Hmmmm... ok, so I just installed a copy of ftp voyager on my laptop, and it
told me I had windows firewall running and asked if I wanted to open the
required ports.
How does it do that? osmosis ?
Don't most firewalls just report when an application is trying to do
something, you then get the chance to allow it / deny it through the
firewall.
I'd hate to think that there was a chance that the application could speak
directly to the firewall to do this - all it would need was to find a way of
surpressing any dialog popup (buffer overruns?) and the application gets the
ability to do what it wants to the firewall.
> Hmmmm... ok, so I just installed a copy of ftp voyager on my laptop, and
> it told me I had windows firewall running and asked if I wanted to open
[quoted text clipped - 22 lines]
>>>
>>> Stu
Stuart Parker - 08 Feb 2007 15:02 GMT
Nothing Windows Firewall related popped up during the installation or
operation of FTP Voyager.
> Don't most firewalls just report when an application is trying to do
> something, you then get the chance to allow it / deny it through the
[quoted text clipped - 32 lines]
>>>>
>>>> Stu
Goran Sliskovic - 08 Feb 2007 17:14 GMT
> Don't most firewalls just report when an application is trying to do
> something, you then get the chance to allow it / deny it through the
[quoted text clipped - 4 lines]
> surpressing any dialog popup (buffer overruns?) and the application gets the
> ability to do what it wants to the firewall.
...
Windows firewall can be easily bypassed, given the administrative
priveleges. There are already viruses that do that:
http://www.sophos.com/virusinfo/analyses/trojagentco.html
Anyway, windows firewall cannot stop any decent virus, as many use code
injection into IE, for example (thus traffic originates from authorized
application). But this is off-topic here.
Regards,
Goran