Re: Home network security WAS Re: upgrade from 98 to XP

Subject: Re: Home network security WAS Re: upgrade from 98 to XP
From: eric -dot- dunn -at- ca -dot- transport -dot- bombardier -dot- com
To: "TECHWR-L" <techwr-l -at- lists -dot- raycomm -dot- com>
Date: Thu, 7 Feb 2002 12:21:20 -0500



>> Then if this is the case, why did BlackICE attempt to foil the test by
>> detecting
>> traffic to only grc as Steve Gibson claims? Sounds like a BlackICE
>> cover-up and
>> that Gibson has a valid point.
>
>BlackICE did not foil the test, they merely updated their signatures to
>detect it - like any security product signatures must be updated
>frequently. In Steve's world, this is apparently unacceptable. Meaning
>that no security vendor could ever update their signatures and must
>innately know every possible attack ever created...and that ever will be
>created. That's insane.

The issue is not that BlackIce updated its signatures. Instead of improving
their product to answer customer concerns over a test that said their system was
not secure they simply foiled the test. Instead of telling customers how to
install a complimentary program or including the functionality they simply tried
to silence the complaints and give their customers a false sense of security
because their updated systems now 'passed' the test. From Gibson's account all
BlackICE detects is the destination of the packet not source. It's all sort of
equivalent to a student memorizing the answers to a multiple choice test without
learning the material. It's called cheating.

The fact that BlackICE detected the test shows that the company agrees with the
stand of Steve Gibson or at least was concerned enough about the negative
publicity and customer inquiries and concerns. That shows that there is a lack
in the software that the company would rather hide than fix or explain. That
attitude then raises a lot of questions, valid or not, as to what else they
might be hiding or how much else of the program is simply 'fudging'
functionality.



Eric L. Dunn



^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
Did you know you can get RoboHelp certified?
To learn how, visit http://www.ehelp.com/techwr. Be sure to also check out
our special pricing offers and promotions for RoboHelp 2002.

---
You are currently subscribed to techwr-l as: archive -at- raycomm -dot- com
To unsubscribe send a blank email to leave-techwr-l-obscured -at- lists -dot- raycomm -dot- com
Send administrative questions to ejray -at- raycomm -dot- com -dot- Visit
http://www.raycomm.com/techwhirl/ for more resources and info.



Follow-Ups:

Previous by Author: Re: Home network security WAS Re: upgrade from 98 to XP
Next by Author: Re: legality of web links to articles?
Previous by Thread: Re: Home network security WAS Re: upgrade from 98 to XP
Next by Thread: Re: Home network security WAS Re: upgrade from 98 to XP


What this post helpful? Share it with friends and colleagues:


Sponsored Ads