Ask Fyodor Your Network Security Questions

Fyodor is the driving force behind Insecure.org and the top-rated Nmap network exploration and security auditing tool. He's also involved in The Honeynet Project (and is a coauthor of the project's book, Honeynet: Revealing the Security Tools, Tactics, and Motives of the Blackhat Community). One question per post, please. We'll run Fyodor's answers to 10 of the highest-moderated questions as soon as he gets them back to us.

My security question

[Anonymous Coward]

What's your account name and password? I'll trade you a two color, ballpoint pen with a logo on it for it.

Security Problem

[TedCheshireAcad]

I keep getting connections to my box from this bastard, at all sorts of ports. What can I do to find out where he is?

His IP address is 127.0.0.1

Any advice from Fyodor or the Slashdot community?

OS Identification

[Anonymous Coward]

What OS am I running?

Re:If you could change one thing.

[Anonymous Coward]

POWER SWITCH TO OFF POSITION.

It's the latest craze in blanket security contracts offered by major firms!

Re:Security Problem

[xchino]

See if you can make a CIFS/SMB connection to his box, try your username and password (He probably stole those too!) and then go crazy deleting stuff.

Re:What's your ratio of love:hate mail?

[Anonymous Coward]

What's your ratio of love:hate mail?

He probably doesn't know - all the spam drowns out everything else :)

Re:Security Problem

[rixster]

If that doesn't work, then make sure you firewall yourself against those attacks. Probably best not to do it via the console, but telnet in via another machine. Watch out though - if (s)he's sharp (s)he'll probably block that firewall the moment you can those network connections - I'm afraid you may have to rebuild your machine if (s)he's that far entrenched

Re:Weakest link: Between systems and people

[stratjakt]

TCPA has nothing to do with Microsoft or digital content. It's a hardware spec. How it's used is up to the user.

You're being fooled by slashbot FUD.

Re:Security Problem

[Anonymous Coward]

Bwahahahahahahaha. His name is local host. Do a google search for him. He shouldn't be too hard to find.

Re:Security Problem

[Quill_28]

Flood 127.134.232.121

That always stops the 127.0.0.1 hacker

Re:Linux Booth Babe and Sdem

[Anonymous Coward]

No, no, no. Your non-existent self-proclaimed Troll High Council is just a pale wannabe imitation of the real non-existent Troll High Council, which, of course, doesn't exist either, but if it did, would have had MUCH better things to worry about that the silly little SDEM incident.