Text 6751, 58 rader
Skriven 2005-04-08 08:41:27 av Alan Zisman (1:106/2000.0)
   Kommentar till text 6747 av Jeff Guerdat (1:106/2000.0)
Ärende: Re: WinXP and Peer to Pe
================================
-=> Jeff Guerdat wrote to Alan Zisman <=-

 JG> On 04-07-05, Alan Zisman said to Jeff Guerdat:

 JG> Windows XP Professional replaces password-based security with two
 JG> alternatives:

 JG> * Simple File Sharing is enabled by default on Windows XP Professional
 JG> systems that are members of a workgroup (typically used in small
 JG> networks) rather than a domain (typically used in large corporate
 JG> networks).  For full details, see our article on Simple File
 JG> Sharing.There are no passwords or access restrictions and, with one
 JG> exception described in the article, everything that's shared is
 JG> accessible by everyone on the network.  Simple File Sharing is the only
 JG> type of sharing available in Windows XP Home Edition.

 JG> * By disabling Simple File Sharing, you can specify an Access Control
 JG> List (ACL) for each shared disk or folder.  The ACL specifies which
 JG> users are allowed to have access.

 AZ>Sounds like this might be the issue-- do you have a
 AZ>reference to the article mentioned?

 JG> Of course I'm having trouble finding the page I referenced yesterday.
 JG> Here's an MS KB page that has a description as part of its
 JG> introduction:

 JG> http://support.microsoft.com/default.aspx?scid=kb;en-us;307874

 JG> Ah!  Here's the page I clipped from:

 JG> http://www.practicallynetworked.com/sharing/xp_filesharing/

Got 'em... thanks. I hadn't given much attention to 'Simple File Sharing' up
until now-- and I find it particularly worriesome, given the growing popularity
of wireless networking. To a large extent, I've considered the media attention
to war driving (etc) to be a bit over the top... but the scenario where a WinXP
Home user gets a wireless router and sets it up with its (insecure) defaults,
and turns on SFS with ITS insecure defaults gives me a scenario where:

1) Everything on their system is shared... in fact, all the drives on all the
computers will be shared if they've used the MS network wizard floppy to set up
each system.

2) No username or passwords are required

3) The workgroup is left as a widely-known default (MSHOME)

4) The network SSID is left as one of a few widely-known default (LINKSYS,
DLINK, etc), SSID broadcast is left on, and no encryption is used.

Put all these together, and their home network is open to anyone else in the
neighbourhood with a wireless card.

I don't like it!
... Inet mail to: alan at zisman dot ca
--- MultiMail/Win32 v0.40
 * Origin: COMM Port OS/2 juge.com 204.89.247.1 (281) 980-9671 (1:106/2000)