RE: XPSP2 compatability

From: Corey Watts-Jones (cwattsjones@rogers.com)
Date: Thu Aug 19 2004 - 23:48:43 EDT


Howdy folks,

I'm new to the list, but anyway...

I did the XPsp2RC2 update 2 weeks ago and have only come across a few very
Minor problems, mostly involving very specific RPC elements. Apart from
that, the new ICF is actually pretty robust for what it really is. It is
more comparable to a consumer product like Norton's Internet Security but
allows you to get a little more specific with packet filtering etc.

However, I'm scared for when clients start rolling it out...

Corey Watts-Jones
Corporate Service Technician
Compusmart Toronto

-----Original Message-----
From: Bill Burge [mailto:bill@burge.com]
Sent: Wednesday, August 18, 2004 10:49 PM
To: pen-test@securityfocus.com
Subject: RE: XPSP2 compatability

I'm gonna have to go with "grassy knoll shooters" for 500 dollars, Alex.

Based on this list, I think there is a conspiracy afoot. I've dealt with
Microsoft for many years and at MANY different levels ranging from customer
to competitor to takeover object - I trust them as far as I can throw
Redmond.

The apps on the list represent many of the apps and families of apps that
made Windows OS's (can I call them that?) popular. There are first run
games, office productivity applications (many from MS, who would have
already tested them and KNOWN they wouldn't work) and the anti-virus
applications as well as PC protection apps many have come to rely on for a
feeling of protection. They can't possibly think that the Windows using
world would just go on without them?

http://support.microsoft.com/default.aspx?kbid=884130&product=windowsxpsp2

And the list will only g-r-o-o-o-o-o-o-o-w...

After getting kicked in the butt all around the 'Net for making an OS with
all the security of cheese cloth, Bill G has come back and given us what "we
asked for" - a "much more secure" (useless) version of Windows.

I'm guessing there is already a less restrictive, more permissive, version
of SP2 waiting in the wings (or reg setting). It might even be SP2rc2
(which might just be SP2 with the "added security 'off' by default") - but
Windows users will have to choose to run a less secure Windows - and that is
what he wants. "I gave you a more secure Windows - but you chose not to run
it."

Some call me paranoid, I call it experience... ;-)

bb

*********** REPLY SEPARATOR ***********

On 8/17/2004 at 11:33 AM Jon Cheuvront wrote:

>Same here, I've been using XPsp2RC2 with no problems, now WinPCAP is
>broken and ethereal will not work (I use all day long with the admin
>interface for NFR Sentivist). The only problem I have now is the
>service pack will NOT uninstall, how would have guessed it crashes when
>I try to remove it. I'm done with MS, I'm loading Linux and just use
>vmware or rdc for the ms apps.
>
>-JC
>---
>Jon Cheuvront
>Network System Technologies, Inc.
>
>
>-----Original Message-----
>From: Roman Fomichev [mailto:from@e-solutions.lv]
>Sent: Tuesday, August 17, 2004 3:52 AM
>To: Anjin; pen-test@securityfocus.com
>Subject: Re: XPSP2 compatability
>
>I have been using ethereal for years. I have been using XPSP2 since rc1.
>
>No problems.
>
>On Mon, 16 Aug 2004 22:50:32 +0930, Anjin <wildcard@internode.on.net>
>wrote:
>
>> Following up on the item from James, it also seems that XPSP2 is
>> incompatible with WinPCAP. Both Snort and Ethereal fail with an
>> identical error when XPSP2 is installed. Removing the patch solves
>> the problem.
>>

----------------------------------------------------------------------------

--
Ethical Hacking at the InfoSec Institute. All of our class sizes are
guaranteed to be 12 students or less to facilitate one-on-one interaction
with one of our expert instructors. Check out our Advanced Hacking course,
learn to write exploits and attack security infrastructure. Attend a course
taught by an expert instructor with years of in-the-field pen testing
experience in our state of the art hacking lab. Master the skills of an
Ethical Hacker to better assess the security of your organization.
http://www.securityfocus.com/sponsor/InfoSecInstitute_pen-test_040817
----------------------------------------------------------------------------
---
------------------------------------------------------------------------------
Ethical Hacking at the InfoSec Institute. All of our class sizes are
guaranteed to be 12 students or less to facilitate one-on-one interaction
with one of our expert instructors. Check out our Advanced Hacking course,
learn to write exploits and attack security infrastructure. Attend a course
taught by an expert instructor with years of in-the-field pen testing
experience in our state of the art hacking lab. Master the skills of an
Ethical Hacker to better assess the security of your organization.
http://www.securityfocus.com/sponsor/InfoSecInstitute_pen-test_040817
-------------------------------------------------------------------------------


This archive was generated by hypermail 2.1.7 : Sat Apr 12 2008 - 10:53:59 EDT