PDA

View Full Version : Online Security Check



supersonic
03-16-2004, 07:06 PM
hell-0 everybody,
Almost everyone knows about the Free online security checking websites.
I sometimes do online scanning to check my firewall for security. Guess what
happens 2-4 day after scanning from several websites each time? I get an
attack. Have you ever though why these companies/organizations are offering
free online scanning?can't they attack you if they know which ports you are
exactly using?whihc ones are open?in addition to your IP address?
I do not think that it is just a coincidence that I get attacks 2-4 days after each
scan. I rarely get computer attacks, but I get alot after each and every scan I
do. The above is just my opinion and I could be not right sometimes. I just
want to say "Be carefull", you do not know what information they are really
keeping, when they are scanning your computer.
have a nice day.

GrubMe
03-16-2004, 07:11 PM
Did you try norton online security check?
Well if you want to do it manual... here are some list for online trojan attacks ;) .

Trojan List... (http://www.lavasoftsupport.com/index.php?showtopic=18647)

supersonic
03-16-2004, 07:26 PM
Yes I have tried these, but nothing happens when I scan with norton/houscal or such, but it does happen with others. What I am saying that we should be more "carefull" when we are letting companies/orgz scan our comps. :blink: :huh:

ck-uk
03-16-2004, 09:44 PM
I think your being slightly paranoid mate :P

supersonic
03-16-2004, 09:59 PM
Originally posted by ck-uk@17 March 2004 - 03:14
I think your being slightly paranoid mate :P
Well you can hardly trust free things today.

Izagaia
03-17-2004, 01:14 AM
While I agree, that if something is "too good to be true- it usually is", I have to believe that there is alittle paranoia involved in visiting a Symantec site and thinking that they wish to invade your system after allowing one of their security scans.

Stealth firewalls do unintentionally pick-up a couple of "false-positives" now and then, as I understand it. I would rather receive the message knowing that the attempt was blocked rather than be lulled into a false sense of security. And since I do use their products, I have to believe that if they wanted into my system bad enough, they could (or any of these companies who specialize in this area) without my ever realizing their being present.

I think your luck just to be a matter of coincidence. I receive a few of these so-called "intrusion attempts" on a daily basis, myself. Some are most likely legitimate while I have to believe that others are indeed false-positives. And of the legit ones, I am thinking that the software is doing it's job, cloaking my ports by not responding to probes (of which I think there is an incredible rise in overall internet hacking these days, IMO) in the first place.

supersonic
03-17-2004, 03:47 AM
What you are saying is right. Firewalls are not 100% accurate. Same thing applies to Antivirus software.
I think that companies want to show us that their software products work by several means, even if it involves sending small portscan attacks. Companies, such as Symantic and Mcafee will not benifit from invading your whole computer and breaking into it, they can do that even with 999 firewalls installed, but they want to show that their software works by these scans. What makes me suspect is that some companies are only specialized in frre online scanning.
Anyways, it is better than our firewalls are doing it's job. Even if the alert was false, it is better than nothing at all :)
I noticed that viruses and attacks are growing very numeruos two weeks after the windows 2000/nt sourc code was leaked, just saying, it might be not related.

shn
03-17-2004, 09:54 PM
Originally posted by supersonic@16 March 2004 - 21:47
What you are saying is right. Firewalls are not 100% accurate. Same thing applies to Antivirus software.
I think that companies want to show us that their software products work by several means, even if it involves sending small portscan attacks. Companies, such as Symantic and Mcafee will not benifit from invading your whole computer and breaking into it, they can do that even with 999 firewalls installed, but they want to show that their software works by these scans. What makes me suspect is that some companies are only specialized in frre online scanning.
Anyways, it is better than our firewalls are doing it's job. Even if the alert was false, it is better than nothing at all :)
I noticed that viruses and attacks are growing very numeruos two weeks after the windows 2000/nt sourc code was leaked, just saying, it might be not related.
You need to be able to determine false input from your log files.

And most if not all thoose sites will tell you with a disclaimer before you even scan that you may receive such attempts perceived as "attacks" to you in your log files.

This is primarily because software based firewalls and what not are basically crap IMO.

And the reason that some companies specialize in that only is because not everyone knows how to scan their own computer, just as you do not know how to distinguish false-positives and real attacks. :)

supersonic
03-18-2004, 12:01 AM
LMAO I was n't talking about the attacks DURING the scan, but 2-4 days AFTER the scans, lol.