Full Disclosure mailing list archives
Re: SP2 is killing me. Help?
From: Ron DuFresne <dufresne () winternet com>
Date: Wed, 18 Aug 2004 10:00:35 -0500 (CDT)
SANS weekly newsbytes relating to this topic;; --Microsoft Releases List of Products that Could Conflict with XP sp2 (16 August 2004) Microsoft has issued a document that lists about 50 applications and games that may have trouble with the recently released Windows XP Service Pack 2. Among the problems: the new firewall may limit the ability of some applications to receive information from outside networks. Other companies have been posting information about functionality problems encountered as a result of installing SP2. http://zdnet.com.com/2102-1104_2-5311280.html?tag=printthis [Editor's Note (Pescatore): Most SP2 compatibility problems are from the Windows Firewall improvements and the changes in how RPCs are handled in Windows. Since the Windows Firewall still doesn't enforce many policy controls that enterprises require, and since the RPC fixes were badly needed, most applications that don't work with SP2 were badly broken from a security perspective anyway.] And concerning the related thread whence folks wanted to know if the windows firewall worked on outgoing patckets, and wrongly assumed it did; --Windows Firewall Lacks Outbound Traffic Blocking (13/11 August 2004) Though Windows Firewall, which arrived as part of Windows XP Service Pack 2, is a welcome addition to PC security, it doesn't provide certain functions expected from commercial firewalls. Windows Firewall does not block outbound traffic, a function which prevents computers from being used as spam or denial-of-service zombies. In addition, other applications could potentially turn Windows Firewall off. http://www.pcworld.com/resource/printable/article/0,aid,117380,00.asp [Editor's Note (Tan): Security savvy users will either know how to get a better firewall or safeguard their system from being trojanized. The great improvement of this Windows Firewall is that it provides protection before network starts up. Editor's Note (Schultz): No security solution is perfect, nor can a single control measure such as a host-based firewall do everything. Critics often overlook the fact that Microsoft by all appearances is making a very concerted effort to improve security in its products. Perhaps WXP SP3 will be able to block outbound connections.] Thanks, Ron DuFresne ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ "Cutting the space budget really restores my faith in humanity. It eliminates dreams, goals, and ideals and lets us get straight to the business of hate, debauchery, and self-annihilation." -- Johnny Hart ***testing, only testing, and damn good at it too!*** OK, so you're a Ph.D. Just don't touch anything. _______________________________________________ Full-Disclosure - We believe in it. Charter: http://lists.netsys.com/full-disclosure-charter.html
Current thread:
- Re: SP2 is killing me. Help?, (continued)
- Message not available
- Re: SP2 is killing me. Help? ktabic (Aug 17)
- RE: SP2 is killing me. Help? joe (Aug 17)
- RE: SP2 is killing me. Help? ktabic (Aug 18)
- Re: SP2 is killing me. Help? James Tucker (Aug 18)
- RE: SP2 is killing me. Help? Aditya, ALD [Aditya Lalit Deshmukh] (Aug 12)
- Re: SP2 is killing me. Help? Harlan Carvey (Aug 12)
- Re: SP2 is killing me. Help? Georgi Guninski (Aug 12)
- Re: SP2 is killing me. Help? Harlan Carvey (Aug 12)
- Re: SP2 is killing me. Help? Maarten (Aug 12)
- Re: SP2 is killing me. Help? Valdis . Kletnieks (Aug 13)
- Re: SP2 is killing me. Help? Ron DuFresne (Aug 18)
- RE: SP2 is killing me. Help? joe (Aug 12)
- RE: SP2 is killing me. Help? xtrecate (Aug 12)
- RE: SP2 is killing me. Help? Phillip R. Paradis (Aug 12)
- Re: SP2 is killing me. Help? Luke Lussier (Aug 13)
- Re: SP2 is killing me. Help? Shannon Johnston (Aug 13)