Re: Firewall

"=?Utf-8?B?U3RvbmUgQ29sZA==?=" <StoneCold@discussions.microsoft.com> wrote
in news:C0342682-7D30-42E6-9D6B-C7E6E6AE5B1B@microsoft.com:

> I know it is a silly question to ask but please don't see the nature of
> it, see the depth of the question.
>
> Can anyone recommend which is the best Firewall to defend your system ?
> McAfee, Black Ice or is there is anyone better than these ? any why do
> you recommend it.
> This will not be an answer for me but for others as well who wanna
> protect their PC's. I guess we might learn something new with Rookies's
> experience.
>
> Your help is very much appreciated

The best firewall is YOU. Much like safety items for cars (seat belts, air
bags, ABS, AWD) they MAY help when you get into a bad situation but they
don't make you a better driver (some would argue they make you a worse
driver).

If you learn to keep you system patched, avoid questionable web sites, don't
open unsolicited attachements and learn and use the security features of
your browser/OS you don't need a firewall.

Fuzzy Logic wrote:

> "=?Utf-8?B?U3RvbmUgQ29sZA==?=" <StoneCold@discussions.microsoft.com>
> wrote in news:C0342682-7D30-42E6-9D6B-C7E6E6AE5B1B@microsoft.com:
>
>> I know it is a silly question to ask but please don't see the nature
>> of it, see the depth of the question.
>>
>> Can anyone recommend which is the best Firewall to defend your
>> system ? McAfee, Black Ice or is there is anyone better than these ?
>> any why do you recommend it.
>> This will not be an answer for me but for others as well who wanna
>> protect their PC's. I guess we might learn something new with
>> Rookies's experience.
>>
>> Your help is very much appreciated
>
> The best firewall is YOU. Much like safety items for cars (seat
> belts, air bags, ABS, AWD) they MAY help when you get into a bad
> situation but they don't make you a better driver (some would argue
> they make you a worse driver).
>
> If you learn to keep you system patched, avoid questionable web
> sites, don't open unsolicited attachements and learn and use the
> security features of your browser/OS you don't need a firewall.


Absolutely *terrible* advice, as far as I'm concerned. What you say is
probably literally true, but it's foolhardy to rely on it. No matter how
careful we are, we are not machines and sometimes make mistakes we should
know better than to do. A second line of defense, especially when it's free
and has very little impact on performance should *always* be in place.

What you suggest is like saying "I'm a very careful drive; I never go over
20 miles an hour nor more than five miles from home. I don't need a seat
belt."


--
Ken Blake - Microsoft MVP Windows: Shell/User
Please reply to the newsgroup

"Ken Blake, MVP" <kblake@this.is.an.invalid.domain> wrote in
news:el7Rd8jEGHA.2196@TK2MSFTNGP10.phx.gbl:

> Fuzzy Logic wrote:
>
>> "=?Utf-8?B?U3RvbmUgQ29sZA==?=" <StoneCold@discussions.microsoft.com>
>> wrote in news:C0342682-7D30-42E6-9D6B-C7E6E6AE5B1B@microsoft.com:
>>
>>> I know it is a silly question to ask but please don't see the nature
>>> of it, see the depth of the question.
>>>
>>> Can anyone recommend which is the best Firewall to defend your
>>> system ? McAfee, Black Ice or is there is anyone better than these ?
>>> any why do you recommend it.
>>> This will not be an answer for me but for others as well who wanna
>>> protect their PC's. I guess we might learn something new with
>>> Rookies's experience.
>>>
>>> Your help is very much appreciated
>>
>> The best firewall is YOU. Much like safety items for cars (seat
>> belts, air bags, ABS, AWD) they MAY help when you get into a bad
>> situation but they don't make you a better driver (some would argue
>> they make you a worse driver).
>>
>> If you learn to keep you system patched, avoid questionable web
>> sites, don't open unsolicited attachements and learn and use the
>> security features of your browser/OS you don't need a firewall.
>
> Absolutely *terrible* advice, as far as I'm concerned. What you say is
> probably literally true, but it's foolhardy to rely on it. No matter how
> careful we are, we are not machines and sometimes make mistakes we
> should know better than to do. A second line of defense, especially when
> it's free and has very little impact on performance should *always* be
> in place.

This is where the madness begins. Why just one free firewall..surely two
will be better...the same for AV software, spyware blockers etc. Not only
are you adding another level of complexity but new software that must be
maintained and may introduce new vulnerabilities.

The folly in relying on the technology instead of your head is no
different that people buying SUV's thinking they are now safer and can
drive any where, under any conditions. These people are the first in the
ditch when a storm hits.

A perfect example is the recent WMF vulnerability. You can have all the
latest patches, AV software, firewall etc. but just download a WMF file
can result in bad things happening to you.

I have encountered similar problems with users who have all the right
security software installed and visit a site that has a popup that says
they have a virus or spyware and if you click here we'll fix it for you.
Guess what they click it and get malware.

> What you suggest is like saying "I'm a very careful drive; I never go
> over 20 miles an hour nor more than five miles from home. I don't need a
> seat belt."

I would prefer to say I will not add any additional safety features to my
car and drive defensively and I am likely as safe as I am going to be
while on the road.

Regardless of the preventative measures we take there are still going to
be risks. I have opted for a lean and mean machine and using my head
instead of relying on 3rd party solutions that also must be
updated/patched as they too get vulnerabilities. I have also taken the
time to disable unneeded services and lock down IE. I do use the firewall
in WindowsXP but my old Windows 98SE machine has no firewall as there are
no open ports to defend.

Your points are good, but the majority of XP users are like my Dad
who just wants to get email, some browsing, scan a few pictures and
look at Google Earth. He's good about Windows Updates and virus
definitions, but other stuff like Firewall alerts and MS Defender type
of alerts would be beyond his IT skills. A PC is just a platform or a
tool to do or access other stuff. Microsoft is closing in on some open
areas and getting around to a Security belt-tightening. It would be a
good thing if people understood the risks, but these are the same folks
who do not understand a disk drive isn't permanent or you need to
backup data occasionally.

"Fuzzy Logic" <bob@arc.ab.caREMOVETHIS> wrote in message
news:Xns9742AACB0184Bbobarcabca@207.46.248.16...
> "Ken Blake, MVP" <kblake@this.is.an.invalid.domain> wrote in
> news:el7Rd8jEGHA.2196@TK2MSFTNGP10.phx.gbl:
>
>> Fuzzy Logic wrote:
>>
>>> "=?Utf-8?B?U3RvbmUgQ29sZA==?=" <StoneCold@discussions.microsoft.com>
>>> wrote in news:C0342682-7D30-42E6-9D6B-C7E6E6AE5B1B@microsoft.com:
>>>
>>>> I know it is a silly question to ask but please don't see the nature
>>>> of it, see the depth of the question.
>>>>
>>>> Can anyone recommend which is the best Firewall to defend your
>>>> system ? McAfee, Black Ice or is there is anyone better than these ?
>>>> any why do you recommend it.
>>>> This will not be an answer for me but for others as well who wanna
>>>> protect their PC's. I guess we might learn something new with
>>>> Rookies's experience.
>>>>
>>>> Your help is very much appreciated
>>>
>>> The best firewall is YOU. Much like safety items for cars (seat
>>> belts, air bags, ABS, AWD) they MAY help when you get into a bad
>>> situation but they don't make you a better driver (some would argue
>>> they make you a worse driver).
>>>
>>> If you learn to keep you system patched, avoid questionable web
>>> sites, don't open unsolicited attachements and learn and use the
>>> security features of your browser/OS you don't need a firewall.
>>
>> Absolutely *terrible* advice, as far as I'm concerned. What you say is
>> probably literally true, but it's foolhardy to rely on it. No matter how
>> careful we are, we are not machines and sometimes make mistakes we
>> should know better than to do. A second line of defense, especially when
>> it's free and has very little impact on performance should *always* be
>> in place.
>
> This is where the madness begins. Why just one free firewall..surely two
> will be better...the same for AV software, spyware blockers etc. Not only
> are you adding another level of complexity but new software that must be
> maintained and may introduce new vulnerabilities.
>
> The folly in relying on the technology instead of your head is no
> different that people buying SUV's thinking they are now safer and can
> drive any where, under any conditions. These people are the first in the
> ditch when a storm hits.
>
> A perfect example is the recent WMF vulnerability. You can have all the
> latest patches, AV software, firewall etc. but just download a WMF file
> can result in bad things happening to you.
>
> I have encountered similar problems with users who have all the right
> security software installed and visit a site that has a popup that says
> they have a virus or spyware and if you click here we'll fix it for you.
> Guess what they click it and get malware.
>
>> What you suggest is like saying "I'm a very careful drive; I never go
>> over 20 miles an hour nor more than five miles from home. I don't need a
>> seat belt."
>
> I would prefer to say I will not add any additional safety features to my
> car and drive defensively and I am likely as safe as I am going to be
> while on the road.
>
> Regardless of the preventative measures we take there are still going to
> be risks. I have opted for a lean and mean machine and using my head
> instead of relying on 3rd party solutions that also must be
> updated/patched as they too get vulnerabilities. I have also taken the
> time to disable unneeded services and lock down IE. I do use the firewall
> in WindowsXP but my old Windows 98SE machine has no firewall as there are
> no open ports to defend.

In article <Xns9742AACB0184Bbobarcabca@207.46.248.16>,
bob@arc.ab.caREMOVETHIS says...
> I have encountered similar problems with users who have all the right
> security software installed and visit a site that has a popup that says
> they have a virus or spyware and if you click here we'll fix it for you.
> Guess what they click it and get malware.

If they had all the right things installed and properly configured they
would not be permitted to access random sites or sites that didn't
properly show content types, and would not be permitted to download
anything without a pass-code.

In a business there is little reason to allow full access to the
Internet from inside the lan. Most internet access, from what I've seen,
lends itself to wasted time by employees at all levels in a company.

If you only allow access to business partner sites, sites that are
needed for business, then you expose yourself to a LOT LESS of your
network, not to mention that you should be blocking all sorts of content
in HTTP sessions and filtering attachments BEFORE the reach the mail
server.

--

spam999free@rrohio.com
remove 999 in order to email me

On Thursday 05 January 2006 11:11 am, Fuzzy Logic had this to say in
microsoft.public.windowsxp.general:

> "=?Utf-8?B?U3RvbmUgQ29sZA==?=" <StoneCold@discussions.microsoft.com> wrote
> in news:C0342682-7D30-42E6-9D6B-C7E6E6AE5B1B@microsoft.com:
>
>> I know it is a silly question to ask but please don't see the nature of
>> it, see the depth of the question.
>>
>> Can anyone recommend which is the best Firewall to defend your system ?
>> McAfee, Black Ice or is there is anyone better than these ? any why do
>> you recommend it.
>> This will not be an answer for me but for others as well who wanna
>> protect their PC's. I guess we might learn something new with Rookies's
>> experience.
>>
>> Your help is very much appreciated
>
> The best firewall is YOU. Much like safety items for cars (seat belts, air
> bags, ABS, AWD) they MAY help when you get into a bad situation but they
> don't make you a better driver (some would argue they make you a worse
> driver).
>
> If you learn to keep you system patched, avoid questionable web sites,
> don't open unsolicited attachements and learn and use the security
> features of your browser/OS you don't need a firewall.

This last statement of yours proves beyond a shadow of a doubt that you're
as dumb as a bag full of hammers.


--
A Microsoft Certified System Engineer is to information technology
as a McDonalds Certified Food Specialist is to the culinary arts.