Re: P2P software is security?

From: Richard Steven Hack (richardhack@SPAMHELLNOznet.com)
Date: 07/04/02


From: richardhack@SPAMHELLNOznet.com (Richard Steven Hack)
Date: Thu, 04 Jul 2002 02:22:26 GMT

On Wed, 3 Jul 2002 12:45:39 +0100, "Richard Atkinson" <big@un.com>
wrote:

>RE: Is P2P software secure?
>
>For MS-Windows products, if you follow their 'hardening' guidelines, you can
>secure your environment.

Until the next vulnerability is discovered, that is - which is maybe
tomorrow...

>If you're considering Linux, then this is just as insecure as MS products
>straight out-of-the box,

Wrong. While UNIX/Linux have their vulnerabilities, they don't have
the same ones Windows products have - and there are FAR more exploits
for Windows products than UNIX/Linux.

> AND THEY'RE MEANT TO BE. If they weren't, with
>your dangerously low level of knowledge you couldn't have shared a file!

Well, of course P2P is about SHARING!

>"knox" <lizing@21cn.com> wrote in message
>news:3d1e4b12.1735284@news.cn99.com...
>> I have one P2P software installed on my computer(Win98SE). As I
>> downloaded files from the other users, It stored in a filefolder. But,
>> to my surprise, the file downloaded didnnt encrypted and anybody can
>> open the filefold and view the file I downloaded......

For "knox":

That is the way P2P operates. You download a file into a folder and
you are presumed to be sharing that file, as well as any other files
and folders you allow to be shared within the P2P system you're using.

Some people are dumb enough to share their entire hard drives because
they specify C:\ as the folder to share.

>> Another question, The P2P softwares is vulnerable to all kinds of
>> net hacking?

I have heard some rumors about worms around the KaZaa network, but I
don't have any specific info on hacking exploits that work with the
various P2P software. I'm sure it's possible, depending on what P2P
software you use and more importantly what Windows software and
Windows services you have running.

I suspect that if you use a good process monitor, a good antivirus, a
good trojan detector (or Registry monitor), and don't run any Windows
network sharing functions on your box, that you'd be okay.

Millions of people use these P2P networks and if it was as dangerous
as some people think, they wouldn't.

BUT: Always scan any executable software you download with an AV!
And make sure any data you download which is not supposed to be an
executable (i.e., an MP/3 or JPG) is NOT an executable.

The Master

Keeper of Jodie Foster and Winona Ryder - and others
as we go along...

"Whatever does not kill me makes me stronger"
 - and YOU have not killed me!

-----------== Posted via Newsfeed.Com - Uncensored Usenet News ==----------
   http://www.newsfeed.com The #1 Newsgroup Service in the World!
-----= Over 100,000 Newsgroups - Unlimited Fast Downloads - 19 Servers =-----



Relevant Pages

  • Re: Zotob worm patch?
    ... The vulnerability could not be exploited remotely by ... > I know that many in this group support downloading Windows XP ... I download and install ONLY what is absolutely ... > about the Zotob worm, I.E., PnP and compromised Windows security. ...
    (microsoft.public.windowsxp.general)
  • Re: Biometrics
    ... the presence of a remote assistance capability does not at all indicate that the underlying operating system is inherently less secure -- just like the absence of such ability does not indicate that the underlying operating system is inherently more secure. ... Compare this Windows Vista: if someone replaced parts of the non-booted operating system, then next time it's booted, Windows integrity protection and system file protection alerts you to this; the system either refuses to boot or reverts to its original state. ... > Vulnerability Note VU#800113 ... > the Defense Network. ...
    (microsoft.public.security)
  • Re: QFE Installer Error
    ... Here are the last 20 lines of my Windows Update.log as you ... > Exploiting the vulnerability would require the attacker to have ... > significant network access already. ... In most cases, the attacker ...
    (microsoft.public.windowsupdate)
  • Re: QFE Installer Error
    ... Exploiting the vulnerability would require the attacker to have ... significant network access already. ... SMB Signing is disabled by default on Windows 2000 and Windows XP ...
    (microsoft.public.windowsupdate)
  • Cant Run/Delete Programs - Access Denied...
    ... My computer currently runs on Windows 98. ... files from my computer to install on the other network ... I also tried to download the programs from the internet ...
    (microsoft.public.windowsxp.network_web)