Your thoughts on my network security.

Jimmy White · 2006-12-06T11:48:50+00:00

Hi all,Right, I have been reading up on wan/lan security and have setup what I think is a secure environment and would like your opinions.First I have a router connected to my cable modem, which is connected to a second wireless router. I use one of the lan ports on the second router for my Internet connection with a software firewall on my PC. The wireless part of the second router has a 63 character, ascii, numbers random key using WPA TKIP(PSK) for my laptop. Also when I'm doing online Banking I use VPN to connect to my Banks site and they use SSL also.For spyware, adware, malware and viruses I use spybot,ad-aware and AVG pro edition.I'm I secure enough ?Jimmy White

R

Ryan P. 19 years ago

The majority of children who use P2P applications (children being anybody who is not an adult) are using them to download copyrighted music. In the US, this practice is in legal limbo at the moment, with many people being successfully prosecuted, and many not.

There ARE legitimate uses, of course. But I'll wager that far more people use it for illegal purposes (downloading copyrighted music and software).

Just check out the files available via Limewire or various Bittorrent sites. Chock full of files for anybody to download that the copyright holders have explicitly said they didn't not want available.

{snip}

We agree on that.

If its coming from the vendor only, I would consider it a trusted source (to a point). But one has to configure their software to only d/l from that source. Most P2P software defaults to "find anyone on the internet that has the same file name available for sharing" which is clearly dangerous.

Vote

S

Sebastian Gottschalk 19 years ago

So far I've never heard of anyone being prosecuted for downloading. They were prosecuting for offering / uploading.

And ss I already said, in other countries there are sane copyright laws.

Downloading software illegally via P2P is downright stupid. At any rate, without being able to run it, you can't possible infringe copyright.

Yes, I know. When will someone finally sue some of these copyright holders for abuse of copyright?

In most P2P networks files are indexed by cryptographically secure checksums. Bogus data are trivially and reliably detected.

Vote

O

Osiris 19 years ago

on the P2P nets, Bogus data is also indexed by cryptographically secure checksums

As was found in tests: people THINK they know a lot about things they know little or nothing about, and THINK they know little about things they know a lot about...

Vote

S

Sebastian Gottschalk 19 years ago

And because it's a cryptographic checksum, no bogus data can have the same checksum as the original. The vendor provides the checksum(s) (ed2k link, torrent file, ...), and by these the data are retrieved and verified. Sure, you can send bogus data upon requests, but the checksum won't match and the bogus data will be discarded.

Indeed. And you should really stick to your own advice.

Vote

L

Leythos 19 years ago

Your information is flawed - you suggest because people don't test their backups, it's best if they don't backup "often". Serious error there pal, if they get some backups working properly, then using your logic, it would stand to reason that they backup more frequently so that there is a higher chance their backup would be a good one.

Anyone that understands backup and importance should also be told that an untested backup may be worthless. All of our clients test their backups weekly.

Vote

O

Osiris 19 years ago

not THAT many VENDORs on P2P... And anyone can checksum their files.

ever heard about fake lists ?

Vote

S

Sebastian Gottschalk 19 years ago

Hm... almost any Linux distro, Blizzard uses BitTorrent for all their game patches, various game demos from many vendors... in any case, this was the premise on the discussion.

?

This isn't needed if the only correct identifier is known, since it was provided by the vendor.

Vote

M

mak 19 years ago

jesus, is there any decent software out there?

what do You use to find spyware, malware etc. (I know, you're gonna say: why do you have this crap on your system in the first place) let's just say a customer needs your help and flattening is not an option (yet)- what would you use to clean the system.

M

Vote

S

Sebastian Gottschalk 19 years ago

Eh... no? Of course not, spyware scanning is like searching in the dark room for the black cat that isn't there. On a clean system, I've always seen such a huge load of false positives that I wonder what the reports of these programs on a unknown system are worth - after all, it will always claim a compromise but no useful explanation.

Nothing at all. Well, I do run ClamAV to prefilter incoming stuff, but just for convience.

Indeed. Scanning is intrusion detecting, not protection.

Nothing. I'd recommend flattening, and if the customer doesn't want to accept this beside all arguments, I'd leave and let him pay for the service served so far. And put him onto the ignore list. He's not worth all the trouble.

Counter point: You did try to clean the system, but you weren't successful. Then you may face legal actions for getting paid for an improper job on trying the impossible, and many other customers will avoid you as well. That's really bad!

Vote