| |
| |
| |
|
Page: 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29
Comments:
<0> if nothing is "open" other than the neediest resources, your biggest concern is bandwidth depletion due to hammering of some sort.
<1> windows firewalls are the rocksors.
<2> iptables with a deny-all strategy
<3> hey
<4> amonfils: your biggest concern is not bw depletion, it's maintaining the security of the open ***ets and then bandwidth depletion.
<3> what would cause a guitar to all of the sudden over night get tuned upward sharp, all the strings
<3> temperature ?
<0> if nothing is open deryl, what's the issue?
<5> FKnight`, your cat tuned it
<4> the vast majority of attack vectors are against known common usage ***ets
<3> hahh
<0> your mail host sits on an isolated segment with nothing significant on it.
<2> temperature perhaps? material expands and contracts due to temperature. but ive never heard of guitars losing tune due to that :D
<2> not saying its not possible.
<4> amonfils: you doing email? you doing web serving? ftp? imap/imaps? vpn?
<5> prolly humidity actually
<6> Z0grinch: I have,
<6> IF the heat changes to drastically the tuning dials contract and the strings loosen
<4> the greatest majority of damage done to corpnets is via VPNs
<5> true
<6> too*
<5> certainly vpns that allow local gateway access
<4> very few vpn implementations quarantine first
<4> and THAT is the problem
<2> yea you dont have a whole hell of alot of control over an execs home system that is vpning in
<4> even if you're closed to 99.999% of the net, that VPN falls in the 0.001% that's open and that's your largest danger
<4> there's a hell of a lot more to securing a network than how much you have open.
<0> so you are saying that you are concerned that the exec's pc at home is comprimised and from that, the intruder bounces into the corporate network.
<4> amonfils: that's actually the highest statistical attack vector against closed networks. the second highest is internal attack
<0> secure id or some other otp implementation will help with 'at random access'
<4> you don't get it
<0> you can't help internal attack
<0> i get plenty.
<4> bull****
<4> i can NOT believe you just said that
<1> dual layer firewalls man.
<1> just a thought0rz.
<1> triple if you vpn
<0> how do i protect against myself. i have run of the network.
<0> do you place firewalls between servers and employees?
<4> so you're only concerned about yourself, you're not running a network with hundreds of users or even 5 to 10 users
<0> or do you rely on a comprehensive security policy that's intelligently laid out?
<4> you're not doing anything to protect the infrastructure from the users? man
<0> right, my network has thousands across the country.
<4> glad i'm not responsible for that network then
<1> EDGE security. (internet->corporate). SERVER security (Corporate->servers) VPN security (Internet->VPN->Corporate)
<4> amonfils: what do youhv ein place to protect your network from those users?
<0> really, nothing. which is a deficiet. management makes the spending decisions, i can only make recommendations.
<4> there are multiple layers to network security. A) protecting the infrastructure from outsiders B) protecting the infrastructure from the internal userbase C) protecting the userbase from the outside D) protecting the userbase from internals
<5> you forgot e
<0> my biggest issue is idiot NT/2000/XP administrators that can't deploy service packs and patches and so I have to mitigate the various windows exploits because some fool opened up an email that byp***ed some form of the checks
<5> protecting the users from them selves
<4> that requires a well thought out and implemented security policy. from security permissions on individual workstations, to share permissions, to content filtering in and out, to segmentation, to external trap and release cycles
<4> amonfils: that's where centralized patch management comes into play
<0> don't tell me.
<0> i'm well aware of this.
<3> no no no
<3> you all have it wrong
<3> Security by Obscurity is the only tried and true method of security.
<3> :D
<3> j/k
<0> yes, random domain p***word changes nightly. if the user guesses correctly, they get access, otherwise, noada.
<0> nada.
<4> :shrug: fine. well you come across as someone who has thousands of users but goes "ehh" at locking a network down, and does so with lack of understanding of what can happen where (your "I can't help internal attack" comment shows that)
<4> so, fine. have at it.
<7> I know I'm alone in believing this, but security by obscurity _can_ be part of a larger multi-layered security. I mean, protecting the IP addresses of your internal servers from the public _is_ security by obscurity
<3> yeah
<0> RFC1918
<3> security by obscurity is a valid component of overall security
<7> even if someone breaks in, they have one more, albeit it easily defeated, layer of security
<8> right on jet!
<4> Jet: yeah RFC1918 network protection IS part of it
<5> i prefer RFC1337
<3> yeah
<4> no one is saying that obscurity doesn't have it's place (well anyone with smarts that is)
<3> NAT is security by obscurity
<4> just not to be reied on as THEY managment technique
<6> Almost got this song down pat. Swet
<6> sweet*
<3> CJDeak which one
<6> The 69 Eyes - Lost Boys
<4> s/reied/relied/
<4> THE not THEY
<6> wtf?
<4> man, I swear I'm the goddamn typo king these days
<7> oh! I see blue sky to the north
<6> oh okay.
<7> my day is looking up
<4> send soem blue this way. i'm starting to think the world is grey
<7> but its -20, not exactly the temp I like to go out and clean the driveway in
<7> -20 Celsius is -4 Fahrenheit
<8> it is very sunny here
<1> Post a job for $595
<8> Jet: what is "cleaning the driveway"?
<7> teebsgrrl: going out and starting up the snowblower to blow the snow out of the driveway
<8> ahhhh ok
<7> then shovelling the bits that I can't get to with the snowblower
<8> i got you
<8> here is PA the weather has been soooo odd. like 60 the other day
<7> high of -17 today. And then flurries predicted for tomorrow
<7> so maybe I shouldn't bother
<8> very little snow here this winter so far
<7> except that that'll be another day of packed snow
<8> we have a day of house cleaning and taking down the xmas tree
<7> you haven't taken down your christmas tree yet?
<8> nope
<8> last year we took it down on feb 25th or so
<4> ok, you know. the USA needs to come off the metric system. everyone outside of canada, usm, and i think britain, uses a different system than us
<4> forget the name of the other one. we use the Imperial (metric) what's the other one called
<4> the one the EU and the rest of the world uses?
<8> we don;t use metric
<0> metric is the world.
<0> us is standard.
<0> or whatever the term is.
<4> oh backwards
<4> sorry
<7> the problem with celcius is that it only gives you 9/5 of the amount of degree increments for the same temperatures
<8> how can we expect you to properly use the mretic systgem if you don;t even know that we don;t currelty use
<7> temperature range
<4> gah!
<1> Yes, but celsius makes sense
<1> F isn't consecutive with **** all.
<7> so using it with a thermostat means you get a much larger differential
<4> sartan: crackbaby :)
<1> EVerything else is metric.
<1> i've got 10 fingers.
<1> yeah.
<1> and it's better for math
<7> I actually use F on my thermostat
<7> because it makes it more responsive to small temp changes
<4> i'd like to see us come into line with the rest of the world in our measurement system
<4> too bad the chances of that happening are about as slim as Bush smartening up
<7> 20 years ago when Canada announced it was going metric, so did the US
<1> YES but that would make sense.
<7> our conversion was going to take like 5 years
<4> sartan: hah! damn it all if us american can make sense!
<7> the US said it would take 20 years
<7> except it never happened
<8> the us has bigger problems to focus on then metric vs standerd
<4> teebsgrrl: thanks to the nutball I helped vote into office. grrr
<8> ig uees it is time for a shower
<7> ALTHOUGH. I've been out in the middle of Butt**** South Dakota and seen a highway sign listing the distance to the next town in Kilometers
<8> guess
<7> it looks like at some point someone started to make changes
<4> Jet: yeah some individual states are using metric. which is funny
<3> it's all ****ing stupid
<8> i have seen signs in km in nh, nortern part
<4> it's like where the air is cleaner, people are smarter ;)
Return to
#windows
or
Go to some related
logs:
confederatio helvatica
#beginner
#gentoo
#debian
schiros
Memtest86 cannot boot
#beginner
dell 2005fpw icm file
#mirc
Most Common City Name USA Springfield
|
|