Re: ISS Security Brief: "MS Blast" MSRPC DCOM Worm Propagation (fwd)

["gregh" <chows () ozemail com au>]

> ----- Original Message ----- 
> From: Richard Stevens 
> To: Chris Garrett ; full-disclosure () lists netsys com 
> Sent: Tuesday, August 12, 2003 9:15 PM
> Subject: RE: [Full-disclosure] ISS Security Brief: "MS Blast" MSRPC DCOM Worm Propagation (fwd)


> I must be missing something here... xp home & pro both have a "click and forget" firewall?
 
> why arent people using it?
 

A) Most people dont know about it.

B) When you set the connection up for your ISP it is ticked by default. However, some ISPs have the option off in their 
setup disks.

C) Protects lamely against incoming and not at all against outgoing.

D) It's an MS product and let's face it, would YOU blindly trust it knowing that?

Greg.
_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.netsys.com/full-disclosure-charter.html