Great Circle Associates Firewalls
(October 1996)
 

Indexed By Date: [Previous] [Next] Indexed By Thread: [Previous] [Next]

Subject: RE: NT Security
From: Keith McCammon <keithm @ asymetrix . com>
Date: Wed, 02 Oct 96 08:20:00 PDT
To: "'Firewalls'" <firewalls @ greatcircle . com>



 ----------
the Division level.  We think less, but more robust machines running NT   
  =
workstation on both the class and unclass LAN/WAN's, would offer what we   
  =
require in terms of processing power and NT's excellent   =
auditing/security.

Excuse me, but NT does NOT have excellent auditing/security. Internet   
hackers are just starting to wade into NT, and the more I talk to them   
the more gaping holes I find.


  However, it is very expensive, both in terms of   =
equipment, and personnel, to maintain these two NT LAN's.  While I have   
  =
yet to see someone hack an NTFS partition with permissions and other   =
holes plugged up (watched a couple of DISA's best guys try), the security   
    


What??? NTFS is not encrypted! NTFS is not a secure file system! You can   
directly edit NTFS disk sectors from WITHIN NT! You can also boot to DOS   
and using the NTFS4DOS driver read any file regardless of encryption. You   
can also reinstall NT and Take Ownership of entire volumes! And if you   
physically transfer the hard disk to another NT box you can also take   
ownership, negating all file security!

goons still have conniption fits about placing classified data on an   =
unclassified NTFS partition.  Any word on when NT will be network   =
certified??

Probably in a year or so.

Keith McCammon
MIS Analyst
Asymetrix Corp
*Opinions Are My Own*




Indexed By Date Previous: Re: Gauntlet vs. Sidewinder
From: "Barbara W. Jaarsma" <barbara @ us . checkpoint . com>
Next: TCP SYN attack possible SOLUTION: FW-1
From: "Saqib A. Khan" <s_khan @ litle . net>
Indexed By Thread Previous: RE: NT Security
From: g6amsib @ 1ADTFREAR . 1AD . ARMY . MIL (G6 CPT Bates)
Next: RE: NT Security
From: Keith McCammon <keithm @ asymetrix . com>

Google
 
Search Internet Search www.greatcircle.com