Penetration Testing mailing list archives

Re: [PEN-TEST] WebEx security?


From: Bennett Todd <bet () RAHUL NET>
Date: Tue, 31 Oct 2000 15:05:26 -0500

2000-10-31-13:44:49 Jonah Kowall:
Its a suberb product, it works through all large corporate
firewalls, which is more than most compeditors.

This can be a plus or a minus, depending on your needs.

Since they do all the hosting, the insecure nature of their
corporate network does worry me about using the product.

Then your security interests must be confined to fears of having
your company's servers compromised, and not extend to worries about
your users' data being compromised. In many sites the main
justification for worrying about in-house server security is
protecting users' data, and so the fact that WebEx hosts the stuff
would make their hosts' insecurities a complete show-stopper of a
problem with no additional assumptions or inferences required.

-Bennett

Attachment: _bin
Description:


Current thread: