Question1.
Sites explaining techniques for hackers/crackers:
http://www.hacklib.com/DGcert/www/alt2600.html
http://www.textfiles.com/uploads/cracker.txt
http://www.governmentsecurity.org/articles/AdminGuideToCracking.php
http://www.hackingalert.com/hacking-articles/hacker-websites.php
Question 2.
Techniques:
• Scanning. Computers are scanned to find weak spots that allow entry. Tools are freely available on the internet. E.g. IntelliTamper 2.07 which looks for ports of entry on a computer. They could then turn them into Zombie computers, used to send out spam or worse without the owner’s knowledge.
• Email attachments. Many spam emails contain malware
• Clicking on enticing ads on websites, which install the malware
• Key-loggers, which record keystrokes and allow hackers to discover passwords and login codes
Prevention.
There are several ways to protect systems from most attacks:
1. Keep the operating system updated with patches and service packs
2. Ensure there is a firewall and that it is enabled.
3. Have up-to-date and valid anti-virus software
4. Use a good anti-spyware/anti-malware program and update it regularly
5. Do not open e-mail attachments from unknown senders
6. Do not click on links and offers on the web, especially those who purport to check for viruses or spyware and could in actual fact be installers of the very same
Availability of hacking instructions on the web
It might not be good that such instructions are freely available, (as are those on how to make a bomb from ordinary home or garden ingredients), however the internet is supposed to be a fountain of information for everyone on everything. Preventing one type of information may lead to other information being banned, and who is to decide what? It is surely up to the individual to decide the way to go – legal or not.
Monitoring by administrators
Yes, it is very important that administrators keep their knowledge up to date, even if it is impossible to cover all sites. Knowledge is power – in this case power to prevent attacks by unscrupulous persons.
