Cable Forum
Page 2 of 3 1 2 3
Show 100 post(s) from this thread on one page

Cable Forum (https://www.cableforum.uk/board/index.php)
-   Security & Virus Discussion (https://www.cableforum.uk/board/forumdisplay.php?f=38)
-   -   The Experimentââ₠¬Ãƒâ€¦Ã‚¾Ãƒâ€šÃ‚¢ (https://www.cableforum.uk/board/showthread.php?t=28485)

Richard M 11-05-2005 21:26
Re: The Experimentââ₠¬Ãƒâ€¦Ã‚¾Ãƒâ€šÃ‚¢
 
Quote:
Originally Posted by Gareth
I'm with Paul M on this one... why exactly are you doing it?
Because I have a spare box, a spare Saturday and I'm interested in learning more about security. :)

MrBen 11-05-2005 21:28
Re: The Experimentââ₠¬Ãƒâ€¦Ã‚¾Ãƒâ€šÃ‚¢
 
Quote:
Originally Posted by monkeybreath
I doubt it will effect a machine connected via nildram ;)
D'oh... read the profile first Ben :knock:

Richard M 11-05-2005 21:39
Re: The Experimentââ₠¬Ãƒâ€¦Ã‚¾Ãƒâ€šÃ‚¢
 
Quote:
Originally Posted by Paul M
Quote:
Originally Posted by Gareth
I'm with Paul M on this one... why exactly are you doing it? It's been done before. I remember seeing a report at sans about an out-of-the-box XP machine being compromised within 18 minutes. If I remember correctly, this article itself is a couple of years old now. I'll try and find it again if you're interested.
Well I wasn't worried about it being done before. I'm just curious about the reason for doing on a box with no SP at all, as SP1 has been around for so long now. I would be interested in that link about 40% of XP machines having no SP, as that's quite a surprise to me. :)
If the machine survives a week, then I'll install SP1 then give that another week.
__________________

Quote:
Originally Posted by philip.j.fry
Quote:
Originally Posted by TheBlueRaja
What he said...
***** (probably) ;)

EDIT: Removed IP because after a traceroute I don't think it is.
EDIT #2: Ping phpfuture.net to see :)
Definitely isn't phpfuture.net:
Quote:
1 <1 ms <1 ms <1 ms router [192.168.254.254]
2 20 ms 21 ms 20 ms lon1-adsl9-3.nildram.net [81.6.205.66]
3 29 ms 21 ms 20 ms lon1-9.nildram.net [213.208.106.194]
4 20 ms 20 ms 21 ms 84.12.225.132
5 22 ms 21 ms 20 ms 0125.ge-0-0-0.gbr1.ltn.nac.net [64.21.115.61]
6 90 ms 89 ms 90 ms 0.ge-6-2-0.gbr2.nyc.nac.net [209.123.11.181]
7 89 ms 89 ms 89 ms 94.gi4-2.esd1.nyc.nac.net [64.21.102.14]
8 89 ms 89 ms 90 ms 10.gi1-1.esd1.tlw.nac.net [209.123.11.230]
9 90 ms 89 ms 89 ms ezzi.customer.tlw.nac.net [207.99.110.174]
10 91 ms 91 ms 93 ms 65.125.239.146
Quote:
Perhaps you should put up a Linux box as well for comparison Rich?
Good idea but I don't have any other spare machines ATM - the XP "0wned" machine is going to have XP SP2 installed soon because I need another Windows box.

Gareth 11-05-2005 22:08
Re: The Experimentââ₠¬Ãƒâ€¦Ã‚¾Ãƒâ€šÃ‚¢
 
Quote:
Originally Posted by Richard M
Because I have a spare box, a spare Saturday and I'm interested in learning more about security. :)
Ahh, fair enuff then. I thought you were doing it to prove a point, and to publicise it to denounce MS, etc... in which case it'd likely be ignored by many. As a personal learning experience, I'm sure you'll find it useful. I find actually doing stuff to be the best way to get my head around something.

Paul 11-05-2005 22:34
Re: The Experimentââ₠¬Ãƒâ€¦Ã‚¾Ãƒâ€šÃ‚¢
 
Quote:
Originally Posted by Richard M
If the machine survives a week, then I'll install SP1 then give that another week.
If it survives a week without getting infected by blaster it'll be a miracle. I still see it hitting my external server firewalls regularly. :disturbd:

philip.j.fry 12-05-2005 08:59
Re: The Experimentââ₠¬Ãƒâ€¦Ã‚¾Ãƒâ€šÃ‚¢
 
Quote:
Originally Posted by Richard M
Definitely isn't phpfuture.net:
That's bizarre, I would swear my traceroute last night terminated in a machine connected via nildram. Oh well, back to the drawing board :)

Richard M 14-05-2005 13:21
Re: The Experimentââ₠¬Ãƒâ€¦Ã‚¾Ãƒâ€šÃ‚¢
 
Hmm... I'm having a problem.
Windows blue screened during the installation and now it keeps doing it. :erm:

Flubflow 14-05-2005 14:13
Re: The Experimentââ₠¬Ãƒâ€¦Ã‚¾Ãƒâ€šÃ‚¢
 
Have you taken precuations to make sure that, when compromised, it does not get used as a spam drone.

Richard M 14-05-2005 14:15
Re: The Experimentââ₠¬Ãƒâ€¦Ã‚¾Ãƒâ€šÃ‚¢
 
Nope, I want this to be as realistic as possible.

BTW - I'm formatting the IDE hard disk in my main PC now because it seems that Windows was BSOD'ing when getting to that stage in the setup.

Millay 14-05-2005 14:25
Re: The Experimentââ₠¬Ãƒâ€¦Ã‚¾Ãƒâ€šÃ‚¢
 
I silly connected a pc to an adsl connection a few months ago, after I had installed xp home sp1... within 2 minutes the machine was down and I was reformatting it... It can be quick trust me..

Richard M 14-05-2005 15:19
Re: The Experimentââ₠¬Ãƒâ€¦Ã‚¾Ãƒâ€šÃ‚¢
 
There seems to be a big problem with this machine - it won't install without BSOD'ing.
I got nearly to the end of the installation but then it blue screened.
I'll have to delay this for a week or so until I can get hold of another box.

Matthew 21-05-2005 23:18
Re: The Experimentââ₠¬Ãƒâ€¦Ã‚¾Ãƒâ€šÃ‚¢
 
Any update?

bdav 22-05-2005 00:05
Re: The Experimentââ₠¬Ãƒâ€¦Ã‚¾Ãƒâ€šÃ‚¢
 
Easy - You want to zero-write the hard disk.

Dump it in another windows machine, and google "(hard drive manufacture) low level format". Run this, and you should be laughing!

What happens when someone turns it into an annonymous proxy, and you end up as the hub of some internet crime spree? I had that - claranet not happy!:rolleyes:

Richard M 22-05-2005 00:30
Re: The Experimentââ₠¬Ãƒâ€¦Ã‚¾Ãƒâ€šÃ‚¢
 
Aah cheers, tried to reinstall today but kept blue-screening.

bdav 22-05-2005 09:07
Re: The Experimentââ₠¬Ãƒâ€¦Ã‚¾Ãƒâ€šÃ‚¢
 
Is that before 0-Writing the disk, or after?


All times are GMT. The time now is 23:51.
Page 2 of 3 1 2 3
Show 100 post(s) from this thread on one page

Powered by vBulletin® Version 3.8.11
Copyright ©2000 - 2026, vBulletin Solutions Inc.
All Posts and Content are © Cable Forum