<?xml version="1.0" encoding="UTF-8"?><rss version="2.0"
	xmlns:content="http://purl.org/rss/1.0/modules/content/"
	xmlns:dc="http://purl.org/dc/elements/1.1/"
	xmlns:atom="http://www.w3.org/2005/Atom"
	xmlns:sy="http://purl.org/rss/1.0/modules/syndication/"
		>
<channel>
	<title>Comments on: Cisco &amp; Microsoft Patch TCP Stack DoS Exploit</title>
	<atom:link href="http://www.darknet.org.uk/2009/09/cisco-microsoft-patch-tcp-stack-dos-exploit/feed/" rel="self" type="application/rss+xml" />
	<link>http://www.darknet.org.uk/2009/09/cisco-microsoft-patch-tcp-stack-dos-exploit/</link>
	<description>Ethical Hacking, Penetration Testing &#38; Computer Security</description>
	<lastBuildDate>Tue, 14 Feb 2012 00:17:07 +0000</lastBuildDate>
	<sy:updatePeriod>hourly</sy:updatePeriod>
	<sy:updateFrequency>1</sy:updateFrequency>
	<generator>http://wordpress.org/?v=3.3.1</generator>
	<item>
		<title>By: Jeffrey</title>
		<link>http://www.darknet.org.uk/2009/09/cisco-microsoft-patch-tcp-stack-dos-exploit/#comment-159018</link>
		<dc:creator>Jeffrey</dc:creator>
		<pubDate>Wed, 16 Sep 2009 21:27:33 +0000</pubDate>
		<guid isPermaLink="false">http://www.darknet.org.uk/?p=2095#comment-159018</guid>
		<description>&lt;&lt;&lt; You wouldn</description>
		<content:encoded><![CDATA[<p>&lt;&lt;&lt; You wouldn</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: Morgan Storey</title>
		<link>http://www.darknet.org.uk/2009/09/cisco-microsoft-patch-tcp-stack-dos-exploit/#comment-158978</link>
		<dc:creator>Morgan Storey</dc:creator>
		<pubDate>Mon, 14 Sep 2009 02:36:40 +0000</pubDate>
		<guid isPermaLink="false">http://www.darknet.org.uk/?p=2095#comment-158978</guid>
		<description>@Jeffrey: You wouldn&#039;t happen to be an employee of eEye would you, that whole post looks very marketing-esque. I heard some companies are now hiring blogspammers, please take it elsewhere people here are smart enough to make up their own minds. eEye has from what I have seen a small and very Niche market, most of the features you are touting there are on 90% of AV vendors out there, HIPS/HIDS is in McAfee, Sophos, Trend, iirc it can even be enabled in Symantecs end point.

Back on topic, it is interesting that the Linux Kernel devs have advised they won&#039;t be patching as yet, it is a bit of a worry, yes it is only a DOS, but this is like the Apache bug of similar ilk, if you don&#039;t patch it or at least make an attempt you are being shown up, and showing that security is not that big a concern.</description>
		<content:encoded><![CDATA[<p>@Jeffrey: You wouldn&#8217;t happen to be an employee of eEye would you, that whole post looks very marketing-esque. I heard some companies are now hiring blogspammers, please take it elsewhere people here are smart enough to make up their own minds. eEye has from what I have seen a small and very Niche market, most of the features you are touting there are on 90% of AV vendors out there, HIPS/HIDS is in McAfee, Sophos, Trend, iirc it can even be enabled in Symantecs end point.</p>
<p>Back on topic, it is interesting that the Linux Kernel devs have advised they won&#8217;t be patching as yet, it is a bit of a worry, yes it is only a DOS, but this is like the Apache bug of similar ilk, if you don&#8217;t patch it or at least make an attempt you are being shown up, and showing that security is not that big a concern.</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: Jeffrey</title>
		<link>http://www.darknet.org.uk/2009/09/cisco-microsoft-patch-tcp-stack-dos-exploit/#comment-158953</link>
		<dc:creator>Jeffrey</dc:creator>
		<pubDate>Fri, 11 Sep 2009 07:23:13 +0000</pubDate>
		<guid isPermaLink="false">http://www.darknet.org.uk/?p=2095#comment-158953</guid>
		<description>&lt;&lt;&lt; Even then, a patch is released but how many people actually apply it?

     Probably not many (right away).  Most IT departments, if they are smart, will have to test it.  I have finally been able to provoke my IT department to change from the Symantec Endpoint Protection suite they are using now to eEye Digital Security&#039;s Blink Professional endpoint protection suite for our desktop systems and Blink Server Edition on our servers.  It allows us to not have to &quot;panic patch&quot; (as everyone calls it).  
     Blink is already protecting from the vulnerability which gives us time to test and roll out our patches.  I think the thing that sold the product even more, was the fact that each Blink node has Retina built into it which scans each host we have it on and then transmits its data back to eEye&#039;s REM management counsel.
     I havev been using the Personal Edition of Blink on my home systems and have been completely happy with it.  It is nice to see companies, like eEye, that drive to protect their users from vulnerabilities.
     
     Blink Personal Edition is free for one year if anyone wants to try it.  I have created a forum post (in eEye&#039;s forums) for new users of Blink trying to explain why it is so unique.

     http://forums.eeye.com/forums/t/998.aspx?PageIndex=1</description>
		<content:encoded><![CDATA[<p>< << Even then, a patch is released but how many people actually apply it?</p>
<p>     Probably not many (right away).  Most IT departments, if they are smart, will have to test it.  I have finally been able to provoke my IT department to change from the Symantec Endpoint Protection suite they are using now to eEye Digital Security's Blink Professional endpoint protection suite for our desktop systems and Blink Server Edition on our servers.  It allows us to not have to "panic patch" (as everyone calls it).<br />
     Blink is already protecting from the vulnerability which gives us time to test and roll out our patches.  I think the thing that sold the product even more, was the fact that each Blink node has Retina built into it which scans each host we have it on and then transmits its data back to eEye's REM management counsel.<br />
     I havev been using the Personal Edition of Blink on my home systems and have been completely happy with it.  It is nice to see companies, like eEye, that drive to protect their users from vulnerabilities.</p>
<p>     Blink Personal Edition is free for one year if anyone wants to try it.  I have created a forum post (in eEye's forums) for new users of Blink trying to explain why it is so unique.</p>
<p>     <a href="http://forums.eeye.com/forums/t/998.aspx?PageIndex=1" rel="nofollow">http://forums.eeye.com/forums/t/998.aspx?PageIndex=1</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: cbrp1r8</title>
		<link>http://www.darknet.org.uk/2009/09/cisco-microsoft-patch-tcp-stack-dos-exploit/#comment-158937</link>
		<dc:creator>cbrp1r8</dc:creator>
		<pubDate>Wed, 09 Sep 2009 19:33:34 +0000</pubDate>
		<guid isPermaLink="false">http://www.darknet.org.uk/?p=2095#comment-158937</guid>
		<description>Even then, a patch is released but how many people actually apply it? Cisco equipment is well known for being hard to manage/patch so I</description>
		<content:encoded><![CDATA[<p>Even then, a patch is released but how many people actually apply it? Cisco equipment is well known for being hard to manage/patch so I</p>
]]></content:encoded>
	</item>
</channel>
</rss>

