🚀 go-pugleaf

RetroBBS NetNews Server

Inspired by RockSolid Light RIP Retro Guy

Article View: comp.security.firewalls
Article #194

Re: Anyone use Hack Tracer?

#194
From: fivie
Date: Thu, 18 Jan 2001 23:40
69 lines
4004 bytes
" security " is that state of mind That existed immediately
prior to the " panic state" resulting  from the discovery of ,
or the presenace of a  virus or hacker .

Joe S wrote:
> 
> Well said.
> 
> "Michael Scheidell" <me@privacy.net> wrote in message
> news:lOK86.1826$Dd.10880505@news1.mia...
> >
> > "Lawrence Baldwin" <baldwinlSPAMMENOT@mynetwatchman.com> wrote in message
> > news:3A6296A5.2EA4B529@mynetwatchman.com...
> > > Not to be a pessimist, but my biggest realization regarding network
> > > security is that
> > >
> > > "SECURE" is not a state of being, it is a VERB describing the *continual
> > > process* of reviewing, researching,
> > > learning of matters of security.
> >
> > I agree.
> >
> > as in 'security is a process' not a product.
> > With so many new ways to hack into a system, not to mention the odd
> 'woops,
> > I forgot to apply that 15 month old patch to MS II2 and now the Russians
> > have bill's source code'.
> >
> > Basically, the only way to make sure, 100% that someone can't break into
> > your system is to use a little known hardware product, found at home
> depot,
> > and purchased for $4.95 (yep, less then $5 us)
> >
> > Its a pair of wire cutters.
> >
> > Other than that, it is important to be notified when you are being hacked,
> > and important that you report it to the ISP.
> >
> > Important, because that server is either a victim (already been hacked) or
> > the villain.
> > Either case, the ISP in question had better take actions or they could
> find
> > themselves in the receiving end of an FBI investigation (BellSouth, take
> > note:  you are really down there on the list of ISP's who take hackers and
> > security seriously, with 15% of the Cayman routers you install, open to
> the
> > outside world with no passwords!)
> >
> > It isn't 6 hours that goes by that I don't have some luser on a BellSouth
> > dsl line scanning for either the netbus Trojan, or the sunrpc buffer
> > overflow.
> >
> > Stopped the attack? yep, my firewall stopped it from attacking here, but
> if
> > I get notified, and let BellSouth know about it and they actually did
> > something about it, then the infection would spread slower.
> >
> > (still need the$4.95 hardware security device to stop it)
> >
> > Bottom line, 15 to 20% of the dsl and cable modem connected computers are
> > infected with Trojans, sub seven, netbus or something similar.
> >
> > Just waiting to launch additional attacks.
> > Stop the attack, identify the attacker (in real time) and complain.
> >
> >
> >
> >
> >
Technical Details
Message-ID: <3A677EE1.6A3C8D78@bellsouth.net>
Path: arc1-ca.pugleaf.net!supernews.google.com!sn-xit-02!sn-xit-03!supernews.com!hermes.visi.com!news-out.visi.com!news.maxwell.syr.edu!newsfeed.atl.bellsouth.net.MISMATCH!newsfeed.atl!news4.atl.POSTED!not-for-mail
References: <mQp86.1663$Dd.9410278@news1.mia> <3A62709C.7EF9E66@mynetwatchman.com> <Zuw86.3425$Oe.16433@tor-nn1.netcom.ca> <3A6296A5.2EA4B529@mynetwatchman.com> <lOK86.1826$Dd.10880505@news1.mia> <Cpx96.3807$CR2.174436@news3.atl>

Show Full Headers
Complete Article Headers
X-Google-Language: ENGLISH,ASCII-7-bit
X-Google-Thread: f922c,67dc1e9da7b27b77
X-Google-Attributes: gidf922c,public
X-Google-Thread: 10090f,67dc1e9da7b27b77
X-Google-Attributes: gid10090f,public
X-Google-Thread: 1122a6,67dc1e9da7b27b77
X-Google-Attributes: gid1122a6,public
X-Google-ArrivalTime: 2001-01-18 15:33:44 PST
Path: arc1-ca.pugleaf.net!supernews.google.com!sn-xit-02!sn-xit-03!supernews.com!hermes.visi.com!news-out.visi.com!news.maxwell.syr.edu!newsfeed.atl.bellsouth.net.MISMATCH!newsfeed.atl!news4.atl.POSTED!not-for-mail
Message-ID: <3A677EE1.6A3C8D78@bellsouth.net>
From: fivie <minusdspam@bellsouth.net>
Reply-To: spammy, "fexwifenotme"@be;;sputh.net
X-Mailer: Mozilla 4.76 [en]C-bls40  (Win98; U)
X-Accept-Language: en
MIME-Version: 1.0
Newsgroups: comp.security.firewalls,bellsouth.net.support.adsl,bellsouth.net.security
Subject: Re: Anyone use Hack Tracer?
References: <mQp86.1663$Dd.9410278@news1.mia> <3A62709C.7EF9E66@mynetwatchman.com> <Zuw86.3425$Oe.16433@tor-nn1.netcom.ca> <3A6296A5.2EA4B529@mynetwatchman.com> <lOK86.1826$Dd.10880505@news1.mia> <Cpx96.3807$CR2.174436@news3.atl>
Content-Type: text/plain; charset=us-ascii
Content-Transfer-Encoding: 7bit
Lines: 69
Date: Thu, 18 Jan 2001 18:40:17 -0500
NNTP-Posting-Host: 209.214.68.108
X-Trace: news4.atl 979860817 209.214.68.108 (Thu, 18 Jan 2001 18:33:37 EST)
NNTP-Posting-Date: Thu, 18 Jan 2001 18:33:37 EST