[ILUG] Security: Was Naive ADSL/WiFi questions (long (sorry!))?

[Michael Watterson]

Josh Glover wrote:
> On 23/06/07, Michael Watterson <watty at eircom.net> wrote:
>
>
>> 3) External Access. Don't allow unknown providence  SW to be  run.
>> Floppy,  CD, or Internet. Why almost every PC supplied had Floppy left
>> as default boot device?  Disable all network bindings and services not
>> needed.
>
> PCs come with a default boot device so you can over-right the Windows
> install right of the bat! ;)
used to be amusing on NT4.0, yes. XP they seem to have fixed that.
>
>
> /me ducks
>
> But yes, disable this shite straight off.
It's possible to write a Virus that is on CD.  CD  is left in and  CD is 
default boot.  Virus checks for  Linux / OS2/Windows and  installs  
appropriate  root kit (if not  installed, or removes competitor's 
VM/Root kit first), then passes boot to what ever is HDD default boot.

At least some BIOSes now ask BOOT CD? and if you don't answer they boot 
the next device on list (even when CD is top of List).

I always disable Autrorun=0 in the CDROM service of poor Windows users. 
Some silly ejit will of course add a Linux equivalent of Autorun if 
Ubuntu gets popular... I have mixed feelings about the Automount that 
seems to happen nowadays on Linux desktop (SD cards, USB drives and 
CDs). Is this safe and where do you turn it off?

-- 
Mike