j.ello | options

j.ello | weather

j.ello | subscribe

If you're not already
receiving j.ello | report
just enter your e-mail
address and get it
delivered FREE!

April <%= Dy %>, 2000

j.ello | by the byte

     I would be remiss not to tell you of a few way you can protect yourself from internet invasion.  The big question is, do you really need protection?  Well, consider a few things. 

• Are you on a permanent internet connection?  If you have an xDSL or Cable Modem line and your computer is always on and connected, then your address has more opportunity to be probed than those who are only online for a short while through a modem.  For xDSL and Cable users, turning your machine off when it's not in use, or using a utility that disconnects your internet connection after a period of inactivity can limit the amount of time your machine is exposed to possible probing.

• Do you make your system available for hacking?  There are 3 things that increase your exposure to hacking.  Running a server, not patching your system with the latest security fixes, and using insecure protocols on the Internet.  Usage of NetBIOS over TCP/IP is one of these.  NetBIOS is what Windows uses to connect to network drives across a network.  In 99.9% of cases, you will never have to map a drive over the Internet, so there is no reason to have NetBIOS enabled over TCP/IP, yet it is turned on by default.  More info on this can be found at http://grc.com/su-bondage.htm

• Do you expose your system through poor navigation?  If you peruse the less reputable sites, your machine's IP address may wind up in a hacker's database.  There are some automation scripts that will collect the IP addresses of the people who visit the page, then instantaneously do a port scan on that computer.  The more shady the places you visit, the more likely you will turn up in someone's list.

     Ok, now don't go all paranoid... there are many levels of hacking... and most really can't be considered "intrusions".  Real intrusions aren't easy without your help.  No password, stupid password, giving yourself an intrusion virus or trojan horse like BackOriface or SubSeven by opening it in e-mail... etc... are ways you can make a hacker's job easy.  Most port probes concentrate on trying to find machines that have already been compromised rather than machines which are capable of being compromised.

     What can you do?  Get to know security patches... Microsoft releases security patches all the time for even the most obscure things... understanding whether you are at risk is a good way to protect yourself.  Remember that real hackers don't target normal folks like you... it's beneath them.  Only after the hackers make something that an idiot can use, do the common kids start trying the attack on your home machine.  So, while security patches usually come out within days of a known hole, it can take weeks before a the attack can filter down to the average hacker wanna-be.  While real hackers spend their time going up against real systems, you have a time buffer to get your computer into a better security situation before every 13 year old on the block tries to get you.
     Of equal value are Firewalls.  A Firewall, in literal terms is a separate computer which is directly hooked up to the Internet that filters all the information coming into and out of your local network.  Your work computers hide safely behind the wall.  Regardless how your personal computer is configured, and how insecure it may be, a firewall prohibits scanning of ports you tell specify.  To the outside world, your system basically becomes invisible.
     There is also IP Filtering software, which is quite excellent in its own right.  ZoneAlarm appeared in a report a while ago, and who knew it would be so great?  Now in Version 2.1, ZoneAlarm gives you just about all the advantages of a real Firewall, without the expense or trouble of a separate computer setup specifically for Firewall.  By the way, it's also terribly easy to implement.
     GRC has a nifty online utility that will test your system's vulnerability called SheildsUp!  You may have seen it listed here before, but it's a great site with a more information on security and what you should be aware of.
     It's not freeware, but I also like BlackIce Defender.  It monitors your machine for incoming port scans and attacks.  Among other things, I use this to find out where a port scan came from... then I contact the system admin for that network and try to get the offended knocked off that system.  I get a sadistic giggle from it. :)

     -j.ello

j.ello | places & info

j.ello | software picks

j.ello | toys

To unsubscribe:  Go to http://www.jello.net/report, enter your e-mail and click UNSUBSCRIBE.
To change address or re-subscribe:  Go to http://www.jello.net/report enter your e-mail address and click SUBSCRIBE