Firewalls are a Joke.

[quote=Greg Hoglund at rootkitdotcom][SIZE=3]yeah, personal firewalls are a joke, they are ALL bypassed[/SIZE].[/quote]

[URL=http://www.rootkit.com/board.php?thread=11534&did=edge831&disp=11534][SIZE=3]Techniques which will allow bypass of the majority of modern proactive protection and firewalls.[/SIZE][/url]

[SIZE=3]Rules are two kinds - global rules and rules for applications. Generally speaking, at the heart of bypass of any protection are 1) assumptions, 2) exceptions, and 3) errors made by developers of protection. :([/SIZE]

The assumption by Mr. Greg Hoglund himself seems to be that everybody is so stupid as to allow stuff onto their computer that *can* bypass 'Protection'. :)
Besides, his techniques won't work if the user is in Restricted User Mode...

Paul

So, Unless I am already infected with something or some vulnerability becomes leveraged, I should be OK surfing with Limited account or Standard account, Firewall, AV and Firefox, barring dodgy site or link there to?

[quote=Simple10;191529]So, Unless I am already infected with something or some vulnerability becomes leveraged, I should be OK surfing with Limited account or Standard account, Firewall, AV and Firefox, barring dodgy site or link there to?[/quote]
Of course. Safe-hex is still the best way to go if you don't want to get infected.

Paul

So, then why did the DoD make the statement "We no longer rely on Firewalls to protect our computers, our focus is now on detection and tracking."?

[quote=Simple10;192044]So, then why did the DoD make the statement "We no longer rely on Firewalls to protect our computers, our focus is now on detection and tracking."?[/quote]
Because that's what he is paid for. ;)
P.S. If you 'detect' anything, this means that your security policy has failed. I'm on Windows XP Home with no firewall or anti-virus installed. Of course tools exist to check the system. Nobody has 'detected' anything on my system, ever! :)

Paul