A Naive User's Guide to Running Windows More Securely
Linked by Alcibiades on Wed 4th Jan 2006 18:04 UTC
Windows Like a lot of people who have worked in the business, I find myself in conversations about computer security with people who are having problems or know people who have problems. I wrote this to save me from explaining the same thing over and over again to different people, and to save them the trouble of having to make notes as we talked. It was meant to be something you could give to a 'naive user' and have them be able to read and follow it more or less unaided, and while not being a complete guide, at least be something that made them more secure than before they got it.
E-mail Print r 0   · Read More · 40 Comment(s) http://osne.ws/a61
Thread beginning with comment 82200
To view parent comment, click here.
To read all comments associated with this story, please click here.
RE[5]: Zonealarm
by ma_d on Thu 5th Jan 2006 20:38 UTC in reply to "RE[4]: Zonealarm"
ma_d
Member since:
2005-06-29

-r--r--r-- 1 root root 0 2006-01-05 14:31 maps

I don't think you can manipulate things via the proc filesystem.

Even things which have permissions that look readable and writable I can't even read:
lrwxrwxrwx 1 root root 0 2006-01-05 14:31 exe
[chris@rachelanne 3692]$ file exe
exe: unreadable symlink `exe' (Permission denied)


I think there's a big difference between vulnerabilities from problems in your code and vulnerabilities you designed into the system and documented...

Again, I'm very understanding of exploits. It's unfixed design flaws that bug me.

Reply Parent Score: 1