RE: A DoS Must Read from Steve Gibson...

["Hall, Philip" <phall@xxxxxxxx>]

Chuck,

> I do take some of it with a grain of salt, but 
> that aside, in this case, doesn't he paint a 
> legit picture or not ? My knowledge of this is 
> very limited, but it seems like a potential 
> nightmare (?)...  :-)

Here's the original page that this came from;

http://grc.com/dos/winxp.htm

Microsoft has a response to Mr. Gibson's headline grabbing statements;

http://www.microsoft.com/technet/security/raw_sockets.asp

And in one of few cases for Microsoft, they right this time.

And by the way, manipulating raw sockets is not 'new' for Windows XP, if you
have any other Win32 product you might be interested in searching on Google
for winpcap, granted it's not a 'native' implementation that comes with the
OS, but if the bad guy can exploit your machine to run code, there is little
difference whether the OS comes with raw socket access or the bad guy just
brings his own to the party...

--phil
+---
| This is the Midrange System Mailing List!
| To submit a new message, send your mail to MIDRANGE-L@midrange.com.
| To subscribe to this list send email to MIDRANGE-L-SUB@midrange.com.
| To unsubscribe from this list send email to MIDRANGE-L-UNSUB@midrange.com.
| Questions should be directed to the list owner/operator: david@midrange.com
+---