RE: "Delete anti-virus and firewall software" --Microsoft

["Thor Larholm" <thor@xxxxxxxx>]

The Knowledge Base article is no longer available on
support.microsoft.com, but a lot of other sites have a copy:

http://www.kbalertz.com/Feedback_820673.aspx



Regards

Thor Larholm
Senior Security Researcher
PivX Solutions
24 Corporate Plaza #180
Newport Beach, CA 92660
http://www.pivx.com
thor@xxxxxxxx
Phone: +1 (949) 231-8496
PGP: 0x5A276569
6BB1 B77F CB62 0D3D 5A82 C65D E1A4 157C 5A27 6569

PivX defines "Proactive Threat Mitigation". Get a FREE Beta Version of
Qwik-Fix
<http://www.qwik-fix.net> 


-----Original Message-----
From: Kim Scarborough [mailto:kjs@xxxxxxxxxxxx] 
Sent: Friday, April 16, 2004 10:01 AM
To: bugtraq@xxxxxxxxxxxxxxxxx
Subject: "Delete anti-virus and firewall software" --Microsoft


Isn't the "Resolution" in this Knowledge Base article a little, uh,
ill-advised:

<http://support.microsoft.com/default.aspx?scid=kb;en-us;820673>

Isn't this the same company that says things like this under "Mitigating

Factors" in their security bulletins:

"Firewall best practices and standard default firewall configurations
can help protect networks from remote attacks originating outside of the
enterprise perimeter. Best practices recommend blocking all ports that
are not actually being used. For this reason, most systems attached to
the Internet should have a minimal number of the affected ports
exposed."

Unless you want to use Outlook, I guess.

I don't even want to think about the implications of Microsoft
*encouraging* 
Outlook users to uninstall anti-virus software...

-- 
------------------------------------------------------------------------
----
Kim Scarborough
http://www.unknown.nu/kim/
------------------------------------------------------------------------
----