try to define fact and you will see that that is flawed. security is just as much based on opinion, even feelings, as it is on situations that are by many (relevant) people believed to be the case. Logical positivism is dead. and hyperrationality is dangerous as well as stupid.
An observation that is reproducible.
Yeah? How?
Yes, but opinion that should be grounded in fact. As I said before.
No.
Who believes this?
M-hm. Of course you are not going to support this opinion with any kind of argument, because that would be stupid as well, and your opinion should be reason enough for everyone, right?
cu
59cobalt
Sheesh you're dense - Truth is that which is supported by fact.
No, taken in context, it means that if a company has a history of providing verifiable facts in relation to xyz, that you can put some credence in what they say the next time - although you need to verify their findings with your own findings.
Opinions are often not found in facts, but facts can be found in opinions, and truth can only be founded in facts.
Wrong, truth is absolute - as are facts. If it's questionable then it's not really a truth or a fact until proven.
2: Netfilter
SCNR, VB.
OK, how about the real IP/subnetmask/port firewall built into your DSL/CableModem? It's free, it operates at layer 3, and it is working outside your PC's messy world, inline before the Ethernet frames even reach your PC. Also most of the ones I have seen (cisco/linksys) are capable of doing some filtering for the OSI layers
4-7 (anti-virus/ spyware) again *before* the encapslated data even reaches the insecure world of your PC. These kind of devices also can do NAT to hide the IP address of your internal private network.Now, to add something to this tread, what about low cost devices that could look for IP spoofing, man in the middle attacks, port scanning, layer 4 attacks (such as TCP sequence number attacks), etc. See
I'm aware of what's available in UNIX/LINUX, but thinking about low cost devices.
It may be that the best low cost solution is a dual homed computer running snort, iptables, imap, Nessus... but wondering if any devices are being shipped that do all this in firmware?
Cheers, ~DRH~
Have something to add? Share your thoughts — no account required.
Ask the community — no account required