[Info-vax] IKEA
Arne Vajhøj
arne at vajhoej.dk
Fri Dec 9 18:51:08 EST 2022
On 12/9/2022 9:05 AM, Alexander Schreiber wrote:
> Single Stage to Orbit <alex.buell at munted.eu> wrote:
>> On Thu, 2022-12-08 at 08:12 +0000, David Wade wrote:
>>> Given the ubiquity of SMB is there anything that could be done?
>>
>> Yes, stop usuing SMB1, use SMB3 instead.
>
> Which would magically protect against files being encrypted via a
> machine/user with r/w access to the share exactly how?
>
> Just wondering,
Ditching SMB1 does not help if the attack is
using intended file access on a file share.
Ditching SMB1 helps a lot if the attack is based
on one of the known vulnerabilities in SMB1.
Arne
More information about the Info-vax
mailing list