Free Republic
Browse · Search
News/Activism
Topics · Post Article

Skip to comments.

Microsoft Internet Explorer "Msdds.dll" Remote Code Execution (Affects XP SP2, etc.)
French Security Incident Response Team ^ | August 17, 2005

Posted on 08/18/2005 1:51:17 AM PDT by HAL9000

click here to read article


Navigation: use the links below to view more comments.
first previous 1-2021-32 last
To: GeorgiaBushie
If I had just used the spell check or even the preview button, I could have saved myself a load of embarrassment.
21 posted on 08/18/2005 6:50:21 AM PDT by GeorgiaBushie (Undocumented freeper)
[ Post Reply | Private Reply | To 20 | View Replies]

To: GeorgiaBushie
Make any sense?

Yeah, it does. Some cracker out there with a Linksys exploit and a Windows rootkit has your IP address down.

I would seriously consider turning one of those PCs into a Linux firewall box.

22 posted on 08/18/2005 7:28:45 AM PDT by TechJunkYard (my other PC is a 9406)
[ Post Reply | Private Reply | To 20 | View Replies]

To: cabojoe
You guys won't change your ways, even when an olive branch is thrown your way.

On all three recent threads it has been Windows guys throwing insults directed at users, not Mac users. It is Windows user who won't stop with the insults.

23 posted on 08/18/2005 7:42:46 AM PDT by Swordmaker (Beware of Geeks bearing GIFs.)
[ Post Reply | Private Reply | To 15 | View Replies]

To: TechJunkYard; GeorgiaBushie
Make any sense?
Yeah, it does. Some cracker out there with a Linksys exploit and a Windows rootkit has your IP address down.
I would seriously consider turning one of those PCs into a Linux firewall box.

Whew...damn serious stuff ....and I have one of the new Linksys routers with the Vonage phone ports.....and I really like the Vonage phone....going to study the Firewall Box idea, but I may have already taken the fork in the road.

24 posted on 08/18/2005 8:20:59 AM PDT by Ernest_at_the_Beach (History is soon Forgotten,)
[ Post Reply | Private Reply | To 22 | View Replies]

To: TechJunkYard; Ernest_at_the_Beach
I would seriously consider turning one of those PCs into a Linux firewall box.

I agree wholeheartedly. With my Linux firewall NOTHING has ever gotten through. Every packet gets dropped unless I specifically ask for it.

25 posted on 08/18/2005 8:36:49 AM PDT by ShadowAce (Linux -- The Ultimate Windows Service Pack)
[ Post Reply | Private Reply | To 22 | View Replies]

To: TechJunkYard
I had so many problems with the hacker that I bought an external Soho firewall; it connects directly to the dsl modem and assigns static ip addresses to the router, which assigns them to the individual computers.

After hooking up the Soho, I can type http://192.168.1.1 and will receive a page cannot be displayed. Also took the Pivx security test and it graded my firewall as an A. It was unable to detect what windows platform I was running and all of the main exploit ports were closed.

Linux would give me an even higher level of protection?? I have been thinking of giving Linux a try, I do have an additional computer that could run the Linux and it would be fun to try something new. Can I use/play with the system that is set up as a firewall? I could make that my internet browsing computer and also the one that I use to check emails.

Also, can I email you with questions about setting up the linux if I have any?

26 posted on 08/18/2005 1:22:01 PM PDT by GeorgiaBushie (Undocumented freeper)
[ Post Reply | Private Reply | To 22 | View Replies]

To: Ernest_at_the_Beach
I think that I was selected for the hacking because I do a lot of business work on the computer and had something they really wanted.

If you keep up with the patches on the LinkSys and keep the passwords changed, you probably have a much lower risk than I had. Also, check on your router if you get a key logger. Most ordinary people do not get a hack attack unless the hacker's find something worthy of their time.

I do not think a Mac would lower the risk that much as they have already been made aware of an exploit.

27 posted on 08/18/2005 1:31:37 PM PDT by GeorgiaBushie (Undocumented freeper)
[ Post Reply | Private Reply | To 24 | View Replies]

To: GeorgiaBushie; TechJunkYard
...I bought an external Soho firewall;...

Linux would give me an even higher level of protection??

I believe most (if not all) SOHO firewalls, and some hardware firewalls all use Linux. Your firewall you bought may actually be running linux to provide you with your protection.

If you cannot see what windows version you are running and cannot ping your network from the outside, I'd say you're pretty safe with no need to double up the protection and cost.

28 posted on 08/18/2005 1:35:54 PM PDT by ShadowAce (Linux -- The Ultimate Windows Service Pack)
[ Post Reply | Private Reply | To 26 | View Replies]

To: HAL9000
I have had 112 updates/patches since Dec 2, 2003 for Windows XP Pro and I.E.6

Just Damn!


29 posted on 08/18/2005 1:43:46 PM PDT by unixfox (AMERICA - 20 Million ILLEGALS Can't Be Wrong!)
[ Post Reply | Private Reply | To 1 | View Replies]

To: GeorgiaBushie
.. took the Pivx security test and it graded my firewall as an A. It was unable to detect what windows platform I was running and all of the main exploit ports were closed.

That should be fine, as long as you have something there. It's better than nothing.

Linux would give me an even higher level of protection??

It would give you more control for "fine tuning". With an outboard router/firewall, the ports are either "wide open" (to everybody) or closed (to everybody). With a Linux "ipchains" or "iptables" firewall you can allow certain trusted friends to access certain ports (like a web or FTP server) and keep the rest of the world out.

That's especially good for Instant Messaging protocols like AIM, etc., where you'd want to allow your friends' AIM clients in but keep everybody else from playing with your ports.

Of course, you might not need that level of control if you're not serving anything -- just using the 'net for web surfing and e-mail should be fine with what you've got. Just be sure to keep your Windows stuff updated. No firewall can keep a compromised computer from "phoning home" and sending your personal stuff out -- firewalls only filter what's coming in.

I have been thinking of giving Linux a try, I do have an additional computer that could run the Linux and it would be fun to try something new. Can I use/play with the system that is set up as a firewall?

It's generally a good idea to run only the firewall software on the firewall box. That puts less stuff on the exposed computer that can potentially be exploited/hacked. For this reason, the best Linux firewall is usually a small, old computer that doesn't have the resources to run any modern versions of Windows. I usually install a bare-bones Linux distribution, without an X server (no need for a GUI), and with network support, and code up some simple firewall rules. There is some support available on The Linux Documentation Project and at GrokDoc, and on usenet in the comp.os.linux.* tree.

If you just want to try Linux to see what it's like, check into Knoppix or Feather Linux or Damn Small Linux or some other "Live CD" type of distro which will let you play with Linux without touching your hard disk.

Also, can I email you with questions about setting up the linux if I have any?

Sure, feel free to send me some freepmail if you have any questions.

30 posted on 08/19/2005 7:34:47 AM PDT by TechJunkYard (my other PC is a 9406)
[ Post Reply | Private Reply | To 26 | View Replies]

To: TechJunkYard
Thank you for your reply. Back in April, I was not aware that Instant Messaging software allowed dangerous packets to come into or leave my machine. Instant Messaging is disabled on my computer now and the other computers on the network and the children hate me for it.

I do have an older computer that will run Linux and beings this is the slow time of year for me, I may try it. I used to like to tinker with my machines before the hacker took all of the fun out of it, maybe the kids can get their AIM & Yahoo back.

Also, I reduced the risk on my computer, I think, by buying an external hard drive for my business work. I only hook it up when I have to work and, quickly, unhook it when I am done. Do not ever want to explain to people again that I compromised their personal information.

31 posted on 08/19/2005 11:17:19 AM PDT by GeorgiaBushie (Undocumented freeper)
[ Post Reply | Private Reply | To 30 | View Replies]

To: GeorgiaBushie

Do yourself a BIG favor and forget all the Linux headache, get yourself a good little hardware firewall for $29 that even includes wireless capability if you want it, if not simply turn it off.

http://www.circuitcity.com/ssm/Netgear-Wireless-Router-WGR614-/sem/rpsm/oid/72888/rpem/ccd/productDetail.do

You'll be light years better off, and not have to worry about carrying the ball and chain around of trying to setup and maintain all that other junk. Highest recommendation, from a computer professional. Regards.


32 posted on 08/20/2005 5:43:16 AM PDT by Golden Eagle
[ Post Reply | Private Reply | To 31 | View Replies]


Navigation: use the links below to view more comments.
first previous 1-2021-32 last

Disclaimer: Opinions posted on Free Republic are those of the individual posters and do not necessarily represent the opinion of Free Republic or its management. All materials posted herein are protected by copyright law and the exemption for fair use of copyrighted works.

Free Republic
Browse · Search
News/Activism
Topics · Post Article

FreeRepublic, LLC, PO BOX 9771, FRESNO, CA 93794
FreeRepublic.com is powered by software copyright 2000-2008 John Robinson