Security Basics mailing list archives

RE: File sharing with Bittorrent: what possible security threads?


From: "Kevin Ortloff" <Kevin.Ortloff () j2global com>
Date: Thu, 27 Mar 2008 13:10:08 -0700

This is an unusual work around on the so called " software firewalls "
and guess what... It's free....

If you install the cisco vpn client software ( free ) and let it run in
services ( default ). Open up the application and go to options. Check
mark "statefull firewall ( Always On )" and you will no longer be able
to receive pings, external connections, etc...... 

I'm not saying this is kick-butt stuff or even enough to give you a
sense of security, but it works.....

Also, if you have a dynamic IP from your ISP and it in fact does change
every few days... And you still receive a bunch of junk from the
internet... You probably should re-image your machine. I would say clean
it up from malware, viruses, etc... But that never really works. A clean
start may be what you need.





-----Original Message-----
From: listbounce () securityfocus com [mailto:listbounce () securityfocus com]
On Behalf Of Nazeem Jansen
Sent: Thursday, March 27, 2008 7:31 AM
To: 'Razi Shaban'; 'Thomas Jespersen'
Cc: 'Simon Jolle sjolle'; security-basics () securityfocus com;
listbounce () securityfocus com
Subject: RE: File sharing with Bittorrent: what possible security
threads?

Hi

This is my first reply. Not sure if i am sending to the right place. I
have been using torrents for years now. I recently discovered that a lot
of people on the internet is breaking my pc. In the last 3 weeks my PC
has suffered many DOS attacks. I am using BlackIce Firewall at the
moment and I can see them pinging etc. my PC all the time. Yesterday I
suffered from an attack so badly, I am in the process of reinstalling my
OS & apps.

My question is. What can I do about this? Which software firewall will
secure my PC on the internet. Dont say don't use bittorrent. Because I
cant and wont. I use it to download all my study material, movies etc.
And it is actually the best thing that happened since the internet.

Nazeem Jansen

-----Original Message-----
From: listbounce () securityfocus com [mailto:listbounce () securityfocus com]
On Behalf Of Razi Shaban
Sent: 27 March 2008 01:35 PM
To: Thomas Jespersen
Cc: Simon Jolle sjolle; security-basics () securityfocus com
Subject: Re: File sharing with Bittorrent: what possible security
threads?

I'm not saying that legal torrent sites are the only way to go, as
chances are the only reason he uses torrents are to download expensive
programs for free :-p.

But there are some more legit illegal sites, such as demonoid. Oink was
great, but until its back up if you want good content with good rates
and less malware, you'll want to find another private tracker.

--
Razi

On 3/27/08, Thomas Jespersen <front243 () stofanet dk> wrote:
Razi Shaban wrote:
 > If he's truly devoted to his filesharing he could join a private  >

tracker, which would be more moderated and have less malicious  > 
content.
 >


Indeed there are legal torrent sites as well, some of them pretty
good.

 Examples:

 Linux Tracker:
 http://linuxtracker.org/

 Dime A Dozen:
 http://www.dimeadozen.org/

 But it might not be as "sexy" for your friend as it is downloading 
$1000  applications for free :/


 Sincerely,
 Thomas, avid user of Linux Tracker :)


__________ NOD32 2977 (20080327) Information __________

This message was checked by NOD32 antivirus system.
http://www.eset.com




This email, its contents and attachments contain information from j2 Global Communications, Inc. and/or its affiliates 
which may be privileged, confidential or otherwise protected from disclosure. The information is intended to be for the 
addressee(s) only.  If you are not an addressee, any disclosure, copy, distribution, or use of the contents of this 
message is prohibited.  If you have received this email in error please notify the sender by reply e-mail and delete 
the original message and any copies. j2 Global Communications. 6922 Hollywood Blvd., Hollywood, CA 90028.


Current thread: