On 28/05/2013 17:08, Norman Wells wrote:
> AndyW wrote:
>> On 28/05/2013 08:52, Norman Wells wrote:
>>> AndyW wrote:
>>>> On 27/05/2013 11:25, Norman Wells wrote:
>>>>> Phi wrote:
>>>>>> I always run my computer as a virtual system, every reboot is the
>>>>>> original configuration.
>>>>>
>>>>> Why do you need to be so paranoid?
>>>>
>>>> Why not? sometimes it is necessary.
>>>> I often run as a virtual machine, it means that you never have to
>>>> worry about viruses, malware or anything nasty remaining on the
>>>> disk. I often play in the dodgy neighbourhoods of the internet
>>>
>>> Porn or theft?
>>
>> Wow. Binary thinking.
>>
>> There are loads of legitimate reasons why I should be knocking about
>> darker parts of the internet than porn or theft.
>> White hatting, virus capture, software hacking, password cracking,
>> hardware hacking tools... lots of legitimate reasons.
>
> Why do you describe them as legitimate when most are plainly not? And
> why do you need to hide them if they are?
But the uses I generally put them to are legitimate and cause no losses
to anyone.(and note I will admit to the occassional theft of hotel and
airport wifi).
But lets have a look (again) and you tell me what I am doing that is not
legitimate-
White Hatting - be definition is not illegal
Virus capture - not illegal
Virus hacking - if I need to hack some code to find hooks and entry
points to allow me to build it into some automated system there is
nothing in the software agreement to prevent it
Password Cracking - I have a series of passworded archives on my PC, I
have in the past forgotten the passwords and use crackers to get into them.
I fix a lot of PCs for people and it is not uncommon for someone to
forget their windows passwords. Password crackers allow me to gain
access and/or remove the windows password.
I buy and restore a lot of laptops from ebay. Many Lenovo laptops have
a hardware boot password (note not the standard BIOS based password that
can be bypassed by some pin shorting)that use dedicated circuitry to
store and check a password on boot up. When people forget their password
most local shops cannot help and so they go on ebay fairly cheaply as
nobody wants to buy them. Custom tools and a bit of hardware hacking
using instructions off the dodgier part of the internet allow me to
recover the passwords.
Hardware hacking - see above.
As for hiding, it is not illegal to hide things. People who claim that
'if you have done nothing wrong you have nothing to hide' miss the point
entirely. We as human being live on a spectrum of revealing/hiding
information about ourselves and our activities. Everybody does it.
I repaired a computer for a friend after a ransomware infection went
wrong and damaged the boot process. He had a 2 login accounts, one was
passworded. I did a data recovery and pulled off all the documents. I
assume that he assumed that since the account was passworded I could not
get into it but linux ignores NTFS passwording and pulled off all jpgs
from that account as well.. mostly naked shots of him, his missus and
friends occasionally all at the same time. Nothing illegal but certainly
something that he legitimately wanted to hide. I have also found some
interesting shots while recovering holidays snaps from a formatted SD Card.
In all cases I have respected their privacy and said nothing - in the
case of the passworded account I suggested that I could run some
cracking tools on it and he declined.
During a 'nothing illegal/nothing to hide' discussion (general and not
just limited to computers) I countered the arguement by asking just how
much money he earned and what his wife's favourite sexual position was.
He was not a happy bunny and it did rather prove my point although
risked me getting a punch.
As for disposable virtual machines I do not necessarily hide things, I
just don't want dodgy software (by which I mean malware) hanging around
on my computer.
I also have a special XP virtual machine I reserve for 'Microsoft
technical department' phone calls.
>> Mostly I do it out of curiosity
>
> That's what they all say when viewing porn or seeing what there is to
> steal.
And yet viewing porn is NOT illegal. I could have an extensive
collection on my PC - all legitimate, all adults and all legal in this
country and yet I would be unwilling to let people know about it...
which rather supports my point that people have a right to keep things
private.
I learned to pick locks and break into some cars using instructions on
the net but I have never broken into a house or a car (I have managed to
gain someone entry to their house and someone into their car).
But we have been through all this before and then into NO-CD cracks and
format shifting music (which is now legal IIRC) and you never managed to
find anything that I did that caused any loss to any business or was
(beyond my admitted wifi stealing or perhaps inconveniencing a few
electrons somewhere or diverting a milliwatt).
Andy