BlackIce has major security flaw!>

[samajm]

could allow hackers to take control of your PC
yahoo_news

 

[Wolfie]

There is a patch out for it HERE.


Wolfie

 

[Nothinman]

The problem, known as a "buffer overflow," is deep within BlackICE, said eEye's "Chief Hacking Officer," Marc Maiffret.

You'd think people programming for security software would know how to avoid those simple errors. And since the source it closed you'll never know how many of them there are...

 

[Damascus]

I never trusted BlackICE in the first place..

 

[Miramonti]

Just when you think Black Ice can't get any worse, it does.

 

[fregac]

Hence why I run Tiny. Not only do you not have to pay for it, but it actually WORKS!

 

[Nothinman]

Hence why I run Tiny. Not only do you not have to pay for it, but it actually WORKS!

Working and being secure are different things, hell Windows works most of the time. Has Tiny been audited by anyone but the author for security problems? If not, you're in the same boat as the BlackIce users.

 

[TimberWolf]

Yes - TPF gets good ratings at Gibson Research.

Black Ice has always been insecure during their testing - Evaluation results.

 

[Nothinman]

I'm sorry but Steve Gibson is a yahoo (no offence to Yahoo.com), he writes all his little apps in asm so it looks like he's smarter than he really is and everything he writes reads like a soap opera. After the raw sockets issue he came up I lost all respect for him.

And I meant code auditing, not just running a cheap little program against it.

edit: grammar

 

[Damascus]

<< he writes all his little apps in asm so it looks like he's smarter than he really >>



What's wrong with assembly? Makes for small executables, unlike the bloatware
produced by todays compilers.

 

[Sunner]

Steve Gibson probabaly didn't get enough attention when he was a kid.

I like reading all his articles and stuff, but it's more cause it's funny than for information.

Funny site

[edit] ARGH I HATE FUSETALK's LINK SYNTAX!!!!!!! :|[/edit]

 

[Nothinman]

What's wrong with assembly? Makes for small executables, unlike the bloatware
produced by todays compilers.

A) He writes windows apps, since it takes about 3 pages of asm to draw a window you do the math at how much work he's doing for no reason =)
B) No chance of running his apps on anything but Intel chips
C) More I can't think of right now.

I know you were kidding, but there's too many people that think if you program in asm you're a genious when the reality is that asm is actually really simple and if you program in asm a lot you either work with a lot of apps that need instruction level hand optimization or you're a masochist, Gibson is the latter =)

 

[Nothinman]

Also read this:

http://tooleaky.zensoft.com/

This program very clearly penetrates every firewall on the market, including Zone Alarm. It sends data out to a server (in this case, grc.com, just like Steve Gibson's LeakTest), and then retrieves data in response--completely bypassing your firewall.