Risk Assessment: are you anonymous?

Now this is not to condone hacking in any way, as you will soon find out. This is meant to scare you. .

This is for all you noobs and script kiddies out there.
------------------------------------------------------

Now I’m not saying that I am an advanced hacker, in fact I don’t even consider myself a hacker or let alone advanced. I have been in this world long enough to know that every action has a reaction. I also know that knowing to much or to little can get you into trouble.

Welcome to the Internet: WORNING you are being logged.

Are you Anonymous? Most noops or script kiddies will say hehehe I’m behind a proxy.
Wrong answer. NO you are not anonymous the proxy may be masking you but who is masking you from the proxy? And guess what the sad thing is, if you are not behind a proxy you are at an even greater risk. Every were you go in the world of the underground Internet will be logged and tagged.

This paper is about assessment of what will happen to you if you take the wrong step, or press a wrong button.

Lest say you’re scanning the Internet for an open netbios (if you don’t know what this is by now query it on AO) you then find a nice open computer. You think to yourself ok time to do my thing and show people that I am elite. You connect to it. You guess a password.

Now what if that computer was one accidentally left open but was attached to a bank network (THIS MAY NEVER HAPPEN). Can you guess what the first thing you did wrong was…?

1. You scanned it: big deal (did you know that you could get arrested for that) LOGGED
2. You found it: LOGGED
3. You connected to it: this is a big NO. LOGGED AND TAGED
4. You guessed a password: really big NO NO LOGGED AND TAGED WITH A RED STICKER

This dos not only apply to netbios. This should be applied everywhere you go on the Internet. If you type www.yahoo.com guess what you most likely have been logged.

_____________
Plz let me know what you think

So its tagged. Who can findout and how?

well if your a system admin and you check the logs and you see someone from zzz.zzz.zzz.zzz
has been guessing passwords you your netbios account. depending on the servarity he will probibly trace you... find that you are eather behind a proxy or not and then eather report it to the fbi, police, whatever. or send a nice eamil to your ISP... they can and posibly will cancell your account

All you need to simplify looking at logs is a firewall. Any good firewall will have logs of who or what tried to connect to you. And you have to do (you being the owner of the firewall) is just click on a certain button to view the logs. actually I think your computer keeps logs even without a firewall.

Now think how fun it is to fall with your little NetBIOS scanner in a honeypot... red-handed, in one step!

Quote:

---

Originally posted here by rwarren
This is for all you noobs and script kiddies out there.

---

Ummm yes... and how long have you been here? I myself have been lurking around here since the late 90s then I signed up around 2002. I got bored one day so I and JupM thought it'd be best to just start over. Things get boreing when you have 10 dots or so and peaple constantly expect things from you. So now im a noob oh & sometimes when I feel new to some codeing concept I will study from source code and various examples written by other peaple. Im guessing this makes me a skiddie... but anyways what you have said is always a good way to describe your viewers.

Ummm... I myself as the script-kiddie that I am could just as easly setup my own proxie servers if I wanted. Few web servers & internet providers keep logs for very long anyways... not that the feds couldn't just come to your ISP and force someone to make the acception of watching over your online activities. Other than saying that there is no such thing as true privacy online I really don't get what this is supposed to teach us. Oh well atleast your link to yahoo was usefull.

well i have not been here long but i am not a bigginer if thats what your saying. i know just enough to not to even try hacking unless i am on my own network

rwarren, I think you may be confused as to what kind of forum you are in. Do me a favor, go to the main screen, log out and then reload the page. Tell me what is says under 'What AntiOnline is NOT'.

Quote:

---

This is for all you noobs and script kiddies out there

---

Since when was being a hacker/cracker an inherent trait of a new member?

rwarren, tutorials in general require time, effort, and research in order to be practical and applicable. Next time, I suggest taking a more in depth approach that at least makes it worth the time for people to read it. My apologies for being a ***** but, I can't possibly imagine on what planet that this could be considered a tutorial.

AntiOnline is a site for newbs and script kiddies, whether you people like it or not. It's easy for them to find and makes them think they're cool to be part of a community. And that tutorial was just long enough for their short attention span. As for TheSpecialist, who cares what your old account was, and why did you get APs for that post?

Quote:

---

This is for all you noobs and script kiddies out there.

---

This is everything a tutorial shouldnt be. I really think you should read Tiger Shark tutorial which can be found here at http://www.antionline.com/showthread...hreadid=257049

Quote:

---

Originally posted here by Alcatraz
AntiOnline is a site for newbs and script kiddies, whether you people like it or not. It's easy for them to find and makes them think they're cool to be part of a community. And that tutorial was just long enough for their short attention span. As for TheSpecialist, who cares what your old account was, and why did you get APs for that post?

---

Which one are you, then?

Any resource on the web - and knowledge, by definition - can be put to malicious use. Whether it is available to the public or not, the risk still exists, and without AO or SecurityFocus [just some examples] the cyberworld would be chaotic.

Script kiddies do not get their questions answered. Simply by browsing the forum they cannot find information that is useful for them [if the level of quality of stuff on AO is kept as it is intended to be]. Those issues that may be used by a script kiddie are theoretical, and so he would need to get into a deeper research to really understand some of the more technical stuff.

I am aware that script kiddies lurk about this forum. I also know that by having AO maintain a level of quality regarding the stuff that's being posted, they will be fruitless in their ventures around here.

Quote:

---

Originally posted here by rwarren
Now this is not to condone hacking in any way, as you will soon find out. This is meant to scare you. .

This is for all you noobs and script kiddies out there.
------------------------------------------------------

Now I’m not saying that I am an advanced hacker, in fact I don’t even consider myself a hacker or let alone advanced. I have been in this world long enough to know that every action has a reaction. I also know that knowing to much or to little can get you into trouble.

Welcome to the Internet: WORNING you are being logged.


_____________
Plz let me know what you think

---

What I think is......................... What I think is that you should be aware that you are not, for the most part dealing with ppl. as "noob" as you think.

You know what else I think......... It's WARNING not "WORNING". (if you search my posts you will find many grammar errors) I suggest feeling out AO, or any other site for that matter, before you make an assesment, and blindly post.

G/L

remember the key word is "Think".

:cool:

Quote:

---

Originally posted here by Alcatraz
AntiOnline is a site for newbs and script kiddies, whether you people like it or not. It's easy for them to find and makes them think they're cool to be part of a community.

---

I hate to say it, but I think we all need to accept this fact. :rolleyes:

I guess my tutorial is similiar to this one :(

Well AO to be honest for a while was pretty damn good in terms of the knowledge being passed around. Lately thats changed but hey whatever.

Ennis: So we should allow the standards to deteriorate because it seem like a trend? There are quite a few here that do know something about security..... Are they great hackers.... nope.... Do they need to be? Nope. They need to be able to understand the issues and know how they can be mitigated. They need to be able to recognize "unusual activity" and investigate it, (those log "thingies" are really important here). If mitigating them means closing your $1M/day ecommerce server for two days while a patch becomes available it may well be less costly than providing the SSN's and credit card info of all your customers to the world...

There's quite a bit of knowledge going around here.... It's the quality of the questions that deteriorated.......

Quote:

---

Originally posted here by Tiger Shark
Ennis: So we should allow the standards to deteriorate because it seem like a trend? There are quite a few here that do know something about security..... Are they great hackers.... nope.... Do they need to be? Nope. They need to be able to understand the issues and know how they can be mitigated. They need to be able to recognize "unusual activity" and investigate it, (those log "thingies" are really important here). If mitigating them means closing your $1M/day ecommerce server for two days while a patch becomes available it may well be less costly than providing the SSN's and credit card info of all your customers to the world...

There's quite a bit of knowledge going around here.... It's the quality of the questions that deteriorated.......

---

TS, in my opinion, it's not just the quality of the questions that's deteriorated. That's an end result to the intelligence of the person asking the question. Unfortunately these days, especially in the US, I'm seeing more and more "less intelligent" people. Teenagers and those up to my age at 28 nowhere even sounding intelligent on any level. Try having a conversation with some of these people. I work with people who literally get lost if you mention any word more than two syllables and don't talk more than 10 seconds because if it's not about gossip or something else that's not valuable, they either stopped listening or they have no concept of what you're talking about.

That's where I'm seeing things go. TV doesn't help, nobody reads anymore, nobody does anything self-improvement related, it's just one pathetic cesspool of society where upcoming adults and even adults aren't wanting to do anything mentally stimulating. Point and click environment, click the remote and watch 99 channels of nothing ("reality" shows), the list goes on and on...

Such a sad state of affairs and I know a lot will disagree with me, but you know what, it doesn't matter because I know what I don't do. I don't watch TV at all (no joke), I don't sit on the gossip fence lines at work (some people's lives revolve around the latest crap of he said-she said), and I don't mistreat people by thinking I'm better than them.

I do what I can to improve my own education and those around me who want the same thing. I surround myself with intelligent people, not high school dropout-like floozies or those with bad attitudes. Everyone can learn from everyone else. And I'm learning what not to do.

As for knowledge, let's just say this: "I know enough to know I don't know everything". That sums it up, hehe. Always let people guess how much you really know instead of flaunting any miniscule piece of knowledge you might have which may be wrong to begin with. And share...life should be open source, hehe...

Vorlin: Amen Brother.....

High praise indeed from an athiest...... :D