RE: A hacking question!

[Kernel_Panic]

Hi,
What's the crack with hacking these days? I mean, is it legal if I hacked (tried to!!) into my own computer? Or if I setup my own network to hack into. Would I get into trouble???

Oh! One more question: Will I get into trouble for looking at hacking sites as well???

Thanks

[kalnet]

Can't answer your question.

May not be legal!

[squidgy]

Hi,
What's the crack with hacking these days? I mean, is it legal if I hacked (tried to!!) into my own computer? Or if I setup my own network to hack into. Would I get into trouble???

Oh! One more question: Will I get into trouble for looking at hacking sites as well???



All of these things are perfectly legal. How else do you suppose it would be possible to test any of the following kinds of software? Firewall, anti-virus, encryption, parental control etc .... :lol

Seriously, I like to think that all this stuff has been thoroughly tested before I part with my hard earned on it. :p

[Techtips]

Hacking and Cracking are very different, Hacking is a term used to decsribe someone who pulls apart something to anylise it rather than cracking which involves an intention to break into a specific system.

The two are often confused by the media.

I have successfully tested my own systems security to circumvent the security system of an international Bank but this does not make me a criminal since the task was performed on my own system for which I give myself permission.

If you need an overview of security from a beginner level then read my article on the link below.

BTW you cant get done for looking at hacking sites or even download utilities etc but you can get prosecuted under the computer misuse Act for using such tools to crack into a system.

[diceboy]

I'M not sure if this is up to date but check this for more on the "Computers Misuse Act 1990"



http://www.hmso.gov.uk/acts/acts1990/Ukpga_19900018_en_2.htm#mdiv1
....................
Crown Copyright 1990
....................

Make of it what you will !!!!


And here's a snippet for all you legal beagles.

www.swarb.co.uk/lawb/cpuCMANaughty.html

[Kernel_Panic]

Hi,
I only want to try and hack into my own pc for security reasons. Nothing else.

P.s: How do I find my own pc to hack into?

[Synergy Blades]

Depends on what you're using to hack into your PC with, i.e. will you need your IP address etc.

[Techtips]

1) Starting from the easiest try learning the following

Dos/Linux & Networking commands E.G

NetStat
Net
Traceroute
Route Add

Excetera Excetera

2) Take a Level 3 NVQ networking course and learn about the OSI model and how computers communicate using it. Also read up on Ports and the commons ones which are used for communications FTP 21 and Ports 139,137,138 Not telling you about those you will have to learn the relevance of those yourself.

3) Learn to program, good programming languages for hacking are C,C++ and Perl

4) Read the RFCs "Request for comments" these will explain how protcols and communications work at the barebones level

good place to start is here
http://www.cis.ohio-state.edu/Services/rfc/index.html

5) Sign up for some security mailing lists and read for the different vulnerabilities the CERN link on my page is probably the best. but there are others such a http://www.security-focus.com

6) More importantly of all learn how to use search engines enough so that you can get this kind of infomation at will.

http://www.google.com


What confuses me is why do you want to hack your own machine.

The stupid thing is as long as your running and up to date AV and Firewall your going to be pretty safe and only the very experience crakers will get into your system.

There will be little reason for someone like this to target your machine and those that do have either got sad little lives or cant get a proper job.(There are some with jobs that still have sad little lives :lol)

OH forgot to mention have a crack at linux,

Its not necessary to hack with Dos is equally as effective but it will give you and understanding of how other systems work and are set up.

What ever you do dont go down the script kiddie route and use Sub seven, Netbus or Back orifice you wont learn anything that way and remember the skills you do learn will applicable in when applying for a job as they are also used for diagnostic purposes and understanding how firewalls work.

Are you worried about your home PC security?

[Kernel_Panic]

Hi,
My computer has already been "hacked" by someone in the past. As for a Firewall, I allready have BlackIce and Zone Alarm,which are always kept up to date. I use Redhat Linux 6.2 on my laptop.

David

[Techtips]

Learn how to get into your PC from your Laptop then,

You have all the kit you need right there the best way to do it would be the through the Internet. However Im not sure your ISP would allow it thats why it may be a good idea to set up another account.

Get rid of Blackice biggest load of crap going.

Zonealarm is better and will keep the Kiddies out.

Tiny Firewall will however be more secure than Zonealarm though

[Techtips]

David,

The Truth is that there are some very clever people out there and you always have to be one step ahead of them.

Its very difficult sometimes to keep ahead when there are so many vulnerabilities in software and mis information going about.

Something as simple as visiting a newsgroup can often put you at risk and the more areas explored on the net the higher the risk.

For many of us who spend long periods connected it is necessary to protect your machine from intrusions.

Im sorry to hear about your misfortune and it is something I would rather keep to myself to prevent myself from becoming another possible victim. Once a script kiddie hacks your system they tend to tell their mates and so on, anyone reading this Forum could think you were vulnerable and therefore try to target you throught the forum.

Im not trying to scare you Im just telling you what is possible and hopefully helping you to understand it more.

Reagards

Ian Upton

[protocol]

Just to add that using any of the Instant Messaging Programs and or Chat Applications greatly increase the risk of being hacked. Try to vary how your pc is protected from such attacks and keep a log of attacks, you will be able to report the kiddies by using neotrace or similar. Norton Internet is pretty effective against Trojans.

Oh and the Computer Misuse Act is a very poorly worded act which is quite effective against workers misusing their companies computers but ineffective, pretty much, against every thing else.

But then 'Hackers' arent interested in accessing private computers, sad kiddie muppets are!! :evil

[Kernel_Panic]

Hey,
I never use chat rooms or newsgroups any more. The computer that was hacked into had no security at all. Since then, have new computer,new isp, news OS. Never open attachments or read e-mail from people I don't know.

[squidgy]

I must say, the concept of "hacking" is a bit general.

The best advice, really, if you're just starting, is probably find a friend or relative who's clued up about internet and network security, and get them to talk about it with you! :lol Oh yeah, maybe get them to come round and have a look for vulnerabilities themselves, too, in the safety of your own home without having to connect to the internet.

I find that Gibson Research is a good starting point .... http://grc.com - I was completely oblivious to hacking until my dad sent me a link to this using MSN Messenger! Since then, I've just followed my nose, and have learned far more about how TCP and IP protocols actually work, and what security risks exist than he does. Ironic, really, but that's how it panned out. :)

[onomatopoeia]

Redhat linux 6.2 had a few problems with its default configuration from memory, and the linux "worms" that appeared earlier this year exploited problems in 3 different packages because of the way RH had set them up when you do a default install.

A good alternative (IMO) is debian potato + security updates. Uncomment the security line in etc/apt/sources.list and do

apt-get update
apt-get dist-upgrade

regularly. No nasty RPMs :) security fixes find their way onto the debian security archive (and mirrors) pretty quickly although not immediately as they are tested once updated source becomes available before being made available in apt packages.