D&C GLug - Home Page

[ Date Index ] [ Thread Index ] [ <= Previous by date / thread ] [ Next by date / thread => ]

Re: [LUG] Wow Look at this

 

On Thu, 2008-07-10 at 13:47 +0100, Simon Waters wrote:
> Martinus Scriblerus wrote:
> > On Wed, Jul 9, 2008 at 9:24 AM, Alan Pope <alan@xxxxxxxxx> wrote:
> >> On Wed, Jul 09, 2008 at 07:29:55AM +0100, Richard Brown wrote:
> >>> Thought you might enjoy this story:
> >>> <http://www.bbspot.com/News/2008/06/microsoft-abandons-internet-explorer-8.html
> >>>  >
> >>>
> >>> And it's not April the 1st!!!
> >> No, but it _is_ bbspot, a well known "satire" site.
> > 
> > Who needs to satirise a company that releases a 'security' update that
> > knocks out competing security products? Just ask Zonealarm users.
> 
> In fairness to Microsoft, they are responding to a security alert that 
> is not publicly disclosed, that we currently have no reason to believe 
> that Zone Alarm would protect users from.
> 
> Microsoft have to get this deployed to all vulnerable client systems by 
> at least the start of August.
> 
> I'm guessing that even if their testing showed it broke Zone Alarm, that 
> they would be deploying anyway.
> 
> If Zone Alarm isn't compatible that is a Zone Alarm users problem under 
> these constraints.
> 
> Has everyone here updated, and tested their recursive DNS servers to 
> ensure they are also not vulnerable?
> 
> Speculation is that this is just a more effective exploit of known 
> weaknesses in the DNS protocol, as such source port randomisation is not 
> a sufficient long term fix. DNSSEC seems to be the only game in town, 
> and the rules are hideous, meantime everyone should be running a 
> recursive resolver that uses random source ports for queries.
> 
> I know I've done ZYNETs DNS servers - all recursive servers we use are 
> fine (including the Virgin Media DNS servers set up by Telewest 
> originally) - but I haven't done my home stuff yet (lack of time).
> 
>   Simon

Simon Can I ask .....
Do you know of a situation where an NTL user having Zone alarm installed
(but didnt know why or how to use it), could have suddenly an error with
SMTP? He now has a permanent error being rejected by smtp.ntl.com form
his XP machine. Thunderbird Outlook and OutlookExpress are all
affected. 
If I use another ntl customer's machine and his ntl account all is ok?
is this related or just coincidence? 


Regards

Kevin Lucas
Minions Post Master(Sub)
Po House, Minions, Liskeard Cornwall PL14 5LE
01579363386


-- 
The Mailing List for the Devon & Cornwall LUG
http://mailman.dclug.org.uk/listinfo/list
FAQ: http://www.dcglug.org.uk/linux_adm/list-faq.html