- use the group policy editor (gpedit.msc); huh, no.exe??? Sounds like you haven't used Windows in about 7 years either. The MMC (microsoft management console) has been around for quite a while.
In a word, yes. You are a spam zombie. Or possible Typhoid Mary.
Your Windows OS is 6 years old at this point. No wonder, you're too cheap to purchase AV software, which (for several years) has been the cost of entry to be a responsible Windows user.
Yes, there is free AV software available for Windows. Ask Google. I don't have any first-hand experience with them myself, so I can't recommend any specific ones. Personally, I run Symantec Corporate Edition.
You are correct when you describe the current LavaRnd project as software analyzing present-day webcams. You are wrong when you say they were invented by different people. Landon Curt Noll was involved with both.
Um. AD using Windows 2003 is the service pack for the version of AD using Windows 2000.
It's not like they re-wrote it from scratch. Nor is it like AD (using 2000) is entirely new either; it was developed from the backend of Exchange's directory service, if I understand correctly.
Go with 2003, I haven't read of any particular defects of either AD or the server OS features under 2003, compared to 2000. And yes, things like Volume Shadow Copy, or whatever it's called, may make your life as an admin easier. Certainly, if you're running IIS sites, you'll appreciate the security of IIS 6 more than IIS 5.
This is probably pretty easy. He needs to get the mail headers from his clients that are affected by this. Each provider probably adds X-headers that add up to a score, a spam determinant. Some providers may choose to not put a detailed score listing in, oh well. I know that the system we use is based on SpamAssassin, and every rule has a weight. Things like entries in DNS-RBL add to the score, or no reverse-DNS, Bayesian scoring, keywords, etc.
Find out why, and fix each thing that comes up. Maybe his mailserver has no reverse DNS, fix that. Maybe his ISP or his IP is on a blacklist, get it fixed or take his business elsewhere. Maybe subscribe to a service that handles email marketing responsibly, like (gasp) Microsoft's bCentral, they will make sure that they don't get blacklisted.
But, then the home user IS ALREADY the administrator. Hell, at work I'm the local admin on my machine, although absolutely not a member of Domain Admins.
No seriously, you're going to swamp your PCI bus if you're doing routing between internal subnets. Goodbye, LAN throughput. Not to mention what merry hell you'll play with the CPU with VPN and firewall rules.
Your solution is great for a small place, or even a large place in a dedicated niche (like only VPN and/or firewall, or monitoring/IDS.) I wouldn't do something that ambitious with PC hardware though.
Administration, high-end troubleshooting, and system architecture for all things New Technology (Win2K, XP, and.NET). If you don't know what "HAL" stands for, you should probably post in MSOS&SC for the best results.
Although the recordings may not be "recent", it did recently happen to me. I bought a copy of The Dismemberment Plan, "Emergency and I." Got home, and it seemed wrong. All the artwork in the insert and on the CD itself were correct, but their next album, "Change", was what was actually recorded on the media.
Returned it for the other copy of "Emergency" in-store, and asked to listen to it before I left. Sure enough, it was also actually "Change." What a pisser.
How about using the console ports of the routers and a terminal server? The routers need to have a CLI, like a Netopia, Cisco, Juniper, etc. The terminal server could be a dial-in, could be simple tty or fancy PPP/SLIP, or be web-accessible on its own (hopefully via SSL.) It's interface could just be a terminal, or show a terminal in a javascript window.
Cyclades, and god know how many others, make terminal servers. Or you could stuff a bunch of serial ports into a linux box and build your own.
Switches are not secure. Flood the MAC table of the switch, you've turned that switch into a hub. Flood the MAC table of your target and run frag-router, and now you're routing all of his traffic.
No, the security here is by running SSL between the client and the PGP Universal server. RTFA
Oddly enough, according to this article, Neoteris is one of a handful of SSL VPN companies that DOES have a product that "does it all". The others are Netilla and Aventail.
The original poster isn't some marketing guy tying to raise awareness of his company's new product, is he?
Anyone stupid enough to allow incoming RPC packets from the internet deserves what they've got coming.
True, but that doesn't cover any/all cases at all. Businesses with Windows servers can't turn off RPC (and sometimes can't turn off DCOM) on their users' laptops, right? So a laptop user goes home and uses dialup, or he has broadband and no router and gets infected. No he comes back into work the next day. The MS-supplied patch doesn't work in all cases, so even if they have a good patching system and a great firewall, they've still got a compromised, infectious system on their LAN.
Mobile-user VPN has the same risks.
Slashdot Mirror
Nothing about Steven King's Wang?
http://www.penny-arcade.com/comic/2009/7/20/ Suspended in a perpetual nightmare
I'm surprised no one has mentioned the word 'aleph' yet.
In a word, yes. You are a spam zombie. Or possible Typhoid Mary. Your Windows OS is 6 years old at this point. No wonder, you're too cheap to purchase AV software, which (for several years) has been the cost of entry to be a responsible Windows user. Yes, there is free AV software available for Windows. Ask Google. I don't have any first-hand experience with them myself, so I can't recommend any specific ones. Personally, I run Symantec Corporate Edition.
The differences are listed here.
Yeah, that was SGI. It now lives here.
Because the best security products get their names from BDSM play?
Um. AD using Windows 2003 is the service pack for the version of AD using Windows 2000.
It's not like they re-wrote it from scratch. Nor is it like AD (using 2000) is entirely new either; it was developed from the backend of Exchange's directory service, if I understand correctly.
Go with 2003, I haven't read of any particular defects of either AD or the server OS features under 2003, compared to 2000. And yes, things like Volume Shadow Copy, or whatever it's called, may make your life as an admin easier. Certainly, if you're running IIS sites, you'll appreciate the security of IIS 6 more than IIS 5.
Find out why, and fix each thing that comes up. Maybe his mailserver has no reverse DNS, fix that. Maybe his ISP or his IP is on a blacklist, get it fixed or take his business elsewhere. Maybe subscribe to a service that handles email marketing responsibly, like (gasp) Microsoft's bCentral, they will make sure that they don't get blacklisted.
I'm not even sure where to start.
But, then the home user IS ALREADY the administrator. Hell, at work I'm the local admin on my machine, although absolutely not a member of Domain Admins.
No seriously, you're going to swamp your PCI bus if you're doing routing between internal subnets. Goodbye, LAN throughput. Not to mention what merry hell you'll play with the CPU with VPN and firewall rules.
Your solution is great for a small place, or even a large place in a dedicated niche (like only VPN and/or firewall, or monitoring/IDS.) I wouldn't do something that ambitious with PC hardware though.
Administration, high-end troubleshooting, and system architecture for all things New Technology (Win2K, XP, and .NET). If you don't know what "HAL" stands for, you should probably post in MSOS&SC for the best results.
Um, better Bruce than RMS, or perhaps ESR. In my opinion, anyway.
Um, no. He means ten lines of perl will un-mangle "user AT mikerowsoft DOT com" or other, as you put it, "quasirandom munging."
Returned it for the other copy of "Emergency" in-store, and asked to listen to it before I left. Sure enough, it was also actually "Change." What a pisser.
How is .NET Remoting any different from DCOM, is my question.
Cyclades, and god know how many others, make terminal servers. Or you could stuff a bunch of serial ports into a linux box and build your own.
No, the security here is by running SSL between the client and the PGP Universal server. RTFA
Heisengrammer?
The original poster isn't some marketing guy tying to raise awareness of his company's new product, is he?
1. They made patches for this covering all the way back to NT 4.0
2. They don't charge for these patches.
3. The bloody patch doesn't work.
True, but that doesn't cover any/all cases at all. Businesses with Windows servers can't turn off RPC (and sometimes can't turn off DCOM) on their users' laptops, right? So a laptop user goes home and uses dialup, or he has broadband and no router and gets infected. No he comes back into work the next day. The MS-supplied patch doesn't work in all cases, so even if they have a good patching system and a great firewall, they've still got a compromised, infectious system on their LAN. Mobile-user VPN has the same risks.
Wow, these guys are just begging for a lawsuit from you-know-who.