Steve Riley [MSFT] wrote:
> An IP address is only an identifier. Knowledge of an identifier is
> never enough to attack a system. By doing the right things, such as
> running a firewall and maintaining good anti-malware, then it matters
> not whether someone knows your IP address or how long you happen to
> be using it.
>
> Don't rely on secrecy as an element of security. The bad guys will
> find you anyway.
>
> __________________________________________________ ____
> Steve Riley
> steve.riley@microsoft.com
> http://blogs.technet.com/steriley
> http://www.protectyourwindowsnetwork.com
>
>
> "Aluxe" <aluxelocochon@yahoo.com> wrote in message
> news:8fe6c1ra451z.1t1ksdcxm3n25.dlg@40tude.net...
> On Tue, 17 Oct 2006 18:28:24 GMT, Stuart Miller wrote:
> > First - what do you seek to accomplish by the frequent changes?
>
> Hi Stuart,
>
> Thank you for taking the time to ask a probing question. I
> understand the
> concept of security in that it comprises little things and big
> things
> together.
>
> Adding big things, like turning on a firewall, using strong
> encryption,
> shutting down the computer when not in use, etc. are, of course,
> additive
> to security.
>
> Little things, like changing the password, changing the MAC address,
> changing the SSID, changing the IP address, etc., are also additive
> to
> security.
>
> The whole point is to make the bad guys do more work to follow your
> footsteps and invade on your privacy.
>
> For example, I seal my snail mail. I lick that horrid tasting
> envelope and
> I shut it down tight. Do I think that will stop a determined
> snooper. No
> way. But I do it as a "little thing" to enhance my security.
>
> Anyone who seals their envelope should understand why I'd want to
> change my
> IP address periodically.
>
> The question is "What is the easiest way to release that lease on
> the IP
> address such that it is easy to regain a new IP address in a few
> hours'
> time?".
I'll play the devil's advocate here. Even though it may not be noticeable
for everyday use what about generating a report from a large database like
the ones that always seem to be on lost/stolen laptops? It seems we are
always hearing about 100's of thousands of compromised identities when a
laptop is stolen. If these are stored in a SQL database then a measurable
slowdown may indeed be perceptible when generating reports from that
database. Knowing in advance what the actual slowdown is would allow someone
contemplating using bitlocker to compare it to other solutions.
--
Kerry
MS-MVP Windows - Shell/User
http://www.vistahelp.ca