funsec mailing list archives

Re: No AV? Shock, horror!


From: <Blanchard_Michael () emc com>
Date: Tue, 29 Sep 2009 12:52:15 -0400

Agreed! 


Michael P. Blanchard 
Senior Security Engineer, CISSP, GCIH, CCSA-NGX, MCSE
Office of Information Security & Risk Management 
EMC ² Corporation 
4400 Computer Dr. 
Westboro, MA 01580 
email:  Blanchard_Michael () EMC COM 

-----Original Message-----
From: funsec-bounces () linuxbox org [mailto:funsec-bounces () linuxbox org] On Behalf Of Kenneth L. Bechtel, II
Sent: Tuesday, September 29, 2009 12:33 PM
To: funsec () linuxbox org
Subject: Re: [funsec] No AV? Shock, horror!

On Tuesday 29 September 2009 11:48:51 am Blanchard_Michael () emc com wrote:
Yah, too bad many corporations turn off the built in FW in SP2 via GPO ;-( 
But the additions in SP2 were a GodSend for home users, agreed.


Let's face it, in reality the new "features" in OS' have been the biggest 
advances we've had in combating malware.  Win95 deployments helped wipe out 
the Bootsector infecter, while WinNT/ Win2000 was the nail in that box for a 
long time.  As pointed out XP SP2 really nailed down worms, but that was also 
assisted with "Desktop Firewalls".  Anti-Virus and other security Software are 
only bandages, and do a great job of slowing/ stopping the hemorrhage.  but 
they are specific tools looking for specific cuts, and we ARE fighting the death 
of 1000 cuts.
 
-- 
Kenneth L. Bechtel, II
Team Anti-Virus
Phone - 717-579-9083                              | WildList Reporter 
P.O. Box 635, Palmyra, PA 17078              | Founding member AVIEN 
E-mail - kbechtel () teamanti-virus org      | Member AVAR 
PGP Footprint: 969E 2A27 3042 EE52 AEFB  6FF0 2711 9467 D38C 5C0F
_______________________________________________
Fun and Misc security discussion for OT posts.
https://linuxbox.org/cgi-bin/mailman/listinfo/funsec
Note: funsec is a public and open mailing list.


_______________________________________________
Fun and Misc security discussion for OT posts.
https://linuxbox.org/cgi-bin/mailman/listinfo/funsec
Note: funsec is a public and open mailing list.


Current thread: