|
Posted by B. Nice on December 30, 2006, 5:49 am
If you were Registered and logged in, you could reply and use other advanced thread options
On Fri, 29 Dec 2006 23:32:00 -0800, Robin Colleen Moore
>Why is Skype 3.0.0.198 on WinXP trying to access
>"Skype Extras Manager" (129.6.15.28)?
>Should we ALLOW or DENY these requests from the new Skype?
>Why or why not?
You have decided to intstall/run Skype - which means you have decided
to trust the Skype program. Then why don't you just let it do what
it's designed to do instead of worrying about ZA alarms?
If you don't trust Skype, use something else.
BTW, 129.6.15.28 seems to be a public ntp (time) server.
>My ZoneAlarm personal firewall software went bonkers when I installed the
>new Skype 3.x software on Windows XP this week. Basically, I received all
>the "usual" warnings about Skype wanting to access the trusted zone, the
>Internet, etc.
Yes. That's the problem with personal firewalls like ZA.
>But with Skype 3.0, there is a NEW warning:
> Skype Extras Manager is trying to access the Internet
> Application: skypePM.exe
> Destination IP: 129.6.15.28
>
>Should we ALLOW or DENY this Skype 3.0 request?
>What are the ramifications of each decision?
You should know. You installed ZA to present you with such kind of
worries.
|
|
Posted by Robin Colleen Moore on December 30, 2006, 7:49 am
If you were Registered and logged in, you could reply and use other advanced thread options
On Sat, 30 Dec 2006 10:49:03 GMT, B. Nice wrote:
> You have decided to intstall/run Skype - which means you have decided
> to trust the Skype program. Then why don't you just let it do what
> it's designed to do instead of worrying about ZA alarms?
> If you don't trust Skype, use something else.
Without being too direct, I would say your attitude needs a serious
adjustment in my very humble opinion.
You TRUST every program you install? That's incredulous.
Do you know what RealPlayer is doing behind your back? Do you realize that
Adobe Acrobat phones home constantly? Do you suspect that almost every
program you install has the potential to report back to the maker your
day-to-day actions?
You're obviosly not a security expert if you trust every program you choose
to install to do what IT thinks is the right thing to do.
nuff said
|
|
Posted by B. Nice on December 30, 2006, 9:51 am
If you were Registered and logged in, you could reply and use other advanced thread options On Sat, 30 Dec 2006 12:49:49 GMT, Robin Colleen Moore
>On Sat, 30 Dec 2006 10:49:03 GMT, B. Nice wrote:
>> You have decided to intstall/run Skype - which means you have decided
>> to trust the Skype program. Then why don't you just let it do what
>> it's designed to do instead of worrying about ZA alarms?
>> If you don't trust Skype, use something else.
>
>Without being too direct, I would say your attitude needs a serious
>adjustment in my very humble opinion.
You are very welcome to have that opinion. In my very humble opinion
you need to reconsider your security concept.
>You TRUST every program you install?
Of course. Otherwise I would'nt install it.
>Do you know what RealPlayer is doing behind your back?
No. Because I'm not using it.
>Do you realize that Adobe Acrobat phones home constantly?
Really? Except looking for program updates that could be security
related - exactly what does it phone home about? What personal related
info does it send out of your system?
>Do you suspect that almost every
>program you install has the potential to report back to the maker your
>day-to-day actions?
Your point being?
>You're obviosly not a security expert if you trust every program you choose
>to install to do what IT thinks is the right thing to do.
Since you rely on something like ZA to protect you from programs
"phoning home" you obviously are'nt either.
|
|
Posted by Jim Ford on December 30, 2006, 10:28 am
If you were Registered and logged in, you could reply and use other advanced thread options Robin Colleen Moore wrote:
> You're obviosly not a security expert if you trust every program you choose
> to install to do what IT thinks is the right thing to do.
Not only that, there are folk on this forum that profess to be security
experts, that are running Thunderbird 1.0.7 - 15 critical security fixes
behind the current issue!
Jim Ford
|
|
Posted by Death5 on December 30, 2006, 1:41 pm
If you were Registered and logged in, you could reply and use other advanced thread options Jim Ford wrote:
> Robin Colleen Moore wrote:
>
>> You're obviosly not a security expert if you trust every program you
>> choose
>> to install to do what IT thinks is the right thing to do.
>
>
> Not only that, there are folk on this forum that profess to be security
> experts, that are running Thunderbird 1.0.7 - 15 critical security fixes
> behind the current issue!
>
Not only that, you got people running around in the NG needing to nit
pick. Apparently, this person doesn't seem to know that a program and
the machine have to be put into a position to be attacked.
One place I am currently working, they are still running a version of
IE 6 that's three years old and I don't know that last time it was
updated. I don't even know when the last time XP Pro on the machines has
been updated with security fixes, although they do take care of those
servers. The XP Pro machines and IE itself are NOT being attacked due
to this, because IT has a big old proxy setting there blocking user
access to damn near everything on the Internet, even though most of its
end-user base jobs are to be on the Internet, dealing with out side
clients, with the solution. Its end-user base is educated on the use of
computers in a work environment and everything is locked down. Those
users go where IT wants them to go and nowhere else.
I'll give you a little hint on this too, I am running a version of XP
Pro on this laptop that's not a legal copy and has NOT received a
critical update and in ages. It's not being attacked because it has not
received the updates, because the machine is NOT put into a position to
be attacked.
Again, the program and the machine have to be put into a position to be
attacked. If neither one of them are in that position, then your point
here is moot.
|
| Similar Threads | Posted | | Voip Over High Speed Internet Access,Voip Updated Howto, | June 28, 2006, 9:18 pm |
| Any recommendations re: economy internet phone service- Vonage / Skype ? | February 6, 2005, 9:15 am |
| Vonage VOIP Deal & Extras... | October 19, 2005, 1:15 pm |
| Initiate a SkyPe Call Using a Cordless Phone Via ActionTec Internet Phone Wizard? | March 14, 2006, 12:59 pm |
| SIP Security Research | July 7, 2005, 6:01 am |
| how does DTMF security work? | March 12, 2006, 1:41 pm |
| voip security issues | September 11, 2006, 2:30 pm |
| VoiceMaster Installation, Configuration, Tech Support, Training, Security | June 24, 2006, 7:20 pm |
| Call Manager 5.0 to get SIP | February 19, 2006, 1:02 pm |
| Call Manager vs Softswitch | June 29, 2004, 5:13 am |
|
|