Page 1 of 2

An issue of Windows security

Posted: 2003-02-02 06:26pm
by Shinova
Anonymous wrote:I also still use Win98. It works way better then Win95, Win2000, WinME, and WinXP. This is because it can be customed more and not be controlled by Microsoft. WinXP is controlled by Mircosoft, you even have to call them for the code to install your computer or to even reinstall it. I also heard that they have spyware in there that can't be removed or your computer will crash. This spyware keeps track of everything you do on there so they can sell your information to companies who are related to it. Lets take an SNES emulator for example. Their spyware detects it and they sell your info to game companies, which is how you get lots of annoying e-mails about stupid stuff. It's just like AOL's screwed up software.

Comments?

Re: An issue of Windows security

Posted: 2003-02-02 06:29pm
by Darth Wong
Shinova wrote:
Anonymous wrote:I also still use Win98. It works way better then Win95, Win2000, WinME, and WinXP. This is because it can be customed more and not be controlled by Microsoft. WinXP is controlled by Mircosoft, you even have to call them for the code to install your computer or to even reinstall it. I also heard that they have spyware in there that can't be removed or your computer will crash. This spyware keeps track of everything you do on there so they can sell your information to companies who are related to it. Lets take an SNES emulator for example. Their spyware detects it and they sell your info to game companies, which is how you get lots of annoying e-mails about stupid stuff. It's just like AOL's screwed up software.
Comments?
His comments about Windows security apply to all versions of Windows. You consent to install Microsoft software on your PC when you sign up for Windows Update, and if you don't install Windows Update, you run the risk of having massive unpatched security flaws on your PC. It's a lose-lose situation.

Win98 has less INHERENT security than Win2k, which is the best Microsoft OS so far in my opinion. The fact that you are running with unfettered read/write privileges to system files in user mode is simply unacceptable.

Posted: 2003-02-02 06:33pm
by HemlockGrey
Gah. Somebody needs to pass a law making spyware illegal.

Posted: 2003-02-02 06:38pm
by Faram
Amazing coinsidense!

Just posted a small thingie about spyware programs fixers :D

Go to
http://bbs.stardestroyer.net/viewtopic.php?t=11897

Posted: 2003-02-02 06:40pm
by HemlockGrey
Hey, if I use Spyboy to blast ALL the spyware on my comp, will it cause this Windows thing to crash on me?

Posted: 2003-02-02 06:42pm
by Faram
HemlockGrey wrote:Hey, if I use Spyboy to blast ALL the spyware on my comp, will it cause this Windows thing to crash on me?
Not if it is updated.

make sure to download the latest Spybot and update it before removing.

Spybot have an recovery function if something breaks.

Spybot-S&D tab / Recovery.

Remove all shit, restart and see if anything broke ;)

Posted: 2003-02-02 06:56pm
by His Divine Shadow
I reccomend people check out MW's computer security section, especially the shields up link:

http://www.stardestroyer.net/Mike/RantM ... rity.shtml

Posted: 2003-02-02 06:58pm
by His Divine Shadow
Hopefully you'll recieve answers like this:
Your Internet port 139 does not appear to exist!
One or more ports on this system are operating in FULL STEALTH MODE! Standard Internet behavior requires port connection attempts to be answered with a success or refusal response. Therefore, only an attempt to connect to a nonexistent computer results in no response of either kind. But YOUR computer has DELIBERATELY CHOSEN NOT TO RESPOND (that's very cool!) which represents advanced computer and port stealthing capabilities. A machine configured in this fashion is well hardened to Internet NetBIOS attack and intrusion.

Unable to connect with NetBIOS to your computer.
All attempts to get any information from your computer have FAILED. (This is very uncommon for a Windows networking-based PC.) Relative to vulnerabilities from Windows networking, this computer appears to be VERY SECURE since it is NOT exposing ANY of its internal NetBIOS networking protocol over the Internet.

Posted: 2003-02-02 07:05pm
by Pu-239
The Register likes to blast the author of the shield's up site

Posted: 2003-02-02 07:14pm
by His Divine Shadow
Pu-239 wrote:The Register likes to blast the author of the shield's up site
The Register? Who cares about the Register?

Besides the Register themselves that is

Posted: 2003-02-02 07:16pm
by Shinova
His Divine Shadow wrote:Hopefully you'll recieve answers like this:
Your Internet port 139 does not appear to exist!
One or more ports on this system are operating in FULL STEALTH MODE! Standard Internet behavior requires port connection attempts to be answered with a success or refusal response. Therefore, only an attempt to connect to a nonexistent computer results in no response of either kind. But YOUR computer has DELIBERATELY CHOSEN NOT TO RESPOND (that's very cool!) which represents advanced computer and port stealthing capabilities. A machine configured in this fashion is well hardened to Internet NetBIOS attack and intrusion.

Unable to connect with NetBIOS to your computer.
All attempts to get any information from your computer have FAILED. (This is very uncommon for a Windows networking-based PC.) Relative to vulnerabilities from Windows networking, this computer appears to be VERY SECURE since it is NOT exposing ANY of its internal NetBIOS networking protocol over the Internet.
I got that. Yay :)

Posted: 2003-02-02 07:24pm
by His Divine Shadow
Also try the port scanner, if you got like me, it's all green

Posted: 2003-02-02 07:26pm
by StimNeuro
lol, he used Windows and security in the same sentence.

Posted: 2003-02-02 07:31pm
by Shinova
I got all greens and one closed.


My cable modem, or my router, or BOTH, have built-in firewalls (supposedly), which was probably why I couldn't play on Diablo 2 games online back when I had win98.

Though I'm not sure about that one closed one.

Thanks for the link anyway.

Posted: 2003-02-02 07:32pm
by His Divine Shadow
StimNeuro wrote:lol, he used Windows and security in the same sentence.
lol, I used lube and the exhaust pipe of a car in the same space as your anus!

Posted: 2003-02-02 07:34pm
by HemlockGrey
1 stealth, 2 opens, rest closed.

Posted: 2003-02-02 07:36pm
by Shinova
Shinova wrote:I got all greens and one closed.


My cable modem, or my router, or BOTH, have built-in firewalls (supposedly), which was probably why I couldn't play on Diablo 2 games online back when I had win98.

Though I'm not sure about that one closed one.

Thanks for the link anyway.

With this in mind,

What should I do with Port 113 IDENT? <-- the one that's closed, not stealth.

Posted: 2003-02-02 07:41pm
by Exonerate
Closed meant that it gave a response, letting the whomever would be hacking your computer know that your computer is available. I'm using a router and a software based firewall, so all my ports are unavailable (Unless there's some uber-1337 hacker out there who can get through both)

Posted: 2003-02-02 07:43pm
by Einhander Sn0m4n
StimNeuro wrote:lol, he used Windows and security in the same sentence.
STFU Troll!

Thanks guys! Everyone's finally jumping on the Anti-Spyware boat. I can see it now: "Get your fill of sci-fi, science, spyware-killing, and mockery of stupid people"

Posted: 2003-02-02 07:43pm
by Exonerate
My results:
Attempting connection to your computer. . .
Shields UP! is now attempting to contact the Hidden Internet Server within your PC. It is likely that no one has told you that your own personal computer may now be functioning as an Internet Server with neither your knowledge nor your permission. And that it may be serving up all or many of your personal files for reading, writing, modification and even deletion by anyone, anywhere, on the Internet!
Your Internet port 139 does not appear to exist!
One or more ports on this system are operating in FULL STEALTH MODE! Standard Internet behavior requires port connection attempts to be answered with a success or refusal response. Therefore, only an attempt to connect to a nonexistent computer results in no response of either kind. But YOUR computer has DELIBERATELY CHOSEN NOT TO RESPOND (that's very cool!) which represents advanced computer and port stealthing capabilities. A machine configured in this fashion is well hardened to Internet NetBIOS attack and intrusion.
Unable to connect with NetBIOS to your computer.
All attempts to get any information from your computer have FAILED. (This is very uncommon for a Windows networking-based PC.) Relative to vulnerabilities from Windows networking, this computer appears to be VERY SECURE since it is NOT exposing ANY of its internal NetBIOS networking protocol over the Internet.
All ports are not responding. :D
There are ways to detect if there's a computer behind a IP even if they have a firewall though.

Posted: 2003-02-02 07:45pm
by Shinova
Exonerate wrote:My results:
Attempting connection to your computer. . .
Shields UP! is now attempting to contact the Hidden Internet Server within your PC. It is likely that no one has told you that your own personal computer may now be functioning as an Internet Server with neither your knowledge nor your permission. And that it may be serving up all or many of your personal files for reading, writing, modification and even deletion by anyone, anywhere, on the Internet!
Your Internet port 139 does not appear to exist!
One or more ports on this system are operating in FULL STEALTH MODE! Standard Internet behavior requires port connection attempts to be answered with a success or refusal response. Therefore, only an attempt to connect to a nonexistent computer results in no response of either kind. But YOUR computer has DELIBERATELY CHOSEN NOT TO RESPOND (that's very cool!) which represents advanced computer and port stealthing capabilities. A machine configured in this fashion is well hardened to Internet NetBIOS attack and intrusion.
Unable to connect with NetBIOS to your computer.
All attempts to get any information from your computer have FAILED. (This is very uncommon for a Windows networking-based PC.) Relative to vulnerabilities from Windows networking, this computer appears to be VERY SECURE since it is NOT exposing ANY of its internal NetBIOS networking protocol over the Internet.
All ports are not responding. :D
There are ways to detect if there's a computer behind a IP even if they have a firewall though.
But only uber-leet hackers know that, and I doubt hackers of that level will be going around poking into ordinary people's comps instead of hacking into government mainframes.

Posted: 2003-02-02 07:47pm
by Exonerate
Nah, there's prepackaged programs that let you do that. Doesn't take much skill...

Now hacking through a hardware and software firewall... That takes a bit more skill.

Posted: 2003-02-02 07:52pm
by StimNeuro
Using the free version of ZoneAlarm(on full stealth mode) gives you:

"Your Internet port 139 does not appear to exist! " and "Unable to connect with NetBIOS to your computer." for your shields, and shows everything stealthed, with the exception of the closed 113 IDENT port.

Posted: 2003-02-02 07:55pm
by StimNeuro
Oh, and HDS and Einhander Sn0m4n, I wasn't trying to troll, though that did sound very trollish. I merely found that very funny.

Posted: 2003-02-02 07:57pm
by Einhander Sn0m4n
StimNeuro wrote:Oh, and HDS and Einhander Sn0m4n, I wasn't trying to troll, though that did sound very trollish. I merely found that very funny.
K. Just watch yourself a bit more. I've got the death penalty in 12 systems!

LOL!