Article View: comp.security.firewalls
Article #209Re: Warning: ShareSniffer Released
From: Keith Paxton
Date: Sat, 24 Feb 2001 06:58
Date: Sat, 24 Feb 2001 06:58
50 lines
3522 bytes
3522 bytes
OK, OK. So we're all having a nice debate on this. Cool. So, to all of you who would have our glorious Government enact MORE ineffective laws that they don't have the time or resources to enforce, I pose this scenario: I am a network administrator. I portscan EVERY machine on my network, many times a week. OOOPS! Sometimes I type the wrong address (I know, I know, I should write a bash shell script - so sue me ;-). So, anyway, now I have inadvertently scanned your network. Should I be detained by the PortScanning Police? Thrown in jail? Lose my job? Not only that, but prior to notifying the owner of the domain that the scanning machine belongs to, I (oh the horror!) do a little scan of my own against the offending IP address. Again, should I be detained by the PortScanning Police? Thrown in jail? Lose my job? Contrary to (what seems to be) popular belief, more ineffective laws are not going to protect Ma & Pa Kettle from script kiddies and other miscreants on the Internet. Just like more and more gun laws aren't going to keep the gang-banger in the neighborhood from poppin' a cap in your ass when you look at him the wrong way. -- Loren "I'm Libertarian. That means the Republicans annoy me slightly less than the Democrats" -Larry Elder - Nov. 2000 Lawrence Baldwin <baldwinlSPAMMENOT@mynetwatchman.com> wrote in message news:3A966412.9336DCD8@mynetwatchman.com... > The last thing I want to do is give this guy any press, but figured I'd > send a heads up: > > http://www.sharesniffer.com/FAQ.html#Q-001 > > Advocates utilizing the open shares for extra disk space "...because > it's there". > > My biggest concern is that it utilizes a newsgroup repository to collect > and dissemenate IP addresses with known open shares. Others (including > automated worms) could easily leverage this data, facilitating system > compromises. > > > Expect an increase in Netbios scans over the coming days....sigh. > > > lb. > ------------------------- > Lawrence Baldwin > Protocol Scientist > 678-624-0924 > http://www.mynetwatchman.com/about.htm - I'm under attack, now what?
Technical Details
Message-ID:
<kYIl6.60587$_D.11160931@typhoon.we.rr.com>Path:
arc1-ca.pugleaf.net!supernews.google.com!sn-xit-02!supernews.com!isdnet!news.stealth.net!24.30.200.2.MISMATCH!news-east.rr.com!cyclone-west.rr.com!news.rr.com!news-west.rr.com!lsnws01.we.mediaone.net!cyclone-LA3.rr.com!typhoon.we.rr.com.POSTED!not-for-mailReferences:
<3A966412.9336DCD8@mynetwatchman.com>Show Full Headers
Complete Article Headers
X-Google-Language: ENGLISH,ASCII-7-bit X-Google-Thread: f922c,b3c453f70036b961 X-Google-Attributes: gidf922c,public X-Google-Thread: 10090f,b3c453f70036b961 X-Google-Attributes: gid10090f,public X-Google-Thread: 113850,b3c453f70036b961 X-Google-Attributes: gid113850,public X-Google-Thread: f5dc1,b3c453f70036b961 X-Google-Attributes: gidf5dc1,public X-Google-ArrivalTime: 2001-02-23 22:58:25 PST Path: arc1-ca.pugleaf.net!supernews.google.com!sn-xit-02!supernews.com!isdnet!news.stealth.net!24.30.200.2.MISMATCH!news-east.rr.com!cyclone-west.rr.com!news.rr.com!news-west.rr.com!lsnws01.we.mediaone.net!cyclone-LA3.rr.com!typhoon.we.rr.com.POSTED!not-for-mail From: "Keith Paxton" <neodoesntw@ntspamknac.com> Newsgroups: comp.security.firewalls,bellsouth.net.security,comp.dcom.xdsl,comp.dcom.modems.cable References: <3A966412.9336DCD8@mynetwatchman.com> Subject: Re: Warning: ShareSniffer Released Lines: 52 X-Priority: 3 X-MSMail-Priority: Normal X-Newsreader: Microsoft Outlook Express 5.00.2615.200 X-MimeOLE: Produced By Microsoft MimeOLE V5.00.2615.200 Message-ID: <kYIl6.60587$_D.11160931@typhoon.we.rr.com> Date: Sat, 24 Feb 2001 06:58:24 GMT NNTP-Posting-Host: 24.130.137.220 X-Complaints-To: abuse@rr.com X-Trace: typhoon.we.rr.com 982997904 24.130.137.220 (Fri, 23 Feb 2001 22:58:24 PST) NNTP-Posting-Date: Fri, 23 Feb 2001 22:58:24 PST Organization: Road Runner