Is Opera Unite a security risk, and is there an easy way to block it?
Given that Opera Unite allows users to share files (music, photos, etc.) through firewalls and without a web server, it seems to be a security risk for the enterprise.
An article on this at ZDNet: http://news.zdnet.co.uk/internet/0,1000000097,39664228,00.htm states "At this point, [you should] be a bit cautious in the files you're sharing — only share amongst people you trust."
What's the best way for a sysadmin to block Opera Unite sharing? Since the hosting computer must be running Opera Unite, attempts to block downloading and running that application could be attempted on the specific computer, but are there more foolproof methods to block the use of this tool, to prevent unauthorized and accidental file sharing?
That is definately a security risk inside any company.
I'd use wireshark or some other application to detect what ports Unite uses to share files, and then, if i have a firewall, block the outbound port, if i have a protocol filter, block the outbound protocol, and then with group policy, block the outbound application, and port in windows firewall.
http://www.infoq.com/news/2009/06/Opera-Unite States Opera Unite opens port 8840, so you can block that port in both directions, and you shouldn't have to worry about it.
Don't let your users install unapproved software in the first place
For instructions to disable Opera Unite, or restricting it to your local network just follow the link.
Blocking 8840 only will not disable Unite in any way!
There is also a no install version of Opera called Opera@USB which does not require installation so using minimum privilege user accounts will not work. However Opera@USB obeys the settings in the same system fixed file that can be used to control the installed version.
Read the Unite section of the handbook and the section directly below, which explains how to enforce settings in Opera.
Opera System administrator's handbook
Looks like the architecture should allow you to block the Opera Unite Proxy servers to stop it from working.
http://dev.opera.com/articles/view/opera-unite-developer-primer/