasing it, Linux will have increased it's market-share and 
consumers will be even more reluctant to dish out the exorbitant license 
fees which Microsoft is sure to exact from the public.

Besides, none of this should come as a surprise to anyone on this list. 
After all, why are we here?

Lanman

Want to buy your Pack or Services from MandrakeSoft? 
Go to http://www.mandrakestore.com
Join the Club : http://www.mandrakeclub.com



Re: [newbie] [OT] Dumbest question ever asked

2004-08-14 Thread Bryan Phinney
On Saturday 14 August 2004 11:00 am, BJ Tracy wrote:

 SNIP
 Hello All,
 Question for the group.  With Linux,  do you need a firewall on every PC?? 
 In my office I have a LAN set up and with that I have a (hard wired) Router
 going out to my DSL.  I thought in this way I was protected.  Also do I
 need to install Virus Protection on my new Linux PC's ( I have been using
 Linux going on 6 weeks now and trying to learn as much as possible).  If
 so,  do I install DR. WEB that came with my MDK 10?
 Please Advise.

There are very few virus threats for Linux, and IIRC, almost none in the wild.  
Obviously, if you install software provided from dubious sources, there is 
the possibility that you will install something that will be malicious.  With 
Linux, it is much more important to eliminate unused services, limit network 
connectivity to those things that you need, practice good security by using 
non-trivial/obvious passwords, limiting user access and open accounts than to 
install anti-virus software.


 My thoughts:
 I thought that since I switched to Linux and had a Router(hard wired) as a
 firewall, I was protected from most of this.

This totally depends on the type of router that you are using.  If the router 
includes stateful packet inspection (SPI), then it is much more like a real 
router than if it simply performs Network Address Translation (NAT).  Most 
inexpensive DSL routers are like the latter and only do NAT for the computers 
behind them.  Those like the former are better because they help to thwart 
spoofed packets and may include some rudimentary DOS and attack protection.

However, you should always consider security to be much like castle defense.  
You don't want to set up a single barrier and rely solely on that barrier to 
protect you.  The reason is that once that barrier is breached, you are 
completely open.  So, you want to layer your defenses so that even if one 
avenue is breached, the attacker still has to get through additional layers.

Some suggestions:
1. Hardware router is good, it prevents easy entry into the LAN to a trusted 
state.
2.  Software router next.  Installing a good software router like shorewall is 
good too, it will deny most incoming connections that you don't expressly 
open up while still allowing outgoing connections as long as they are 
initiated from inside.  Even if the attacker somehow manages to bypass the 
hardware router, they will still get packets dropped from inside.  You can 
also allow only specific outgoing connections to prevent filesharing apps and 
other sundries from running, although I am much more lenient about those 
things with Linux than I would be with Windows.
3.  Use hosts.deny and hosts.allow to only allow those services that you want 
to have access.  You can allow liberal activity from 192.168.*.* or 10.*.*.* 
addresses since those are non-routable on the Internet and must originate on 
your internal LAN.
4.  Send network services through an SSH tunnel where it makes sense.  
Services like VNC or X should always be pushed through a secure connection, 
never opened up on the Internet.
5.  Limit all services that allow information to be gleaned.  I allow POPS and 
IMAPS on my server but insist the users email accounts do not match up to 
their usernames.  That way, even if you have the email address of someone on 
my system, you can't use that as an account name to try to dictionary attack 
the password.  I also limit ssh access to only those accounts that need it, 
not all the accounts on the system.
6.  Install an Intrusion detection system, like portsentry, hostsentry, Snort, 
etc.  You can get advance warnings if your machine is being probed.  This can 
be especially useful if you are exposed to the Internet in a DMZ but is 
actually also useful if the hardware firewall is compromised in some way and 
someone manages to open it up completely.
7.  Install some type of logchecker that sends regular (daily) updates to you 
based on specific criteria.  For instance, you might grep all login attempts 
on an FTP server if you run one so that you can tell when someone is trying 
to bypass security using invalid accounts or by trying dictionary attacks 
against a password.  You might grep web server logs to see if someone is 
trying to access or search for formmail scripts or trying to use the 
mod_proxy to proxy out to an external connection.  Or perhaps too many login 
failures on a secured directory.

Just think of it as a layer castle defense.  Build walls, also moats, interior 
choke points, cut off tunnel access, etc.  Each time you can add a layer, you 
make yourself more secure.
-- 
Bryan Phinney



Want to buy your Pack or Services from MandrakeSoft? 
Go to http://www.mandrakestore.com
Join the Club : http://www.mandrakeclub.com



Re: [newbie] [OT] Dumbest question ever asked

2004-08-14 Thread JoeHill
On Sat, 14 Aug 2004 11:56:05 -0400
Lanman disseminated the following:

 Creating a firewall which blocks or alerts the user to outgoing traffic 
 would effectively block spyware which Microsoft has obviously placed 
 inside their operating systems themselves for their own purposes.
 
 Also, if Microsoft built a firewall that actually did block outgoing 
 traffic, how would they receive user data? Their own product would be 
 blocking the data transmissions that they seem to desperately need.

Never thought of that, I think you just hit the nail right on the head! DRM, all
that crap, relies on MS software 'phoning home' to verify what they ironically
call 'rights' to use or access DRM encoded material, no?

-- 
JoeHill RLU #282046 /  www.freeyourmachine.org
14:04:38 up 10 days, 13:47, 9 users, load average: 1.21, 0.66, 0.34
+++
Rule #2 (John Gilmore): The Net interprets censorship as damage and routes
around it.


Want to buy your Pack or Services from MandrakeSoft? 
Go to http://www.mandrakestore.com
Join the Club : http://www.mandrakeclub.com



Re: [newbie] [OT] Dumbest question ever asked

2004-08-14 Thread b311b-mandrake
On Sat, 14 Aug 2004 14:06:31 -0400
JoeHill wrote:

 On Sat, 14 Aug 2004 11:56:05 -0400
 Lanman disseminated the following:
 
  Creating a firewall which blocks or alerts the user to outgoing traffic 
  would effectively block spyware which Microsoft has obviously placed 
  inside their operating systems themselves for their own purposes.
  
  Also, if Microsoft built a firewall that actually did block outgoing 
  traffic, how would they receive user data? Their own product would be 
  blocking the data transmissions that they seem to desperately need.

Uh... spyware in their OS's?  It's worse than that.  I had
ZoneAlarm running on a laptop that sometimes connected to the
Internet via dialup -- ZA was a pretty decent inexpesive solution
that let me disable all inbound and enable outbound POP/HTTP for
minimal connectivity.  Imagine my surprise when I hooked up an
external mouse (Intellimouse) and installed the drivers for it. 
It wasn't 10 seconds before I was getting ZA popups asking me if
the mouse drivers could access the Internet.  For pete's sake...
why the @$#%$ does a mouse driver need network access.  The same
is true for the Microsoft keyboard, Visio and a few other MS
products.

Brenda Bell
Henniker (the only one on earth)
New Hampshire (the state with 5 seasons: black fly, tourist, foliage, ski and mud)



Want to buy your Pack or Services from MandrakeSoft? 
Go to http://www.mandrakestore.com
Join the Club : http://www.mandrakeclub.com



Re: [newbie] [OT] Dumbest question ever asked

2004-08-14 Thread JoeHill
On Sat, 14 Aug 2004 14:16:13 -0400
[EMAIL PROTECTED] disseminated the following:

 It wasn't 10 seconds before I was getting ZA popups asking me if
 the mouse drivers could access the Internet.  For pete's sake...

ROFL! Maybe they need to know if you have the 'rights' to use that mouse ;-)

More likely they were just wanting to check for more up-to-date drivers, but
still, it is getting kinda crazy.

-- 
JoeHill RLU #282046 /  www.freeyourmachine.org
14:30:31 up 10 days, 14:13, 9 users, load average: 1.42, 1.27, 1.07
+++
The struggle between people and capital is now an epic struggle between life
and death. -- Vandana Shiva, World Social Forum, January 16, 2004


Want to buy your Pack or Services from MandrakeSoft? 
Go to http://www.mandrakestore.com
Join the Club : http://www.mandrakeclub.com



Re: [newbie] [OT] Dumbest question ever asked

2004-08-14 Thread Lanman
JoeHill wrote:
On Sat, 14 Aug 2004 11:56:05 -0400
Lanman disseminated the following:

Creating a firewall which blocks or alerts the user to outgoing traffic 
would effectively block spyware which Microsoft has obviously placed 
inside their operating systems themselves for their own purposes.

Also, if Microsoft built a firewall that actually did block outgoing 
traffic, how would they receive user data? Their own product would be 
blocking the data transmissions that they seem to desperately need.

Never thought of that, I think you just hit the nail right on the head! DRM, all
that crap, relies on MS software 'phoning home' to verify what they ironically
call 'rights' to use or access DRM encoded material, no?
Yup Afraid so Joe! How could they justify the use of DRM by media 
publishing companies if they can't receive data about abuses of DRM. 
Nasty, ain't it? It's not just the data about those who pay for their 
downloaded media, it's more about those who don't pay for it!

I think people should be required to install Zone Alarm or something 
similar on all fresh installs and Zone Alarm should be configured to 
block any and all outgoing transmissions to Microsoft or it's business 
partners without detailed information about what and why that data is 
being sent.

Then it's up to consumers as to what info they will be sending. But M$ 
has wrapped so much of their apps and OS into this that most of their 
functions would fail to work if blocked, and consumers would also become 
aware of how far M$ has taken this attitude and MS doesn't want 
consumers to know that!

They'd be back in front of the D.o.J. so fast it would make their heads 
spin! Of course, not much would happen again, but the legal fees would 
hurt and so would the bad press.

Barbara has an interesting point about her Intellimouse as well. What 
possible types of info could they possibly need from the mouse? Do they 
want to know if she's left-handed or something? Jeesh! Enough!

Maybe they should rename Windows and call it something more appropriate 
like SpyHoles ? Whaddya think?

Lanman


Want to buy your Pack or Services from MandrakeSoft? 
Go to http://www.mandrakestore.com
Join the Club : http://www.mandrakeclub.com



Re: [newbie] [OT] Dumbest question ever asked

2004-08-14 Thread Charlie Mahan
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

On Friday 13 August 2004 22:44:10, Carroll Grigsby wrote:
whack
 Joe:

 Any one want to get up a pool on how long it will take until the script
 kiddies exploit that hole? According to an article on /. a while back, if
 you connect a virgin XP install to the web using a wideband connection, the
 break in attempts can start within a minute or two. Scary. Very scary.

 -- cmg

Personal experience as of 42 minutes 38 seconds ago. Virgin install of XP on a 
virgin drive, new system. The new owner picked it up from me this afternoon, 
took it home and decided to get the installation out of the way before dinner 
so that he wouldn't have to use his wife and kids system.

I just home got from an unscheduled trip there to reinstall Windows and 
install the utilities I _told the dork_ to download on the family system, 
burn to disk, and install *before allowing XP onto the net.

2 worms, 1 trojan in 1 minute 45 seconds. By his count. By the time I got 
there he had wiped the drive, burned the utilities (I always recommend AVG 
too Joe) but his confidence was so shaken he wouldn't touch the system until 
I was there to lead him through.

The only good that came out of the service call (other than the assault I 
performed on his wallet) is that the new 120 GB drive is now set for dual 
boot Mandrake 10.0 and his wife was in familiar territory happily chatting 
with friends using kopete when I left. So much for his Windows only box. g

Charlie
- -- 
Edmonton,AB,Canada User #244963 at http://counter.li.org
Mandrakelinux release 10.1 (Beta 1) for i586 kernel 2.6.8-0.rc2.2mdk
22:55:41 up 4:02, 2 users, load average: 0.36, 0.36, 0.77
Microsoft should switch to the vacuum cleaner business where people actually
want products that suck.
-BEGIN PGP SIGNATURE-
Version: GnuPG v1.2.4 (GNU/Linux)

iD8DBQFBHaEZZqvqlrLPr5YRAuydAKC1NL74BBaZmjzmvWVjj3ylT4oopwCeMqxV
M45p6WYsLHj1efAodtD8Qio=
=7Cnd
-END PGP SIGNATURE-


Want to buy your Pack or Services from MandrakeSoft? 
Go to http://www.mandrakestore.com
Join the Club : http://www.mandrakeclub.com



Re: [newbie] [OT] Dumbest question ever asked

2004-08-14 Thread Bryan Phinney
On Saturday 14 August 2004 01:20 am, Charlie Mahan wrote:

 Personal experience as of 42 minutes 38 seconds ago. Virgin install of XP
 on a virgin drive, new system. The new owner picked it up from me this
 afternoon, took it home and decided to get the installation out of the way
 before dinner so that he wouldn't have to use his wife and kids system.

I know that this is probably not the right mailing list, but for those of you 
still dealing with XP, 2000, et al who need to do an installation but don't 
want to make the box vulnerable by attaching to the net to get updates, take 
a look at this site:
http://www.autopatcher.com/

You can download the entire set of MS updates, burn to a CD and install 
everything prior to connecting to the net the first time.  Added benefit, in 
most cases, you don't have to reboot the box interminable numbers of times to 
get the updates installed, simply run, check off the updates you want and 
click install, sit  back for about 40-60 minutes while it runs and then 
reboot once.

If you HAVE to run XP, 2000 etc., there is absolutly no reason to torture 
yourself by doing it the hard way.

-- 
Bryan Phinney



Want to buy your Pack or Services from MandrakeSoft? 
Go to http://www.mandrakestore.com
Join the Club : http://www.mandrakeclub.com



Re: [newbie] [OT] Dumbest question ever asked

2004-08-14 Thread John Wilson
On August 13, 2004 09:44 pm, Carroll Grigsby wrote:
 On Friday 13 August 2004 11:36 pm, JoeHill wrote:
  snip
 
  This is my fav part:
 
  Microsoft admits that, in some cases, malicious code could indeed switch
  the firewall off. However, this isn't so much a flaw as a limitation on
  the role firewalls should play in a company's security system, according
  to Microsoft.
 
  What??!!

 Joe:

 Any one want to get up a pool on how long it will take until the script
 kiddies exploit that hole? According to an article on /. a while back, if
 you connect a virgin XP install to the web using a wideband connection, the
 break in attempts can start within a minute or two. Scary. Very scary.

 -- cmg

Well, a friend of mine set up her office with Win2K and it took all of 3 
minutes before the first trojan slipped in.  The first virus came less than a 
minute later from a trusted source.

Her computer guy didn't quite know what to do and she ended up calling me.  
After a fair bit of messing around I got it cleaned up installed a well known 
windows firewall and told her to have her network guy install that, then 
update the virus defs immediately and then hope.

Oh, and don't under any circumstances use any form of Outlook or IE.

Naturally none of that was done. :-)

Her computer geek later added two XP Pro boxes which were infected in 
seconds of being added to the network.

As we all know...nothing is more secure than Windoze.

ttfn

John
-- 
***
Composed on a 100% Microsoft Free Computer
Guaranteed Virus Free
Mandrake Linux 10.0 OE
Registered Linux User 362316
***


Want to buy your Pack or Services from MandrakeSoft? 
Go to http://www.mandrakestore.com
Join the Club : http://www.mandrakeclub.com



Re: [newbie] [OT] Dumbest question ever asked

2004-08-14 Thread CHARLIE M


- Original Message -
From: Bryan Phinney [EMAIL PROTECTED]
Date: Saturday, August 14, 2004 3:11 pm
Subject: Re: [newbie] [OT] Dumbest question ever asked

 On Saturday 14 August 2004 01:20 am, Charlie Mahan wrote:
 
  Personal experience as of 42 minutes 38 seconds ago. Virgin 
 install of XP
  on a virgin drive, new system. The new owner picked it up from me 
 this afternoon, took it home and decided to get the installation 
 out of the way
  before dinner so that he wouldn't have to use his wife and kids 
 system.
 I know that this is probably not the right mailing list, but for 
 those of you 
 still dealing with XP, 2000, et al who need to do an installation 
 but don't 
 want to make the box vulnerable by attaching to the net to get 
 updates, take 
 a look at this site:
 http://www.autopatcher.com/
 
 You can download the entire set of MS updates, burn to a CD and 
 install 
 everything prior to connecting to the net the first time.  Added 
 benefit, in 
 most cases, you don't have to reboot the box interminable numbers 
 of times to 
 get the updates installed, simply run, check off the updates you 
 want and 
 click install, sit  back for about 40-60 minutes while it runs and 
 then 
 reboot once.
 
 If you HAVE to run XP, 2000 etc., there is absolutly no reason to 
 torture 
 yourself by doing it the hard way.
 
 -- 
 Bryan Phinney
 
That's exactly what I spent three days preaching at hin to do Bryan. I had already 
downloaded SP2 to CD-RW for him before I found out about the gotchas included in 
that. That, Zone Alarm, AVG and TweakUI were all he needed to be safe enough to work 
with for the time it takes to go through any further required updates, but like 99% of 
the Windows users I've encountered in the past 12 years he doesn't have the patience. 
Hell i even threw in a copy of The Cleaner.

Maybe that's why i called him a dork and charged him _way_ too much for being there? 
g

Please excuse this weird looking message, if it is. I'm stuck on the web interface 
because the last update to cooker did strange things to the system. Or maybe it's all 
PEBCAK? lol

Charlie 
 




Want to buy your Pack or Services from MandrakeSoft? 
Go to http://www.mandrakestore.com
Join the Club : http://www.mandrakeclub.com



Re: [newbie] [OT] Dumbest question ever asked

2004-08-14 Thread Stephen Kühn
On Sat, 2004-08-14 at 15:20, Charlie Mahan wrote:

 Personal experience as of 42 minutes 38 seconds ago. Virgin install of XP on a 
 virgin drive, new system. The new owner picked it up from me this afternoon, 
 took it home and decided to get the installation out of the way before dinner 
 so that he wouldn't have to use his wife and kids system.
 
 I just home got from an unscheduled trip there to reinstall Windows and 
 install the utilities I _told the dork_ to download on the family system, 
 burn to disk, and install *before allowing XP onto the net.
 
 2 worms, 1 trojan in 1 minute 45 seconds. By his count. By the time I got 
 there he had wiped the drive, burned the utilities (I always recommend AVG 
 too Joe) but his confidence was so shaken he wouldn't touch the system until 
 I was there to lead him through.
 
 The only good that came out of the service call (other than the assault I 
 performed on his wallet) is that the new 120 GB drive is now set for dual 
 boot Mandrake 10.0 and his wife was in familiar territory happily chatting 
 with friends using kopete when I left. So much for his Windows only box. g
 
 Charlie

As is my standard for doing an XP setup, the actual setup files reside
on this MDK box, the i386 dir is copied to the target machine (or Ghost
image - whichever is suited); boot with a bootable Win98 style CD,
disconnect from network, start XP installation. Upon completion of base
installation, turn off necessary services, apply latest patches + SP1
from another CD, reboot. Install RegistryMechanic, Spybot Search 
Destroy, then Firefox, Thunderbird, reset system defaults, then AVG,
HijackThis and About::Blank. ZoneAlarm after that. Reboot. Connect
machine to network again, update AVG and allow ZA to let it through.
Then start installing other apps like WinAmp, WinMX, GAIM for Windows,
and a few extensions for Firefox. Defrag, reboot, scan system and
registry.

Sounds like an awful lot of work, but I have the procedure fairly down
pat and at least it keeps the machine secure from the get-go...and it is
a dent in the client pocket, but they generally stay quite stable for a
fair amount of time.

--
stephen kuhn - proprietor
__
illawarra computer services :: a kuhn media australia venture
http://kma.0catch.com  :: mobile 0410.728.389
Serving Sydney, The Illawarra, South Coast and Rural NSW
__
  * This message was composed on a 100% Microsoft free computer *
  We expressly refuse to utilise Microsoft DRM encoded documents
__
  Mandrake GNU/Linux 10.0 OE/Kernel 2.6.3-7/ No Viruses here. 

Little prigs and three-quarter madmen may have the conceit that the
laws of nature are constantly broken for their sakes. -- Friedrich
Nietzsche



Want to buy your Pack or Services from MandrakeSoft? 
Go to http://www.mandrakestore.com
Join the Club : http://www.mandrakeclub.com



Re: [newbie] [OT] Dumbest question ever asked

2004-08-14 Thread Stephen Kühn
On Sun, 2004-08-15 at 01:56, Lanman wrote:

lil'snip

 Besides, none of this should come as a surprise to anyone on this list. 
 After all, why are we here?
 
 Lanman

It really isn't a surprise and shouldn't be. Bear in mind that Microsoft
has also been associated with some high end spamming organisations as
well; and in having done a support contract with Microsoft (don't laugh
- it paid the bills) I trust Microsoft's administration about as far as
I can spit a ten pound rock. My deep cynicism rose during the NT 3.51
years with the amount of service packs seeming to be the same as the
OS/2 Warp service packs - and hasn't but gotten worse through time.

After having viewed Longborn, the interface and the likes, I still find
it lacking horribly, and eating up way too much system resource on eye
candy, and appearing (from what I've seen) to give one less chance for
installing third party applications (like Mozilla, T-Bird, OO and more);
aside from huge hardware requirements.

I think we all have clients/customers/friends that are a bit sick and
tired of having to upgrade machinery because of software; the corporate
world ain't going to like it too much when it comes time for the
upgrade; linux is looking better on a day to day basis - that is, unless
Microsoft starts to use patents to kill off the competition as it looks
like they're poising to do...
 
--
stephen kuhn - proprietor
__
illawarra computer services :: a kuhn media australia venture
http://kma.0catch.com  :: mobile 0410.728.389
Serving Sydney, The Illawarra, South Coast and Rural NSW
__
  * This message was composed on a 100% Microsoft free computer *
  We expressly refuse to utilise Microsoft DRM encoded documents
__
  Mandrake GNU/Linux 10.0 OE/Kernel 2.6.3-7/ No Viruses here. 

People who are rather more than six feet tall and nearly as broad across
the shoulders often have uneventful journeys. People jump out at them
from behind rocks then say things like, Oh. Sorry. I thought you were
someone else. -- Carrot travels to Ankh-Morpork (Terry Pratchett,
Guards! Guards!)



Want to buy your Pack or Services from MandrakeSoft? 
Go to http://www.mandrakestore.com
Join the Club : http://www.mandrakeclub.com



Re: [newbie] [OT] Dumbest question ever asked

2004-08-14 Thread JoeHill
On Fri, 13 Aug 2004 21:49:26 -0400
JoeHill disseminated the following:

 http://www.pcworld.com/news/article/0,aid,117380,00.asp

Just a thought, everybody make PDF's of this and the article from CRN that Paul
posted (thanks Paul!). 'Twould be nice to send around to all their friends and
associates who run XP, no?

Very easy to do, click on the 'printable version' link, then print to a
postscript file, then:

ps2pdf13 /path/to/filename.ps /path/to/filename.pdf

Sorry, but I just love to spread the shite on MS, can't help m'self ;-)

-- 
JoeHill RLU #282046 /  www.freeyourmachine.org
20:00:46 up 10 days, 19:43, 10 users, load average: 1.90, 1.53, 1.41
+++
When the going gets weird, the weird turn pro. -- Hunter S. Thompson


Want to buy your Pack or Services from MandrakeSoft? 
Go to http://www.mandrakestore.com
Join the Club : http://www.mandrakeclub.com



Re: [newbie] [OT] Dumbest question ever asked

2004-08-14 Thread Tom Brinkman
On Saturday 14 August 2004 04:40 pm, CHARLIE M wrote:
 Please excuse this weird looking message, if it is. I'm stuck
 on the web interface because the last update to cooker did
 strange things to the system. Or maybe it's all PEBCAK? lol

 Charlie
 

   Just had this conversation OT.  So I'll paste it in

   Wait till Monday or Tues.  Cooker mirrors sometimes are 
fubar'd, specially on weekends.  Currently proxad is only showing 
me a problem for kdelib* updates.   BUT, what packages you 
encounter will of course vary from mine, as it's doubtful we have 
all the same ones installed.  If the problem persists too long 
you mave have to find a different mirror. A guide is here
http://cookermirrors.skycon.net/and is currently showing 
problems on several mirrors.

For my kdelib* deal I used a browser this mornin to bring up 
the mirror, and sure enough, even tho the mirror is up to date, 
and the hdlist is in sync, a few files are missing.  In cases 
like this, Mandrake's central internal server probly hasn't sent 
them to public mirrors yet.  That often happens late on Friday.

 FWIW tho, since we're talking about cooker if you 
encouter an update with a lot of packages, specially libs and sys 
files, it's a good idea to runalias upall='rpm --rebuilddb  
updatedb  update-menus -n  ldconfig -v'to make sure your 
system is in sync with the updates.  Then logout and back into 
your WM.  I always do a Ctrl+Alt+Bsp while log'd out to restart 
the X server, which also auto-log's me back into my desktop 
(KDE). 

.
 
   Charlie, come over to the darkside.
[EMAIL PROTECTED]
-- 
  Tom Brinkman Corpus Christi, Texas
   Proud to be an American


Want to buy your Pack or Services from MandrakeSoft? 
Go to http://www.mandrakestore.com
Join the Club : http://www.mandrakeclub.com



Re: [newbie] [OT] Dumbest question ever asked

2004-08-14 Thread Hoyt Bailey
On Saturday 14 August 2004 07:09 pm, JoeHill wrote:
 On Fri, 13 Aug 2004 21:49:26 -0400

 JoeHill disseminated the following:
  http://www.pcworld.com/news/article/0,aid,117380,00.asp

 Just a thought, everybody make PDF's of this and the article from CRN
 that Paul posted (thanks Paul!). 'Twould be nice to send around to
 all their friends and associates who run XP, no?

 Very easy to do, click on the 'printable version' link, then print to
 a postscript file, then:

 ps2pdf13 /path/to/filename.ps /path/to/filename.pdf

 Sorry, but I just love to spread the shite on MS, can't help m'self
 ;-)
The people I know who run M$ would only consider me more of a nut than 
they do now.
-- 
Regards;
Hoyt
Registered Linux User #363264
http://counter.li.org


Want to buy your Pack or Services from MandrakeSoft? 
Go to http://www.mandrakestore.com
Join the Club : http://www.mandrakeclub.com



Re: [newbie] [OT] Dumbest question ever asked

2004-08-13 Thread Stephen Kühn
On Sat, 2004-08-14 at 11:49, JoeHill wrote:
 Is Microsoft's Firewall Secure?
 
 More on the complete stupidity of SP2 for XP:
 
 http://www.pcworld.com/news/article/0,aid,117380,00.asp
 
 ...and yeah, Stephen, it's this kind of crap what pays them bills, eh?

As usual, Microsoft puts out a product that is already broken. And I'm
sure a slew of patches are in the making as we speak.

I'm still surprised that a vast majority of the public even bothers with
Microsoft products and it´s high maintenance scheme - then again, I
shouldn't whinge about it because I do need the money.

--
stephen kuhn - proprietor
__
illawarra computer services :: a kuhn media australia venture
http://kma.0catch.com  :: mobile 0410.728.389
Serving Sydney, The Illawarra, South Coast and Rural NSW
__
  * This message was composed on a 100% Microsoft free computer *
  We expressly refuse to utilise Microsoft DRM encoded documents
__
  Mandrake GNU/Linux 10.0 OE/Kernel 2.6.3-7/ No Viruses here. 

Perhaps I am flogging a straw herring in mid-stream, but in the light
of what is known about the ubiquity of security vulnerabilities, it
seems vastly too dangerous for university folks to run with their heads
in the sand. -- Peter G. Neumann, RISKS moderator, about the Internet
virus



Want to buy your Pack or Services from MandrakeSoft? 
Go to http://www.mandrakestore.com
Join the Club : http://www.mandrakeclub.com



Re: [newbie] [OT] Dumbest question ever asked

2004-08-13 Thread JoeHill
On Sat, 14 Aug 2004 12:13:52 +1000
Stephen Kühn disseminated the following:

  More on the complete stupidity of SP2 for XP:
  
  http://www.pcworld.com/news/article/0,aid,117380,00.asp
  
  ...and yeah, Stephen, it's this kind of crap what pays them bills, eh?
 
 As usual, Microsoft puts out a product that is already broken. And I'm
 sure a slew of patches are in the making as we speak.
 
 I'm still surprised that a vast majority of the public even bothers with
 Microsoft products and it´s high maintenance scheme - then again, I
 shouldn't whinge about it because I do need the money.

This is my fav part:

Microsoft admits that, in some cases, malicious code could indeed switch the
firewall off. However, this isn't so much a flaw as a limitation on the role
firewalls should play in a company's security system, according to Microsoft.

What??!!

If malicious code makes it past the firewall, it is the role of anti-virus
software to protect the machine, Overton adds. Likewise, it is not the
firewall's place to stop malicious code from sending outbound packets--...

So what the fsck is it good for??!!

LOL!

Nice way to pass the buck *and* pay lip service to security at the same time!

BTW, just had a client that had Norton 2004, fully updated, found no viruses.
AVG? Found *nine* of them.

So, keep it up MS and Norton! I made 700 bucks this week!

-- 
JoeHill RLU #282046 /  www.freeyourmachine.org
23:25:03 up 9 days, 23:07, 8 users, load average: 1.60, 1.63, 1.56
+++
If I said yes, that would then suggest that that might be the only place where
it might be done which would not be accurate ... necessarily accurate ... it
might also not be inaccurate, but I mean ... I'm disinclined to mislead anyone.
-- Donald Rumsfeld


Want to buy your Pack or Services from MandrakeSoft? 
Go to http://www.mandrakestore.com
Join the Club : http://www.mandrakeclub.com



Re: [newbie] [OT] Dumbest question ever asked

2004-08-13 Thread Lyvim Xaphir
On Fri, 2004-08-13 at 23:36, JoeHill wrote:
 On Sat, 14 Aug 2004 12:13:52 +1000
 Stephen Kühn disseminated the following:
 
   More on the complete stupidity of SP2 for XP:
   
   http://www.pcworld.com/news/article/0,aid,117380,00.asp
   
   ...and yeah, Stephen, it's this kind of crap what pays them bills, eh?
  
  As usual, Microsoft puts out a product that is already broken. And I'm
  sure a slew of patches are in the making as we speak.
  
  I'm still surprised that a vast majority of the public even bothers with
  Microsoft products and it´s high maintenance scheme - then again, I
  shouldn't whinge about it because I do need the money.
 
 This is my fav part:
 
 Microsoft admits that, in some cases, malicious code could indeed switch the
 firewall off. However, this isn't so much a flaw as a limitation on the role
 firewalls should play in a company's security system, according to Microsoft.
 
 What??!!
 
 If malicious code makes it past the firewall, it is the role of anti-virus
 software to protect the machine, Overton adds. Likewise, it is not the
 firewall's place to stop malicious code from sending outbound packets--...
 
 So what the fsck is it good for??!!
 
 LOL!
 
 Nice way to pass the buck *and* pay lip service to security at the same time!
 
 BTW, just had a client that had Norton 2004, fully updated, found no viruses.
 AVG? Found *nine* of them.
 
 So, keep it up MS and Norton! I made 700 bucks this week!

I had a very similar experience very recently.  Some virii bypassed
Symantec's NAV scans entirely and were stopped by an open sourced
scanner I was using.

Quite frankly the latrine level drivel that M$ continues to vomit forth
is repelling.

LX



Want to buy your Pack or Services from MandrakeSoft? 
Go to http://www.mandrakestore.com
Join the Club : http://www.mandrakeclub.com



Re: [newbie] [OT] Dumbest question ever asked

2004-08-13 Thread Stephen Kühn
On Sat, 2004-08-14 at 14:00, Lyvim Xaphir wrote:
 On Fri, 2004-08-13 at 23:36, JoeHill wrote:
  On Sat, 14 Aug 2004 12:13:52 +1000
  Stephen Kühn disseminated the following:
  
More on the complete stupidity of SP2 for XP:

http://www.pcworld.com/news/article/0,aid,117380,00.asp

...and yeah, Stephen, it's this kind of crap what pays them bills, eh?
   
   As usual, Microsoft puts out a product that is already broken. And I'm
   sure a slew of patches are in the making as we speak.
   
   I'm still surprised that a vast majority of the public even bothers with
   Microsoft products and it´s high maintenance scheme - then again, I
   shouldn't whinge about it because I do need the money.
  
  This is my fav part:
  
  Microsoft admits that, in some cases, malicious code could indeed switch the
  firewall off. However, this isn't so much a flaw as a limitation on the role
  firewalls should play in a company's security system, according to Microsoft.
  
  What??!!
  
  If malicious code makes it past the firewall, it is the role of anti-virus
  software to protect the machine, Overton adds. Likewise, it is not the
  firewall's place to stop malicious code from sending outbound packets--...
  
  So what the fsck is it good for??!!
  
  LOL!
  
  Nice way to pass the buck *and* pay lip service to security at the same time!
  
  BTW, just had a client that had Norton 2004, fully updated, found no viruses.
  AVG? Found *nine* of them.
  
  So, keep it up MS and Norton! I made 700 bucks this week!
 
 I had a very similar experience very recently.  Some virii bypassed
 Symantec's NAV scans entirely and were stopped by an open sourced
 scanner I was using.
 
 Quite frankly the latrine level drivel that M$ continues to vomit forth
 is repelling.
 
 LX

BUT, mind you, it DOES make some of us money, and since M$ refuses to
create a product that actually works properly, those of us in the
support biz can be rest assured that we have income.

And as long as it ain't installed on MY computer, I don't care. If I
can't run it in a VMware isolated environment, then I don't want it.

--
stephen kuhn - proprietor
__
illawarra computer services :: a kuhn media australia venture
http://kma.0catch.com  :: mobile 0410.728.389
Serving Sydney, The Illawarra, South Coast and Rural NSW
__
  * This message was composed on a 100% Microsoft free computer *
  We expressly refuse to utilise Microsoft DRM encoded documents
__
  Mandrake GNU/Linux 10.0 OE/Kernel 2.6.3-7/ No Viruses here. 

Happy feast of the pig!



Want to buy your Pack or Services from MandrakeSoft? 
Go to http://www.mandrakestore.com
Join the Club : http://www.mandrakeclub.com



Re: [newbie] [OT] Dumbest question ever asked

2004-08-13 Thread JoeHill
On Sat, 14 Aug 2004 00:00:45 -0400
Lyvim Xaphir disseminated the following:

  So, keep it up MS and Norton! I made 700 bucks this week!
 
 I had a very similar experience very recently.  Some virii bypassed
 Symantec's NAV scans entirely and were stopped by an open sourced
 scanner I was using.
 
 Quite frankly the latrine level drivel that M$ continues to vomit forth
 is repelling.

Of course, the MS bumboy Tim Mullen on SecurityFocus, has his usual fellatial
praise for those incompetent boobs in Redmond:

Now, even with these tremendous advancements in XP, [Huh??!!] some people are
going out of there way to find fault with it, as they seem to do with all things
Microsoft. In fact, some of this is just downright hypocritical.
[Howzat?] Security researchers and analysts continually blast Microsoft for
security issues, and have done so forever (I've even done it.) [I don't think
I've ever seen that...] But now that the company has responded in a significant
way, [with what, a firewall that doesn't work?!] it gets bad press for releasing
a Service Pack that might break ISV applications.

The truth here is that if an application breaks, it really did need fixing
anyway.

Ooooh, I see, it's the *application developers* fault for not bowing to MS and
making their apps 'compatible' with this shite called a Service Pack. No, what
we as a 'security community' need to do is abandon MS altogether.

Oh, wait, what's that at the bottom of the page?

SecurityFocus columnist Timothy M. Mullen is CIO and Chief Software Architect
for AnchorIS.Com, a developer of secure, enterprise-based accounting software.
AnchorIS.Com also provides security consulting services for a variety of
companies, including Microsoft Corporation.

Wow, what a coincidence.

Link:

http://securityfocus.com/columnists/259

-- 
JoeHill RLU #282046 /  www.freeyourmachine.org
00:14:14 up 9 days, 23:56, 8 users, load average: 1.34, 1.69, 1.61
+++
Wars such as those which have occurred in Iraq only allow hatred, violence and
terror to proliferate. -- Spain's prime minister-elect, Jose Luis Rodriguez
Zapatero


Want to buy your Pack or Services from MandrakeSoft? 
Go to http://www.mandrakestore.com
Join the Club : http://www.mandrakeclub.com



Re: [newbie] [OT] Dumbest question ever asked

2004-08-13 Thread Dennis Myers
On Friday 13 August 2004 11:28 pm, JoeHill wrote:
 On Sat, 14 Aug 2004 00:00:45 -0400

 Lyvim Xaphir disseminated the following:
   So, keep it up MS and Norton! I made 700 bucks this week!
 
  I had a very similar experience very recently.  Some virii bypassed
  Symantec's NAV scans entirely and were stopped by an open sourced
  scanner I was using.
 
  Quite frankly the latrine level drivel that M$ continues to vomit forth
  is repelling.

 Of course, the MS bumboy Tim Mullen on SecurityFocus, has his usual
 fellatial praise for those incompetent boobs in Redmond:

 Now, even with these tremendous advancements in XP, [Huh??!!] some people
 are going out of there way to find fault with it, as they seem to do with
 all things Microsoft. In fact, some of this is just downright hypocritical.
 [Howzat?] Security researchers and analysts continually blast Microsoft for
 security issues, and have done so forever (I've even done it.) [I don't
 think I've ever seen that...] But now that the company has responded in a
 significant way, [with what, a firewall that doesn't work?!] it gets bad
 press for releasing a Service Pack that might break ISV applications.

 The truth here is that if an application breaks, it really did need fixing
 anyway.

 Ooooh, I see, it's the *application developers* fault for not bowing to MS
 and making their apps 'compatible' with this shite called a Service Pack.
 No, what we as a 'security community' need to do is abandon MS altogether.

 Oh, wait, what's that at the bottom of the page?

 SecurityFocus columnist Timothy M. Mullen is CIO and Chief Software
 Architect for AnchorIS.Com, a developer of secure, enterprise-based
 accounting software. AnchorIS.Com also provides security consulting
 services for a variety of companies, including Microsoft Corporation.

 Wow, what a coincidence.

 Link:

 http://securityfocus.com/columnists/259
I work in the U.S. Government as an engineer, and we had system wide message 
that instructed us not to install the sp2 as it would break several of the 
programs we run.  Mostly non-MS progs. And everyone there thinks I am a bit 
strange cause I keep muttering linux is the answer under my breath. :-)
-- 
Dennis M. Linux user #180842


Want to buy your Pack or Services from MandrakeSoft? 
Go to http://www.mandrakestore.com
Join the Club : http://www.mandrakeclub.com



Re: [newbie] [OT] Dumbest question ever asked

2004-08-13 Thread Carroll Grigsby
On Friday 13 August 2004 11:36 pm, JoeHill wrote:

 snip

 This is my fav part:

 Microsoft admits that, in some cases, malicious code could indeed switch
 the firewall off. However, this isn't so much a flaw as a limitation on the
 role firewalls should play in a company's security system, according to
 Microsoft.

 What??!!

Joe:

Any one want to get up a pool on how long it will take until the script 
kiddies exploit that hole? According to an article on /. a while back, if you 
connect a virgin XP install to the web using a wideband connection, the break 
in attempts can start within a minute or two. Scary. Very scary.

-- cmg



Want to buy your Pack or Services from MandrakeSoft? 
Go to http://www.mandrakestore.com
Join the Club : http://www.mandrakeclub.com



Re: [newbie] [OT] Dumbest question ever asked

2004-08-13 Thread Lyvim Xaphir
On Sat, 2004-08-14 at 00:23, Stephen Kühn wrote:
 On Sat, 2004-08-14 at 14:00, Lyvim Xaphir wrote:

   So, keep it up MS and Norton! I made 700 bucks this week!
  
  I had a very similar experience very recently.  Some virii bypassed
  Symantec's NAV scans entirely and were stopped by an open sourced
  scanner I was using.
  
  Quite frankly the latrine level drivel that M$ continues to vomit forth
  is repelling.
  
  LX
 
 BUT, mind you, it DOES make some of us money, and since M$ refuses to
 create a product that actually works properly, those of us in the
 support biz can be rest assured that we have income.

You mean like sendmail? ;)

Yes, you are right.  I guess it's ok to punish the pocketbooks of the
ignorant until they become educated.

I'm not being facetious either. 


 
 And as long as it ain't installed on MY computer, I don't care. If I
 can't run it in a VMware isolated environment, then I don't want it.
 
 --
 stephen kuhn - proprietor
 __


Agreed.


LX



Want to buy your Pack or Services from MandrakeSoft? 
Go to http://www.mandrakestore.com
Join the Club : http://www.mandrakeclub.com