Article View: comp.security.firewalls
Article #194Re: Anyone use Hack Tracer?
From: fivie
Date: Thu, 18 Jan 2001 23:40
Date: Thu, 18 Jan 2001 23:40
69 lines
4004 bytes
4004 bytes
" security " is that state of mind That existed immediately prior to the " panic state" resulting from the discovery of , or the presenace of a virus or hacker . Joe S wrote: > > Well said. > > "Michael Scheidell" <me@privacy.net> wrote in message > news:lOK86.1826$Dd.10880505@news1.mia... > > > > "Lawrence Baldwin" <baldwinlSPAMMENOT@mynetwatchman.com> wrote in message > > news:3A6296A5.2EA4B529@mynetwatchman.com... > > > Not to be a pessimist, but my biggest realization regarding network > > > security is that > > > > > > "SECURE" is not a state of being, it is a VERB describing the *continual > > > process* of reviewing, researching, > > > learning of matters of security. > > > > I agree. > > > > as in 'security is a process' not a product. > > With so many new ways to hack into a system, not to mention the odd > 'woops, > > I forgot to apply that 15 month old patch to MS II2 and now the Russians > > have bill's source code'. > > > > Basically, the only way to make sure, 100% that someone can't break into > > your system is to use a little known hardware product, found at home > depot, > > and purchased for $4.95 (yep, less then $5 us) > > > > Its a pair of wire cutters. > > > > Other than that, it is important to be notified when you are being hacked, > > and important that you report it to the ISP. > > > > Important, because that server is either a victim (already been hacked) or > > the villain. > > Either case, the ISP in question had better take actions or they could > find > > themselves in the receiving end of an FBI investigation (BellSouth, take > > note: you are really down there on the list of ISP's who take hackers and > > security seriously, with 15% of the Cayman routers you install, open to > the > > outside world with no passwords!) > > > > It isn't 6 hours that goes by that I don't have some luser on a BellSouth > > dsl line scanning for either the netbus Trojan, or the sunrpc buffer > > overflow. > > > > Stopped the attack? yep, my firewall stopped it from attacking here, but > if > > I get notified, and let BellSouth know about it and they actually did > > something about it, then the infection would spread slower. > > > > (still need the$4.95 hardware security device to stop it) > > > > Bottom line, 15 to 20% of the dsl and cable modem connected computers are > > infected with Trojans, sub seven, netbus or something similar. > > > > Just waiting to launch additional attacks. > > Stop the attack, identify the attacker (in real time) and complain. > > > > > > > > > >
Technical Details
Message-ID:
<3A677EE1.6A3C8D78@bellsouth.net>Path:
arc1-ca.pugleaf.net!supernews.google.com!sn-xit-02!sn-xit-03!supernews.com!hermes.visi.com!news-out.visi.com!news.maxwell.syr.edu!newsfeed.atl.bellsouth.net.MISMATCH!newsfeed.atl!news4.atl.POSTED!not-for-mailReferences:
<mQp86.1663$Dd.9410278@news1.mia> <3A62709C.7EF9E66@mynetwatchman.com> <Zuw86.3425$Oe.16433@tor-nn1.netcom.ca> <3A6296A5.2EA4B529@mynetwatchman.com> <lOK86.1826$Dd.10880505@news1.mia> <Cpx96.3807$CR2.174436@news3.atl>Show Full Headers
Complete Article Headers
X-Google-Language: ENGLISH,ASCII-7-bit X-Google-Thread: f922c,67dc1e9da7b27b77 X-Google-Attributes: gidf922c,public X-Google-Thread: 10090f,67dc1e9da7b27b77 X-Google-Attributes: gid10090f,public X-Google-Thread: 1122a6,67dc1e9da7b27b77 X-Google-Attributes: gid1122a6,public X-Google-ArrivalTime: 2001-01-18 15:33:44 PST Path: arc1-ca.pugleaf.net!supernews.google.com!sn-xit-02!sn-xit-03!supernews.com!hermes.visi.com!news-out.visi.com!news.maxwell.syr.edu!newsfeed.atl.bellsouth.net.MISMATCH!newsfeed.atl!news4.atl.POSTED!not-for-mail Message-ID: <3A677EE1.6A3C8D78@bellsouth.net> From: fivie <minusdspam@bellsouth.net> Reply-To: spammy, "fexwifenotme"@be;;sputh.net X-Mailer: Mozilla 4.76 [en]C-bls40 (Win98; U) X-Accept-Language: en MIME-Version: 1.0 Newsgroups: comp.security.firewalls,bellsouth.net.support.adsl,bellsouth.net.security Subject: Re: Anyone use Hack Tracer? References: <mQp86.1663$Dd.9410278@news1.mia> <3A62709C.7EF9E66@mynetwatchman.com> <Zuw86.3425$Oe.16433@tor-nn1.netcom.ca> <3A6296A5.2EA4B529@mynetwatchman.com> <lOK86.1826$Dd.10880505@news1.mia> <Cpx96.3807$CR2.174436@news3.atl> Content-Type: text/plain; charset=us-ascii Content-Transfer-Encoding: 7bit Lines: 69 Date: Thu, 18 Jan 2001 18:40:17 -0500 NNTP-Posting-Host: 209.214.68.108 X-Trace: news4.atl 979860817 209.214.68.108 (Thu, 18 Jan 2001 18:33:37 EST) NNTP-Posting-Date: Thu, 18 Jan 2001 18:33:37 EST