PC Review


Reply
Thread Tools Rate Thread

C2 compliance?

 
 
Ham Pastrami
Guest
Posts: n/a
 
      11th Jul 2007
I have read some articles about Windows NT/2K C2-compliance. The part that
interests me is object reuse protection. Supposedly this means that disk
space is initialized to 0 when it is allocated. However, I don't see this
happening on my 2K system, not as far as I can tell. Wouldn't zeroing (for
say, hundreds of megabytes) imply a long write to disk everytime a new file
was created?

I initially thought that C2 compliance could be achieved through
configuration, but did not ship that way out of the box. Some of the
articles state that the evaluation applies to off-the-shelf products, which
is ambiguous as to whether that means default configuration or simply a lack
of third party software.

The articles also tend to talk only about NT/2K and not XP or Vista. Why is
that?


 
Reply With Quote
 
 
 
 
David H. Lipman
Guest
Posts: n/a
 
      11th Jul 2007
From: "Ham Pastrami" <(E-Mail Removed)>

| I have read some articles about Windows NT/2K C2-compliance. The part that
| interests me is object reuse protection. Supposedly this means that disk
| space is initialized to 0 when it is allocated. However, I don't see this
| happening on my 2K system, not as far as I can tell. Wouldn't zeroing (for
| say, hundreds of megabytes) imply a long write to disk everytime a new file
| was created?
|
| I initially thought that C2 compliance could be achieved through
| configuration, but did not ship that way out of the box. Some of the
| articles state that the evaluation applies to off-the-shelf products, which
| is ambiguous as to whether that means default configuration or simply a lack
| of third party software.
|
| The articles also tend to talk only about NT/2K and not XP or Vista. Why is
| that?
|

Do you even know what C2 is ?

How about the idea C2 is outdated ?

Hint: Go to the NIST for the latest security specs/recommendations.

--
Dave
http://www.claymania.com/removal-trojan-adware.html
http://www.ik-cs.com/got-a-virus.htm


 
Reply With Quote
 
Ham Pastrami
Guest
Posts: n/a
 
      11th Jul 2007

"David H. Lipman" <DLipman~nospam~@Verizon.Net> wrote in message
news:(E-Mail Removed)...
> Do you even know what C2 is ?


Not intimately, no, nor do I intend to.

> How about the idea C2 is outdated ?


You realize this ng is for discussing a 7-year-old OS, right?

> Hint: Go to the NIST for the latest security specs/recommendations.


Unless my Win2k is also going there to update itself, I don't see how this
is relevant to my question.

Hint: I'm interested in Windows' file allocation behavior, not security
recommendations.


 
Reply With Quote
 
David H. Lipman
Guest
Posts: n/a
 
      11th Jul 2007
From: "Ham Pastrami" <(E-Mail Removed)>

|
| "David H. Lipman" <DLipman~nospam~@Verizon.Net> wrote in message
| news:(E-Mail Removed)...
>> Do you even know what C2 is ?

|
| Not intimately, no, nor do I intend to.
|
>> How about the idea C2 is outdated ?

|
| You realize this ng is for discussing a 7-year-old OS, right?

C2 was created for NT4. It is older than 7 years.
You are assuming static conditions. Threats change and so do recommended security
settings.
C2 is outdated even for NT4 (albeit anybody who is think those levels of security should NOT
being using NT4 )


>> Hint: Go to the NIST for the latest security specs/recommendations.

|
| Unless my Win2k is also going there to update itself, I don't see how this
| is relevant to my question.
|
| Hint: I'm interested in Windows' file allocation behavior, not security
| recommendations.
|

I gues you will not FIND your answer then.

--
Dave
http://www.claymania.com/removal-trojan-adware.html
http://www.ik-cs.com/got-a-virus.htm


 
Reply With Quote
 
Ham Pastrami
Guest
Posts: n/a
 
      11th Jul 2007

"David H. Lipman" <DLipman~nospam~@Verizon.Net> wrote in message
news:%23%(E-Mail Removed)...
> From: "Ham Pastrami" <(E-Mail Removed)>
> | You realize this ng is for discussing a 7-year-old OS, right?
>
> C2 was created for NT4. It is older than 7 years.


Reiterating. You realize THIS NG is for discussing a 7-year-old OS, right?
I'm referring to the "win2000" part in the name.

> C2 was created for NT4. It is older than 7 years.
> You are assuming static conditions. Threats change and so do recommended
> security settings.
> C2 is outdated even for NT4 (albeit anybody who is think those levels of

security > should NOT
> being using NT4 )


Allow me to condense this line of discussion before we waste any more of
each other's time.

My question: Does your vinyl player scratch your records?
Your reply : Optical discs are the standard medium today.
My question: Does your vinyl player scratch your records?
(repeat)

> I gues you will not FIND your answer then.


Actually I found one from 1998, but thanks for the advice.

http://groups.google.com/group/comp....b1b9c59?hl=en&

Windows did not ship in C2 configuration, so as I suspected the zero on
allocation does not occur on default installations.


 
Reply With Quote
 
 
 
Reply

Thread Tools
Rate This Thread
Rate This Thread:

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off
Trackbacks are On
Pingbacks are On
Refbacks are Off


Similar Threads
Thread Thread Starter Forum Replies Last Post
PCI Compliance trosvold Windows XP Help 3 17th Jul 2009 03:24 AM
.NET compliance Wozza Microsoft Dot NET 1 12th Oct 2006 06:02 PM
CLS compliance Lloyd Dupont Microsoft VC .NET 0 27th Aug 2006 04:18 PM
CLS Compliance =?Utf-8?B?Z3V5?= Microsoft Dot NET 5 16th Feb 2006 04:59 PM
Non Compliance with CLS Gary Coutts Microsoft C# .NET 2 24th Mar 2004 10:20 AM


Features
 

Advertising
 

Newsgroups
 


All times are GMT +1. The time now is 09:02 PM.