Ethical Hacking Learn to find vulnerabilities before the bad guys do! Gain real world hands on hacking experience in our state of the art hacking lab. Course designed and taught by expert instructors with years of penetration testing experience. 12 student maximum in every class. Certification attempt included in every package. | Computer Forensics Training at InfoSec Institute Gain the in-demand skills of a certified computer examiner, learn to recover trace data left behind by fraud, theft, and cybercrime perpetrators. Discover the source of computer crime and abuse at your organization so that it never happens again. All of our class sizes are guaranteed to be 12 students or less to facilitate one-on-one interaction with one of our expert instructors. |

| Subject: | Proactive desktop protection (need beta testers) |
|---|---|
| Date: | Mon, 18 Oct 2004 09:20:53 -0700 |
Hello All, I've lurked on the list since about 1996, so it's about time I post a comment. Nearly every thread I've read here regard threats from Internet content. The odd thing is, we ourselves give content our full privilege to local resources by simply viewing it. Frequently, content even runs with our local admin rights. Our reaction is to lobotomize our browsers and email, disable scripting, load AV and spyware detection software, and apply patches and signature files faster than we're hit. Worst case is that content activity modifies local resources. However, if Internet content (both pages and attachments) could read but not modify local resources, we could safely run useful or infected content or attachments which contain Active-X, Javascript, Macros, buffer overflows, Viruses, Trojans, etc. I'm looking for willing beta testers for a managed desktop Agent product. I have a few small companies beta testing this, and one founding member of AVIEN who will beta test this in an .edu setup, and who also supports the fundamental concept. I need companies (who are not potential compeditors) who are willing to sign an NDA (the product is not GA/for sale until January). A full beta test can be done if you're a local company, or large company. This would involve a site visit, and needs SQLserver for the server side. A standalone client beta test (limited test) is available which runs on W2000Pro, or XP Pro. This is a 7MB zip that can be emailed (still needs NDA). My favorite demo (with the Agent running) is to run as administrator, set IE settings for the Internet to low, and hit exploit sites, and warez/cdkey/other sites. I'll run Ad-Aware or an AV scanner after the Agent flushes, and no objects are found. Perfect for home computers, but since it's managed; it's targeted for departmental and corporate environments. Note this is a beta product which needs additional features and support. It doesn't solve everything (please ignore our stale and lame website). It is meant to compliment existing protections. I need feedback from you on what it needs to support and if you can find a way to break it. Please email me directly if you're willing to beta test the product. Thanks, Bill Stout Sr. Sales Engineer Cell: 408-966-9804 This electronic transmission (and any attached documents) is for the sole use of the individual or entity to whom it is addressed. It is confidential and may be privileged. Any further distribution or copying of this message is strictly prohibited. If you received this message in error, please notify GreenBorder immediately by telephone at (650) 625.0601 and destroy the message (and all attached documents), immediately.
| <Prev in Thread] | Current Thread | [Next in Thread> |
|---|---|---|
| ||
| Previous by Date: | [Full-Disclosure] Re: [Unpatched] New 0day exploit for XPSP2, Juergen Schmidt |
|---|---|
| Next by Date: | [Full-Disclosure] re: How to Break Windows XP SP2 + Internet Explorer 6 SP2, Michael Evanchik |
| Previous by Thread: | [Full-Disclosure] Re: [Unpatched] New 0day exploit for XPSP2, Juergen Schmidt |
| Next by Thread: | MSXML Service Packs, Joe Dance |
| Indexes: | [Date] [Thread] [Top] [All Lists] |