Comments on: Rootkit Guru: Win 9x/ME Are Hopeless http://www.emailbattles.com/2005/12/14/security_aacddidjci_dh/ Spam, Security, Privacy, Spyware, Phishing & Viruses from the Front Lines. Thu, 28 Aug 2008 04:16:06 +0000 http://wordpress.org/?v=2.0.4 by: A (now open) letter to Nick Francesco « Limulus http://www.emailbattles.com/2005/12/14/security_aacddidjci_dh/#comment-1538 Mon, 11 Sep 2006 11:28:01 +0000 http://www.emailbattles.com/2005/12/14/security_aacddidjci_dh/#comment-1538 [...] The second half of your article deals with someone running Windows 98 SE; as Microsoft no longer supports it its something of a losing battle to try to keep it running safely while connected to the internet (hence the ‘tango’; all current versions of Windows are vulnerable like this to one extent or other). [...] […] The second half of your article deals with someone running Windows 98 SE; as Microsoft no longer supports it its something of a losing battle to try to keep it running safely while connected to the internet (hence the ‘tango’; all current versions of Windows are vulnerable like this to one extent or other). […]

]]> by: win9x http://www.emailbattles.com/2005/12/14/security_aacddidjci_dh/#comment-252 Fri, 27 Jan 2006 16:15:58 +0000 http://www.emailbattles.com/2005/12/14/security_aacddidjci_dh/#comment-252 Such BS. Such BS.

]]> by: Federico Bianchi http://www.emailbattles.com/2005/12/14/security_aacddidjci_dh/#comment-251 Tue, 17 Jan 2006 02:53:37 +0000 http://www.emailbattles.com/2005/12/14/security_aacddidjci_dh/#comment-251 DOS-based systems are plain hopeless from a security point of view (no proper protection by design, dumb file system, etc.). They have one real advantage over any NT-based OS, though: a functional emergency mode - plain old DOS - where you can work everything out with little or no hassle. I wish I had a really *workable* repair console built in SMSS.EXE to be triggered at reboot when necessary via the menu prompt. DOS-based systems are plain hopeless from a security point of view (no proper protection by design, dumb file system, etc.). They have one real advantage over any NT-based OS, though: a functional emergency mode - plain old DOS - where you can work everything out with little or no hassle. I wish I had a really *workable* repair console built in SMSS.EXE to be triggered at reboot when necessary via the menu prompt.

]]> by: George http://www.emailbattles.com/2005/12/14/security_aacddidjci_dh/#comment-250 Thu, 22 Dec 2005 05:33:15 +0000 http://www.emailbattles.com/2005/12/14/security_aacddidjci_dh/#comment-250 I use win 98 and win xp and with 98 i never had problems<br> George ( george@balcanicsoft.com ) I use win 98 and win xp and with 98 i never had problems
George ( george@balcanicsoft.com )

]]> by: SpannerITWks http://www.emailbattles.com/2005/12/14/security_aacddidjci_dh/#comment-247 Thu, 15 Dec 2005 12:45:49 +0000 http://www.emailbattles.com/2005/12/14/security_aacddidjci_dh/#comment-247 So 98SE can't be secured hey, says who? They probably havn't tried, and more than likely are talking about a - Straight outa the Box - scenerio. In which case of course i would agree.<br> <br> Disabling ALL sorts of Completely uneeded services etc etc goes a Very long way to securing things, also on XP etc!<br> <br> Throw in a few very good Security Apps too, properly configured and you're laughing, well i am anyway lol.<br> <br> Next we'll be hearing that IE can't be made VERY secure, but it can be and IS 4 me and plenty of others.<br> <br> Maybe some people arn't aware of the NTFS partion/s on XP etc with all those ADS Streams that nasties Can + Do hide in. Try looking through All those when you have some spare time!<br> <br> The main vector for intrusions of any kind on ANY system are the user. Clicking on this n that etc and visiting dodgy sites and DL stuff they arn't certain of or where it Really came from with crap inside etc etc.<br> <br> If you get your system sorted whatever flavour it might be, then it's Sorted. bearing in mind the above.<br> <br> I don't suffer Any uninvited intrusions, so i'm living proof it can be done.<br> <br> Spanner So 98SE can’t be secured hey, says who? They probably havn’t tried, and more than likely are talking about a - Straight outa the Box - scenerio. In which case of course i would agree.

Disabling ALL sorts of Completely uneeded services etc etc goes a Very long way to securing things, also on XP etc!

Throw in a few very good Security Apps too, properly configured and you’re laughing, well i am anyway lol.

Next we’ll be hearing that IE can’t be made VERY secure, but it can be and IS 4 me and plenty of others.

Maybe some people arn’t aware of the NTFS partion/s on XP etc with all those ADS Streams that nasties Can + Do hide in. Try looking through All those when you have some spare time!

The main vector for intrusions of any kind on ANY system are the user. Clicking on this n that etc and visiting dodgy sites and DL stuff they arn’t certain of or where it Really came from with crap inside etc etc.

If you get your system sorted whatever flavour it might be, then it’s Sorted. bearing in mind the above.

I don’t suffer Any uninvited intrusions, so i’m living proof it can be done.

Spanner

]]> by: SpannerITWks http://www.emailbattles.com/2005/12/14/security_aacddidjci_dh/#comment-249 Thu, 15 Dec 2005 12:41:29 +0000 http://www.emailbattles.com/2005/12/14/security_aacddidjci_dh/#comment-249 m$h8tr<br> <br> How could you possibly know if am Secure or not? you can't, nor can any body else! You or they do NOT know the precautions i have taken, and continue to do as and when.<br> <br> Maybe you arn't aware that i have communicated with HF on several occasions on different topics. My previous comments were NOT directed at HF, but genearally to people reading who may think that NT/XP etc are safe. They might be safer outa the box in "Some" areas than 98 etc, but we've all seen how they still get penetrated Daily, but i Don't!<br> <br> I do read his stuff, and others too, and i acknowledge he is gifted and i DO have respect for him. I understand his modus operandi in giving the "Security + Software" people a kick up the ass to tighten things up, and that's a Good thing. What people do with his RK's is up to them, not HF. <br> <br> He has previously said that his main focus and expertise is Rootkits on NT etc systems. I like him only recently discovered the RK for 98 posted on hxdef!<br> <br> Only i know if i allow anything in to my PC or not from wherever, and i'm Very careful what i do and where i choose to surf. Sometimes i take calculated risks on purpose to see if my defences stand up. So far they have i'm pleased to say.<br> <br> Others using non NT etc systems might not be so lucky, for the reasons i gave earlier as well. <br> <br> But it's very interesting to note that week after week after week, i keep on seeing scores of people in many forums, and that i know, who get infected with all sorts of crap, including RK's, that are running XP etc PC's. <br> <br> As well as tightening things up as i mentioned before, here's something else you can do that's Proven to help protect, it's an Excellent App that works on ALL Win OS's including 98.<br> <br> -<br> BOClean enables you to: <br> <br> Destroy trojans and remove registry entries <br> Detects and destroys malicious spyware <br> <br> Detects and destroys malicious *ROOTKITS* <br> <br> Disconnect the threat without disconnecting you <br> Generate optional report and safe copy of evidence <br> Automatically sweep and detect in the background <br> Both Updates and Upgrades FREE of charge <br> <br> http://www.nsclean.com/boclean.html<br> -<br> <br> Regards,<br> Spanner m$h8tr

How could you possibly know if am Secure or not? you can’t, nor can any body else! You or they do NOT know the precautions i have taken, and continue to do as and when.

Maybe you arn’t aware that i have communicated with HF on several occasions on different topics. My previous comments were NOT directed at HF, but genearally to people reading who may think that NT/XP etc are safe. They might be safer outa the box in “Some” areas than 98 etc, but we’ve all seen how they still get penetrated Daily, but i Don’t!

I do read his stuff, and others too, and i acknowledge he is gifted and i DO have respect for him. I understand his modus operandi in giving the “Security + Software” people a kick up the ass to tighten things up, and that’s a Good thing. What people do with his RK’s is up to them, not HF.

He has previously said that his main focus and expertise is Rootkits on NT etc systems. I like him only recently discovered the RK for 98 posted on hxdef!

Only i know if i allow anything in to my PC or not from wherever, and i’m Very careful what i do and where i choose to surf. Sometimes i take calculated risks on purpose to see if my defences stand up. So far they have i’m pleased to say.

Others using non NT etc systems might not be so lucky, for the reasons i gave earlier as well.

But it’s very interesting to note that week after week after week, i keep on seeing scores of people in many forums, and that i know, who get infected with all sorts of crap, including RK’s, that are running XP etc PC’s.

As well as tightening things up as i mentioned before, here’s something else you can do that’s Proven to help protect, it’s an Excellent App that works on ALL Win OS’s including 98.

-
BOClean enables you to:

Destroy trojans and remove registry entries
Detects and destroys malicious spyware

Detects and destroys malicious *ROOTKITS*

Disconnect the threat without disconnecting you
Generate optional report and safe copy of evidence
Automatically sweep and detect in the background
Both Updates and Upgrades FREE of charge

http://www.nsclean.com/boclean.html
-

Regards,
Spanner

]]> by: m$h8tr http://www.emailbattles.com/2005/12/14/security_aacddidjci_dh/#comment-248 Thu, 15 Dec 2005 12:25:37 +0000 http://www.emailbattles.com/2005/12/14/security_aacddidjci_dh/#comment-248 SpannerITWks, you wouldn't even know if you were secure. holy_father is one of the world's top experts on this stuff, and he's telling you that it's not possible to secure Win 95/98/ME. You'd be wise to listen. SpannerITWks, you wouldn’t even know if you were secure. holy_father is one of the world’s top experts on this stuff, and he’s telling you that it’s not possible to secure Win 95/98/ME. You’d be wise to listen.

]]> by: Sum Yung Gai http://www.emailbattles.com/2005/12/14/security_aacddidjci_dh/#comment-246 Wed, 14 Dec 2005 11:22:27 +0000 http://www.emailbattles.com/2005/12/14/security_aacddidjci_dh/#comment-246 This is why I use GNU/Linux and OpenBSD. The only time I've ever gotten owned on one of those boxes was when I was negligent and ran an old, vulnerable version of SSH (v1.2.27) back in the year 2000. I deserved what I got that time. Since then, I've learned my lesson and never been owned again on GNU/Linux or BSD.<br> <br> However, I got seriously owned with a Windows NT 4.0 box running Exchange Server 5.5 in the year 2003. Yes, I had all the patches. It was replaced with a GNU/Linux box running postfix and courier-imap, and it's proven bulletproof to this point. This is why I use GNU/Linux and OpenBSD. The only time I’ve ever gotten owned on one of those boxes was when I was negligent and ran an old, vulnerable version of SSH (v1.2.27) back in the year 2000. I deserved what I got that time. Since then, I’ve learned my lesson and never been owned again on GNU/Linux or BSD.

However, I got seriously owned with a Windows NT 4.0 box running Exchange Server 5.5 in the year 2003. Yes, I had all the patches. It was replaced with a GNU/Linux box running postfix and courier-imap, and it’s proven bulletproof to this point.

]]> by: Big Red http://www.emailbattles.com/2005/12/14/security_aacddidjci_dh/#comment-245 Wed, 14 Dec 2005 09:36:45 +0000 http://www.emailbattles.com/2005/12/14/security_aacddidjci_dh/#comment-245 My laptop's running ME. Have had problems with it for several years. It locks up a lot, which usually leads to it's being powered down improperly. Of course, scandisk then comes up automatically upon re-boot. Scandisk typically fails mid-process, saying another Windows program or other program is getting in the way. Thanks for the article. It just may be that the problem is a rootkit issue. My laptop’s running ME. Have had problems with it for several years. It locks up a lot, which usually leads to it’s being powered down improperly. Of course, scandisk then comes up automatically upon re-boot. Scandisk typically fails mid-process, saying another Windows program or other program is getting in the way. Thanks for the article. It just may be that the problem is a rootkit issue.

]]> by: 98 user http://www.emailbattles.com/2005/12/14/security_aacddidjci_dh/#comment-244 Wed, 14 Dec 2005 01:11:21 +0000 http://www.emailbattles.com/2005/12/14/security_aacddidjci_dh/#comment-244 Actually, I've stopped using 98 only last year, because it could no longer efficiently support my new rig. It's damn secure. While the whole world worried about Blaster and Sasser, I was completely unaffected. Just keep a Firewall up, an alternative browser on and safe computing practices. Remember... 9x/ME's own security weakness can be used against rootkits too... there's no way a rootkit can completely wrest control from me. Ran it for close to 6 years without incident, clean as a whistle. Because unlike dimwits who run just any piece of code they find, I make sure I know what I'm doing. Actually, I’ve stopped using 98 only last year, because it could no longer efficiently support my new rig. It’s damn secure. While the whole world worried about Blaster and Sasser, I was completely unaffected. Just keep a Firewall up, an alternative browser on and safe computing practices. Remember… 9x/ME’s own security weakness can be used against rootkits too… there’s no way a rootkit can completely wrest control from me. Ran it for close to 6 years without incident, clean as a whistle. Because unlike dimwits who run just any piece of code they find, I make sure I know what I’m doing.

]]>