The Desktop Security Battle May Be Lost
Trailrunner7 writes in with a Threatpost.com article that begins: "For years, security experts, analysts and even users have been lamenting the state of desktop security. Viruses, spam, Trojans and rootkits have added up to create an ugly picture. But, the good news is that the desktop security battle may be over. The less-than-good news, however, is that we may have lost it. Jeremiah Grossman, CTO of WhiteHat Security, said Thursday that many organizations, particularly in the financial services industry, have gotten to the point of assuming that their customers' desktops are compromised. And moving forward from that assumption, things don't get much prettier." It goes on to speculate about home routers being targeted and infected.
so your saying a Live CD going out over a router to the net is "completely secure" if i have control over that router???
if i control the router.. i control your connection - you might think you are connecting to the bank.. but your not.. your connecting to me..
owning the router/switch is the highest form of MIM for network data..
'...if only "Jumping to a Conclusion" was an event in the Olympics.'
"It goes on to speculate about home routers being targeted and infected."
^that looks to me more like wondering about a "what if?" hypothetical scenario, not something which actually takes the blame from Windows just yet...
One that hath name thou can not otter
Or if someone has managed to trick iexplore.exe into executing hostile code.
But that'd never happen.
DRM: Terminator crops for your mind!
I didn't say the threat is hypothetical (heck, just about anything can be a target of attacks), but that the scenario is; a scenario where this becomes a big enough problem that it "takes the blame from Windows".
We're definatelly not there yet; and we might even never be (also because of mentioned efforts of course)
One that hath name thou can not otter
You mean your router got infected after watching a movie?! And there is a post up there saying that Windows is not at fault...
Rethinking email