Search: Home Bugtraq Vulnerabilities Mailing Lists Jobs Tools Beta Programs
Security Patches by Modem? Forget it!
Scott Granneman, 2004-03-24

Let's face it - there is no way for dial-up users on any major operating system to keep their computers up-to-date and patched. OK, maybe "no way" is an exaggeration. How about, "a difficult, burdensome, time-consuming, very prone to failure way?"

Comments Mode:
CVSUP works via modem 2004-03-24
Anonymous
For a time, I updated my parents' FreeBSD PC via CVSUP over a 56k dial-up.
It was very slow, but it's doable IMO.
I needed no virus-sigs, at least ;-)
But for downloading KDE-updates etc, I still burned CDs - until I subscribed them to DSL, too, and installed a WLAN-router.

I could probably li...

[ more ]  [ reply ]
Security Patches by Modem? Forget it! 2004-03-24
Ed Habal (1 replies)
You are living dangerously if you connect to the internet BEFORE you are fully patched or have a firewall installed (hardware or software). Systems have been compromised in under 15 minutes of being connected to the internet....

[ more ]  [ reply ]
Security Patches by Modem? Forget it! 2004-03-25
Anonymous
"in under 15 minutes of being connected to
the internet"

Less than that about 5 or 6 minutes Windows
XP has messenger installed by default many
users forget to uninstall it from add/remove
if the user uses XP ICF firewall two ports are opened to the Internet. If the user
doesn't realize he ...

[ more ]  [ reply ]
Security Patches by Modem? Forget it! 2004-03-25
Anonymous
About time they came out with a patch disk. A recent Win ME to XP upgrade took 14 hours of download time.

I have had "locked-down but unpatched" Win 2K servers compromised within 60 seconds of being on the internet (it was even running Zone Alarm and anti-virus software -- it took an external fi...

[ more ]  [ reply ]
Security Patches by Modem? Forget it! 2004-03-25
Gerhard Rickert (1 replies)
Good read, there was a line you had in here that I wanted to say something about, tottaly off the subject. You said,

And I promise to remember that coffee may be cheap and available for everyone, but broadband is not - and won't be for quite some time.

I say, yes it is, here in Japan. I pay 3...

[ more ]  [ reply ]
NTT-style connections would be cool, but... 2004-03-25
Penguinisto (1 replies)
...the US is considerably larger than Japan, and the rural areas west of the Mississippi tend to be damned sparse in population :)

While it would be ultra cool to have an NTT or euro-style instant-mega-broadband connection, our very geography and population distribution prevents such a thing from...

[ more ]  [ reply ]
NTT-style connections would be cool, but... 2004-03-26
Anonymous
Actually that is the same as Japan. The country side does not have support but all the cities that have an established population have it. I diddnt think red necks surfed the net so much.... I could see one standing on a surf board with a keyboard under it. I am moving to the country side this week ...

[ more ]  [ reply ]
Security Patches by Modem? Forget it! 2004-03-25
Erik
Best column for a really long time here.

Great!...

[ more ]  [ reply ]
Security Patches by Modem? Forget it! 2004-03-25
rarchimedes
This is possibly the simplest, best exposition of this problem that I have seen. As a consultant, I despair of finding ways to keep my dial-up customers current. Most of them just give up, repeatedly, despite my best efforts to encourage or terrify them. Six months old security updates are completel...

[ more ]  [ reply ]
Easing the burden 2004-03-25
InvisiBill
The first thing you should do is slipstream the latest Service Pack into your Windows installation media. Having SP4 automatically installed as part of the OS would cut off a third of your listed download size. I haven't run into a situation where I could test it, but this should also avoid issues o...

[ more ]  [ reply ]
Security Patches by Modem? Forget it! 2004-03-25
Anonymous
Here's another suggestion. Microsoft could create regular ISO images of their update CD, every couple of weeks and users with CD burners and broadband could make their own and pass them around. Cost to Microsoft would be negligable....

[ more ]  [ reply ]
Security Patches by Modem? Forget it! 2004-03-25
Anonymous
Hear, Hear! I agree Microsoft needs to make their updates readily available including computer stores.

Good job!...

[ more ]  [ reply ]
Security Patches by Modem? Forget it! 2004-03-25
Anonymous

"Red Hat, Mandrake, even Libranet:
all should offer users the option of a
free CD containing updates"

Yes they should this would save users the hassle of constantly doing md5 checksums to see if the RPMs they need are tainted or not by Hackers. I'd be willing to pay a small
fee if they of...

[ more ]  [ reply ]
Funny, I did this on Saturday... 2004-03-25
Anonymous
My folks use AOL dialup. Went to visit this weekend, just checked my mom's PC / Win98 install to see vulns and patches. Uh-oh. 19 Critical updates.

So I ask the folks if I can tie up the phone for a bit, and off I go, download away.

3 hours later, I have IE patched.

2 hours later, the rest ...

[ more ]  [ reply ]
just quick enough for another blaster! 2004-03-26
Bipin Gautam
56k modems are just good enough for getting another BLASTER* on your PC! ...

[ more ]  [ reply ]
Security Patches by Modem? Forget it! 2004-03-26
Anonymous
For Windows XP, 2k & 2k3 updates you can download the free Autopatcher. It is a HUGE .exe that contains all the patches for each OS and more. Guys with broadband Internet access can download the file and burn it to a cd to help dial-up users.

http://www.autopatcher.com/
http://www.neowin.net/for...

[ more ]  [ reply ]
Security Patches by Modem? Forget it! 2004-03-26
jonathan
Blaster quite effectively demonstrated the futility of using an unpatched machine to download service packs, critical updates, or A/V definitions during its rampage last summer.

No machine should ever be directly connected to the outside world until it is properly patched with the most currently ...

[ more ]  [ reply ]
Microsoft's CD 2004-03-27
Anonymous
Is now updated to Feb 2004 - I received my CD a few weeks back. Thank god for that too - as you say, giant downloads on dialup are no fun for anyone.
...

[ more ]  [ reply ]
Don't destroy the earth any quicker than it should 2004-03-27
Anonymous
I think I can safely conclude that the author is no big fan of environmentalism.

QUOTE: If AOL can blanket the entire world with free CDs for their dial-up service, Microsoft can do the same with something a bit more useful like a Security Update CD.

Thats right, we need more of these shiny, ...

[ more ]  [ reply ]
Security Patches by Modem? Forget it! 2004-03-27
Anonymous
Much, much faster Internet connections (10mbit+) and the laziness of home users to keep their system's upgraded would only result in large, devestating DDoS attacks that we have never seen before.

A DDoS client installed on a 56k home system would do little to no damage to their intended target....

[ more ]  [ reply ]
550mb of patches/upgrades? 2004-03-28
Anonymous

You either need to start doing initial installs with current releases of the distribution...or pick another dist. (A full install of Slackware == ~2gb, so 550mb of patches would mean having to upgrade over a quarter of the entire system... which is crap.)

...

[ more ]  [ reply ]
Security Patches by Modem? 11.3 MB in 1.5 hrs is very doable, learn some math 2004-03-28
Anonymous (1 replies)
Can't argue with the main gist of your article, but you need to learn some math. Typical dialup connection can do about 10mb/hr on average. Don't know what you're smoking, grin.

Other than that, good article with good points.

...

[ more ]  [ reply ]
Security Patches by Modem? 11.3 MB in 1.5 hrs is very doable, learn some math 2004-03-30
Anonymous
who has 1.5 hours to tie up a telephone line....if you r on a modem (as i am) u do not leave the computer on line all the time...u do not want to leave the computer on all the time...
...

[ more ]  [ reply ]
Security Patches by Modem? Forget it! 2004-03-29
Anonymous
Since when can 11MB NOT be downloaded at 28.8kbps in an hour and a half?

I used to have a 56K modem that topped out at 28.8 (until SBC conditioned my line for the DSL install, then it jumped to 42kbps!)

I used to download 5MB MP3's over P2P networks in about twenty minutes.

Do the math.
...

[ more ]  [ reply ]
Slipstream 2004-03-29
Anonymous
On the Microsoft side, you can use the "slipstream" capability to create bootable CD's with the patches integrated. I create one every few months, greatly reducing the amount of dl needed:

http://www.theeldergeek.com/slipstream_01.htm...

[ more ]  [ reply ]







 

Privacy Statement
Copyright 2009, SecurityFocus