Recent Hackings: The whole story

[Daveman]

And don't kid yourself with bad track records in security. You're sounding like a Mactard. The reason IE is targeted is because it's what the majority uses. Firefox isn't inherently better, it's just targeted less. Anyone with a care can grab Firefox and find it's flaws and exploit them. There just isn't enough reason to do so.

Have you ever taken a serious look at the track records of both IE and Firefox? Firefox isn't perfect but the venerabilities are far and few compared to IE, and it isn't just because IE is more popular, some of the flaws IE has had over the years have been downright laughable coming from a billion dollar company. Hell if anything being open source should make it easier to find venerabilities than IE, the fact is firefox is much more secure than IE, and there's no way you can deny it, and it's not an issue of "popularity". You're only proving your own ignorance on the subject.

Often times when a hole if found in IE Microsoft will wait weeks, or months, sometimes they'll outright deny there is even a security hole. I want you to tell me how a company with billions of dollars in resources can't fix what is usually an "easy fix" in a reasonable amount of time constitutes a "popularity issue"

That's not to say firefox is god's gift the the earth, it has horrible issues with memory leaks for certain people, some extensions (though not exactly firefox's fault...) can cause tons of stability and speed issues for it, and Firefox seems to have issues running on macs compared to windows/linux for some users.

Firefox isn't even -that- good, it's just that IE is that bad, there are plenty of browsers better than IE, not just firefox. (I happen to hear from alot of people that Opera is better overall than firefox, I like certain extentions too much to switch, but they could very well be right)

-----

Oh and for the record while I don't personally like macs (I'll be the first person to make fun of the one mouse button), macs are more secure than windows by design, not just popularity ratio, though Vista has taken a big step in the right directions almost every other OS out there has had better security policies for years and years.

 

[Taurothar]

Daveman, nail, head.

As for someone's comment on how free antivirus software isn't as good as the commercial releases, I'd beg to differ. Avast has done more for me and caused far fewer issues than Norton or McAfee ever have. I uninstalled my copy of Norton, installed Avast and found 5 trojans that Norton failed to detect or prevent. I'm anal about updating software, and detection rules, so it wasn't that my Norton was out of date. Also, most commercial products require you to *pay* for updates after a small trial period, or risk losing full protection.

Another product that should not be overlooked in having installed and up to date at all times: Spybot Search and Destroy. Not only does it detect, prevent, and clean just about all kinds of spyware (currently just over 100k types it can find), it also comes with a registry protection program to prevent malicious alterations of your registry without your consent.

 

[Phraust]

I am the "Frost[wirk]" In the channel FYI.

Joking and arguements aside, here's my personal wall of inpenetrability:

1) Dedicated Gaming rig. It's my Star, I use it for 2 things: Games, and Graphically intensive programs. (AutoCAD etc...)

2) Use Opera. I like to give Firefox users shit just because they squirm like Mac users when you challenge their cult like beliefs. Fact is, the typical user knows jack shit abotu jack shit I.E., Opera, Firefox, they just don't know. They like to talk, as I do, but they don't know jack shit 99% of the time. I personally like Opera for the interface, custimizability, Mouse gestures(OMG these are awesome), and the way it handles certain operations. I however am not too happy with how it handles certain websites (rare, but the list included my work for a time).

All FIrefox joking aside iirc it was actually more popular that IE the last time I checked. And it is a strong simple program that does exactly what it does. Again Opera does what FF does, but does it automatically. But the one thing FF & Opera has that IE doesn't: They're not integrated into the god damned shell of the computer and use a perferated interface that accesses the system on the lowest levels... I.E. would be fine, if it wasn't the fucking operating system. (I know exagerated, but not by much)

Firewalls and AV software saves lives...

People don't know how to use em, turn em off, never scan, etc...

Listen, you need to configure your shit til it stops "beeping" at you. On a fresh install, for me, that could take up to three months before my tools "Learn" me. Once they know what I want, they do their thing and exclude everything but what I allowed it to. Some AV/FW's are too forgiving. If you can find someone that has HP's corperate edition "condom". HP uses some of the most ANNOYING FUCKING software... Scan regularly...

Do all your surfing on another computer. I do all my internet stuff on my laptop, it's a mexican whorehouse, but it's protected like a xiau-lin monastary.

And this cannot be itterated enough, Do not share your login information with anyone. Ever... Its said a million times. Just dont' do it if you care about your game.

Neat little trick:
This was on a KI thread linked on BG:

Enter in most of your root password and save it, leave part of your password unentered.

When you get the screen that pops up with your "saved" password just type in the last few didgits and go. If there's a key logger, they only get a partial, if there's a file reader getting your saved "encrypted" password, they only get a partial. either way, you're set.

Again, my sympathy goes out to those who were hacked.

Makes me hate gil buyers even more.

When you bought gil or buy gil, you are supporting the need for dickshits to devise methods like this. I hope you fucks that bought gil get hacked and your items go to another gil buyer. I hope you get burned by someone that knows you bought gil and steals your account and blames it on the recent rash of hacks. Go ahead, you know someone that buys gil? Use this time to rob them if you have their info. You profit, and they get the burn their greed and lazyness has caused others.

 

[Euphacent]

Firewalls and AV software saves lives...

People don't know how to use em, turn em off, never scan, etc...

Listen, you need to configure your shit til it stops "beeping" at you. On a fresh install, for me, that could take up to three months before my tools "Learn" me. Once they know what I want, they do their thing and exclude everything but what I allowed it to. Some AV/FW's are too forgiving. If you can find someone that has HP's corperate edition "condom". HP uses some of the most ANNOYING FUCKING software... Scan regularly...

I repair computers for a living, and the most common thing I see is people with Norton Internet Security installed and they've got tons of viruses and spyware all over their machine. I clean up the computer for them, configure everything, they take it home, and it comes back a week later the way it was when it first came in.

People think that just because you have antivirus software installed that they're safe from everything. You can't just walk into the lion's den with chain mail on and think that you can't be touched. You can't just install antivirus software and then go to any website or click on anything you want to. You still have to be smart and cautious about what you do. Also, if you're running an internet security suite or something like Norton Antivirus, you should really look into getting some antispyware software, as well. Companies like Symantec advertise on their products that they find spyware, too, but they aren't anywhere near on the same level as a dedicated antispyware program. If you're looking to buy some decent antispyware software, I'd recommend Spy Sweeper or Spyware Doctor. Both are very good at what they do. Spy Sweeper has a lot of options for configurability, and Spyware Doctor is a bit easier for the typical PC user to use. Both find a LOT of stuff. I'd use one of those in conjuction with Adaware Personal Edition (free) and Spybot (also free).

Of course, if you've got a keylogger that is custom coded by someone, none of these programs may pick it up, so as always, your mileage may vary and you need to practice caution

Anyhow, I've said it before, and I will say it again. Just install Firefox with the FREE adblock plus plugin, and none of this will be an issue for you... or I guess you can install Opera...

EDIT: Also, as far as free antivirus versus commercial antivirus, I can't tell you how many computers I've seen come in with free and commercial av solutions that have been brought to their knees -- by spyware. Having antispyware is more important than having antivirus these days.

 

[Myrid]

I haven't used an antivirus or antispyware program in oh, five years? I was turned off by my mother's Norton install eating up system resources in those days.

Now? My PC is fine without.

Note, I do end up formatting about once a year on average (whenever I do a hardware upgrade of any type) but even so, I've never ever been plagued by the shit that I've cleaned off my friends' and family's PCs. I'd really say it's 95% smart browsing, 5% having the right tools (not IE in this case).

 

[neophytal]

People think that just because you have antivirus software installed that they're safe from everything. You can't just walk into the lion's den with chain mail on and think that you can't be touched.

that analogy is effin amazing. so true. made me laugh as well.

 

[Knightblade]

Anyone know if AOL is safe? I've always used AOL for some reason, since I get it for free. And whenever I don't, I use firefox anyway.

 

[Falsey]

Anyone know if AOL is safe? I've always used AOL for some reason, since I get it for free. And whenever I don't, I use firefox anyway.

lol. 1997 called they are all out of you.

Sorry for Seinfeld joke.

With firefox I havent seen a single ad, on any website, in almost a year. No script is magical.

 

[landael]

3. And Filterset.G Updater.

Filter Set G is amazing. I've been using it years now. The way they keep it up to date keeps 99% of banners out of my favorite websites. Even when I come across the more obscure ads they make it easy and flexible to block them.

On top of that you can disable whichever scripts or 3rd party images which cause websites to slow down. All that loading from overloaded/slow servers they require before loading pages is gone.

 

[crookedmidget]

Also as a suggestion, I'd recommend a Host Based Firewall / Intrusion Detection System (IDS). Zone Alarm or Black Ice Defender are decent ones I've used in the past. It's a great way to have both a first and last line of defense against malware. If your browser is compromised and a keylogger installed, the fact that the malware is blocked (and notifying you of it's attempt to connect without your permission) by the host based firewall / (IDS) may the only indicator you get that your information is trying to be whisked away. This defense if depth is a great way to make sure that you're not low hanging fruit.

If your browser is exploited via an unpatched hole, and a keylogger is installed that there is no Anti-virus signature made for, you'll never know you've been compromised. I can appreciate some of the comments here that say "I'm a safe surfer because I do X, Y and Z; and I have never been compromised, so therefore safe surfing is the answer.". But when you're security is in the hands of the developers of the products you use, and the cleverness of the ones that try to exploit your system, I'm sorry to say that you personally don't have much of say weather you get owned or not.

 

[Altheya]

Daveman, nail, head.

As for someone's comment on how free antivirus software isn't as good as the commercial releases, I'd beg to differ. Avast has done more for me and caused far fewer issues than Norton or McAfee ever have. I uninstalled my copy of Norton, installed Avast and found 5 trojans that Norton failed to detect or prevent. I'm anal about updating software, and detection rules, so it wasn't that my Norton was out of date. Also, most commercial products require you to *pay* for updates after a small trial period, or risk losing full protection.

Another product that should not be overlooked in having installed and up to date at all times: Spybot Search and Destroy. Not only does it detect, prevent, and clean just about all kinds of spyware (currently just over 100k types it can find), it also comes with a registry protection program to prevent malicious alterations of your registry without your consent.

I agree. Free doesn't mean useless or bad.

The first time I installed Norton Antivirus on my PC, my luck (as usual) made it crash my PC and I had to reformat my PC entirely. So yeah. I sure didn't have any viruses after that.

 

[Sanjo Renomitsu]

Browser arguments are moot and stupid, the only bad browser is IE. Anything else is better. Opera is not better then firefox, firefox is not better then Opera. Both have their perks, both have their problems. Hell, even safari is better then IE and not bad at all.

You need to take care of your computer, it's that simple. The internet is not as dangerous as everyone makes it out to be, but you should still take precautions. I live in orlando, just recently declared having the highest crime rate in Florida. I don't know anyone who was a victim of crime, have I seen it. Just because it's dangerous, doesn't mean its end-of-the-world-dangerous.

Simple stuff will keep your computer in good shape. Use a firewall, virus scanner, and spyware scanner. That's the three pronged shield that will take care about 70% of your problems. Keep them updated. Defrag often with a good defragging program.

Use a browser other then IE and disable IE, if your chosen browser has security plugin's but all means use them.

Do this, and you won't have many problems. I don't. I use this computer to surf all the time and I use it to play. Its a machine, and good maintenance will keep it in good shape.

Just don't complain why you have problems if you don't take the steps to try and prevent them or reduce the danger they present.


Edit: Oh, and if you torrent or download a lot, I'd suggest scanning small files since they are the easiest for virus's to be disguised us. Kegen's and small patches are an example.


This site will scan single files for free across like 20-30 different well known virus programs and show you the results from all of them.

http://www.virustotal.com/

 

[Daveman]

Anyone know if AOL is safe? I've always used AOL for some reason, since I get it for free. And whenever I don't, I use firefox anyway.

AoL = IE*. So no it's not very safe.


*I haven't actually checked in years, but I would be very surprised if AoL still wasn't just a re-packaged version of IE.