The Active Network
ActiveWin Anonymous | Create a User | Reviews | News | Forums | Advertise | VBA in Excel | Users Online: 0  
 

neowin.net

Amazon.com

  *  

  UPnP approved as ISO standard
Time: 05:14 EST/10:14 GMT | News Source: Ars Technica | Posted By: Jonathan Tigner

Although its been a widely-available (and widely-used) standard for years, the UPnP (Universal Plug and Play) standard and 76 specific UPnP fixes received official international standard status late last week. In an overwhelming approval vote, the International Standards Organization/International Electrotechnical Commission Joint Technical Committee 1 (ISO/IEC JTC 1) voted to recognize UPnP as an official standard of the body.

Read Only Comments
Return to News
  Displaying Comments 1 through 4 of 4
  This is an archived static copy of ActiveWin.com.
#1 By 2960 (68.100.112.199) at Monday, September 17, 2007 10:54:22 AM
Are the security issues with uPnP resolved?

I just recently enabled it on my machines, router and NAS boxes so I could use media streaming to my XBox 360.

In the past I had always read it wasn't safe. Dan Gibson had a real bug up his butt about it.

TL

#2 By 23275 (24.179.4.158) at Monday, September 17, 2007 01:12:05 PM
#1, Oh my yes, a very long time ago.

I think you mean, Steve Gibson over at, http://www.grc.com/intro.htm

UPnP and UPnP-x [of which Teredo technologies make wide use of, as well as MS's "Rally" technologies], are quite safe and advised.

Perhaps the best use of it is in Windows Home Server's set up - where everything is automated - router setup, DMZ, TSO/DNS, etc... It's pretty cool to watch.

#3 By 2960 (68.100.112.199) at Tuesday, September 18, 2007 07:43:08 AM
Err.... Correct, Steve Gibson.

TL

#4 By 37047 (216.191.227.68) at Tuesday, September 18, 2007 08:35:04 AM
Steve Gibson did indeed recommend disabling this service, as did the FBI. However, that opinion is no longer being put forward by the FBI, apparently. Gibson currently recommends that it be shut off on all systems that it is not needed on, as should any other protocol not in use, to limit the number of potential exploit vectors. However, if you need it, it has been fixed sufficiently for general use. Some issues may still exist, but that can be said of almost any protocol stack.



 

  *  
  *   *
 
replica watches