[Info-vax] IKEA

Arne Vajhøj arne at vajhoej.dk
Fri Dec 9 18:51:08 EST 2022


On 12/9/2022 9:05 AM, Alexander Schreiber wrote:
> Single Stage to Orbit <alex.buell at munted.eu> wrote:
>> On Thu, 2022-12-08 at 08:12 +0000, David Wade wrote:
>>> Given the ubiquity of SMB is there anything that could be done?
>>
>> Yes, stop usuing SMB1, use SMB3 instead.
> 
> Which would magically protect against files being encrypted via a
> machine/user with r/w access to the share exactly how?
> 
> Just wondering,

Ditching SMB1 does not help if the attack is
using intended file access on a file share.

Ditching SMB1 helps a lot if the attack is based
on one of the known vulnerabilities in SMB1.

Arne







More information about the Info-vax mailing list