Yes, - use routers with port to port security or VLANs. Only allow traffic to flow from server to client - block traffic between clients. This will prevent most shit from spreading.
Oh, man, what have you been snorting? MAC filtering may keep your little kid sister out, but isn't any help otherwise.
Cue: EVERY packet has the MAC address in it. So an attacker has to capture exactly ONE packet to get the MAC (actually a partial packet will do too). How hard is that?
XP Home doesn't support domain authentication. Your average MCSE doesn't know how to handle that and insist on the user buying XP Pro for $500.
There are some workarounds, but they are not pretty since they all require the installation of a second authentication system which basically negates the whole purpose of the domain system.
Actually, I have started to do dual booting Windows/Linux installs for my customers. "When Windows screws up - reboot into Linux and carry on working till I can get here..."
Dear Prof/Dr/Sir/Madam
Thank you for submitting standard Troll number 9010203. It has been carefully filed in/dev/null.
Please see standard reply number 3.
Regards,
Cowboy Neal
I guess 25 of those minutes were spent downloading a Linux tool to reset the password, 4 minutes to reboot the PC and the other 1 minute you were scratching your head to figure out the cryptic commands of the utility...
Heh, yeah, though the first time that happens, the IT geniouses should find a way to plug the hole and then it should never happen again.
At present, most companies don't filter web access at all and also install IE with Craptive-X for their users and then still has the audacity to blame the users for fucking up their machines.
This is equivalent to leaving a 4 year old in a candy store and expecting him not to take anything - or deliberately placing a drugged bull in the middle of a china shop.
What about filtering viruses over SMTP and HTTP. It is not black magic. If the IT dept doesn't filter everything, then they are either lazy, stupid or incompetent - pick any three...
Considering how easy it is to set up a web content filter and how few corporate IT departments bother to do that - I tend to agree with the headline that IT departments are security risks.
If a user can click on something in a browser or email client and cause a security issue, then the problem is incompetence in the IT department.
Exactly. This whole don't click dangerous link thing is pure crap. Why is the PC affected by the link in the first place?
I can browse the web happily with my Linux box and open any email without trouble and guess what, my Windows users can too, because the bad things don't get to them.
There are many uses for cat. It is one of the most used utilities - right up there with the likes of ls and echo. Running a car on cat is a bit of a stretch though.
Here you go: http://www.sql-ledger.com/ You can send me $799 thanks. ;-)
Yes, - use routers with port to port security or VLANs. Only allow traffic to flow from server to client - block traffic between clients. This will prevent most shit from spreading.
Oh, man, what have you been snorting? MAC filtering may keep your little kid sister out, but isn't any help otherwise.
Cue: EVERY packet has the MAC address in it. So an attacker has to capture exactly ONE packet to get the MAC (actually a partial packet will do too). How hard is that?
So buy a laptop with Linux pre-installed. Both HP and Dell have them.
XP Home doesn't support domain authentication. Your average MCSE doesn't know how to handle that and insist on the user buying XP Pro for $500. There are some workarounds, but they are not pretty since they all require the installation of a second authentication system which basically negates the whole purpose of the domain system.
Need some direction? Use routers with port to port security. That will solve about 99.999% of your problems.
Actually, I have started to do dual booting Windows/Linux installs for my customers. "When Windows screws up - reboot into Linux and carry on working till I can get here..."
Exactly, even Ada has a Goto statement.
BTW, I write all C applications using this memory manager http://www.hpl.hp.com/personal/Hans_Boehm/gc/
Using that, eliminates a whole slew of potential problems.
So, don't fall asleep, type "gimpshop windows" into a Google search box and go get it...
Well actually, MS has been marketing Linux for a few years already http://www.mslinux.org/
Dear Prof/Dr/Sir/Madam Thank you for submitting standard Troll number 9010203. It has been carefully filed in /dev/null.
Please see standard reply number 3.
Regards,
Cowboy Neal
Only flagged in new code.
Presumably MS hasn't changed that part of IE since version 1 and it will stay that way.
I guess 25 of those minutes were spent downloading a Linux tool to reset the password, 4 minutes to reboot the PC and the other 1 minute you were scratching your head to figure out the cryptic commands of the utility...
Bah - my post is double DES encrypted. It is much more secure than your Ceasar cypher.
Are these funny things not just artifacts from the digital image processing?
Heh, yeah, though the first time that happens, the IT geniouses should find a way to plug the hole and then it should never happen again.
At present, most companies don't filter web access at all and also install IE with Craptive-X for their users and then still has the audacity to blame the users for fucking up their machines.
This is equivalent to leaving a 4 year old in a candy store and expecting him not to take anything - or deliberately placing a drugged bull in the middle of a china shop.
Whatever happens then is your own damn fault...
What about filtering viruses over SMTP and HTTP. It is not black magic. If the IT dept doesn't filter everything, then they are either lazy, stupid or incompetent - pick any three...
Considering how easy it is to set up a web content filter and how few corporate IT departments bother to do that - I tend to agree with the headline that IT departments are security risks.
If a user can click on something in a browser or email client and cause a security issue, then the problem is incompetence in the IT department.
Exactly. This whole don't click dangerous link thing is pure crap. Why is the PC affected by the link in the first place? I can browse the web happily with my Linux box and open any email without trouble and guess what, my Windows users can too, because the bad things don't get to them.
Huh? MS is just doing what they are good at - copy the competion - that is their business model - always was - still is.
Yeah, a sendmail configuration file is almost as annoying as editing an XML file...
Well, we have been running cars on dead dinosaurs for a century, so what is so special about cats? ;-)
There are many uses for cat. It is one of the most used utilities - right up there with the likes of ls and echo. Running a car on cat is a bit of a stretch though.
It's an egg of course.
Yo don't knead no speling chekir eathir.