|
Computer System Security |
.. Geoff, Jan 27/04 |
At this moment there are several people trying to break into our computer system over the Internet.
Usually we get a couple of random attacks each day. Our firewall doesn't give back any response as far as I know, so attackers don't know there is someone at our Internet address, so usually they give up after a few minutes. But the attacks yesterday and today are more persistent.
How do they know our Internet address? One person used Gnutella, Audiogalaxy, Napster, or another MP3/file sharing program from INSIDE Frontier. This is a HUGE security risk! These programs open up port 6346 through Frontier's firewall; and publicize Frontier's unlisted Internet address.
Open ports: There are 65,000 ports into every computer system. Each port is like a doorway. If you know the right port, and have the right 'key', you can enter that computer system. Our firewall hides most ports, but has to leave open a a few of them to operate. It also opens individual ports for a few seconds as users access the Internet (e.g. when you check email). Most open ports have security systems of some sort. Unfortunately, file-sharing programs open port 6346 with no security. A hacker could enter Frontier's system through that port while the file-sharing program is running.
Publicizing our unlisted Internet address: Today's attackers know someone is at our unlisted Internet address, so they are persistently pounding away at our firewall. No firewall is perfect, so they might find a way in. Maybe they already have.
You may run these types of programs at home, but NEVER when you are inside Frontier!
Before installing any program on your computer, check with Geoff or Daniel. This includes free utilities (which may be spyware), screen savers, programs that friends send you, or things that you find on the Internet.
Frontier has Internet firewalls to keep the bad guys out. From what I can tell there are a lot of bad guys. There is a probe attempt against the Delta server about once every 3 minutes, 24 hours a day! So far, nobody has broken in, and I'm trying to keep on top of Internet security issues.
These same hackers, or even curious neighbours, would love to break into your home computer. Your system is probably wide open to attack. If you have an always-on connection like an ADSL or cable modem--your computer is a very tempting, and very available target.
If you click on "Network Neighbourhood" you might be surprised to see several of your neighbour's computers out there. You might be able to simple click a couple of times and read (or change!) what is on their disks!