Re: Sony: No firewall and no patches

["Dobbins, Roland" <rdobbins () arbor net>]

On May 11, 2011, at 6:05 PM, phocean wrote:

>  Passive FTP is the first example that comes to my mind where inspection (based on statefulness) is needed.


I really don't want to continue this on full-disclosure, but there's still no material security value to stateful 
inspection in front of servers, with either active or passive ftp.

-----------------------------------------------------------------------
Roland Dobbins <rdobbins () arbor net> // <http://www.arbornetworks.com>

                The basis of optimism is sheer terror.

                          -- Oscar Wilde

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/