From owner-freebsd-security Sun Nov 25 17:59:28 2001 Delivered-To: freebsd-security@freebsd.org Received: from shadow.booms.net (shadow.booms.net [204.188.101.238]) by hub.freebsd.org (Postfix) with ESMTP id A9ADF37B419 for ; Sun, 25 Nov 2001 17:59:25 -0800 (PST) Received: from cortsen (c1735868-a.arvada1.co.home.com [65.7.159.215]) by shadow.booms.net (8.11.1/8.11.1) with SMTP id fAQ26fw49129 for ; Sun, 25 Nov 2001 19:06:41 -0700 (MST) (envelope-from lists-inet@booms.net) From: "Brandon Harper" To: Subject: RE: Security zone Date: Sun, 25 Nov 2001 18:59:27 -0700 Message-ID: MIME-Version: 1.0 Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: 7bit X-Priority: 3 (Normal) X-MSMail-Priority: Normal X-Mailer: Microsoft Outlook IMO, Build 9.0.2416 (9.0.2910.0) X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000 In-Reply-To: <3C014C5B.9765067F@anarcat.dyndns.org> Importance: Normal Sender: owner-freebsd-security@FreeBSD.ORG Precedence: bulk List-ID: List-Archive: (Web Archive) List-Help: (List Instructions) List-Subscribe: List-Unsubscribe: X-Loop: FreeBSD.org > Anyways, I can't figure out how one can pretend to have that level of > control over the stack (per-app) and why one would want to have it > anyways. > > "apps" are installed/deinstall, modified, upgraded, etc. It would be > impossible and simply useless to have that kind of control. > I for one use ZoneAlarm Pro on my *cough* XP Pro workstation even though there is another box which serves as my firewall/gateway. Why? Well, although its not a 100% solid solution, it lets me know what other programs are trying to access the internet.. such as Spyware or the possible backdoor (such as BackOriface, etc). No, I don't think its the best or most secure thing in the world as programs are able to access the internet without my knowledge via IE dll's anyhow, but every extra layer helps. Its also nice to know when the version numbers of programs change. Very rarely do I change software on my machine because I do development work on it, and its interesting to see if applications decide to update themselves, etc. YMMV, - Brandon To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-security" in the body of the message