WannaCry question about windows operation systems

[giulia]

hi
thanks for the link
it could be very silly but doe make a difference using the pop3 or imap protocols in the email client?
i use thunderbird

 

[SHvFl]

hi
thanks for the link
it could be very silly but doe make a difference using the pop3 or imap protocols in the email client?
i use thunderbird

No, it doesn't matter. The issue usually happens by attachments you get and run.

 

[WinXPert]

When in doubt, block.

 

[509322]

When in doubt, block.

I just deleted it. What I posted would be as fruitful as striking a match while standing knee-deep in a lake of gasoline. The best teacher is experience - so let 'em experience...

 

[AtlBo]

Wasn't there a time when executables couldn't be sent as an attachment? Seems like that would at least slow down malicious software...

 

[509322]

I think what most people are missing is that WannaCry was intially spread by SMB. SMB is used for various server-client shares. Most home users are not using their system as a client of a server for the various SMB shares.

 

[Deleted member 178]

After reading the latest attacks like this one, i'm so satisfied about all the time spent to tweak my OS, my system is untouchable by classic attack like this, only a dedicated hacker may eventually breach it.

 

[509322]

After reading the latest attacks like this one, i'm so satisfied about all the time spent to tweak my OS, my system is untouchable by classic attack like this, only a dedicated hacker may eventually breach it.

If you followed the online Win10 hardening guide, isn't disablement of SMB a part of that hardening guide ? I can't remember...

Also, disable ports 136-139 and 445 ?

 

[509322]

Yes I have disabled it as it was recommended as a way to stop wannacry from spreading

@Umbra uses an online hardening guide that has been available online for many years - so it precedes all this WannaCry stuff by ages.

I am asking him if the SMB and port disables are a part of that ancient hardening guide.

 

[Deleted member 178]

If you followed the online Windows 10 hardening guide, isn't disablement of SMB a part of that hardening guide ? I can't remember...
Also, disable ports 136-139 and 445 ?

only SMB is mentioned but File and Printer Sharing is disable via the adapter options.

 

[CMLew]

If you followed the online Windows 10 hardening guide, isn't disablement of SMB a part of that hardening guide ? I can't remember...

Also, disable ports 136-139 and 445 ?

Is this the Hardening Guide (or some sort similar) you are referring to?

Harden Windows 10 - A Security Guide. How to secure Windows 10

 

[Deleted member 178]

@CMLew yes

 

[509322]

only SMB is mentioned but File and Printer Sharing is disable via the adapter options.

@Umbra

So waaaayyyyyyyy before this whole WannaCry thing, you had already disabled all versions of SMB on your system(s) ?

Which, since you do not use SMB shares, it doesn't really matter - but the whole OS tweaking thing is a more important point that I am getting at.

 

[509322]

ok sorry did not know just trying to help

No problem. I understood where you were coming from.

 

[Deleted member 178]

@Umbra

So waaaayyyyyyyy before this whole WannaCry thing, you had already disabled all versions of SMB on your system(s) ?

Yes (i know, i know, i'm a genius , i have the Emperor Eye that predict the future )

 

[509322]

Yes (i know, i know, i'm a genius , i have the Emperor Eye that predict the future )

There is SMBv1, v2 and v3. Check it.

 

[Deleted member 178]

I know, but since there is no file & printing sharing allowed on the system, i won't care of their presence

"kill the soldier, you won't need to worry of his weapon "

 

[giulia]

hi
just because i don't where can i post it
seems that threre is a tool that can decrypt wannacry
Breaking: WannaCry has been decrypted, if you follow the rules @ AskWoody

 

[Parsh]

hi
just because i don't where can i post it
seems that threre is a tool that can decrypt wannacry
Breaking: WannaCry has been decrypted, if you follow the rules @ AskWoody

Yes, tools like WannaKey and WanaKiwi are out, but there are limitations as described in the link. Also, Qihoo 360 has released a tool for the decryption