🚀 go-pugleaf

RetroBBS NetNews Server

Inspired by RockSolid Light RIP Retro Guy

Article View: comp.security.firewalls
Article #212

Re: Warning: ShareSniffer Released

#212
From: Michael
Date: Sat, 24 Feb 2001 13:45
99 lines
5647 bytes
"Keith Paxton" <neodoesntw@ntspamknac.com> wrote in message
news:kYIl6.60587$_D.11160931@typhoon.we.rr.com...
| OK, OK. So we're all having a nice debate on this. Cool. So, to all of you
| who would have our glorious Government enact MORE ineffective laws that
they
| don't have the time or resources to enforce, I pose this scenario:
|
| I am a network administrator. I portscan EVERY machine on my network, many
| times a week. OOOPS! Sometimes I type the wrong address (I know, I know, I
| should write a bash shell script - so sue me ;-). So, anyway, now I have
| inadvertently scanned your network. Should I be detained by the
PortScanning
| Police? Thrown in jail? Lose my job? Not only that, but prior to notifying
| the owner of the domain that the scanning machine belongs to, I (oh the
| horror!) do a little scan of my own against the offending IP address.
Again,
| should I be detained by the PortScanning Police? Thrown in jail? Lose my
| job?
|
| Contrary to (what seems to be) popular belief, more ineffective laws are
not
| going to protect Ma & Pa Kettle from script kiddies and other miscreants on
| the Internet. Just like more and more gun laws aren't going to keep the
| gang-banger in the neighborhood from poppin' a cap in your ass when you
look
| at him the wrong way.
| --
| Loren
| "I'm Libertarian. That means the Republicans
| annoy me slightly less than the Democrats"
| -Larry Elder - Nov. 2000
|
| Lawrence Baldwin <baldwinlSPAMMENOT@mynetwatchman.com> wrote in message
| news:3A966412.9336DCD8@mynetwatchman.com...
| > The last thing I want to do is give this guy any press, but figured I'd
| > send a heads up:
| >
| > http://www.sharesniffer.com/FAQ.html#Q-001
| >
| > Advocates utilizing the open shares for extra disk space "...because
| > it's there".
| >
| > My biggest concern is that it utilizes a newsgroup repository to collect
| > and dissemenate IP addresses with known open shares.  Others (including
| > automated worms) could easily leverage this data, facilitating system
| > compromises.
| >
| >
| > Expect an increase in Netbios scans over the coming days....sigh.
| >
| >
| > lb.
| > -------------------------
| > Lawrence Baldwin
| > Protocol Scientist
| > 678-624-0924
| > http://www.mynetwatchman.com/about.htm - I'm under attack, now what?
|

I'm not sure what the remedy is.

I do know that I do not want the government getting involved.

For all the analogies to ones house or cars and whatever else scanning and
probing might be compared to, it is not a matter of personal safety or a
threat to ones being.

Mr. Navas made a comparison about not having to be an expert in automotives
to drive, and one shouldn't have to be an expert in computers to operate one.
But you know, you do have to take classes on safety and pass tests before you
can get behind that wheel and drive that car.  Do people still wreck?  Do
people still drive like idiots?  Yes.  There are tons of laws dedicated to
the vehicle and driving .  Most are probably needed.  Because this involves
personal safety and others well being.  Surfing the net does not.

When LB first made me aware of Sharesniffer I wondered how it could be legal.
Well, borrowing from others, knocking isn't illegal.  Standing on the street
looking at your house isn't illegal.  If you don't want me to see you then
close your blinds, or build a wall around your house.

If anything should be illegal it should be those telemarketers who come
"knocking" through your phone, thank goodness for a new service called
Privacy Director.  Or maybe all those soul savers who show up on Saturday
mornings disturbing my cartoon watching.

Anyway, the ISPs, Windows, the computer makers all need to a better job at
educating consumers about security. And the consumer needs to take the most
responsibilty and educate themselves.  If not uck 'em.  Most folks are just
too damn lazy. Even computer professionals who run networks and are in charge
of security can be lazy and forget to download patches and apply certain
security tweaks.  Let them get bit one good time and hopefully they will have
learned their lesson.

I sure do hope it is not the government making these decisions.

Michael
 mgbaker@bellsouth.net
______________________
Technical Details
Message-ID: <MWOl6.41330$LB6.145017@news2.atl>
Path: arc1-ca.pugleaf.net!supernews.google.com!sn-xit-02!supernews.com!nntp-relay.ihug.net!ihug.co.nz!news-spur1.maxwell.syr.edu!news.maxwell.syr.edu!newsfeed.atl.bellsouth.net.MISMATCH!newsfeed.atl!news2.atl.POSTED!not-for-mail
References: <3A966412.9336DCD8@mynetwatchman.com> <kYIl6.60587$_D.11160931@typhoon.we.rr.com>

Show Full Headers
Complete Article Headers
X-Google-Language: ENGLISH,ASCII-7-bit
X-Google-Thread: f922c,b3c453f70036b961
X-Google-Attributes: gidf922c,public
X-Google-Thread: 10090f,b3c453f70036b961
X-Google-Attributes: gid10090f,public
X-Google-Thread: f5dc1,b3c453f70036b961
X-Google-Attributes: gidf5dc1,public
X-Google-Thread: 113850,b3c453f70036b961
X-Google-Attributes: gid113850,public
X-Google-ArrivalTime: 2001-02-24 05:46:30 PST
Path: arc1-ca.pugleaf.net!supernews.google.com!sn-xit-02!supernews.com!nntp-relay.ihug.net!ihug.co.nz!news-spur1.maxwell.syr.edu!news.maxwell.syr.edu!newsfeed.atl.bellsouth.net.MISMATCH!newsfeed.atl!news2.atl.POSTED!not-for-mail
From: "Michael" <mgbaker@bellsouth.net>
Newsgroups: comp.security.firewalls,bellsouth.net.security,comp.dcom.xdsl,comp.dcom.modems.cable
References: <3A966412.9336DCD8@mynetwatchman.com> <kYIl6.60587$_D.11160931@typhoon.we.rr.com>
Subject: Re: Warning: ShareSniffer Released
Lines: 101
X-Priority: 3
X-MSMail-Priority: Normal
X-Newsreader: Microsoft Outlook Express 5.50.4522.1200
X-MimeOLE: Produced By Microsoft MimeOLE V5.50.4522.1200
Message-ID: <MWOl6.41330$LB6.145017@news2.atl>
Date: Sat, 24 Feb 2001 08:45:37 -0500
NNTP-Posting-Host: 216.77.239.153
X-Trace: news2.atl 983022380 216.77.239.153 (Sat, 24 Feb 2001 08:46:20 EST)
NNTP-Posting-Date: Sat, 24 Feb 2001 08:46:20 EST