Another problem with this service: NetBIOS is notoriously insecure when it comes to passwords. I once forgot the password to a network share I had set up at home: in 10 minutes I had obtained a cracker which successfully refreshed my memory of the password (I won't provide the link here, but they're not hard to find if you look). Despite this hole, ShareSniffer has a right to maufacture their product, and I hope this serves as a warning to users as to the insecurity of NetBIOS. I know I'll be closing down my shares.

[ reply ]

Link to this comment: http://www.securityfocus.com/comments/articles/159/4770#4770