Hard Light Productions Forums

Off-Topic Discussion => General Discussion => Topic started by: Sandwich on February 03, 2002, 05:59:00 am

Title: OT - Morpheus/Kazaa/Grokster security alert
Post by: Sandwich on February 03, 2002, 05:59:00 am
Ok, essentially those 3 FastTrack network apps share files via HTTP on a certain port (see link below for specifics). This means that if someone were to discover your IP and connect to it via HTTP on the FastTrack port (only possible if you are running one of the 3 FastTrack clients), they would be able to see a listing of all the files you have currently shared.

Fine and dandy, right? Wrong. All too many people unknowingly share the same directories where they store unencrypted passwords, bank info - what have you.

So basically, make sure that you only are sharing what you want to with M/K/G.

For more details, go to http://arstechnica.com/ (//"http://arstechnica.com/")  - they have a news item about this, with a link to more relevant sites.

------------------
America, stand assured that Israel truly understands what you are going through.

Know how to use Rhino3D? Want to put your ships into Freespace 2? You've come to the right place (//"http://www.geocities.com/sandvich/fs2/rhino_fs2/")!

"He who laughs last thinks slowest."
"Just becase you're paranoid doesn't mean they're not out to get you."
"To err is human; to really screw up you need a computer."
Creator of the Sandvich Bar (//"http://www.geocities.com/sandvich/index.html"), the CapShip Turret Upgrade, the Complete FS2 Ship List and the System Backgrounds List (all available from the site)
Title: OT - Morpheus/Kazaa/Grokster security alert
Post by: Fineus on February 03, 2002, 06:24:00 am
This is why I specify an empty directory if I'm forced to share something - otherwise I never share files, only download them.
Title: OT - Morpheus/Kazaa/Grokster security alert
Post by: Admiral LSD on February 03, 2002, 06:30:00 am
I only share one directory outside the "My Shared Folder" which Morpheus sets up and that only contains MP3s so I think I'm safe (not that I really care about this sort of security BS anyway) but I have to ask how stupid can you be to share folders like your internet cache and windows directory where this stuff usually resides?

------------------
"Don't stop, baby, dreamin'"
"Don't stop, baby, lovin'"
"Don't stop, babe, believin'"
Wasurenaide...
"Don't stop, baby, dreamin'"
"Don't stop, baby, lovin'"
"Don't stop, babe, believin'"
...Watashi ga iru koto o.
Itsudatte soba ni iru yo.

www.netwerkin.com ("http://www.netwerkin.com")
Title: OT - Morpheus/Kazaa/Grokster security alert
Post by: Fineus on February 03, 2002, 06:45:00 am
Well a lot of people aren't totally computer literate - the ones who think "this kind of thing never happens if you don't try and be clever with computers" - they're probably the type to download this software and then install it without paying much attention to what it does.
Title: OT - Morpheus/Kazaa/Grokster security alert
Post by: Sandwich on February 03, 2002, 06:46:00 am
 
Quote
Originally posted by Admiral LSD:
I only share one directory outside the "My Shared Folder" which Morpheus sets up and that only contains MP3s so I think I'm safe (not that I really care about this sort of security BS anyway) but I have to ask how stupid can you be to share folders like your internet cache and windows directory where this stuff usually resides?


Hey, don't look at me - just do a search for "explorer.exe" or "system32.dll" or something and tell me how many and how rapidly it returns the max ~100 results.  (http://dynamic.gamespy.com/~freespace/ubb/noncgi/rolleyes.gif)

Oh, and Thund4r, IIRC it automatically shares any folder and it's subfolders that you choose to download into, so be careful.  (http://dynamic.gamespy.com/~freespace/ubb/noncgi/tongue.gif)

------------------
America, stand assured that Israel truly understands what you are going through.

Know how to use Rhino3D? Want to put your ships into Freespace 2? You've come to the right place ("http://www.geocities.com/sandvich/fs2/rhino_fs2/")!

"He who laughs last thinks slowest."
"Just becase you're paranoid doesn't mean they're not out to get you."
"To err is human; to really screw up you need a computer."
Creator of the Sandvich Bar ("http://www.geocities.com/sandvich/index.html"), the CapShip Turret Upgrade, the Complete FS2 Ship List and the System Backgrounds List (all available from the site)
Title: OT - Morpheus/Kazaa/Grokster security alert
Post by: Fineus on February 03, 2002, 07:10:00 am
Typcically thats my documents - which I use as a quick access temporary folder before content is renamed, archived or deleted.
Title: OT - Morpheus/Kazaa/Grokster security alert
Post by: Nico on February 03, 2002, 07:11:00 am
I don't share files. here in France we have an upload limit on cable, I let 5 peoples d/l a movie and my limit is reached, and then I pay every more mb.
Title: OT - Morpheus/Kazaa/Grokster security alert
Post by: Zeronet on February 03, 2002, 08:12:00 am
I operate a tough one-way system with these type of things. Being on a 56k i have to anyway.
Title: OT - Morpheus/Kazaa/Grokster security alert
Post by: Martinus on February 03, 2002, 12:44:00 pm
 
Quote
Originally posted by Zeronet:
I operate a tough one-way system with these type of things. Being on a 56k i have to anyway.

Yeah I use WinMX, anyone DL off me automatically cuts my bandwidth down by half. The only files I share are super rare ones that a few people would be interested in. I figure if it took me such a lot of work to find it I may as well save others all that pain  (http://dynamic.gamespy.com/~freespace/ubb/noncgi/smile.gif)

Title: OT - Morpheus/Kazaa/Grokster security alert
Post by: Grey Wolf on February 03, 2002, 01:49:00 pm
I keep KAZAA compressed when I'm not using it, so I don't have to worry. Saves space too.
Title: OT - Morpheus/Kazaa/Grokster security alert
Post by: an0n on February 03, 2002, 01:55:00 pm
This 'Security Flaw' crap is old news. If you're stupid enough to designate your C drive as your share folder then you deserve to be ******  over. It's not a flaw anyway, it's a feature of the various programs which if used stupidly can lead to heart-ache. Like putting your C drive as your FTP servers root and setting access to 777.
Title: OT - Morpheus/Kazaa/Grokster security alert
Post by: Kamikaze on February 04, 2002, 01:19:00 am
pffffffft, OMG........

I'm glad I'm not one of these ignorants...  (http://dynamic.gamespy.com/~freespace/ubb/noncgi/biggrin.gif)
Title: OT - Morpheus/Kazaa/Grokster security alert
Post by: Darkage on February 04, 2002, 01:54:00 am
i don't share my files (http://dynamic.gamespy.com/~freespace/ubb/noncgi/wink.gif)

------------------
     (http://www.3dap.com/hlp/hosted/inferno/puke.gif)                                    
-------------------

      [email protected]      
ICQ 102628858
Staffer member of Inferno
Inferno

the the mod place! ("http://www.themodplace.co.uk")
Join our forums at The ModPlace![/b]
 Gost of the past ("http://www.gotp.f2s.com/")