Article View: comp.security.firewalls
Article #247Re: Warning: ShareSniffer Released
From: Cuervo Jones
Date: Fri, 23 Feb 2001 14:57
Date: Fri, 23 Feb 2001 14:57
41 lines
3213 bytes
3213 bytes
Oh dear... I pray that my ISP doesn't start trying to become a security expert... The last thing they need to do is start baby-sitting us. It will only interfere with those of us who know what's going on, and the majority of the people will never know anything has EVER happened to them...for them, I say ignorance is bliss. "Joe King" <cluelessnewbie*@home.com> wrote in message news:1orc9t0dblf72e35c9vvjj562kfff17vmm@can.gov... > On Fri, 23 Feb 2001 08:22:26 -0500, Lawrence Baldwin > <baldwinlSPAMMENOT@mynetwatchman.com> wrote: > > >The last thing I want to do is give this guy any press, but figured I'd > >send a heads up: > > > >http://www.sharesniffer.com/FAQ.html#Q-001 > > > >Advocates utilizing the open shares for extra disk space "...because > >it's there". > > > >My biggest concern is that it utilizes a newsgroup repository to collect > >and dissemenate IP addresses with known open shares. Others (including > >automated worms) could easily leverage this data, facilitating system > >compromises. > > The up side of it (if there is one) is that it just might start > publicly pointing the finger at people who refuse to RTFM and take > reasonable precautions to secure their systems, and others who plain > just don't give a damn about what is going in or out of their > system/connection. > > It might also force some of the broadband cable operators to take a > more pro-active approach to securing and protecting their subscribers > with a secure and monitored infrastructure. > > >Expect an increase in Netbios scans over the coming days....sigh. > > As opposed to what... being banged 50 times a day with RPC port > probes, Sub 7/2 port probes?..LOL > >
Technical Details
Message-ID:
<OTul6.2816$L04.327284@newsread2.prod.itd.earthlink.net>Path:
arc1-ca.pugleaf.net!supernews.google.com!sn-xit-03!supernews.com!cyclone2.usenetserver.com!news-out.usenetserver.com!newsfeed2.earthlink.net!newsfeed.earthlink.net!newsmaster1.prod.itd.earthlink.net!newsread2.prod.itd.earthlink.net.POSTED!not-for-mailReferences:
<3A966412.9336DCD8@mynetwatchman.com> <1orc9t0dblf72e35c9vvjj562kfff17vmm@can.gov>Show Full Headers
Complete Article Headers
X-Google-Language: ENGLISH,ASCII-7-bit X-Google-Thread: f922c,b3c453f70036b961 X-Google-Attributes: gidf922c,public X-Google-Thread: 10090f,b3c453f70036b961 X-Google-Attributes: gid10090f,public X-Google-Thread: 113850,b3c453f70036b961 X-Google-Attributes: gid113850,public X-Google-Thread: f5dc1,b3c453f70036b961 X-Google-Attributes: gidf5dc1,public X-Google-ArrivalTime: 2001-02-23 06:58:07 PST Path: arc1-ca.pugleaf.net!supernews.google.com!sn-xit-03!supernews.com!cyclone2.usenetserver.com!news-out.usenetserver.com!newsfeed2.earthlink.net!newsfeed.earthlink.net!newsmaster1.prod.itd.earthlink.net!newsread2.prod.itd.earthlink.net.POSTED!not-for-mail From: "Cuervo Jones" <cuervo_jones@altavista.com> Newsgroups: comp.security.firewalls,bellsouth.net.security,comp.dcom.xdsl,comp.dcom.modems.cable References: <3A966412.9336DCD8@mynetwatchman.com> <1orc9t0dblf72e35c9vvjj562kfff17vmm@can.gov> Subject: Re: Warning: ShareSniffer Released Lines: 43 X-Priority: 3 X-MSMail-Priority: Normal X-Newsreader: Microsoft Outlook Express 5.50.4133.2400 X-MimeOLE: Produced By Microsoft MimeOLE V5.50.4133.2400 Message-ID: <OTul6.2816$L04.327284@newsread2.prod.itd.earthlink.net> Date: Fri, 23 Feb 2001 14:57:50 GMT NNTP-Posting-Host: 209.173.30.5 X-Complaints-To: abuse@earthlink.net X-Trace: newsread2.prod.itd.earthlink.net 982940270 209.173.30.5 (Fri, 23 Feb 2001 06:57:50 PST) NNTP-Posting-Date: Fri, 23 Feb 2001 06:57:50 PST Organization: EarthLink Inc. -- http://www.EarthLink.net