More on my laptop getting hacked

[thewayne]

I ran A LOT of software on it, looking for bad things installed. This includes software specifically designed to detect and deal with root kits and their ilk. Came up totally blank.

I think what happened was someone noticed that I was running a remote control program called Real VNC, it allows me to lie on my chair and control my desktop in the other room. A few weeks ago it was announced on Slashdot and other sources that there was a flaw that allowed people to bypass set passwords for the program and control computers remotely that they shouldn't have access to.

This seems to be the most reasonable explanation as to what happened to me. I was running the flawed version on my laptop full-time. I didn't need it loaded all the time, I was just lazy about installing it. So that's been removed. I've downloaded the new version, but I don't see me needing it anytime soon, so it's not loaded to be resident.

I also had let my firewall subscription expire January of '05. I should have renewed it right away, but I was a lazy bum. I've since upgraded it. And I downloaded the new version of Spybot S&D.

But my biggest mistake was a classic rookie error: running your computer all the time as administrator. If I had been running as a user, they wouldn't have been able to uninstall my anti-virus and go after my firewall as you can only do those functions as an admin. So I've renamed my admin account with a stronger password (it was strong before, I toughened it up a bit) and created a user account with a strong password.

This is another Joy of Microsoft. They make it difficult to use a home computer and not be in admin mode. I quite like Apple's take on this with OS-X: they ask you for the admin password then let you continue installing or doing whatever, much more civilized.


Anyway, I think I'm probably safe from a re-appearance of whoever it was that wanted to control my laptop. The problem that I had in Virginia was probably two-fold and definitely had nothing to do with Debora's network since I never tied directly into it, it was just a wireless configuration to get to the internet. First, I really need more memory in my laptop, more memory can take care of a world of problems. Second, I don't think my wireless card's software was cooperating very well with the HP printer driver that I had to install to work with her printer. I have a really sucky wireless card (it was cheap and on sale, that's my only excuse) that will be replaced in the near future as it is literally falling apart.


So I think that's about all there is to say on my little "PWN3D" incident. Hopefully nothing more will happen, but I'll definitely be keeping a closer eye on things.

Comments

[silveradept]

Ah, so that's what happened. Might have just been a script looking for those kinds of connections that got you. The next computer purchase you do, maybe it's worth looking into a dual-boot Mac. If you like OSX enough, but need some Windows programs, it's probably worthwhile.

I'd suggest dropping Windows entirely and moving over to a Linux distribution, since they have the same sort of admin v. user thing going on and have been for a while, but I understand that there are times when you have to hold on to Windows.

[thewayne.livejournal.com]

Mac is going to be my most likely direction, regardless of what a lot of Linux zealots think, it still isn't ready to replace the desktop. I am going to be working on improving my *nix skills, but I think I'd be happier with the Mac. Once I can run City of Heroes on it.... :-)

[silveradept]

Well, OSX does have at least one shell installed, so you'll have some practice at making your *nix mojo more powerful. Gaming and a few programs are the only reason Windows sitll exists on this box.

[cardigirl.livejournal.com]

Gaming is the only reason I'm half-assedly considering getting a gaming-only PC machine. And as far as that goes: the latest MacWorld seems to have an article about the latest-and-greatest basically being fully Windows-ish if you insist on (or must) use a Windows-only program. I only just glanced at the article so you'll need to look further, and of course YMMV.

[silveradept]

Well, with the Intel chipset and Boot Camp (and a copy of Windows XP), Mac OS X types can install Windows XP and dual boot. I'm not sure if they're doing any sort of Windows-machine emulation, but I doubt they are. That'll be someone else's job.

[cardigirl.livejournal.com]

Agreed, re the emulation. The article seemed to say this was *not* an emulation per se. Sheesh, I shouldn't bring these things up when I have such a poor grasp, from not having read it through in any detail. (sorry!)

[thewayne.livejournal.com]

It also requires that you have an Intel Mac, and I think yours is a PowerPC one, Liz. Allegedly Apple is working on a DLL set (program libraries) that will allow you to run Windows program directly on an OS-X/Intel machine. Intel architecture = Intel architecture, so theoretically it should be doable. One of the big questions is whether or not Microsoft will whack Apple upside the head with a law suit when they try to release them.

At least if you're dual-booting Win XP and Mac OS-X, MS is still getting their cut of the OS, whereas with just a set of DLLs, MS gets shunted out of the equation.

[cardigirl.livejournal.com]

I definitely don't have the Intel machine; it's the iMac G5. Should be interesting to see how this all pans out.