Full Disclosure mailing list archives

RE: A rather newbie question


From: "Schmidt, Michael R." <Michael.Schmidt () T-Mobile com>
Date: Mon, 3 May 2004 10:08:01 -0700

Me too, that is why I joined this list, that is why I am concerned enough to learn.  That is why I pull the plug on my 
kids (I have four, and they are all educated in net usage) when they click (or allow their friends to click) yes to 
stupid net windows that say stupid things like - your machine is not protected would you like me to install a free tool 
to protect you?

I've told them many times - don't worry Dad is the protector, if you are not sure ask me, call me, whatever, just don't 
do anything stupid.

I am thinking I need to have a class again (at home of all places) on how to safely surf the internet.  Matter of fact 
I am resolved to again teach my kids about internet safety.  I think it ought to be a class like drivers ed, something 
that they teach in school even.

And if it weren't for places like this and people like you (and I hope me) the net would be a worse place.

-----Original Message-----
From: full-disclosure-admin () lists netsys com [mailto:full-disclosure-admin () lists netsys com]On Behalf Of Ethan 
Vaughn
Sent: Monday, May 03, 2004 10:23 AM
To: full-disclosure () lists netsys com
Subject: RE: [Full-disclosure] A rather newbie question

This might be obvious, so i apologize in advance.

I just wanted to point out that this is probably the no.1 security fallacy
I hear among my endlusers.

"Schmidt, Michael R." <Michael.Schmidt () T-Mobile com> wrote:
Thanks,

I use ISA server.  This is my home network, so I probably have nothing
that they would be interested in.  I do have two static IP addresses and
a DSL line.

Yes, there *is* something "they" are interested in: owning your box. Even
the  wimpiest granny-owned win95 box is valuable to a blackhat. Once
"owned" your box becomes a "safe machine" from which a blackhat can launch
anonymous attacks. Any trace will come back to you.

I think of it this way, how would I like my personal machine's IP address
to show up in a DDoS attack log against FBI.org? That usually motivates me
to spend a little extra time on my personal net's securiy.




_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.netsys.com/full-disclosure-charter.html

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.netsys.com/full-disclosure-charter.html


Current thread: