🚀 go-pugleaf

"Lawrence Baldwin" <baldwinlSPAMMENOT@mynetwatchman.com> wrote in message
news:3A6296A5.2EA4B529@mynetwatchman.com...
> Not to be a pessimist, but my biggest realization regarding network
> security is that
>
> "SECURE" is not a state of being, it is a VERB describing the *continual
> process* of reviewing, researching,
> learning of matters of security.

I agree.

as in 'security is a process' not a product.
With so many new ways to hack into a system, not to mention the odd 'woops,
I forgot to apply that 15 month old patch to MS II2 and now the Russians
have bill's source code'.

Basically, the only way to make sure, 100% that someone can't break into
your system is to use a little known hardware product, found at home depot,
and purchased for $4.95 (yep, less then $5 us)

Its a pair of wire cutters.

Other than that, it is important to be notified when you are being hacked,
and important that you report it to the ISP.

Important, because that server is either a victim (already been hacked) or
the villain.
Either case, the ISP in question had better take actions or they could find
themselves in the receiving end of an FBI investigation (BellSouth, take
note:  you are really down there on the list of ISP's who take hackers and
security seriously, with 15% of the Cayman routers you install, open to the
outside world with no passwords!)

It isn't 6 hours that goes by that I don't have some luser on a BellSouth
dsl line scanning for either the netbus Trojan, or the sunrpc buffer
overflow.

Stopped the attack? yep, my firewall stopped it from attacking here, but if
I get notified, and let BellSouth know about it and they actually did
something about it, then the infection would spread slower.

(still need the$4.95 hardware security device to stop it)

Bottom line, 15 to 20% of the dsl and cable modem connected computers are
infected with Trojans, sub seven, netbus or something similar.

Just waiting to launch additional attacks.
Stop the attack, identify the attacker (in real time) and complain.