Re: [SLUG] OT: M$ deals the final blow

From: Chad Perrin (perrin@apotheon.com)
Date: Tue Sep 14 2004 - 10:16:33 EDT


Steve Szmidt wrote:
> On Saturday 11 September 2004 11:21 am, Eben King wrote:
>
>>>Wait... are you saying that they can turn autoupdate on, or that they can
>>>turn your computer on? In many cases (pun intended) the latter's not
>>>true.
>
>
> Hehe, this one is interesting. There are settings that you can modify because
> they are available in the registry. The one I'm talking about is a change
> that does NOT rely on the registry, or any other setting you care to make.
>
> I.e. it's hardcoded. Permanent. Unremovable.
>
> It's also known as a backdoor. A nice little backdoor which only let's MS in
> after they show their certificate. Of course that is protected by the very
> high MS security that we all have come to admire. ; )
>
> Yup, security is job one with MS. They would not put all these machine at risk
> by installing anything less than their BEST. One of these days I'll have to
> throw away my OpenBSD firewall and only rely on MS security. It's just too
> boring with my firewall. I have all ports are closed on both outbound and
> inbound by default, and only let specific traffic leave. And that's not
> really fair to MS. I mean they have invested a lot of money and effort to
> create this secure environment, and here I am just bypassing the whole thing!
> Not cool.
>
> Guess I'm just a shameless, unappreciative user...

Hmm. This makes me want to try an experiment. I should set up a
virtual DMZ here with two sets of two computers in it: one is an
out-of-box Linux distro with an out-of-box Linux firewall protecting it,
and the other is an out-of-box Windows workstation with an out-of-box
Windows server protecting it. Once that's done, I'd leave them alone,
running 24/7. Logging the results could be fun.
-----------------------------------------------------------------------
This list is provided as an unmoderated internet service by Networked
Knowledge Systems (NKS). Views and opinions expressed in messages
posted are those of the author and do not necessarily reflect the
official policy or position of NKS or any of its employees.



This archive was generated by hypermail 2.1.3 : Fri Aug 01 2014 - 17:36:28 EDT