|
Stealing the Network: How to Own the Box
 |
Author: Ryan Russell, Ido Dubrawsky, FX, Joe Grand, Tim Mullen List Price: $49.95 Our Price: Click to see the latest and low price ISBN: 1931836876 Publisher: Syngress (01 April, 2003) Edition: Paperback Sales Rank: 8,135 Average Customer Rating: 4.52 out of 5
|
Customer ReviewsRating: 4 out of 5 Entertaining and Interesting While this is not the best book for an introduction into the technical issues surrounding hacking, it is an entertaining approach to some of the issues. The book is not meant to be an instruction course for hacking but rather just some fun stories about hacking. No, the stories didn't actually happen, but most of them could, possibly with a little stretching. I like the book and I think it's a lot of fun to read. Rating: 2 out of 5 Novel I was not very impressed with the publishing of this book. There were many typos and issues involving supposed screen prints that could not be adequately viewed. The book was actually written as a novel and not actual incidents. With the number of true incidents occurring or that have occurred, using such incidents would have been much more useful. Rating: 4 out of 5 Sometimes wrong and farfetched, but very entertaining! I saw this book on the shelves and started flipping through it. Next thing I know it was a half hour later and I was still sitting on the floor with the same book in my lap.In particular I wanted to read the chapter about H3x's adventure in networkland, since it seemed the most intriguing. She's a sexy female hacker that hits nightclubs and has a neon social life - so already we know the story is fiction, right? I noticed that the author of one of the chapters posted a review. I didn't pay attention to which chapter and don't have the book in front of me, but he states that all the methods used are possible. Well, you can't have a technical book without subjecting it to technical scrutiny. Here's where the meat of my review weighs in: H3x's adventures sometimes make no sense, and other times are technically wrong. Let me explain. First she realizes the changes she made on the routers at a university were logged to a syslog server, so she hacks that to cover her tracks by taking out the network address she used. Nevermind that she configured the routers to point a GRE tunnel to her home network, and then set "0wn3d" (or something similar) as the interface desription. Isn't that like sneaking tiptoe through a house late at night with a blaring stereo on your shoulders? And what kind of pipe would be going into her home to be able to keep up with an ethernet connection on a campus network? At this point everything is still technically possible, although somewhat unbelievable. Still - this is fiction after all. The administrators catch wind of this and do all the obligatory password and community string changes, tightening of security with access lists and pant-wetting. Discovering H3x can no longer get in through the front door, she whips up some java which acts as a UDP proxy and tosses it on a network printer. Using this she is able to bypass some access lists and TFTP the configurations off the Cisco routers - and here's the kicker - without needing community strings. Unfortunately, this just is not technically possible. I'd be curious to see what other technical reviewers have to say about the books merits. Again, it's a fascinating read but you may want to take some of the stories with a grain of salt. The landmine heist is another vastly entertaining story that bleeds into the absurd at times. Read the book and let others know what you think of it!
Similar Products
· Anti-Hacker Tool Kit
· The Art of Deception: Controlling the Human Element of Security
· Hacker's Challenge 2: Test Your Network Security & Forensic Skills
· Snort 2.0 Intrusion Detection
· Hacking Exposed: Network Security Secrets & Solutions, Fourth Edition
|