#cisco
02 January 2008
Total 19 pages. You are browsing page 19/19.
First :: Prev :: [...] [15] [16] [17] [18] [19] :: Next :: Last
23:50 <****> doolak, thats why i told you what to get :)
23:50 <****> i'm assuming a hacker would
23:50 <****> fuck hackers
23:50 <****> I found a PC arp spoofing the other day, I still haven't found out what was going on
23:50 <****> if a hacker wants in, they will get in. so stop wasting your time
23:50 <****> yes yes sodomy to all the hackers, but seriously you can't just ignore security
23:50 <****> Perdition: honestly, a simple keylogger or screencap is *Far far far* more likely to occur than some sophsiticated reverse-decryption of 1x .
23:51 <****> we had a virus once that would arp spoof for the gateway and collect passwords
23:51 <****> i'd like to kill the hacker who kept me up till 5am last night working :/
23:51 <****> i'm arp spoofing right now :)
23:51 <****> well, as those guys there in that group know less then me about networks, that will be the right choice... ;-)
23:52 <****> nemith, agreed 100%. but theres a delicate balance between security and manageability/useability, and Perdition seems to have crossed over that line.... way over....
23:52 <****> isk analysis
23:52 <****> risk
23:52 <****> exactly.
23:52 <****> at the end of the day security is a business decision
23:52 <****> so thx a lot, IPvFreely!
23:52 <****> doolak, yep
23:53 <****> +6
23:53 <****> ;-)
23:53 <****> it's like the WTC, it's nice to have it, but if you built decentralized stuff it's more secure, but then you don't get a nice big building
23:53 <****> doolak, come bug me if you need help setting it up.
23:53 <****> i am trying to convince my boss we need a management network
23:53 <****> thats what im saying, if you are paranoid, modern switches have enough features like 802.1x, dhcp snooping, ip source guard and stuff that really helps you if you are worried about lan security - not saying that there isnt any potential to shoot yourslef in the foot, multiple times
23:53 <****> i am in europe - they are in afrika...
23:53 <****> so they have to set it up by themselves...
23:53 <****> ahhahahhah suckers
23:53 <****> all of our hosts can start talkin SNMP to other devices
23:54 <****> btw is it possible for two macs to operate on the same LAN if the second MAC is an attacking computer who is spoofing?
23:54 <****> that dosent sit well with me
23:54 <****> it's funny, you think you are okay layer2 wise because you are segmented, and secure layer3
23:54 <****> but they switch vlans through dtp or whatever, and there goes your security, so you should address those issues
23:55 <****> dwxreaper, are you into security?
23:55 <****> my problem is 1 guy who is a jerk can destroy your whole business, and there really seems no solution to that
23:55 <****> freely, i like networking, and i like security. i prefer to build things though
23:55 <****> gotcha
23:55 <****> i like security
23:55 <****> im takin my cissp now
23:55 <****> i like cover your ass.
23:56 <****> I dislike security because it's a losing battle, if there really is a threat
23:56 <****> dwxreaper, yep
23:56 <****> as soon as you make something idiot proof
23:56 <****> they will invent a better idiot
23:56 <****> well i work for a major media outlet, sooo they take security very seriously
23:56 <****> the same goes for s/idiot/hacker
23:56 <****> hermatize, and the hackers love that, bigger target now
23:56 <****> hi guys
23:56 <****> sox/pci
23:56 <****> hey dragor
23:56 <****> nemith, yep. C.Y.A.
23:57 <****> if its compliant, thats all that matters
23:57 <****> if I worked security I think i'd focus on damage control
23:57 <****> yeah we are under MPAA's half way PCI design
23:57 <****> nemith: sox is kind of a crock, because sox allows the organization itself to decide what level of security it needs and will comply with. The auditors just come in to ensure they've followed their own protocols.
23:57 <****> IPv6Freely__: so you are saying do everything half-assed and just enough to pass compliancy?
23:57 <****> loather-work: true
23:57 <****> we were hacked last night, what am i supposed to do reinstall an OS on every box, yeah
23:58 <****> yeah
23:58 <****> my sox policy could be, "keep joe blow out of the server room" and as long as joe blow doesn't get in, I'm compliant
23:58 <****> I analyzed the attack, did what could be done, besdies reinstalling 200 OS's, but he will be back
23:58 <****> dwxreaper: were they all compromised?
23:58 <****> security is a real part of a network design and maintaince. Pretending it's not is just crazy
23:58 <****> yea, there are lots of trade-offs.
23:59 <****> very true
23:59 <****> it's the whole usability/security thing
23:59 <****> IPv6Freely__: does it make any sense if they choose windows small business server premium? or is the standard edition easier to use ?
23:59 <****> personally I want the network secure but as open as possible
23:59 <****> as one goes up, the other inevitably has to go down
23:59 <****> loather: it _appears only one internal machine was compromised, and attacks were initiated from that machine
23:59 <****> however, once on the machine, he gets all the passwords.. so we wrote an algorithm that changes the password per machine
23:59 <****> dwxreaper: you got lucky then :p
--- Log closed Thu Jan 03 00:00:01 2008
Total 19 pages. You are browsing page 19/19.
First :: Prev :: [...] [15] [16] [17] [18] [19] :: Next :: Last