Re: Install Silverlight?



Cliff,

> Yes, I think your attitude is over the top.
By providing examples and information, I have an attitude?

??? Of course you have an attitude. What is wrong with that? We all do - look it up in the dictionary. I just think your attitude is too harsh (if you don't like the words 'over the top'). You are presuming (effectively) unlimited funds and unlimited ability to manage the client. I am suggesting otherwise. Most of our clients (and in fact most of the world by volume) are small businesses who don't like spending money. We just can't apply the strict measures you argue.

> WHAT personal attacks. I haven't made any anywhere!
"Come off the grass" was not exactly an on-topic criticism. How else would
you classify it?

....certainly not as a personal attack! Aren't we being a little bit precious here? If you want an explanation it really means to 'get back on track with me'. Not usually judged as harsh personal criticism in the circles I inhabit <g>.

> Sorry, which point. I missed that.
I'd be happy if you could legitimately address *any* of them. You didn't.
I even numbered them for you.

Gosh, that email! Ok... I thought you were being rhetorical, not serious. I'll change mode...

(1) Browsing from the server *is* a bad practice.

This is YOUR judgement. 'Bad' is truly over the top. It isn't recommended by many but nowhere does MS say DON'T. Why else would they provide the tools to make it safer? What you are suggesting is simply impractical for a great many people. Yes, MS does recommend restricting browsing from a server - I am dealing with it - note that MS only said 'recommend restricting'. Stop making this something impossible.

(2) Trusting AV software is foolish.

Hmmm... you're calling an awfully large number of people foolish. Isn't that a direct personal attack? <g>. So you are suggesting we don't use AV software because it is foolish to do so? Well I think quite a number of AV software producers would take you to task over this. In fact, I think I know quite a large number of companies that spend quite large sums of money on their AV framework. So are they being foolish also? I certainly wouldn't rely 100% on anything but I think I would be able to find enough people to tell me that AV software has been of value. So you don't have any?

(3) Microsoft can't really prevent it.

Prevent what? ...surfing the web? Of course not so I don't really know where you are going here.

(4) A firewall is not designed....

Again you malign the capabilities of several AV/firewall vendors who claim quite the contrary to your statements. But I am not arguing these things with you, you can do that directly with the vendors and the extent of the claims or their capabilities don't really worry me. My contention is that you are over-stating the risk especially when compared with what we see happening out there. It just isn't worth the paranoia you are projecting.

(5) I'll still be here to give you advice and help...

Well I'm touched. I will keep that in mind. Thank you.

No, I'm providing statistics. 7 infected servers in less than 5 months is
more tha a horror story, or two. It is an illustration that such occurences

Ok but we do not see that frequency of infection. Or perhaps because you are one who gets called you are seeing the problems. The ones who aren't infected don't ring up to tell you that. The trend I see is less and less infection, especially at the user workstation level. I don't know that I've ever seen a server compromised.

No, but steps can be taken to outline the cost of an infected server. If a
company's budget is so tight that they cannot afford to take basic security

Well no, again I think you are overstating the cost of the problem but I guess we are not going to be able to qualify that properly here.

And they are also usually the most willing to listen, because they know that
downtime == bankruptcy. THAT is our job. And failing to do it is

Yes well you see? This is over the top. An infected server is RARELY likely to mean bankruptcy for the majority of businesses. An inconvenience and a cost but bankruptcy? This is where you do yourself a disservice by making this out to be bigger than it is. Ok, so for businesses where the risk is that high, go for it! But gee, for the majority it is something way less.

I would contend that if your business was that limited to a server infection then you have something wrong with your business model and that you need another consultant to sort that out!

Cheers.
Geoff


.



Relevant Pages

  • Re: Install Silverlight?
    ... Most of our clients are small businesses who don't like spending money. ... MS does recommend restricting browsing from a server - I am dealing with it - note that MS only said 'recommend restricting'. ... So you are suggesting we don't use AV software because it is foolish to do so? ... So if you feel I made a personal attack, ...
    (microsoft.public.windows.server.sbs)
  • Re: Thou shalt have no other gods before the ANSI C standard
    ... > server and a gagle of Windows desktops around them. ... > infection on the server that holds our critical business data. ... > he is charitable enough to consider competent, how do most businesses ... and should not be allowed into the legitimate services ...
    (sci.crypt)
  • Re: [Fedora] Seeing input on Securing the Linux system from intrusions and attacks.
    ... Your guidance concerning honey pots is welcome. ... national server. ... I manage systems on different IAPs, I have noticed quite a difference in the volume of traffic I drop/reject on the different networks. ... frustrating system infection it is also about what you will eventually ...
    (Fedora)
  • Re: W32.SwenA@mm virus is so dammed annoying.
    ... server based on the filters. ... >> find a discussion of the effects of the 'swen' worm and ways you can ... >> e-mail for virus infection. ... >> downloading of e-mail messages (Veronica Loell posts information about ...
    (microsoft.public.security)
  • Re: W32.SwenA@mm virus is so dammed annoying.
    ... server based on the filters. ... >> find a discussion of the effects of the 'swen' worm and ways you can ... >> e-mail for virus infection. ... >> downloading of e-mail messages (Veronica Loell posts information about ...
    (microsoft.public.security.virus)