OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
 
Re: New Piece of spyware

Valdis.Kletnieksvt.edu
Date: Mon May 17 2004 - 11:54:40 CDT


On Sun, 16 May 2004 21:40:28 +0800, Sarbjit Singh Gill <ssgillgilltechnologies.com> said:

> I mean one can see when Windows 2003 is installed by default the IE is
> locked down even for local network. This is for one good reason: nobody is
> going to use the IE to access a web server while locally logged on the
> Windows 2003 server.

The server misbehaves.. you login.. you poke around.. you find you need to go
to look at an MS KB article or visit windowsupdate or go to a 3rd party
vendor's website.... Yeah.. *sure* you're going to walk back to your office
and use IE there so you can download something and then copy it to the server,
when you can just launch IE right there...

Happens all too often - I'm willing to bet that even the most
security-conscious of us has done that at least once in our careers....

(Anybody out there willing to swear on a <insert appropriate holy book here>
that they've *never* launched a browser on a server while trying to fix/upgrade
something? :)

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.4 (GNU/Linux)
Comment: Exmh version 2.5 07/13/2001

iD8DBQFAqO5QcC3lWbTT17ARAq2pAKCuV/D4YsB/dgkBP1AYtx8FC34abQCgi7Ij
s853DY4YyRiUqObgaRbSriI=
=qawX
-----END PGP SIGNATURE-----