SI
SI
discoversearch

We've detected that you're using an ad content blocking browser plug-in or feature. Ads provide a critical source of revenue to the continued operation of Silicon Investor.  We ask that you disable ad blocking while on Silicon Investor in the best interests of our community.  If you are not using an ad blocker but are still receiving this message, make sure your browser's tracking protection is set to the 'standard' level.
Pastimes : Computer Learning -- Ignore unavailable to you. Want to Upgrade?


To: Ed Forrest who wrote (22862)10/17/2001 9:30:53 PM
From: thecow  Read Replies (1) | Respond to of 110652
 
Ed

I just read an answer from Symantec concerning the Liveupdate security issue. Thought you'd be interested.

From Langa (edit in) 'plus addition subscribers link...standard free link should be available tomorrow.'

langalist.com

About That LiveUpdate Security Hole...
In the last issue, we discussed a vulnerability in Symantec's LiveUpdate software (see langa.com ). Here's more information:

Hi Fred, here are some links to the Liveupdate vulnerability. theregister.co.uk , and sarc.com . Great news letter...Kenneth Masson

Hi Fred, I became aware of this issue last week and contacted Symantec. Below is what they had to say

Hello Rob, Welcome to Symantec's online technical support discussion forum....I understand that you are worried if this is true. Let me assist you with more information. LiveUpdate... The improvements Symantec introduced in LiveUpdate 1.6 and higher are actually "best practice security". It would be advisable to update all Symantec products using LiveUpdate to version 1.6. The latest LiveUpdate 1.6.x is available from the URL symantec.com .... We assure you that you will be secure from the latest viruses by using our latest product along with LiveUpdate 1.6....Symantec Consumer Technical Support

That still leaves me with the question what about version 1.6? They assure me that using 1.6 will secure me from the latest viruses, but what about the security hole? I didn't get the answer I was looking for... Thanks for a great newsletter! Rob Eckert

Because it uses standard Internet connection/file-transfer techniques, 1.6 is vulnerable to standard Internet attack techniques such as redirection and denial of service, but these are not unique flaws in 1.6--- they're part of the everyday risks of being online. However, the really bad security hole in LiveUpdate 1.4, by which malicious hackers could install hostile code on your system, seems to have been removed from 1.6.



To: Ed Forrest who wrote (22862)10/17/2001 10:36:01 PM
From: IngotWeTrust  Respond to of 110652
 
<edit>



To: Ed Forrest who wrote (22862)10/17/2001 10:36:24 PM
From: IngotWeTrust  Respond to of 110652
 
Man, you all are tough on newbies. MY FIRST POST ON THIS THREAD was about SP-1 bug for WIN95 upgrades. You all just seem to conveniently forget about that.

#2, CNET was NOT spam but about USING SI to RESEARCH topics of interest, in this case a stock someone else mentioned. I even went to great lengths to point out the bottom half of the page, the different features, and said it was available for ALL companies mentioned on this thread that some folks might want to investigate as an equity purchase if someone liked a computer solution. Go back and read it, and try with an open mind, Ed.

#3 I did not jump on myself, I HAVE BEEN JUMPED ON BY OTHERS and you make number 3.

WHAT FOR? Parting my hair incorrectly? Having bad breath?

WHAT ON EARTH are you demainding I'm apologize for? BREATHING? Not appreciating being told to f___ck myself by your sacred "cow?"

I'm new here, and I intend to stay here, and contribute here, and the sooner you all part the ranks and make like more pleasant for a newbie, the sooner we'll all get along. If you don't want to talk to me, fine. If you do want to talk with me, fine, if you want to talk about me fine, but don't dish it out and expect me to play chew toy for some spoiled rotweillers.

Christ on a crutch, Ed!!!!

Sooooo Lovely to meet you. How's the wife and kids? Your gout?.
g_t