View Full Version : How secure is this forum
I have followed the thread on "hacking" and installed lockdown 2000.
Wow I wasn't prepared for the three hit's in ten min's.
I have sent the offenders IP addresses to my service provider, but the disturbing thing is it only seems to happen on this forum!
I might only be a PPL but I am also a Magistrate and have one or two files on my computer I would not like in the public domain, so please be aware as this forum seems to attract snoopers, and not being up to speed on such matters "this will change like yesterday" can hackers pick targets from such places as PPRUNE, or is it just pot luck?
PA38
Captain Airclues
3rd Apr 2000, 16:28
The most sensitive piece of information on my computer is that my sons all get higher scores than me on Combat Flight Sim, but I wouldn't want anyone to know that.
Airclues
I have been looking into this little back door into my computer, and find that anyone can try and access you system when you are connected to the web.
But all the hits I get are when I am in PPRUNE, and I don't belive in coincidences.
PA38
PA38 I have also had several attacks on my PC since installing a firewall and you are right many of them do occur while viewing pprune pages.
Anyone know why or is this just a coincidence.
In fact I have have just had another alert while typing this message "back orifice 2000 trojan blocked"
Just out of interest if a hacker could get an IP address from here then he/she could have a look around your computer.
THINK ABOUT IT reporter, security services, terrorist, EMPLOYER, could all find out your inner workings..
A chilling thought..
[This message has been edited by PA38 (edited 03 April 2000).]
Squiddley
4th Apr 2000, 10:30
PA38 et al,
For brevity, I'll just refer you to www.grc.com (http://www.grc.com) where there is some very good information on exactly the things you're concerned about. I did put this in an earlier thread http://www.pprune.org/ubb/NonCGI/Forum35/HTML/000199.html which has been (I hope) useful.
Do try the steps/measures suggested "probe my ports" etc. and you may get some peace of mind.
Best wishes.
SeldomFixit
5th Apr 2000, 09:09
PA38 and others who will no doubt be interested.
Like many others I used Lockdown 2000 before I realised it was little better than a well hyped con.
I am now using ZoneAlarm as a firewall ( refer test below ) and it a hugely useful piece of kit !!
I went to the Steve Gibson vulnerability test site and it came through with a perfect score.
Whilst you can never be totally secure here, I am now confident that I have the best moat freeware can buy right now.
I have joined up for the Steve Gibson email update service and have reprinted the first to be received as a hopefully useful service to the guys and gals in aviation and hopefully as a thank you to Steve Gibson who shall be herinafter referred to as Saint Steve until proven otherwise to me.
Internet Privacy:
OptOut?
Several weeks ago a scare swept through the Internet community
regarding alleged Internet "spying" being done by a very
popular advertising system known as "Aureate" (now renamed to
"Radiate".) Since the Aureate system is "carried" into the
user's PC by more than 400 popular freeware programs (like
Go!Zilla, GetRight, CuteFTP, and others), and is currently
installed and running in over TWENTY-TWO MILLION PC's!!, the
threat that this software was "spying" on its users was of
great and immediate concern.
My initial analysis of the Aureate system revealed that MUCH
of what had been claimed was completely unfounded. However,
that analysis DID raise enough concern and questions that I
decided to look further...
What I discovered was that this system WAS secretly running as
a "parasite" on your Netscape or Microsoft web browser, using
your browser's Internet connection to communicate with Aureate
servers in the background without the user's knowledge or
explicit permission! This meant that the Aureate software was
running and communicating over the Internet even when the
hosting "carrier" freeware, which brought it into the system,
was not running! This browser "parasite" had also been
implicated in frequent crashes of those browsers. And even
after the "freeware" which brought this parasitic software
into the user's machine had been completely removed, THE
AUREATE SYSTEM REMAINED INSTALLED AND OPERATING SECRETLY!
This was not okay.
A reading of Aureate's developer web site shows that the
freeware authors are receiving payment from the advertisers
in direct proportion to the number of advertisements actually
viewed and the length of time they are shown. In order to do
this, the actaul use of the various programs MUST be monitored
and reported back to Aureate.
This bothered me too.
So ... since I already knew of other similar sounding problems
with "Adbots" being secretly installed in user's machines (The
ZoneAlarm firewall discovered a different one running in my
own machine!), I decided to create an easy-to-use tool to
check for the presence of known "baddies" and -- optionally --
remove them from the computer for the user.
The program is called "OptOut" because it allows users to "opt
out" of the use of unwanted advertising software on their
machines.
I wrote it in 100% assembly language over the past two weeks,
it's a nifty little 32K bytes in size ... and the "Preview
Release" is ready for you to use right now!
Please see the new "OptOut" page on the grc.com web site for
more information and news about Aureate and OptOut. You can
download it from there too...
<a href= "http://grc.com/optout.htm" >Our OptOut Site</a>
ZoneAlarm Update:
The FREE ZoneAlarm firewall is evolving nicely and I expect to
soon be able to recommend it without reservation. Version 2.1
is currently in beta testing, and is really working VERY well.
It adds the significant new feature of "event logging" so that
a record of blocked Internet traffic is preserved.
ZoneLabs has given me permission to point you to their version
2.1 beta page, where you can download and experiment with this
very nicely developing free personal firewall:
<a href= "http://www.zonelabs.com/beta_download.htm" >ZA Beta</a>
My Current Internet Security/Privacy Project:
As you might have guessed, my work on the new OptOut freeware
has diverted my attention away from work on the hyper-speed
port scanner. I will be working on the new OptOut web site for
a while, and enhancing the OptOut program to detect and remove
several other known "spyware" systems. Once OptOut is firmly
in place, I plan to return to work on the hyper-speed port
scanner.
____________________________________________________________ _____
Thanks for your time. I hope this has been useful to you.
Steve Gibson. <a href= "http://grc.com/" >GRC Website</a>
Blacksheep
9th Apr 2000, 09:25
PA 38
Buy something like Folder Guard and lock your senstive files. If you do go for Folder Guard, make sure you get the paid-up version not the free/shareware version as that, like a lot of so-called free-ware, has advertising 'spy-ware' embedded. The pay-for-it version is bug free.
**********************************
Through difficulties to the cinema