New Official ATOT Nef Thread II

[IndyColtsFan]

Ah, the challenge of security. Not protecting it just from dedicated attacks, but protecting against the innocent lack of understanding of others. 😛

I don't know that she did anything wrong. She is generally pretty cautious. Someone definitely got into her hotmail but I am still not 100% sure how they got enough info to start applying for credit cards with her name. It is either because she had emails in her hotmail box that had confidential info (like SSN) or a database with info about her was compromised.

 

[MotF Bane]

Nef.

 

[IndyColtsFan]

You, uh, might be getting a little crazy here. 😀

It isn't as bad as it sounds. You can make it a one-click operation for the user once they log in. The backend isn't terribly hard but can be challenging at times. I used to have much of this implemented at my old house.

 

[MotF Bane]

I don't know that she did anything wrong. She is generally pretty cautious. Someone definitely got into her hotmail but I am still not 100% sure how they got enough info to start applying for credit cards with her name. It is either because she had emails in her hotmail box that had confidential info (like SSN) or a database with info about her was compromised.

I'd vote more likely the latter, given how frequently that seems to happen with large companies.

 

[IndyColtsFan]

Back at my old house (when I was single too), I threw up an ISA firewall directly on the internet just to log intrusion attempts during some of the big worm outbreaks (Code Red?). You'd be surprised at how many wannabe admins were running Windows servers directly on the internet with BLANK passwords. I captured a few of the IPs and logged into several with ease. One lady was literally sitting at the server when I logged into it -- I checked Term Server Manager and saw her logged in at the console. I thought about freaking her out by printing a message to her printer, but I didn't.

 

[MotF Bane]

Nefresh.

 

[IndyColtsFan]

I'd vote more likely the latter, given how frequently that seems to happen with large companies.

I think you're probably correct, though she did find that she had an employment application stored in her Hotmail inbox that had some info in it.

 

[MotF Bane]

Back at my old house (when I was single too), I threw up an ISA firewall directly on the internet just to log intrusion attempts during some of the big worm outbreaks (Code Red?). You'd be surprised at how many wannabe admins were running Windows servers directly on the internet with BLANK passwords. I captured a few of the IPs and logged into several with ease. One lady was literally sitting at the server when I logged into it -- I checked Term Server Manager and saw her logged in at the console. I thought about freaking her out by printing a message to her printer, but I didn't.

I'm never giving you my IP. You could probably steal my server through a phone line. 😛

 

[MotF Bane]

Narf.

 

[IndyColtsFan]

I'm never giving you my IP. You could probably steal my server through a phone line. 😛

I don't think I could hack much; these idiots left the admin password blank and anyone with any knowledge of Windows operating systems would always try that first. I'm not even sure Windows would allow a blank admin password these days.

 

[MotF Bane]

I don't think I could hack much; these idiots left the admin password blank and anyone with any knowledge of Windows operating systems would always try that first. I'm not even sure Windows would allow a blank admin password these days.

I don't know, I haven't tried a blank admin password ever.

 

[MotF Bane]

"password" is quite sufficient. 😛

 

[IndyColtsFan]

I wish I had an Atom box to see how performance would be for a firewall on it.

 

[MotF Bane]

I'm much more cheerful now, that was a fun little argument!

:awe:

 

[MotF Bane]

I wish I had an Atom box to see how performance would be for a firewall on it.

Ew, Atom.

 

[sdifox]

ni

 

[MotF Bane]

I'm much more cheerful now, that was a fun little argument!

:awe:

I suppose some of my statements were a bit too broad on the generalizations, I'll have to keep that in mind for next time. 😀

 

[MotF Bane]

Morning sdifox.

 

[MotF Bane]

I think most netbooks run on Atom, don't they?

 

[IndyColtsFan]

Ew, Atom.

To maximize availability and redundancy, I'd need an extremely low-powered solution for the firewall. The only way around that would be to perhaps leverage the D-Link's firewall if power is lost and shut down the main TMG firewalls.

 

[MotF Bane]

Neffing.

 

[MotF Bane]

To maximize availability and redundancy, I'd need an extremely low-powered solution for the firewall. The only way around that would be to perhaps leverage the D-Link's firewall if power is lost and shut down the main TMG firewalls.

If power is lost, wouldn't your Internet connection go down, thus making the security irrelevant?

 

[sdifox]

lotro still not working...

 

[sdifox]

If power is lost, wouldn't your Internet connection go down, thus making the security irrelevant?

some people have ups 😛

 

[MotF Bane]

Nef!