Re: Linked-in and its Phishing-like contacts option!

  This message is in MIME format.  The first part should be readable text,
  while the remaining parts are likely unreadable without MIME-aware tools.

--680960-474756453-1367249367=:28665
Content-Type: TEXT/PLAIN; charset=iso-8859-1; format=flowed
Content-Transfer-Encoding: quoted-printable

On Fri, 26 Apr 2013, Gautier . Rich wrote:

> Yes, that's what I meant...turn off Webmail access entirely - I was mos=
tly=20
> kidding - but if it's something that you can afford to do [users all ha=
ve=20
> working VPNs, e.g.] - it would reduce a great deal of risk. ;)

when you say turn off webmail, do you mean to cut off access to public we=
bmail=20
servers from inside your network? or do you man to not run things like OW=
A that=20
expose your company mail to the Internet?

David Lang

> Oh, and can that guy who gave the "God, whatever you do, don't fire you=
r=20
> network geek" speech please come and give a motivational speech here?


>
> Richard Gautier, CISSP
> Enterprise Architect, Federal Group
>
> 650 Massachusetts Avenue NW
> Suite 510
> Washington, DC 20001
> Office: (571) 226-8828  |  Cell: (703) 231-2156
> [email protected]  |  www.drc.com
>
>
> -----Original Message-----
> From: [email protected] [mailto:firewall-w=
[email protected]] On Behalf Of Jim Seymour
> Sent: Friday, April 26, 2013 11:39 AM
> To: [email protected]
> Subject: Re: [fw-wiz] Linked-in and its Phishing-like contacts option!
>
> On Wed, 24 Apr 2013 19:26:01 +0000
> "Gautier . Rich" <[email protected]> wrote:
>
>> Thoughts? I'm wondering why User Operational Security falls under the
>> realm of Firewall Wizards..
>
> I think of it this way: Firewall security, in and of itself, doesn't ge=
t the job done.  You may have the most bullet-proof border the world has =
ever seen, but, unless that bullet-proof-ness means essentially blocking =
everything, both incoming and outgoing, it will not be enough.  A layered=
 defense is mandatory.  One of those layers is end-user operational secur=
ity.
>
> Our goal is to protect the organizational jewels, no?
>
> Besides: We've pretty-much beaten stateful/deep-packet inspection vs.
> application proxy to death, no? :)
>
>> ... plenty of users seem to
>> be perfectly willing to accept the risk (or be unaware of it).
>
> Both, IME.
>
>> However, not much you can do on the firewall side other than turning
>> off webmail access...
>
> Turning off webmail access?  How would one accomplish  that, exactly, w=
ithout essentially turning off web access entirely?
>
> As for LinkedIn: I've received so many LinkedIn emails reported as spam=
 at work that they've occasionally been there.  I may have them listed on=
 my mailserver at home, for the same reason. (Possibly so. Can't say as I=
've seen LinkedIn spam for a while.)
>
> This nonsense of them asking for "work email password" is grounds, in _=
my_ view, to block them entirely.  That's intolerable.  I'm going to see =
if I can do that.
>
> But I'm old school.  I don't believe convenience, golly-gee-whiz-bang, =
and _especially_ "social networking" ought to trump security.  Generally =
my bosses tend to agree. (Esp. ever since a couple of the Big Guys attend=
ed some-or-another network security briefing, which incl. a retired FBI a=
gent, and were told that "whatever your network security is, it's probabl=
y not good enough" and "for God's sake, whatever you do, do not lose your=
 network geek" ;).)
>
> Regards,
> Jim
> --
> Note: My mail server employs *very* aggressive anti-spam filtering.  If=
 you reply to this email and your email is rejected, please accept my apo=
logies and let me know via my web form at <http://jimsun.LinxNet.com/cont=
act/scform.php>.
> _______________________________________________
> firewall-wizards mailing list
> [email protected]
> https://listserv.icsalabs.com/mailman/listinfo/firewall-wizards
> ________________________________
>
> This electronic message transmission and any attachments that accompany=
 it contain information from DRC=AE (Dynamics Research Corporation) or it=
s subsidiaries, or the intended recipient, which is privileged, proprieta=
ry, business confidential, or otherwise protected from disclosure and is =
the exclusive property of DRC and/or the intended recipient. The informat=
ion in this email is solely intended for the use of the individual or ent=
ity that is the intended recipient. If you are not the intended recipient=
, any use, dissemination, distribution, retention, or copying of this com=
munication, attachments, or substance is prohibited. If you have received=
 this electronic transmission in error, please immediately reply to the a=
uthor via email that you received the message by mistake and also promptl=
y and permanently delete this message and all copies of this email and an=
y attachments. We thank you for your assistance and apologize for any inc=
onvenience.
> _______________________________________________
> firewall-wizards mailing list
> [email protected]
> https://listserv.icsalabs.com/mailman/listinfo/firewall-wizards
>
--680960-474756453-1367249367=:28665
Content-Type: text/plain; charset="us-ascii"
MIME-Version: 1.0
Content-Transfer-Encoding: 7bit
Content-Disposition: inline

_______________________________________________
firewall-wizards mailing list
[email protected]
https://listserv.icsalabs.com/mailman/listinfo/firewall-wizards

--680960-474756453-1367249367=:28665--