Help defending from a hacker

[vietred]

Why don't you try Linux? Since I use Linux, I don't have any problem with virus .
P/s: I'm using fedora 13 and windows XP (only for gaming)

[fabianhjr]

...this ain't a topic about them.

This topic is about countermeasures to diverse attack vectors a cracker/skiddie/blackhat/greyhat could exploit.
So far we talked about Address Resolution Protocol Poison Routing.
Someone Mentioned the HTTP over SSL(https) as a defence against eavesdropping.
Antimalware and malware were already mentioned.

Now, lets hear more defences and attack vectors.

[noobxl]

noob question + troll:
since that this forum doesn't support https, does that mean my little brother next room can use this wireshark program he showed me last day to see my online account?

[Phantom Wolf]

noob question + troll:
since that this forum doesn't support https, does that mean my little brother next room can use this wireshark program he showed me last day to see my online account?

First off, this thread is a year old. HTS is a hacking community, not an army of the undead.

The short answer to your question: yes. The right answer: potentially.

It depends on how your network is set up. If your wireless then there's a good chance he could get your login information, especially if your wireless is unencrypted. If your wired, then his chances are considerably smaller. This is because of the way wireless networking works (everything sent over the network is literally broadcasted out for anyone to see)

[fabianhjr]

noob question + troll:
since that this forum doesn't support https, does that mean my little brother next room can use this wireshark program he showed me last day to see my online account?

It depends on how your network is set up. If your wireless then there's a good chance he could get your login information, especially if your wireless is unencrypted. If your wired, then his chances are considerably smaller. This is because of the way wireless networking works (everything sent over the network is literally broadcasted out for anyone to see)

SSH Tunnels to a secure location/VPNs
You must not depend on any site to protect you.

[scnguitar]

As far as AVs, I don't rely on them at all. I UAC file+registry permissions, since most attacks are linked to NT AUTHORITY\LocalSystem (as opposed to NT AUTHORITY\LocalService) since programs always get greedy with permissions. A multiple group+account system would work nicely.

[tremor77]

I can't possibly imagine NOT having an anti-virus. Even with common sense, it would be VERY hard to stay away from malicious ads/websites.

Indeed - Hell, I moused over one of the Kontera ads right here on HTS with a flash video and it tried to install Windows Defender 2012 (Known malware/fake AV) -- luckily my Avast web scanner was like.. wtfyohomeslice - this site is trying to install some shit onto your computer... I would have never noticed it because it fired off in a pop-down window that was sized at like 1px by 1px... and I had like a ton of pronz open in other windows.

[VPR3]

I go virtual, no access to hard drives so if any malware or virus sneaks in its destroyed on shutdown or whenever I reboot.

[fashizzlepop]

I go virtual, no access to hard drives so if any malware or virus sneaks in its destroyed on shutdown or whenever I reboot.

You mean it's destroyed if you re-install your virtual system? If you use a VM and it gets infected but you continue to use it and enter passwords you're still fucked.

[VPR3]

I go virtual, no access to hard drives so if any malware or virus sneaks in its destroyed on shutdown or whenever I reboot.

You mean it's destroyed if you re-install your virtual system? If you use a VM and it gets infected but you continue to use it and enter passwords you're still fucked.

Well yes and no, I sometimes run it through a VM but mostly I will just boot the OS. Any would be virus is stored in ram and everything is destroyed on reboot or shutdown. And I'll do that pretty frequently depending on what I'm doing.