FAQFAQ   SearchSearch   MemberlistMemberlist   UsergroupsUsergroups   RegisterRegister 
 ProfileProfile   Log in to check your private messagesLog in to check your private messages   Log inLog in 
Very interesting article for those who like compute security

 
This forum is locked: you cannot post, reply to, or edit topics.   This topic is locked: you cannot edit posts or make replies.    The Ville.org Half-Life Gaming Community Forum Index -> General Ramblings
View previous topic :: View next topic  
Author Message
Lin Sivvi Defiant Hero
Registered User


Joined: 17 Jan 2002
Location: Some small boring city
Posts: 1205

PostPosted: Sat May 04, 2002 5:58 pm    Post subject: Very interesting article for those who like compute security Reply with quote

Here

It's a program that injects a dll file into the memory of a firewall. It's some what like the cheat injection to hl, but in a different form. I liked reading it.
Back to top
View user's profile Send private message Send e-mail AIM Address
Warhammer
Server Admin
Server Admin


Joined: 12 Aug 2001
Location: Atlantuh, Jawjuh
Posts: 1226

PostPosted: Sun May 05, 2002 9:11 am    Post subject: Reply with quote

Looks like this only applies to Sygate, Symantec, McAfee, TinyPersonalFirewall, and Kerio personal firewalls. An enterprise or soho-based firewall like Firewall-1, PIX, Raptor, or even the little Linksys systems aren't affected. It's an interesting attack but it's not one that's impossible to defend against. If the pfw's did a runtime hash of the code in memory it would be defeated. Also, it doesn't work if you're not logged in with administrator priviliges. Most people running NT/2K/XP based systems do this for convenience, unfortunately.
Back to top
View user's profile Send private message Send e-mail AIM Address
Lin Sivvi Defiant Hero
Registered User


Joined: 17 Jan 2002
Location: Some small boring city
Posts: 1205

PostPosted: Sun May 05, 2002 9:34 am    Post subject: Reply with quote

I think it's a hack that would be used with spyware and trojans applications, and not on against big companies. It is like the trojans that hijack internet explorer. It does work against more firewalls, such as zonealarm. If you read that thread all the way through, the guy reversed it and made it work with ZA. I'm not too sure how a linksys, or soho firewall could prevent this, but all you would need to do in any case is block the firewall itself from accessing the internet.
Back to top
View user's profile Send private message Send e-mail AIM Address
Display posts from previous:   
This forum is locked: you cannot post, reply to, or edit topics.   This topic is locked: you cannot edit posts or make replies.    The Ville.org Half-Life Gaming Community Forum Index -> General Ramblings All times are GMT - 6 Hours
Page 1 of 1

 
Jump to:  
You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum


Powered by phpBB © 2001, 2005 phpBB Group