The software is written by humans, and can be defeated by a human determined enough to do so. Thankfully, as Richard pointed out, hackers are more interested in corporate networks, or unprotected computers. It's not really worth their time to try to break into personal computers with firewalls. If you don't have a firewall though, hackers are more than happy to use your computer for whatever they want to.
goates