I've heard a lot about firewalls keeping ports closed but I dont seem to understand how my computer is at risk.[email protected] :idea:Quote:
I may be a slow walker but I never walk backwards.
Printable View
I've heard a lot about firewalls keeping ports closed but I dont seem to understand how my computer is at risk.[email protected] :idea:Quote:
I may be a slow walker but I never walk backwards.
Well... When you have open ports in your computer.. Its like another door a hacker can get into..... The most common open ports usually have something called a DEAMON running on them....(No your computer isnt possesed) A deamon is a program that opens a specific port and runs a service on it.. A good exaple of this is the HTTP Deamon, the HTTP Deamon opens port 80 of your computer and runs a web server on it...... There are other kinds of deamons too....
SMTP(Simple Mail Transfer Protocol)
FTP(File Transfer Protocol)
And lots more...... If you want the full list of Ports and their services look at my other post here..... What kind of firewall you need depends on what OS you have..... If your looking for a Windowze firewall go here and check out the firewalls :D Hope this helps :)
Thanks. I've read a little about how services are run on some ports and how unused ports can be closed by a firewall. What I don't know is if a hacker scans my ports and finds port 80 open for instance, how can he/she take advantage of that port?
Yeah.. There are always exploits for almost every OS/Deamon.. Take Oracle9i.. They said it was un-hackable... Now someone is 1 million $ richer... Port 80 can be taken advantage of depending on what HTTP Deamon you are running....There are almost buffer overflows and the like.... But I have never heard of a extremely serious exploit for port 80.... Apache is a pretty secure HTTP Deamon.... But IIS 4.0/5.9 has bugs everywhere, Whatever you do.. KEEP AWAY FROM IIS..... I know this website which scans your computer for free for about 900 exploits.. and scans all your ports....SecuritySpace
And in case you wanted to look for some exploits/patches look here:D Have fun.. Hope this helps you out :)
well.. it takes more than a firewall to stop a hacker.. it will just slow them down..
and dont worry too much.. No hacker in its right mind would even bother cracking into a Home PC... they are more interested in Servers.. which holds valuable information..
true that the server has more valuable info, but home pc has also been targetted, esp for later used by hackers for ddos attacks... protection is always good.Quote:
Originally posted by s0nIc
and dont worry too much.. No hacker in its right mind would even bother cracking into a Home PC... they are more interested in Servers.. which holds valuable information..
rgds
de
most the people that try to hack home computers are lamers or newbies, and when a lamer runs into a firewall or anything other then a trojan server running on the computer they will give up. Most the time if a real hacker is going for a home computer it's becouse they DoS attacked, or scanned them..... don't **** with ppl that know what there doing;)
It may not be. An open port doesn't actually do anything. It's perfectly safe to run a computer unfirewalled on the 'net. The one proviso is that you don't use any daemons (or services, in the Windows world) that listen on any ports. The minute you do, those open ports become dangerous.Quote:
Originally posted by m18213
I've heard a lot about firewalls keeping ports closed but I dont seem to understand how my computer is at risk.[email protected] :idea:
s0nIc: It is very naive to think that hackers won't be interested in a home PC. They may not be AS interested in a home PC, but having remote control over a computer on the internet is still worth it, even if the PC is a Home PC.
Just because a port isn't firewalled does not mean it's 'open' in the sense of 'listening'.
Thanks guys, but what difference does it make if my PC is a home or office pc. The hacking methods and principles will be the same (at least I think.... I stand to be corrected!) xept that most office PCs (Servers) will be a little more protected than home pcs.
:booty: The info I need is more of an academic nature. Eg ....
"Don't leave your windows open else a burglar will come into your house......"
I'm not bothered about the burglar's reasons for comming but how he will enter might give me a better understanding of how to either catch him or prevent his entry. :thumbsup:
m18213 There is somewhat greater possibility that a hacker will borrow your computer to Launch a DOS. Typically, a DOS starts out by the hacker planting logic bombs in various computers around the world.Then on the big day, the hacker contacts each bomb, sends the trigger command, and the DOS attacks begins.
But honestly Do you really think that a hacker is going to launch a colossal transmission from your HUMBLE SYSTEM, when there are so many far more powerful machines...
Well... Firewalls arent really 100% protection for your computer... One way of hacking into a computer that has a firewall is to first know what firewall they are using.. I think there is such software that would do that.. second.. you can also exploit one Win2k vulnerability which is the file sharing default.. once you manage to get into the c: drive.. you can then have a look around what firewall the person has.. then leave a batch file on the start up menu and program that batch file to delete the firewall.. when the person starts the puter.. the batch file will then execute and delete the firewall..
anotherway is when you get inside.. firewalls have a certain .ini file that tells the firewall which ports to block.. elite crackers would edit that file and leave one port open as a back d00r..
or.. once you find out what the firewall is.. you can search for an exploit for it.. piece of cake..
If I'm understanding the jibberish in this thread, you're arguing about the concept that an open port means someone can hack you. Blah. Have at my ports.
Just because a port is open doesn't mean someone can hack you. Just because you have a firewall doesn't mean someone can't hack you.
My two cents:
Stop worrying about being "hacked". Most people run single user operating systems anyway and don't carry anything worth someone's time and effort to exploit. Not only this, but if you maintain some sense of control over your system and only run services that you know you need, then you can concentrate on running the correct software to A) get the job done, and B) not allow people more acess to your system than you want them to find.
It boils down to common sense. If you're scared someone will hack you, unplug your stupid modem and go read a book. The Internet doesn't need paranoia.
My opinion,
Firstly, harden your computer by disabling all non-essential services such as IIS, FTP with W2K, possibly Netbios (I hate Netbios!!).
Basically disabling these services will eliminate a hell of a lot of possible vulnerabilities with a computer directly facing the Internet.
Installing a Personal Firewall such as Tiny, SyGate, AtGuard and having it properly configured will also give you some added protection. But remember, its not worth having a firewall, if it is not properly configured.
You're making the presumption that they're using a software firewall. If they're using a hardware firewall, or even a software firewall on another box, it's not just a piece of cake. You're making it sound so easy you could just waltz right in when in truth on a properly configured system it's a lot more difficult.Quote:
Originally posted by s0nIc
Well... Firewalls arent really 100% protection for your computer... One way of hacking into a computer that has a firewall is to first know what firewall they are using.. I think there is such software that would do that.. second.. you can also exploit one Win2k vulnerability which is the file sharing default.. once you manage to get into the c: drive.. you can then have a look around what firewall the person has.. then leave a batch file on the start up menu and program that batch file to delete the firewall.. when the person starts the puter.. the batch file will then execute and delete the firewall..
anotherway is when you get inside.. firewalls have a certain .ini file that tells the firewall which ports to block.. elite crackers would edit that file and leave one port open as a back d00r..
or.. once you find out what the firewall is.. you can search for an exploit for it.. piece of cake..
a sensible post chsh.
In addition to some of the points raised here, consider that:
the target may have multiple firewalls and in combinations of hw and sw
pfr may be in use,
exception loggers with antibots may be running
honeypots ( or even 'nets) may be what you are really seeing.
hcking fw are not the issue, getting through the network in far more difficult if it is
constructed well. :rolleyes: