Closing the backdoor on NetBIOS
I did some research recently and found out about NetBIOS. Apparently this software created by microsoft leaves your computer vunerable to hackers online. I have decided to remove what they call "NetBIOS to TCP/IP binding" from my computer and have noticed through my firewall software (Outpost), that not only have my open ports dropped significantly, but the Attack Detection has basically quieted down dramatically as well. The whole reason I did this was I noticed that Outpost treated these NetBIOS connection attempts as possible attacks. I wondered why this was happening and hence, did the research. It almost seems that NetBIOS is useless unless you are using a LAN/WAN scenario. Is this true?
:what:
Re: Closing the backdoor on NetBIOS
Quote:
Originally posted here by ShagDevil
I did some research recently and found out about NetBIOS. Apparently this software created by microsoft leaves your computer vunerable to hackers online. I have decided to remove what they call "NetBIOS to TCP/IP binding" from my computer and have noticed through my firewall software (Outpost), that not only have my open ports dropped significantly, but the Attack Detection has basically quieted down dramatically as well. The whole reason I did this was I noticed that Outpost treated these NetBIOS connection attempts as possible attacks. I wondered why this was happening and hence, did the research. It almost seems that NetBIOS is useless unless you are using a LAN/WAN scenario. Is this true?
:what:
Heh, take ammo's advice next time. Yes, NetBIOS (Network Basic Input/Output System) was created by IBM, not Microsoft. Secondly, it is probably the easiest way to remotely access another computers files, which would probably be why your attack detection is lower. Many people do nbt scans to see if you have the service/port open. That would explain why the attack detection is lower, IMHO.
As for the LAN (Local Area Network) comment, yes, generally NetBIOS was meant for networked computers on a LAN or WAN to access each other's files easily. However, their is an exploit for it (obviously) so that is that. So yeah, unless you have a network, you should not have netBIOS open. Even if you do, use a strong password and/or install netbeui for the network. Hope I helped!
