RE: Shuttle & via epia... now firewalls

[Stuart Poulton <swp@xxxxxxx>]

> Stuart - if your firewall is compromised, you're buggered anyway.
> Having a load of MP3/WMA files on there makes bugger all difference to
that.
> Whether the files are stored there or on another machine on the
network
> makes not a jot of difference.

Depends on what security you include on machines inside the firewall.
For example, letting the firewall have write permissions on your
windows
shares would be a little foolish IMHO

> Also, not all security breaches are that fatal.  whoopee -
someone does a
> DOS attack that crashes out my web server.
> No biggie, I'll fix it when I get home.
> If it was a corportate site then yes, it's a problem - but for a home
lan,
> if I suddenly can't access my tivo over the web, or streaming music
off the
> server stops then it's not exactly catastrophic now is it?

Thats the thing with security breaches, you are never really sure whats
happened, if the box is only the firewall then cleaning the machine
down, completly reformatting the disks, re-intalling the OS, isn't a
real pain, however if it's got 10's GB of MP3s then your not going to
wipe those and start again.

Consider what might happen if your firewall is then used to attack a
goverment system, by choosing to wipe the OS and re-install you are
probably destroying evidence that may be used in a criminal trial.

Again something thats not nice when it happens, oh and before you ask
how would you know if the machine has been used in this way, believe me
you'll know, then phone won't stop ringing.

> Sorry, I don't know what a machine root is, so I can't say if I've had
mine
> compromised or not (oh-er missues).
> Sounds like a lit of a *nixy term to me.
> I am strictly a Micro$shaft shop.

Yep, sorry, more a security term than a Unix term...... as Andy says
basically gaining "god" privalage on your system.

> (Apart from my TiVo)

Very unlikely to happen, but how do you explain to SWMBO that 3 weeks
worth of Big Brother has been wiped by your friendly local hacker......

Stuart

Yahoo! Groups Sponsor

ADVERTISEMENT

For more information: http://www.automatedhome.co.uk
Post message: ukha_d@xxxxxxx 
Subscribe:  ukha_d-subscribe@xxxxxxx 
Unsubscribe:  ukha_d-unsubscribe@xxxxxxx 
List owner:  ukha_d-owner@xxxxxxx

Your use of Yahoo! Groups is subject to the Yahoo! Terms of Service.