Hans Straat - All Comments

user is stil the biggest security risk

hans straat — Tue, 16 Oct 2007 12:01:23 GMT

Like said in my comments on the article and on the dutch site tweakers.net the biggest risk is still the user. This is not a bug but they simply use the ICA client to gain access to an environment. You still need user credentials to logon to such an environment and most environments don't have ftp or tftp open only port 80 for internet browsing.

Re: Re: The details are sketchy

Guest — Fri, 12 Oct 2007 19:42:08 GMT

The sad thing is that a manager level will read this article and immediatly panic thinking that their Citrix environment is not secure. Anyone with any network savy will see that this is not a Citrix issue.

Re: The details are sketchy

Guest — Fri, 12 Oct 2007 02:30:31 GMT

Have to agree, that looks more like someone who doesn't know what they are doing at implementation rather than technical problems with Citrix.

The details are sketchy

Guest — Fri, 12 Oct 2007 01:53:53 GMT

This article was also posted in eWeek - but if you look at the detail you will see that the problem is a CPS server sitting directly on the internet with no security. More of an imprementation issue than a CPS issue.