Follow Slashdot stories on Twitter

 


Forgot your password?
Close
typodupeerror
×
Bug Security Software

Zone Alarm 5 Beta Review 34

Posted by timothy from the permeable-membrane dept.
An anonymous reader writes "ZoneAlarm is getting ready to announce version 5 of its security software firewall, ZoneAlarm. Though there are a few changes that are presently available on the new beta, this review mentions that there are still many security issues to resolve. Grc.com scan reveals that ZoneAlarm Beta 5 failed to close port 25 and fails to give useful information to the user about possible security services being shut off."
This discussion has been archived. No new comments can be posted.

Zone Alarm 5 Beta Review More

Zone Alarm 5 Beta Review

Comments Filter:

  • Wait, do we respect Gibson now? (Score:4, Interesting)

    by WereTiger ( 148010 ) <slashdot AT weretiger DOT ca> on Sunday April 25, 2004 @02:42PM (#8966330) Homepage Journal
    IIRC GRC.com was the haven of a sanctimonious blow-hard, why would anyone go so far as to use tools provided by him as a defacto security test of a new firewall?

    Just my 2 cents.

    Wonder if Zonealarm has addressed the issue that was brought forth about version 4, which is that it's hook into the tcp/ip stack could be hijacked by malware.
    • He might be a little strident, but he's willing to educate and help people. Contrast this with AV and Firewall companies who are simply content to ram their products down your throat.

      IMO, we need more guys like him.

    • Re:Wait, do we respect Gibson now? (Score:5, Informative)

      by phaze3000 ( 204500 ) on Sunday April 25, 2004 @03:03PM (#8966457) Homepage
      Wouldn't say this was a troll at all, just a fair comment about a man with a massively over-inflated opinion of his capabilities:

      Remember the time he 'invented' TCP SYNcookies six years after they were actually created? [theregister.co.uk]. To be fair to him, his SYNcookies proposal wasn't the same as what had already been suggested - his had some pretty major omissions that made it unworkable.

      Or the time he predicted the end of the Internet with the introduction of raw sockets into Windows XP [vmyths.com], or earlier because of Code Red [theregister.co.uk]?

      If one is supposed to be doing a firewall test then a *proper* port scanning utility such as the excellent nmap [insecure.org] should be used, rather than a tool on the website of a known netkook.

      • Exactly what I was trying to relate. I couldn't remember the specifics, thank you for bringing them up!

        I'm sorry if you're getting modded as Troll, cause we aren't. Mods need to learn what Trolling is :P

        I'd mod you up if I could ;)
        • I think we should have a quiz before people are allowed to moderate. Multiple-choice is acceptable, no one's going to want to grade essays anyway.

          Trolling is:

          1. A method of fishing in which a line with bait or a lure is drug through the water behind a boat
          2. Constructing or repeating an argument you know to be false in order to elicit a desired response
          3. Living under a bridge and jumping out and demanding money from people attempting to cross it
          4. Answering a question incorrectly, or in a way moderators don't a
    • Gibson has been very helpful [grc.com] to the Windows and novice computing community. All the magazines have been taken over by the do-anything-for-money people; they cannot be trusted. Where does a Windows novice get information?

      When you are new to computing it is difficult to believe that Windows is as vulnerable as it is. A novice keeps saying, "Microsoft is a big, successful company, why would they be so self-destructive?"

      It's true that Gibson is amazingly overblown at times.

    • Re:Wait, do we respect Gibson now? (Score:5, Insightful)

      by Spoing ( 152917 ) on Sunday April 25, 2004 @03:59PM (#8966850) Homepage
      I've always had respect for Steve Gibson, though I can understand why he gets such flack from technically knowledgeable people.

      He is one of those people who you have to adjust for, and if you don't you'll just miss the point of what he's trying to say. Once you do, what he says makes a whole lot of sense and he does not come off as a light-weight tech by any means.

      His main focus, for many years, seems to be this;

      1. Explain technical issues to moderately technical people so that they do not consider themselves idiots.

      2. Hype it up a bit for effect.

        Important: Tell the nit-pickers to #uck off.

      The hype rubs many geeks the wrong way since we want to know the real details and with those details we can figure out for ourselves if something is important or not.

      When his errors or lack of total completeness is brought up, he drops into #uck off mode. Yep, he is a bit arrogant, though most techies are. He does have an ego and will snipe back if sniped...so?

      I have friends who I don't agree with, who do things I don't like, though if it's in character I let it pass; "Jack is being Jack".

      Hammer Steve Gibson when he deserves it, though consider that most of the time he's not so horribly off the mark when you consider his audience and basic attitude.

      • This provides full and direct "packet level" Internet
        access to any Unix sockets programmer.

        Beyond their use for supporting simple "ping" and "traceroute" commands, the original Berkeley designers intended Raw Sockets to be used for Internet protocol research purposes only. Because they fully appreciated the inherent danger of abuse of Raw Sockets, they deliberately denied Raw Socket access to any applications not running with maximum Unix "root" privileges. User-level applications were thus prevented from

        • Re:This is an example from GRC.com (Score:2, Insightful)

          by Anonymous Coward
          A good example of how Gibson entirely missed the point. Raw Sockets are restricted to Administrator users. The real issue is that XP gives users Admin access by default, not that it has raw sockets.

          If he had flamed MS for their poor out-of-box user configuration, he would have had 100% of the techie world behind him.

          • Re:This is an example from GRC.com (Score:4, Informative)

            by LostCluster ( 625375 ) * on Monday April 26, 2004 @12:47AM (#8969796)
            A good example of how Gibson entirely missed the point. Raw Sockets are restricted to Administrator users. The real issue is that XP gives users Admin access by default, not that it has raw sockets.

            If he had flamed MS for their poor out-of-box user configuration, he would have had 100% of the techie world behind him.

            He is constantly harping on Microsoft's poor-out-of-the-box configuration, it's just the way he goes about it that seems a bit Tabloid-ish.

            For example, his tool called "Shoot The Messenger" simply turns the Messenger Service off, which should be its default setting on XP Home since the average user doesn't need it and it only gets used to annoy. By comparison, TechTV hosts just regularly remind people how to turn off the service by going through the Control Panel. Same net result, the same flags in the registry get changed no matter what way you attack it in the GUI.

            Instead of calling on Microsoft to make changes, he writes assembly-coded programs to do the changes and convinces people that there's such a gaping hole in their systems that need to be fixed by his magic bullets. For him, security is a side interest... his real business is built around SpinRite, the definitive hard-drive testing tool.

            So, really, he's in line with the main stream community in his beliefs on security, it's just that he has an unusual way to promote them which is more aimed at the "dumb public" than the secuirity elite.

      • It's tough to write good material for a mass audience. I've had to oversimplify my non-technical work [blogspot.com] to keep it accessible. (Detailed criticism welcome even if rude).

        Where I think grc.com does readers a disservice is by steering them away from good products. Look at the flexbeta review that marked products "Failed" in red letters because they closed ports as opposed to dropping packets, or because they answered on port 113. Both of those are perfectly valid policy choices.

        It's good that Gibson highl

    • Steve gibson is a mixed blessing. He's informing people, thats important ... but Have you ever used his Spinrite software? the software *ACTUALLY* grandstands, its insane.

  • Farewell to "Fair well". (Score:3, Funny)

    by Futurepower(R) ( 558542 ) on Sunday April 25, 2004 @03:21PM (#8966574) Homepage
    From the Flexbeta review, "Zone Alarm 4 did not fair well..."

    First, maybe we should not be accepting advice from journalists who don't know their own language well.

    Second, I read the ZoneAlarm 4 review and it didn't seem to uncover anything that would cause someone to stop using ZoneAlarm.

    I suppose a fair well is a deep hole filled with water at a fair.

    Fare: To progress or perform adequately, especially in difficult circumstances.

    Farewell to Flexbeta.
    • If you want to nitpick, we can pick at your title. A space should be between Fare and well in Farewell.

      So it's a typo. Yes, it's a typo. It happens. Sometimes when I'm typing the same thing happens: I hear the sound of the word in my head and associate it with a certain spelling. Sometimes I don't associate in correct context.
      • It's not just a typo. There are several mistakes like that. Generally, people who are accurate with technical details take the time to be accurate with their use of language, I've found.

        Also, I reviewed the previous article, and found it misleading. Remember that a Slashdot comment is not a complete record of what someone thinks, it is only an indication.

        Also, farewell is correct: Farewell: Interjection used to say good-bye.
        • Farewell is an interjection, yes but it can be spelled Fare Well or Farewell, depending on who says so. Perhaps an English lesson is in order. First let's look at the sentence.

          An In-depth Look at Firewalls (view article), Zone Alarm 4 did not fair well under the security tests we put it through.

          Farewell: Fare can mean several things. None of those meanings apply to the sentence. Let's move onto the correctly used word.

          Fairwell: Fair, in the context of the sentence, means Moderately good; acce

      • A typo [reference.com] is a typographical error. This is a grammatical error. Thinking one thing and typing another is not a typographical error. While it is ostensibly not in the dictionary (and I am not going to look it up for fear I might find it) such an error is commonly referred to as a braino.

        Missing one key and hitting another is a typo. Missing one word and typing another is something entirely different, something which the author of the article should have caught, and barring that, the editor.

        Finally, there i

        • Even more finally*, if you are going to make a link in a slashdot comment, you will need a </A>, or put another way, to close your anchors. Someday I will start using preview, honest.

          * Obviously I misspoke in the PP.

  • Kerio (Score:5, Informative)

    by kayen_telva ( 676872 ) on Sunday April 25, 2004 @03:24PM (#8966590)
    I have found that Zone Alarm (in past versions) would sometimes block ALL traffic on a whim.
    No explanation from the software, no warning, and damned difficult to figure out what to to correct it.

    There were other odd issues that resolved themselves after uninstalling.
    I tried Kerio [kerio.com] because they took over an awesome product (TinyPF 4) .

    I was pleasantly surprised to find that Kerio is the nicest firewall software I have ever used.
    Includes pop-up blocking, application level permissions with MD5, and is very configurable. Nice looking (very important to style conscious surfers;). Low resource usage.

    ZoneAlarm is gonna have to knock my socks off to get me to switch.

    p.s. Has anyone tried TinyPF 5 ?? Im wondering how it compares.

    • Re:Kerio (Score:2, Informative)

      by Anonymous Coward
      Kerio 4 is generally accepted to be beta software passed off as stable. Bugs galore which haven't been fixed after 16+ different versions of 4.

      Kerio PF 2.15 is the best rule based firewall I have used.

      Tiny PF is a full blown sandbox and firewall.
      Apparently has a steep learning curve.

    • Re:Kerio (Score:4, Interesting)

      by NexusTw1n ( 580394 ) on Monday April 26, 2004 @05:37AM (#8970754) Journal
      Tiny 5 is excellent. Applications are MD5'd on full path plus file size, it contains a full sandbox mode, as well as registry protection. ("Spyware.exe is trying to write to HKLM.SYSTEM do you want to allow this?")

      The application level firewall is completely configurable, you can control which TCP & UDP ports each individual application can use and which it can't.

      It can be complicated if you want to dig into it, but the default setup is perfectly acceptable if you just want to install and forget about it.

      ZoneAlarm trashed the TCP/IP stack on my home network, preventing Internet Connection Sharing, which is inexcusable. Disabling or uninstalling ZA does not resolve the problem you have to hack the registry and reset the stack (NETSH IP RESET) to recover the damage.

      If you google you'll find hundreds of people with hosed machines thanks to ZA. Firewalls and virus scanners are products I do expect to behave 100% reliably and when you lose that trust you are going to have a hard time winning me back. So despite a few quality versions in the early days, ZA have more than likely lost me as a customer for life.

Slashdot Top Deals

Scientists will study your brain to learn more about your distant cousin, Man.

Close