[Am-info] BBC's GO Digital program

Geoffrey esoteric@3times25.net
Mon, 06 May 2002 09:51:42 -0400


John Poltorak wrote:

> If I start up OS/2 and connect to the Internet and just start browsing 
> using Netscape, I have very little, if any, chance of being hacked.

Note, your statement was absolute, not 'very little.'

> This 
> is not the case with Windows XP, which, AFAIUI starts a web server in the 
> background by default which is open to Nimda and CodeRed. And 
> supposedly there are plenty of vulnerabilities in MS Internet Explorer 
> which could allow a remote hacker to take over your system.

I don't disagree, noting that I indicated that M$ products appear to 
invite such problems.

> I do run a Web server and I see remote systems attempting to infect my 
> system with Nimda and CodeRed, but they simply cannot be successful since 
> they only work on IIS.

As do I.

> I also get plenty of email viruses, but they are harmless to my system and 
> are unlikely to get passed on to anywhere else unless I run a mailing 
> list.

Again, as do I.

> AFAIAC my system is immune and I don't need to do anything specific like 
> run the latest Anti-virus software to make it so. Neither do I need to 
> spend any time apply daily Microsoft patches the plug the security holes.

Nothing personal, but then you are being quite foolish.  I have two M$ 
OS's that periodically run on my network.  They are far removed and 
protected from the internet by my firewall and ids setup.  Even if they 
were not on this network, I would still have my firewall and ids in 
place.  Don't think for a minute that crackers are only focused on M$ 
OS's.  I guarantee you there are some out there looking for OS/2 
exploits, just as there are ones out there looking for Linux, *BSD, 
plan9, 'name any other OS I've not named' exploits.

> 
> Of course, I could be being very complacent, so please tell me what 
> measures I need to be taking to keep the hackers at bay.

A firewall and an ids, particuliarily if you are on the internet for 
extended time or have an 'always' on connection (dsl, cable..)


>>-- 
>>Until later: Geoffrey		esoteric@3times25.net
>>
> 
> 


-- 
Until later: Geoffrey		esoteric@3times25.net

I didn't have to buy my radio from a specific company to listen
to FM, why doesn't that apply to the Internet (anymore...)?