Solved

Is bonjour secure?

Posted on 2010-09-19
3
866 Views
Last Modified: 2012-05-10
I want to run an app on my iPad that needs bonjour to sync to a file on my desktop.  Is bonjour secure enough to run in an enterprise environment? Thanks.
0
Comment
Question by:Mike London
3 Comments
 
LVL 8

Accepted Solution

by:
hello_everybody earned 250 total points
Comment Utility
This is from Wikipedia .


"Bonjour  is sometimes misunderstood to make services on a personal computer (for  instance, file sharing) available to the public Internet, which could  be considered a security risk. In fact, Bonjour does not provide any  extra access to services, even on the same local area network (LAN); it  merely announces ("advertises") their existence. For example, a user can  browse a list of nearby computers which share files—Bonjour on these  computers has told the user that the service is available—but he or she  must still provide a password to access any protected files on these  machines. Additionally, Bonjour works only in a close range; by default,  its messages only reach users of the same link. Thus, the security  impact of Bonjour is that advertised services are no longer protected by  security through obscurity on the local network. If the services are  protected through a means other than obscurity, they will remain  protected. However, given the security ability of the general user, this  may represent a significant change in the user's security level."                                                            
0
 

Author Comment

by:Mike London
Comment Utility
I did see that, thanks.  I was just looking for further confirmation that this is correct and that there are no other security implications.

Thanks.
0
 
LVL 20

Assisted Solution

by:woolnoir
woolnoir earned 250 total points
Comment Utility
As the first expert commented on it does nothing more than announce services - this is often OK, but there is logic in not doing that from a security point of view. Annoying something makes it visible & proves a degree if information as to what system/OS/patches something is running - or certainly provides a prompt to check. On a enterprise INTERNAL network such as yours i wouldn't be TOO worried about it .. there shouldnt be any attackers in general as the perimeter/edge security systems shoudl secure you to a degree.

I'm not sure if you are IT within your company ( the fact you have the permissions to install software suggests maybe ? ) either way, make sure no policies exist which prevent this, or make it against policy to do so... if in doubt ASK....
0

Featured Post

What Security Threats Are You Missing?

Enhance your security with threat intelligence from the web. Get trending threat insights on hackers, exploits, and suspicious IP addresses delivered to your inbox with our free Cyber Daily.

Join & Write a Comment

Apple's line of laptop computers has made significant strides forward in the last few years. The biggest change being the switch to Intel processors in 2005. One thing about Apple hardware, especially that from a few years ago, is the tendency for i…
New Windows 7 Installations take days for Windows-Updates to show up and install. This can easily be fixed. I have finally decided to write an article because this seems to get asked several times a day lately. This Article and the Links apply to…
In this Micro Tutorial viewers will learn how to use Boot Corrector from Paragon Rescue Kit Free to identify and fix the boot problems of Windows 7/8/2012R2 etc. As an example is used Windows 2012R2 which lost its active partition flag (often happen…
This Micro Tutorial will give you a basic overview of Windows DVD Burner through its features and interface. This will be demonstrated using Windows 7 operating system.

772 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

10 Experts available now in Live!

Get 1:1 Help Now