From: "Geo" 

"Mike N."  wrote in message
news:k7b1g250okthvnq6c3lbdbo8a18mm9tcjm{at}4ax.com...

>    Reading on to the second page in your article, some guy from Microsoft
> claims that it works as expected.   If you don't explicitly configure any
> IPV6 addresses, it will never make an IPV6 query.  I haven't tested this
> though.

I don't believe this to be the case, in W2K and XP if you don't configure
an IPv4 address and if there is no DHCP then windows automatically assigns
an IP address (I forget the address but it begins 169.something I think). 
I think IPv6 stack also configures a default address but I'm not running it
so I can't test that either.

> > More surface area for attacks too.
>
>    This I'll agree on.   They have enabled it in a manner similar to the
> old PNP interface: ready to go IPV6 without configuration.  This just
means
> ready to exploit.  A corp is big enough to have remote control over the
> configuration because they download Windows and application patches -- why
> does MS think it will be too hard to enable IPV6 when they need it?

It's their typical mindset, ease of use over security. It's like the MS
version of crack, they just can't seem to give it up.

Geo.

--- BBBS/NT v4.01 Flag-5