Loading

Web Security Risks




YOUR IP ADDRESS IS PUBLIC
Accessing the Internet is a security risk.

When you are connected to the Internet, an IP address is used to identify your
computer.  If you don’t protect yourself, this IP address can be used to access your
computer from the outside world.

A fixed IP address is a larger security risk.

If you’re using a modem with a dial-up connection, you will get a new IP
address every time you connect to Internet.

With an ADSL or cable connection users sometimes keep the same IP address for
several months, this represents an increased security risk.

If you have a fixed IP address, you give Internet hackers all the
time they need to search for entrances on your computer, and to store and share
(with other hackers) information they find on your computer.

Your Network Shares
Personal computers are often connected to a shared network. Personal
computers in large companies are connected to large corporate networks. Personal
computers in small companies are connected to a small local network, and
computers in private homes often share a network between family members.

Most often networks are used to share resources like printers, files and disk
storage.

When you are connected to the Internet, your shared resources can be
accessed by the rest of the world.

A Common Windows Security Problem
Unfortunately, many Microsoft Windows users are unaware of a common security
leak in their network settings.

This is a common setup for network computers in Microsoft Windows: 

 - Client for Microsoft Networks
 - File and Printer Sharing for Microsoft Networks
 - NetBEUI Protocol
 - Internet Protocol TCP/IP

If your setup allows NetBIOS over TCP/IP, you have a security problem:
 
 - Your files can be shared all over the Internet
 - Your logon-name, computer-name, and workgroup-name are visible to others

If your setup allows File and Printer Sharing over TCP/IP, you also have a
problem:

 - Your files can be shared all over the Internet

Computers that are not connected to any network can also have unsecure
network settings, because the settings were changed when Internet was
installed.

Solving the Problem For Windows 2000 users:

You can solve your security problem by disabling NetBIOS over TCP/IP:

 - Open Windows Explorer
 - Right-click on My Network Places
 - Select: Properties
 - Right-click on Local Area Network
 - Select: Properties
 - Select: Internet Protocol TCP/IP
 - Click on Properties
 - Click on Advanced
 - Select the WINS tab
 - Select Disable NetBIOS over TCP/IP
 - Click OK

If you get the message: “This connection has an empty……”, ignore the message and click on YES to
continue, and click OK to close the other setup windows.

You should restart your computer after the changes.

For Windows 95, 98, or ME users:

You can solve your security problem by disabling NetBIOS over TCP/IP:

 - Open Windows Explorer
 - Right-click on My Network Places
 - Select: Properties
 - Select: Internet Protocol TCP/IP
 - Click on Properties
 - Select the NetBIOS tab
 - Uncheck: Enable NetBIOS over TCP/IP
 - Click OK

You must also disable the TCP/IP Bindings to Client for Microsoft Networks and File and Printer
Sharing:

 - Open Windows Explorer
 - Right-click on My Network Places
 - Select: Properties
 - Select: Internet Protocol TCP/IP
 - Click on Properties
 - Select the Bindings tab
 - Uncheck: Client for Microsoft Networks
 - Uncheck: File and Printer Sharing
 - Click OK

If you get a  message with something like: “You must select a
driver………”, ignore the message and click on YES to
continue, and click OK to close the other setup windows.

If you still want to share your Files
and Printer over the network, you must use the NetBEUI protocol instead of the
TCP/IP protocol. Make sure you have enabled it for
your local network:

 - Open Windows Explorer
 - Right-click on My Network Places
 - Select: Properties
 - Select: NetBEUI
 - Click on Properties
 - Select the Bindings tab
 - Check: Client for Microsoft Networks
 - Check: File and Printer Sharing
 - Click OK
 - You should restart your computer after the changes.
——————————————————————————–

You might want to read these as well

Loading...







Web Security Risks

Joshu is the Founder of the OrangeCopper Webmaster's Community, He had been designing & developing web applications as a freelancer in this field for the past 9 years. OC was born in 2002 December and since 2004 Joshu had been Blogging on the Web about what he learned the Hard way, So that you could learn it the Easy Way. Follow OrangeCopper on Twitter and you would be Auto-Followed.


  • Hello,

    The article has been an eye opener, Thanks.
    It really amazes me when the open shares or a netbio in TCP/IP will be a vulnerability !!

    cheers
    Amit
blog comments powered by Disqus