Re: Spybot and SBS2K3

From: James B (no_spam_at_please.com)
Date: 12/28/04


Date: Tue, 28 Dec 2004 13:33:06 -0500

However it is your job to show these people that doing what their doing is
not just stupid but the cost outweigh any gain whatever gain that could be.

In this case using the server for surfing will result in the server having
to be reloaded at some point and time. The cost of a full reload is $$$
whereas the cost of safe computing, even if it means buying a $400 Dell, is
tons less. What's the best price your going to have for a full reload, data
recovery, etc, $2000 and of course how can you measure lost time, production
and data? Heck get him a POS out of the closet, load Firefox on it, get him
a monitor switch and let him surf with that, he's using the same monitor and
keyboard.

I have had clients like this as well. AS hard as it seems you have to be
forceful. The customer is not always right and I disagree with some tech
shop owners who say "it's the customers equipment you can't tell them what
to do with it." Well yes you can. If the customer continues down this line
then it's my take that you flat out tell them you cannot give them what they
want, a secure way to browse from the server, but you will give them what
demand, server web surfing, and get it in writing so when your back over
there in a month reloading the OS and making a nice $2k-$5k billing you have
something to fall back on. Spyware is not something you can just "clean" or
"delete" sometimes such as those dirty ones that hook into Winsock.

What is going to happen with customers like this is they will shoot
themselves in their foot, spend a fortune recovering and then because they
are broke you will not be over there supporting them the way you should so
the whole network goes to hell, they call in somebody cheaper than you,
totally screw everything up and then we start all over. Had one just like
this who refused to listen about his data, he lost it, cost him $20k to
recover it plus he lost almost a million in future sales due to ticked off
clients. Guess who he tried to blame for the disaster, yeap us, even though
we told him not to do it that way my owner/boss would not set him down and
lay down the law and then get it in writing. Now that same customer who we
use to bill about $800-$1000 a month in various service only calls when it's
a major issue and the billing is less than $100/month.

Sorry to ramble but you hit a nerve, stupid customers who won't listen to
the people they hire to give them advice!

"Gary Karasik" <gkarasik2fea.net> wrote in message
news:ucxG6v16EHA.3944@TK2MSFTNGP12.phx.gbl...
> Susan,
>
> What do you think is the point of telling me what I already know? Do you
> think I don't believe you? I do. Do you think if you repeat it often
enough,
> I will know it more? I won't.
>
> > That client should not be doing what he is doing and it's our job out
here
> > to kindly, nicely, tell that client that what they are doing is just not
> > acceptable anymore.
>
> I don't live in the same world you do. In the world I live in, owners and
> clients have their own wacky ideas about what do to with their systems.
They
> spend as little money as possible. They make use of free tools whenever
they
> can. They don't practice good computing, they surf from their servers,
they
> get infected, and they spread those infections around. One owner who was
> spreading a worm and who didn't want to pay to remove it said to me,
"Well,
> it's relatively harmless." They're willing to risk getting caught
violating
> the privacy law. There are tens of thousands of these people. Do you get
> that there are tens of thousands of these people?
>
> We have a saying in the south: When you're up to your ass in alligators,
> it's hard to remember that your original intention was to drain the swamp.
>
> Spybot is one, free tool that locates and removes adware and malware. What
> on earth is wrong with using it to find and remove whatever it finds and
> removes.
>
> I don't mean to be rude, but if you don't have the answer to question I
> asked, don't answer a question I didn't ask.
>
> GaryK
>
> "Susan Bradley" <sbradcpa@pacbell.net> wrote in message
> news:eu6aEey6EHA.1204@TK2MSFTNGP10.phx.gbl...
> > Gary the fact that the IE team put the lockdown on the box, the fact
that
> > there are certain spywares out there that "Sandi" Ms. Malware herself
> > cannot clean out, that client is risking flattening that box.
> >
> > Show me any reasonble security advice out there and they say using the
> > server for anything other than a server is insane.
> >
> > Your client has already proven this to be true.
> >
> > How do you know that you've truly "cleaned" that server? Any spyware
> > product is always one step behind the bad guys.
> >
> > This is equivalent to putting a server and not protecting it with a
> > firewall like USAtoday did in my opinion, that client is unnecessarily
> > risking that data on that server.
> >
> > The only way to clean a compromised system is to flatten it. Is your
> > client ready to take that step?
> >
> > You asked "how can you clean out spyware completely from a system"
> >
> > I'm telling you...you can't. You are looking for a solution to a
problem
> > that your client shouldn't be doing in the first place.
> >
> > Seriously, if that client has California resident data that includes
> > "identity" style info, that client of yours has a liability issue.
> >
> > I'm sorry Gary, I know we've had conversations along this lines before
> > where you want a certain answer but I can't give you the answer you
want.
> > That client should not be doing what he is doing and it's our job out
here
> > to kindly, nicely, tell that client that what they are doing is just not
> > acceptable anymore.
> >
> > It's bad enough that the bad guys release security vulnerabilities,
don't
> > have that client adding to the issues with stupid decisions.
> >
> >
> > Gary Karasik wrote:
> >> Unasked for advice is, by definition, a lecture.
> >>
> >> GaryK
> >>
> >> "Marcia" <mkp@1248.com> wrote in message
> >> news:Oh8tE3t6EHA.3840@tk2msftngp13.phx.gbl...
> >>
> >>>Lecturing wasn't the word, strong good advice sounds better. I know of
> >>>no spyware that is "server-ready".
> >>>
> >>>
> >>>"Gary Karasik" <gkarasik2fea.net> wrote in message
> >>>news:%23Gdxzer6EHA.2592@TK2MSFTNGP09.phx.gbl...
> >>>
> >>>>While I appreciate the time everyone is taking to lecture me, I'm not
> >>>>getting the answer to my question, which was, "Has anyone successfully
> >>>>used Spybot on an SBS2K3 server?"
> >>>>
> >>>>GaryK
> >>>>
> >>>>"Kevin Weilbacher [SBS-MVP]" <kweilbacMVP@gte.net> wrote in message
> >>>>news:%234omZnp6EHA.4072@TK2MSFTNGP10.phx.gbl...
> >>>>
> >>>>>Spybot is not server ready .. I agree with others ... the server
should
> >>>>>remain locked down and not used for end user efforts. Even when I am
> >>>>>logged onto the server, if I have to browse, I limit myself to
> >>>>>Microsoft and EventId web site. For everyything else, I go to a
> >>>>>workstation.
> >>>>>
> >>>>>There are some "server aware" spyware programs coming on the market
> >>>>>that allow you to run and control spyware from all workstations from
a
> >>>>>server app. Sunbelt's CounterSpy is once such product.
> >>>>>
> >>>>>But since your customer does not want to spend any money on spywware,
> >>>>>nor does he heed your warnings not to use the server to surf -- let
me
> >>>>>guess that he doesn't thing that doing a daily back is important, nor
> >>>>>is keeping virus softwsare updated! ;-)
> >>>>>--
> >>>>>Kevin Weilbacher [SBS-MVP]
> >>>>>"The days pass by so quickly now, the nights are seldom long"
> >>>>>
> >>>>>
> >>>>>"Gary Karasik" <gkarasik2fea.net> wrote in message
> >>>>>news:uLS%23mHh6EHA.3856@tk2msftngp13.phx.gbl...
> >>>>>
> >>>>>>Hi,
> >>>>>>
> >>>>>>I'm unable to get Spybot 1.3 to run on the SBS server. Am I alone?
> >>>>>>When I try to start the program, there's a momentary hourglass that
> >>>>>>disappears. Spybot doesn't start, and there's nothing in task
manager.
> >>>>>>
> >>>>>>GaryK
> >>>>>>
> >>>>>
> >>>>>
> >>>>
> >>>
> >>
>



Relevant Pages

  • Re: What doesnt lend itself to OO?
    ... >> proxy and instructs the server to constuct the real object. ... rather than client code. ... If 'clock' is instantiated in the server, ... > for the server interface at the OOA level. ...
    (comp.object)
  • This is going straight to the pool room
    ... or not the client has privilege to do what they're trying to do, ... The server environment is this: ... 3GL User action Routines that Tier3 will execute on your behalf during the ... Routine Name: USER_INIT ...
    (comp.os.vms)
  • [Full-Disclosure] R: Full-Disclosure Digest, Vol 3, Issue 42
    ... Full-Disclosure Digest, Vol 3, Issue 42 ... SD Server 4.0.70 Directory Traversal Bug ... Arkeia Network Backup Client Remote Access ...
    (Full-Disclosure)
  • Re: Please help with a serious issue
    ... does a filter statement on an adotable happen on the client machine or the ... >>User 1 selects customer 1. ... >>server db for all the clients. ...
    (borland.public.delphi.database.ado)
  • Re: What doesnt lend itself to OO?
    ... > rather than client code. ... no way to do that without also touching the object with clock semantics ... will not encapsulate both clock semantics and network semantics. ... The server can do whatever it wants ...
    (comp.object)

Quantcast