WinXP, IE6 Insecurity Settings

[MrColin]

Late last night I was browsing a misanthropic-script-kiddie forum and I was disturbed by a user's sig which diplayed my IP, OS, and browser name. Somewhere I found a setting to prevent sharing of this information which is now disrupting some of my email services, namely a hotmail account, and a University Java based thingamadoo. Also, if I go to Windows update I get a cordial message saying that this is where people with Windows based systems can update thier OS. I am running windows xp sp1 (updated from a fresh install <1 week ago.

I can't for the life of me remember where the setting I changed was.
-It had something to do with sharing the browser name etc. on the web and I cant find it now.
Any Ideas?

 

[firewall]

Windows XP SP2????
I thought only SP1 has been released till yet?
Try blocking execution of vb,etc scripts.

 

[MrColin]

Yea that was it, in the software firewall
Thanks

 

[MrChad]

Originally posted by: MrColin
Late last night I was browsing a misanthropic-script-kiddie forum and I was disturbed by a user's sig which diplayed my IP, OS, and browser name.

I hate to burst your bubble, but this information is transmitted with almost every browser as part of the HTTP protocol. Many websites read this using JavaScript (which is what you probably disabled ... go to Tools / Internet Options / Security / Custom Level / Scripting / Active Scripting). However, websites can also read the CGI environment variables passed by your browser (HTTP_USER_AGENT, REMOTE_HOST).

This is not inherently insecure, it's just one of the side effects of web browsing. Protect yourself by setting up a firewall/NAT router (if you're on a broadband connection), installing anti-virus software and keeping it up-to-date, and using common sense when surfing.

 

[firewall]

What about SP2? Is it really out yet? Last I heard it was SP1 for WInXP.

 

[Canterwood]

No, Service Pack 2 isn't officially out yet.

There are beta builds around on the net, (build 1213 I believe) but there should be a full official release later this year.

 

[MrColin]

I'm sorry, sp 2 is for the browser not the os I'll go back and edit.

ty 4 the info guys!

 

[digitalman]

i was under the impression that the latest full sp version is sp1a. that being said, i want to say that i have seen security updates that are labled sp2.

<rant> the whole catch though to winXP is often times i am unsure if i am updating the opperating system or a core app. while there are a lot of benifits of IE, OE, Media Player, Office, etc being tied in close to windows, it just creates a nightmare as far as security goes. and don't even get me started on ActiveX.

I personally think that XPpro is the best thing that M$ has put out (with Win2000 being the lite version). But as far as security goes it isn't much better then an open door. Although i doubt that the trustworthy sys on a pallidium cpu is the answer... unless you are trying to get into bed with the RIAA. This whole trustworthy thing just reminds me to much of a book writen by george orwell. i guess acording to M$, we all need our computer to phone to "big brothers" bill, steve and the rest of the riaa gang. </rant>