OT: MS Tried to Hack My Computer??? - Page 2

Renegade 13 · #1 August 11th, 2004, 08:51 PM

Baron, how would I go about disabling my NETBIOS? I'm not computer illiterate, just not an advanced user and could use some help :P

Another, connected question. What does NETBOIS do, what is its normal function?

Also, you mentioned "properly configuring" your internet connection. I have a dialup connection, and if you don't mind, could you give me some pointers on how to properly configure my connection for greater security?

By the way, sorry Atrocities for hijacking your thread

Baron Munchausen · #2 August 11th, 2004, 10:03 PM

I am far from an expert myself. Of course, where Wind'ohs is concerned I doubt that anyone is an expert. We learn this every few days when a new Wind'ohs exploit is published.

The way Wind'ohs configures itself by 'default' -- or used to, it could be different now with Win 2000 and Win XP -- is for a LAN connection, meaning it installs a bunch of services for giving access to other computers to YOUR FILES. Not good for most people. That's what NETBIOS is about, sharing printers and files across a LAN.

It's not very difficult to fix, though. Anyone who can do the routine stuff you do to setup a dialup connection can fix this problem. Rather than type it all in myself I'll point you to the source at Gibson Research. He calls it 'Network Bondage' in a semi-humorous way because it's about protocol bindings...

http://www.grc.com/su-bondage.htm

You could find this same information from other sources, I'm sure, but that is the source I am familiar with. This is as good an explanation as any. All you need to do is follow the directions on clicking a few boxes, then reboot and you're much more secure than the default way that Wind'ohs is installed.

It wouldn't hurt to read the other pages in the 'Shields Up!' site, either.

Renegade 13 · #3 August 11th, 2004, 10:09 PM

Thank you very much!

Sivran · #4 August 15th, 2004, 02:30 AM

Quote:

Baron Munchausen said:
I am far from an expert myself. Of course, where Wind'ohs is concerned I doubt that anyone is an expert. We learn this every few days when a new Wind'ohs exploit is published.

The way Wind'ohs configures itself by 'default' -- or used to, it could be different now with Win 2000 and Win XP -- is for a LAN connection, meaning it installs a bunch of services for giving access to other computers to YOUR FILES. Not good for most people. That's what NETBIOS is about, sharing printers and files across a LAN.

It's not very difficult to fix, though. Anyone who can do the routine stuff you do to setup a dialup connection can fix this problem. Rather than type it all in myself I'll point you to the source at Gibson Research. He calls it 'Network Bondage' in a semi-humorous way because it's about protocol bindings...

http://www.grc.com/su-bondage.htm

You could find this same information from other sources, I'm sure, but that is the source I am familiar with. This is as good an explanation as any. All you need to do is follow the directions on clicking a few boxes, then reboot and you're much more secure than the default way that Wind'ohs is installed.

It wouldn't hurt to read the other pages in the 'Shields Up!' site, either.

You got it backwards. Windows 9x machines come pre-configured for nothing at all, which means freshly-installed, a 9x box is actually plenty secure. You have to add networking once it's up, and even then, once File and Print sharing is installed you then have to explicitly share your directories/drives. Only then will port 139 open up and expose your file system.

By contrast 2k and XP set up networking during installation, which can lead to infection prior to even completing the install if connected without a router between the computer and the big, nasty, wan.

And finally, GRC is a lot of hype (just look at Gibson's credentials. He's a marketting guy!). You're no safer under stealth than you are with closed ports, and perhaps more vulnerable--when your system fails to respond it could be red-flagged as a "newbie GRC reader."

Disabling netbios over TCP and installing NetBEUI is also unnecessary assuming you're behind a firewall or router, though it is another layer of security. Routers will block netbios connection attempts without any configuring. A software firewall will have to be configured to only allow netbios from the lan, assuming you HAVE a lan you want to share files on. If not just configure the firewall to block any traffic to and from ports 137-139 for 9x/Me and also 445 for 2k/XP.

Instar · #5 August 11th, 2004, 10:19 PM

spoofed maybe, I doubt a corporation would want to hack anyone for no apparent real reason

Raging Deadstar · #6 August 11th, 2004, 10:26 PM

Unless Atrocities has copied homer simpson and created a competing company with microsoft and is being ruffed up by Bill Gates and his goons as we speak

It's probably some haxx0r l33t script kiddy trying to forget the fact his acne is now a contagious flesh diesease on the scale of ebola.

I Apolgise in advance for my Lack of fluency in l33t speak as i try and keep the english language somewhat preserved

Instar · #7 August 11th, 2004, 10:31 PM

w00t w00t j00 sp33k t3h l33t t4lk 0f h4x0rz

...
Stupid script kiddies...

Renegade 13 · #8 August 12th, 2004, 12:03 AM

Quote:

It's probably some haxx0r l33t script kiddy trying to forget the fact his acne is now a contagious flesh diesease on the scale of ebola.

Quite, uh, descriptive imagery there RD

Raging Deadstar · #9 August 12th, 2004, 07:04 AM

Quote:

It's probably some haxx0r l33t script kiddy trying to forget the fact his acne is now a contagious flesh diesease on the scale of ebola.

Quite, uh, descriptive imagery there RD

Yep those Creative Writing Courses have been paying off well Renegade

David E. Gervais · #10 August 12th, 2004, 08:05 AM

AT, I have a theory,.. agents of the 'Secret Government Agency responsible for 'UFO' monitoring and investigation' has found your web site. My guess is that one or more of your ships match the 'real' thing being held over at Area 51. They now believe you to be an alien and fear that the 'More to Come' message on your site is an actual message that more aliens will be visiting earth and all this is a prelude to a massive invasion. After visiting your site, they're also convinced that these aliens are part of a massive galactic alliance.

There is a solution, put up a notice on your site that you are a SE:IV Addict and, Wilbert Hunt, one of the junior investigators for the 'Secret Agency' will understand the situation and remove the red flags from your 'secret file'.

Cheers!

P.S. aaaah, the beauty and wonders of creative writing, how I miss the good old days when I wrote short sci-fi stories. Maybe one day I'll scan one of my stories in and run it through an OCR then post it here.