![]() ![]() |
Oct 26 2006, 07:50 PM
Post
#151
|
|
![]() Group: Members Posts: 5,275 Joined: 22-February 06 Member No.: 2 |
Never heard of FusionVM so I'm not sure how it works, but most vulnerability scanners run port scans to search for services and checks a database of vulnerabilities to see if there are any. It probably uses OVAL (open vulnerability and assessment language) or some proprietary equivalent.. Basically it's a standard way to encode the configuration information and check for a certain machine state... like version information etc. It also checks file permissions, tries brute force password attacks, checks for misconfigurations that could allow access, etc..
|
|
|
|
Oct 26 2006, 07:59 PM
Post
#152
|
|
![]() Group: Members Posts: 5,275 Joined: 22-February 06 Member No.: 2 |
A guy that worked where I was helping out at quit and went to work for them. It looks pretty cool man (except for the fact that they spelled "Perl", "Pearl" How does your friend like it there? PM me his phone nummber or IM name so I can ask him some questions. |
|
|
|
Oct 26 2006, 08:37 PM
Post
#153
|
|
![]() ROCKPACALYPSE NOW Group: Members Posts: 1,519 Joined: 22-February 06 From: Dallas, TX Member No.: 13 |
This kinda shit just seems odd to me. I know I need to see it truly in action to form a fair opinion - and no matter what a cool/fun job is a cool/fun job....but it just seems odd to me.
I guess the value in it all comes with their database and knowledge of possible problems, more than a lot of the scans it does. I was reading that site, and going through all the things they do, I just keep thinking "i can check that with built in windows shit...can check that...can check that....already have free software that checks that...." etc etc etc. -------------------- QUOTE (Lance) now we have some dude from argentina wondering how to fuck dogmeat |
|
|
|
Oct 26 2006, 08:42 PM
Post
#154
|
|
![]() Group: Members Posts: 5,275 Joined: 22-February 06 Member No.: 2 |
Download eEye Retina and give your local PC a scan, see what all it finds, play around with it. No doubt you can do some of this stuff with free open source software, but the area in which that software lacks is checking for compliance to certain IT information security acts from Congress... it's a liability thing for corporations.
Here's a review of the most popular: http://www.networkcomputing.com/1201/1201f1b2.html |
|
|
|
Oct 26 2006, 08:44 PM
Post
#155
|
|
![]() New son Donovan Charles Mummert born July 17, 2008 Group: Members Posts: 8,635 Joined: 22-February 06 From: Port Wentworth, GA Member No.: 15 |
I got accepted to UT this week for the spring semester
BLING BLING when I get out with my bachelors and masters in nursing.... start out around 50k and swiftly move up to 70k thats years away though, but hey im excited that i got accepted. |
|
|
|
Oct 26 2006, 08:44 PM
Post
#156
|
|
![]() ROCKPACALYPSE NOW Group: Members Posts: 1,519 Joined: 22-February 06 From: Dallas, TX Member No.: 13 |
Ahhhh ok, that makes it much more clear then.
One thing I didn't like is that the FusionVM shit wants a Domain Admin account, and it wants to talk back to their headquarters through a specially punched hole in the firewall. That just leads a bad security taste in my mouth, for an appliance + software solution thats supposed to reduce security risks. -------------------- QUOTE (Lance) now we have some dude from argentina wondering how to fuck dogmeat |
|
|
|
Oct 26 2006, 08:49 PM
Post
#157
|
|
![]() Group: Members Posts: 5,275 Joined: 22-February 06 Member No.: 2 |
Ahhhh ok, that makes it much more clear then. One thing I didn't like is that the FusionVM shit wants a Domain Admin account, and it wants to talk back to their headquarters through a specially punched hole in the firewall. That just leads a bad security taste in my mouth, for an appliance + software solution thats supposed to reduce security risks. What's the point of talking back to their headquarters, what info does it send back? I got accepted to UT this week for the spring semester BLING BLING when I get out with my bachelors and masters in nursing.... start out around 50k and swiftly move up to 70k thats years away though, but hey im excited that i got accepted. Are you going to start wearing hiking boots and quit showering? |
|
|
|
Oct 26 2006, 08:53 PM
Post
#158
|
|
![]() ROCKPACALYPSE NOW Group: Members Posts: 1,519 Joined: 22-February 06 From: Dallas, TX Member No.: 13 |
If memory serves correctly, I believe it uploads some of your network data to run against their databases that are updated nonstop, then the results are sent back down to you.
I don't remember exactly, I just get the feeling that this shit is going to be a nightmare and/or useless for us. -------------------- QUOTE (Lance) now we have some dude from argentina wondering how to fuck dogmeat |
|
|
|
Oct 26 2006, 09:03 PM
Post
#159
|
|
![]() Group: Members Posts: 5,275 Joined: 22-February 06 Member No.: 2 |
I'm just worried what would happen if someone intercepted your company's nework data and vulnerability information. They'd basically have a map on how to pwn you. Hopefully they use SSL or something to transmit it.
|
|
|
|
Oct 26 2006, 09:11 PM
Post
#160
|
|
![]() ROCKPACALYPSE NOW Group: Members Posts: 1,519 Joined: 22-February 06 From: Dallas, TX Member No.: 13 |
Exactly.
And even if it is SSL encrypted... We are working on an implementation of Blue Coat SGs to work as internet proxies and more, and one of their capabilities is to basically tear apart SSL connections and put them back together for you. It works great for your network....but how can this be used for evil for an outsider !!@???? -------------------- QUOTE (Lance) now we have some dude from argentina wondering how to fuck dogmeat |
|
|
|
Oct 26 2006, 09:16 PM
Post
#161
|
|
![]() New son Donovan Charles Mummert born July 17, 2008 Group: Members Posts: 8,635 Joined: 22-February 06 From: Port Wentworth, GA Member No.: 15 |
|
|
|
|
Oct 26 2006, 09:30 PM
Post
#162
|
|
![]() ROCKPACALYPSE NOW Group: Members Posts: 1,519 Joined: 22-February 06 From: Dallas, TX Member No.: 13 |
CAUSE YOU LIVE IN AUSTIN, BITCH !
-------------------- QUOTE (Lance) now we have some dude from argentina wondering how to fuck dogmeat |
|
|
|
Oct 26 2006, 09:35 PM
Post
#163
|
|
|
Group: Admin Posts: 6,906 Joined: 22-February 06 From: Austin Member No.: 9 |
YAY AUSTIN!
This is like academics asdf... lawlz testing holy shit, wtf... double posts automatically consolidate? WAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGGGGGGGGGGGGGGGGGGHHHHHHHHHHHHHHHHHHHHHHHHHHHHHH HHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHH I can't be a postwhore anymore!!!!!!!!!!! -------------------- |
|
|
|
Oct 26 2006, 09:36 PM
Post
#164
|
|
![]() From Atlantis to Interzone Group: Global Moderators Posts: 2,512 Joined: 23-February 06 From: Somewhere in space and time Member No.: 65 |
Wait. Does this mean your posts will actually have to start meaning something now?
-------------------- Holy shit, pebkac, you're awesome! "Be who you are and say what you feel, because those who mind don't matter and those who matter don't mind." - Theodor Seuss Geisel (AKA Dr. Seuss) "An idea that is not dangerous is unworthy of being called an idea at all." - Oscar Wilde |
|
|
|
Oct 26 2006, 09:36 PM
Post
#165
|
|
|
Group: Admin Posts: 6,906 Joined: 22-February 06 From: Austin Member No.: 9 |
:'(
Maybe. -------------------- |
|
|
|
![]() ![]() |
| Lo-Fi Version | Time is now: 4th August 2026 - 09:58 AM |