🚀 go-pugleaf

RetroBBS NetNews Server

Inspired by RockSolid Light RIP Retro Guy

Article View: nz.comp
Article #695

Re: Microsoft Security

#695
From: David Mohring
Date: Thu, 29 Jun 2000 00:00
52 lines
2781 bytes
On Thu, 29 Jun 2000 23:09:00 +1200, Slow 
               <aputto@htomail.com.no.spam> wrote:
>"David Mohring" <heretic@localhost.localdomain> wrote in message
>news:slrn8lm9t6.636.heretic@localhost.localdomain...
>> See
>> http://news.cnet.com/news/0-1005-200-2167152.html
>>
>> Microsoft DOT NET? With the current level of security in Microsoft
>> Office Applications - NOT NET!
>>
>> David Mohring - Grandson of Priam
>
>Stop complaining, and offer to help fix it if it worries you so much.
>
 
For a solution to script level exploits, check out my posts in alt.comp.virus
( dejanews links )
http://www.deja.com/[ST_rn=ps]/getdoc.xp?AN=633535565&fmt=text
http://www.deja.com/[ST_rn=ps]/getdoc.xp?AN=633960556&fmt=text
http://www.deja.com/[ST_rn=ps]/getdoc.xp?AN=634259957&fmt=text
http://www.deja.com/[ST_rn=ps]/getdoc.xp?AN=634364042&fmt=text
http://www.deja.com/[ST_rn=ps]/getdoc.xp?AN=634383912&fmt=text

>
>There are of course many security holes in the Internet surfing experience
>(Microsoft and others), and positive people are required to fix them, not
>just whinge on about it.
>

This is not a new solution, but If a Microsoft representative came 
a-knocking on my door waving a BIG wad of cash I would be happy to 
implement it for them. ( subject to conditions )

>
>I setup people with NT as a standard user, so these sort of apps have no
>write access etc. Works well for most destructive payloads.
>

In a larger organization protecting the Operating System itself is not 
the problem.Using ghosting on Win98 to restore a damaged partion is 
relatively painless operation. 

Just switching to NT will not provide protection to document files that a 
user has write access to OR information in documents that a user has 
read access to. It is possible to create scripts that check access
permissions before attempting to do so.

Losing information and changes from damaged documents is expensive.
Manually checking documents and there backup copies before restoring
can be a time consuming hassle.

David Mohring - Solutions for sale
Technical Details
Message-ID: <slrn8lmeh7.636.heretic@localhost.localdomain>
Path: arc1-ca.pugleaf.net!unknown!not-for-mail
References: <slrn8lm9t6.636.heretic@localhost.localdomain> <8jfaoe$k3s$1@news.ihug.co.nz>

Show Full Headers
Complete Article Headers
X-Google-Language: ENGLISH,ASCII-7-bit
X-Google-Thread: 106e5e,88f82bb59c76354f
X-Google-Attributes: gid106e5e,public
X-Google-Thread: 108bca,88f82bb59c76354f
X-Google-Attributes: gid108bca,public
X-Google-Thread: 114a4e,88f82bb59c76354f
X-Google-Attributes: gid114a4e,public
From: heretic@localhost.localdomain (David Mohring)
Subject: Re: Microsoft Security
Date: 2000/06/29
Message-ID: <slrn8lmeh7.636.heretic@localhost.localdomain>
X-Deja-AN: 640366399
References: <slrn8lm9t6.636.heretic@localhost.localdomain> <8jfaoe$k3s$1@news.ihug.co.nz>
Organization: The Internet Group Ltd
User-Agent: slrn/0.9.6.2 (Linux)
Newsgroups: nz.comp,nz.general,ihug.general