Re: IP Masking

From: Rowdy Yates (rowdy.yates_at_no-spam.lycos.com)
Date: 01/17/04


Date: Sat, 17 Jan 2004 14:38:29 GMT

well, here's the thing. malicious users can be broken down into 2 groups.
the group that know what they are doing and the group that dont.

in my opinion, a guy that has the technical "know how" to create his own
programs that manupuilate ip headers (i.e. craft packets) and has
malicious intent - you ain't got a chance in hell of stopping. and don't
bother trying to get into his world, unless you are prepared to crack
open a lot of geek text & manuals.

a up to date AV + firewall + NAT router will do just fine protecting you
from most of the stuff out there. if someone as descripbed above has
targeted you, just make sure you have regular half decent backups and re-
create your system.

just my 2 cents.

Pete <root@localhost.localdomain> wrote in
news:gtbi00dm20l2sern5mbl4okjlqun7jobqa@4ax.com:

> On Sat, 17 Jan 2004 12:43:38 GMT, whilst in NewsFroup
> alt.computer.security, Rowdy Yates <rowdy.yates@no-spam.lycos.com>
> articulated the following sentiments :
>
>>Pete, it looks like many neophite's are being brain washed by the tech
>>media outlets about computer security and all the threats it poses. i
>>recently read the FBI summary report on computer security trends of
>>2003, over 95% of breachs were related to internal security breachs.
>>disgruntled employees, people giving out user name & passwords to the
>>wrong people., ... e.t.c....
>>
>>The education of computer users in the workplace really needs to be
>>looked at and the whole thing needs to be addressed. i am a system
>>admin. you will not believe how many users constantly keep offering me
>>their user name & password, over & over & over again... to their email
>>accounts,to the network, databases...i don't even make any
>>indications that i need it or even am asking for it and they just go
>>right out of their way to give it to me, write it down on a yellow
>>sticky and dump it in my hand.
>>
>>i have given up trying to educate. people just dont give a ***! all
>>they do care about is that they can access file's, print, read their
>>email and download mp3's on company time. and if you do try to
>>educate, they look at you like you are crazy.
>
> I know the feeling, and I'm just a home user. Going to risk giving
> away some troll-bait here now, but do you find you get a 'tired' look
> from someone, the minute you try to explain and possibly debunk, to
> the best of your knowledge, many of the myths and FUD-splats
> perpetrated by the media ? It's as though they're thinking, "oh no,
> here comes some more dry techy bumpf, it's going to be too hard to
> understand, so I'll not even bother trying. Anyway,
> 'Which-PC-Hyper-Gaming-Technique-Internet-Advisory-Shopper-Daily'
> magazine says otherwise ". Guess who they believe ... :/
>
> I often make the mistake of assuming people use their computer/s as
> much as I do, and for similar reasons. Like you say, a lot of people
> just want to play mp3's, get the email postcard (with stationery !)
> from their mates, and check out porn sites.
>
> A login password ? That just slows everything down ! :/
>
> Damn, how can I remember six alphanumeric characters that bear no
> resemblance to a dictionary word ? I'll just write '12345' down and
> stick it on the monitor. :/
>
> Although it doesn't happen quite so often now, whenever people
> realised I had Internet access, a wry smile would form on their face,
> and they'd say "heh .. oh yeah <wink wink>". Yes ! There's porn on the
> Internet ! Yes ! There's porn in your newsagent ! What is the
> difference ? The 'News At Ten' isn't a reliable source of information
> regarding the Internet in general you know ? Guess who they believe
> ... :/
>
> Rambling again, apologies. In an attempt to swerve back on-topic, I'll
> just end with the suggestion that every new computer sold should have
> a free, permanent subscription to alt.computer.security. It's better
> than TV and duct tape combined ! ;p
>
> Eggderas,
>
> Pete.
>
>
>
>
>
>

-- 
Rowdy Yates
I am Against-TCPA
http://www.againsttcpa.com