Messages

2226

General Software Discussion / Re: Stop Windows from calling home

« on: January 04, 2010, 08:55 PM »

You're the one who flat-out claimed that packet filters aren't firewalls

-f0dder (January 04, 2010, 08:02 PM)

Packet filters and "real" (hardware) firewalls work on the network layer, "software firewalls" mainly on the application layer. (With a driver-thingy on another layer, probably, but then we'll have a packet filter again.)

and that Windows' built-in firewall is useless

-f0dder (January 04, 2010, 08:02 PM)

... and potentially dangerous.

2) why would't I run an important server on a Windows box?

-f0dder (January 04, 2010, 08:02 PM)

Because Windows is not known for stability and security, both of them are the most important attributes of servers IMO.
(Oh, and Windows' cmd.exe without [at least] some *ix tools is, at best, a sick joke when it is about configuration and server maintenance. This refers explicitly to this special case. In other threads I'll stick with my opinion that cmd.exe is everything I need. Maybe because I don't have to control a server system with it. But we're drifting a bit OT here, aren't we?)

Ever checked this list?

-f0dder (January 04, 2010, 08:02 PM)

Uptime depends on various things. That Windows servers are on top of the list doesn't necessarily mean something. (edit: Missed a dot.)

My personal fileserver (which can hardly be thought of as a critical machine) runs linux - simply because it's free. Free as in beer.

-f0dder (January 04, 2010, 08:02 PM)

Now that's not actually a reason. If it was, no-one would use Windows anymore, as it is not free.  

2227

General Software Discussion / Re: Stop Windows from calling home

« on: January 04, 2010, 07:46 PM »

Fortunately, I'm not a stupid user that clicks yes to everything, and locations that are sensibly set up will have non-trusted users run as exactly that: non-trusted users without admin privs.

-f0dder (January 04, 2010, 07:32 PM)

So, at least, we're talking on a similar level. Quite a progress yet.

Btw, as for automatic updates: standard users should keep that on. But, while it hasn't happened very often, once in a blue moon and on a subset of configurations, updates have caused trouble.

-f0dder (January 04, 2010, 07:32 PM)

I know about that, but I wouldn't count this as a reason to disable AU for standard users. We're not talking about important servers right now (which should never run Windows anyway), right?

2228

General Software Discussion / Re: Stop Windows from calling home

« on: January 04, 2010, 07:27 PM »

one should think that a software firewall (if primarily focusing on packet filtering) isn't that hard a job to get right.

-f0dder (January 04, 2010, 07:04 PM)

Given that we only talk about a packet filter and nothing more: You'll need some kind of an A.I. to decide which traffic is "good" and which is "bad". A packet filter completely controlled by its users does not do what it is intended to.

2229

General Software Discussion / Re: Stop Windows from calling home

« on: January 04, 2010, 06:56 PM »

Show me an exploit for the built-in Windows PF? Not saying it doesn't exist, I just haven't seen it.

-f0dder (January 04, 2010, 06:49 PM)

There is one for the XP firewall, and I doubt there are none for newer versions ...

with proper software design, there's no reason that a 3rd-party software firewall can't be as secure as Windows' built-in...

-f0dder (January 04, 2010, 06:49 PM)

If we assumed proper software design, there were no holes in Windows at all, right?

2230

General Software Discussion / Re: Stop Windows from calling home

« on: January 04, 2010, 06:46 PM »

If you've ever tried bringing an XP box pre-SP2 on the internet without 3rd party PF or a NAT'ing router, you'll see how fast this happens with internet traffic.

-f0dder (January 04, 2010, 06:38 PM)

Like that Sasser worm? I know it, yep ... 
A well-configured machine is daily patched and does not run any services which just are not needed. Of course, there are always some (rare) exploits for needed services. But there are also exploits for common "firewall software", and I think there are more of them. So, actually, a LAN/WLAN system running a "personal firewall" and the default services is more probably vulnerable than a LAN/WLAN system running only the default services.

2231

General Software Discussion / Re: Stop Windows from calling home

« on: January 04, 2010, 06:25 PM »

ever considered what can happen on a LAN or WLAN if one computer gets infected and there isn't a software firewall running on the individual hosts?

-f0dder (January 04, 2010, 05:48 PM)

A LAN or a WLAN don't actually send data between the clients without requesting them. Infected clients in my network don't make my Windows more insecure. Still talking about nonsense?

2232

General Software Discussion / Re: Stop Windows from calling home

« on: January 04, 2010, 05:59 PM »

The Windows Firewall is a firewall

-f0dder (January 04, 2010, 05:48 PM)

Wrong, because:

A firewall's main purpose is preventing access to the computer, not preventing the computer from reaching out

-f0dder (January 04, 2010, 05:48 PM)

You can not protect a machine from unauthorized access when running a prevention system on it!

[Select]

+------------------+
| teh internetz    |
+---------+--------+
          |
   +------+--------+
   | PROTECTION    |
   +----+----------+
        |
  +-----+------------+
  | The machine that |
  | shall be protec- |
  | ted from OUTSIDE |
  +------------------+

Now do this with a "software firewall". Good luck.

but iirc a limited user account on XP can't modify firewall rules, and on Vista/Win7 you get an UAC prompt?

-f0dder (January 04, 2010, 05:48 PM)

People who use limited accounts and/or the UAC prompt will, like, never have serious system failures caused by malware. They just don't need any extra protection anyway.

Oh, I almost forgot: you've already spouted this nonsen.

-f0dder (January 04, 2010, 05:48 PM)

I was right.

2233

General Software Discussion / Re: Stop Windows from calling home

« on: January 04, 2010, 05:36 PM »

Whether or not it can be bypassed, as can ANY firewall or software is not a valid point when determining its usefulness.

-y0himba (January 04, 2010, 05:30 PM)

Of course it is. Security software that can be bypassed simply doesn't protect you. Period.

If you need at least one reason why, it HELPS prevent problems.

-y0himba (January 04, 2010, 05:30 PM)

How?

and have found that the Windows firewall, even though it started simple, added an easy to use, unobtrusive layer of protection and sense of security.

-y0himba (January 04, 2010, 05:30 PM)

Placebo effect?

From what I have seen above, you have given us nothing but the usual "I hate Windows/Microsoft" diatribe, which always comes with no hard evidence, just empty statements on how useless or horrible MS and it's software is.

-y0himba (January 04, 2010, 05:30 PM)

I am a proud Windows user. You won't get me this way.

(BTW: Every firewall software has, as all other software products, potential holes itself, so it may even make you even more insecure.)

2234

General Software Discussion / Re: Stop Windows from calling home

« on: January 04, 2010, 05:32 PM »

Windows firewall routinely prompts me when a new program attempts to establish a connection.

-Josh (January 04, 2010, 05:29 PM)

If this prompt is not clicked away automatically (or the malware even installs a rule there), you'll still have to consider that explorer.exe is not explorer.exe, right?
Still, the problem is the user here. You can't compensate that with a software.

2235

General Software Discussion / Re: Stop Windows from calling home

« on: January 04, 2010, 05:19 PM »

2. It is not that hard to write a script which automatically clicks "Allow".

And this can be done with just about ANY firewall application...

-Josh (January 04, 2010, 05:02 PM)

You see?

if you install something bad, then chances are your firewall is the last thing you need to worry about.

-Josh (January 04, 2010, 05:02 PM)

Indeed. So again: What is your reason to call the Windows Firewall "useful"? For what purpose?

2236

General Software Discussion / Re: Stop Windows from calling home

« on: January 04, 2010, 04:57 PM »

A "personal firewall" (basic packet filtering, user-controlled, which should be enough reason to doubt its usefulness) does not actually act as a firewall.

1. It can not detect if "explorer.exe" is really "explorer.exe" when asking you if explorer.exe may access the internet.
2. It is not that hard to write a script which automatically clicks "Allow".
3. It is behind your internet connection, so any packets passing it are already on your computer.
4. ... if they pass it anyway (there is always a way to create your own, independent TCP connections).
5. A virus, worm or trojan runs with your own user privileges, so it can easily disable your PFW completely.

Now what is the point in using something like that which also depends on the user's own "Brain 1.0"?
If you actually use software from dubious sources and click unknown links (the only ways to get infected), you'll fail anyway. A "personal firewall" can not help you.

2237

General Software Discussion / Re: Stop Windows from calling home

« on: January 04, 2010, 04:23 PM »

Disable Windows Firewall - And there it is!

-Innuendo (January 04, 2010, 04:18 PM)

How many reasons why the Windows "Firewall" is neither a firewall nor of any use would be enough to convince you that disabling it is a good idea? I think I could find dozens of them.

2238

Mini-Reviews by Members / Re: XYplorer File Manager

« on: January 04, 2010, 04:22 PM »

Getting started with Total Commander was a brilliant idea

-TucknDar (December 31, 2009, 06:00 PM)

Yes, without its ugly UI I had never dug for better file managers. 

2239

Living Room / Re: Sex Doesn't Sell

« on: January 03, 2010, 12:18 PM »

Sex is overrated.

2240

General Software Discussion / Re: Search with Bing

« on: January 02, 2010, 02:20 PM »

Bing is better in terms of privacy and has way less spam results (for me).

Direct comparison:
http://www.furia.com/code/bg/bg.cgi?q

No one should use Google these days anyway.

2241

General Software Discussion / Re: SUPER © updated, download from Major Geeks

« on: January 02, 2010, 02:20 PM »

Now that looks well-thought, if they even hide their own downloads.

2242

General Software Discussion / Re: Make Firefox startup faster.

« on: December 30, 2009, 11:38 AM »

Number of days to save history should be lowered inside options of course. 90 is deault? May be 10 is ok too

-Bamse (December 30, 2009, 11:32 AM)

These are the minimum days IIRC, so there is no notable increase...

2243

General Software Discussion / Re: Make Firefox startup faster.

« on: December 30, 2009, 11:09 AM »

Yep, but I find it useless to have an extra extension to make Firefox faster.
(And SpeedyFox can clean databases which cannot be cleaned by extensions while they are actually used.)

2244

General Software Discussion / Re: Make Firefox startup faster.

« on: December 30, 2009, 09:58 AM »

No, but it takes less effort to click a button.

2245

General Software Discussion / Re: Make Firefox startup faster.

« on: December 30, 2009, 07:53 AM »

Thank you, Tuxman and CleverCat; Yes, SpeedyFox works!!

-Curt (December 30, 2009, 02:19 AM)

Great to know that.

2246

General Software Discussion / Re: Make Firefox startup faster.

« on: December 29, 2009, 12:52 PM »

Firefox starts incredibly fast if you don't install hundreds of add-ons and purge your databases sometimes.

2247

Found Deals and Discounts / Re: TeraCopy Pro only $11 (50% off at BDJ)

« on: December 28, 2009, 10:34 PM »

Indeed, superboyac, and I am one of those willing to pay for some really good software - when there is a good reason to do that. So the payware should have something really outstanding (for me).

2248

General Software Discussion / Re: Must-have Windows Programs

« on: December 28, 2009, 07:36 PM »

I run Fences from Stardock.

-tinjaw (December 28, 2009, 06:54 PM)

Wow, great. Thanks for the hint (although I'm not Curt). 

2249

Found Deals and Discounts / Re: TeraCopy Pro only $11 (50% off at BDJ)

« on: December 28, 2009, 05:16 PM »

I wonder what makes this application worth more money than the free CopyHandler (which I use)...

2250

N.A.N.Y. 2010 / Re: NANY 2010 Teaser: Crush MCP (Master Control Program)

« on: December 28, 2009, 08:38 AM »

A media company should not send a correspondent to any country if they can not communicate in that country's native language.

-bcpaladin (December 27, 2009, 10:33 PM)

Now this leaves not much room for "standards" in any way.