RE: [Full-Disclosure] RE: W2K source "leaked"?

["Schmehl, Paul L" <pauls@utdallas.edu>]

> -----Original Message-----
> From: full-disclosure-admin@lists.netsys.com 
> [mailto:full-disclosure-admin@lists.netsys.com] On Behalf Of 
> Joe Quigley
> Sent: Friday, February 13, 2004 11:00 AM
> To: Drew Copley; Gadi Evron; bugtraq@securityfocus.com
> Cc: full-disclosure@lists.netsys.com
> Subject: [Full-Disclosure] RE: W2K source "leaked"?
> 
> 
> Drew Copley once said:
> 
> > We should prepare for this now.
> 
> Anyone care to comment how we can prepare for this?? Except 
> for moving from the Windows platform, I don't see how we can. 
> Please do not take this as knock against Drew and his 
> opinion. It most certainly isn't. I really would like to hear 
> others thoughts on this.
>
Odd.  I would have thought the answer was self evident.  You take the
standard precautions that every security person should know. Shut down
unnecessary services, block all incoming ports except those services
necessary to function, create secure "areas" within which you keep the
"crown jewels", develop a consistent, effective program of patching,
security awareness, yada, yada, yada, etc., etc., etc.

Paul Schmehl (pauls@utdallas.edu)
Adjunct Information Security Officer
The University of Texas at Dallas
AVIEN Founding Member
http://www.utdallas.edu/~pauls/ 
 

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.netsys.com/full-disclosure-charter.html