republican-creole
Search:  

 
 
   All ForumsHot TopicsGallery






how-to block ads


 
Forums » Up and Running » Security » Security » Zone Alarm security Hole-confirm from Steve Gibson
Search Topic:
Share Topic:
RSS topic:
toggle:
flat / full
normal / watch
Posting:
Post a:
Post a:
Gaping Security Hole found in Macromedia Flash Pla »
« I'd like to monitor outgoing traffic...  
AuthorAll Replies


rtoday

join:2000-11-05
California
reply to 2kmaro
Re: Zone Labs President Responds!

Golly, I hope someone does a summary of this thread. It seems to have taken on a life of its own!


2kmaro
Think
Premium,ExMod 1 BC
join:2000-07-11
ColossalCave
clubs:

Thread Summary

To a large degree the summary is here:
A 1-Page Summary

Bottom Line: ZoneAlarm (and all software firewalls) have now had new holes revealed in them. They are small holes if other precautions (strong anti-virus use mainly) are taken. Additionally, providing a non-standard location for installing ZoneAlarm can help with one hole, plus DiamondCS has provided a patch for the other. Zone Labs is more or less ignoring this problem for the time being, so griping to them seems in order and in the meantime, do the best you can with what you have.

Small Print Below the Bottom Line: The root source of the problems is the operating system's inherent weakness - if you are using Windows 9x/ME, then no software firewall product can ever be totally bullet-proof.


rtoday

join:2000-11-05
California
Thanks from all of us in the gallery, 2K! This thread is a motivator and shaker.


Rocktagon
Slightly Bent
Premium
join:2000-11-04
Chattaroy, WA
clubs:

said by rtoday:
Thanks from all of us in the gallery, 2K! This thread is a motivator and shaker.

Actually Trail Blazer created the webpage that the summary link takes you to.
2kmaro is to be thanked for all the great work but let us not forget Trail Blazer for the work on that webpage and EmileoG for starting the whole thing!

DSL Reports has a great bunch of members!
--
Quest for Knowledge


rtoday

join:2000-11-05
California
  Of course you're right, Scooter. Emilio and TB are certainly to be thanked for their fantastic contributions as as well! Wasn't meaning to be exclusionary at all.

GaryK7
Premium
join:2000-08-29
Miami, FL
clubs:
·Atlantic Broadband

reply to Rocktagon
Yes, I did create the website. But this has really been a collaborative effort. Between Emilio's ability to find us useful information, and 2k's excellent skills at both the technical stuff and making it all sound simple, and my skills as a web developer, we have all managed to help each other.
--
-tb/gary.
"The person who says it cannot be done should not interrupt the person doing it."
Chinese Proverb
---
Angry at ZoneAlarm? Complain about it!


Rocktagon
Slightly Bent
Premium
join:2000-11-04
Chattaroy, WA
clubs:

As I said:
DSL Reports has a great bunch of members!

I was just making sure the summary of this thread link was credited toward your web page.

Any news on the "this weekend" comment you made earlier?
--
Quest for Knowledge


CyberStretch

join:2000-11-23
Worcester, MA

  2kmaro,

...DiamondCS has provided a patch for the other

Since Emilio and yourself already have a rapport with DiamondCS, have any of you requested this patch or agreed to beta test it to ensure it closes the security hole?

If not, would one of you be willing to contact them and request it?

If so, would it be possible to post it so others can benefit from the additional security?

--
And now, back to your regularly scheduled thread already in progress...

GaryK7
Premium
join:2000-08-29
Miami, FL
clubs:
·Atlantic Broadband

Hi. Many of us here have tested the patch. It appears to work fine. You can find it here.
--
-tb/gary.
"The person who says it cannot be done should not interrupt the person doing it."
Chinese Proverb
---
Angry at ZoneAlarm? Complain about it!


Rocktagon
Slightly Bent
Premium
join:2000-11-04
Chattaroy, WA
clubs:

reply to CyberStretch
Click on the link on TrailBlazers post and his webpage has a link to the patch on it.
I personally have applied it and retested my system against the batch file DiamondCS released and it did not shut down ZA.2kmaro has posted these results in his patch post.
--
Quest for Knowledge


CyberStretch

join:2000-11-23
Worcester, MA

  Thanks for the responses. 2k IM'd me and gave me the link, coz I was too lazy to check here! (Actually, I was doing my routine check/responding to other threads.)

I will try it out and see what happens.

--
And now, back to your regularly scheduled thread already in progress...
Forums » Up and Running » Security » SecurityGaping Security Hole found in Macromedia Flash Pla »
« I'd like to monitor outgoing traffic...  


Sunday, 29-Nov 08:05:36 Terms of Use | Privacy Policy | Hosting by www.nac.net - DSL,Hosting & Co-lo | feedback | contact
over 10 years online! © 1999-2009 dslreports.com.republican-creole
page compression OFF
Most commented news this week
· [122] Time Warner Cable Fires Broadside At Broadcasters
· [112] New AT&T Ad Campaign Hits Back At Verizon
· [96] Apple Joins AT&T Verizon Snark Fest
· [87] New Bill Takes Aim At Higher Verizon ETFs
· [80] TiVo Sees Record Customer Losses
· [73] Verizon CEO: Hulu Will Be Dead Soon
· [73] Weekend Open Thread
· [69] In-Flight Internet Headed For Bumpy Landing?
· [62] Thanksgiving Open Thread
· [40] EFF Wages War On Fine Print
Most people now reading
· Anyone have a problem [Software]
· Windows 7 boot manager editing questions [Microsoft Help]
· ToC 4th boss - Preliminary Strategy for Twin Valkyr [World of Warcraft]
· 3.x Feral Druid - Bear Tanking Guide [World of Warcraft]
· Using DIR-615 C1/3.01 with Trendnet TEW-652BRP in N Mode [D-Link]
· Evading throttling with uTP / uTorrent 1.9a [TekSavvy]
· Security Software Updates - 28 Nov 2009 [Security]
· [Snow Leopard] NFS Mounts - no more Directory Utility [All Things Macintosh]
· Digital Channel Lineup without a Box??? [Comcast Cable TV]
· Road Runnner up to 50 mbps is ready ! [Road Runner]