security question

[5RC5TC]

I was on another forum and came across this post. Who's hard drive is this?
When I look at the post I see my own hard drive. At first i though I'd been hacked but then I realized that everyone sees their own hd... not mine. My question is... how did he do it? And is my/your data safe? I have a Linksys router and I'm using the firewall that comes with XP

 

[sohcrates]

ahhh!

that totally freaked me out..i see my hard drive too

it's obviously just a javascript or something....if you'll notice, it's kind of integrated with windows explorer...in that if you try to double click on a folder it says that you're about to "run a system command"

i wouldn't worry...but also wouldn't go clicking around that page if i were you

 

[ianbergman]

that _is- spooky... my first guess would be he's somehow getting through to the netbios port, or maybe exploiting the universal plug'n'play bug in recent MS OSs, but when I get home I'll have to check this out from my own machine...

do you have all the security patches applied? i know the machine i am on right now doesn't. course, this is only a security problem if the contents can be read from _another_ machine. might just be that the web page is using IE as a mirror that never puts local data out on the internet. dunno, want to play . Found an interesting link to http://www.ihackedyour.com/ in the source code.

yeah, i'll definitely want to play with this from home where i have a few more toys to throw at it ;-)

 

[ianbergman]

yeah, i think it's just another IE window, just like if you open my computer. so it's all local. someone definitely let me know if i'm wrong though

nice trick.

 

[5RC5TC]

I posted this in the tech support forum as well... here's a link: tech support link