Hacking for Dummies

Rating:
Summary: 9/11 Commision Recommendation Primer
Review: For those interested in honing their skills or exploring a much needed skill set, Hacking for Dummies, by Kevin Beaver, is definitely a "must read". For the person interested in the world of "white hat", ethical hacking, Hacking for Dummies allows a good guy/gal to understand the mind set of the "bad" guy/gal from a perspective not explained as practically as is in this book. Anyone interested in facilitating our efforts with the war or terrorism by providing computer forensics assistance to the proposed CTU in the 9/11 Commision report should make Beaver's book a required part of their training arsenal.

Rating:
Summary: Hacking For Dummies
Review: I am a technology consultant, and this book is definitely a great resource for people like us. I'm thinking the book will help me develop some additional services that I can offer to my clients. For $25.00, that seemed like a bargain.



Rating:
Summary: Helpful for securing your systems
Review: I thought this book did a good job of explaining how hackers operate and what I can do to stop them. I also thought the case studies were very interesting.

Rating:
Summary: Good Place to Get Started
Review: I used to wonder why anyone would want to break into my computer, there's not much there of any interest. Even I don't find it all that interesting. Then one day I was puzzled when my ISP asked why my machine was putting out millions of bytes of stuff to the point where it was bogging down their T1 line. I didn't know. We unpluged the machine from the network and it stopped sending. We plugged it back in and it wasn't sending. But the next day it was.

It wasn't until we got an e-mail telling us to stop sending out copyrighted movies that we realized what had happened. It wasn't anything in my computer they wanted, it was the bandwidth. Knowing what to look for it wasn't all that hard to stop. Google quickly provided links on this problem.

This book is aimed at people just like me. It gives an overall, if fairly light, view of the overall security problem. Like the other For Dummies books it has a writing style that doesn't (quite) put you to sleep. It has enough humor to enable you to get through it. It won't make you an expert, but it will point out the problem areas so that you can go deeper into those that are important to you. It's a good introduction.

Rating:
Summary: Excellent introduction to hacking for beginners
Review: The media often mistakenly characterize hackers as bored technical geniuses. In truth, most hackers, as the media use the term, are not geniuses; they are simply adept at downloading hacking tools that do all of the dirty work for them. These so-called script kiddies often do not know what they are doing until the damage is done.

From the perspective of the victimized company, however, it's not really important who is doing the attacking; all that matters is how organizations can protect themselves from myriad attacks and tools. Hacking for Dummies is written on the premise that to catch a hacker, you have to think and behave like one. This is a well-written and engrossing book that helps the reader understand how hackers compromise computer systems and networks. Its clear, easy-to-read style won't intimidate readers unfamiliar with abstruse security terms and concepts.

The 19 chapters progress from the basics of security to the hardening of an operating system and the hacking of Web applications. While the reader is not expected to have a deep technical background, the book does go into some detail, as it must to provide a hands-on approach. For a high-level theoretical approach to network defense, look elsewhere. This is a down-and-dirty tool for ensuring that the organization's systems and network are secure.




Rating:
Summary: Excellent Book and Great Primer for Hacking Exposed
Review: There is certainly no shortage of books in this genre- Counter Hack, Hack Attacks Revealed and the best-selling Hacking Exposed (and all of its spin-offs) have covered this information in grueling detail. What sets this book apart is that it does not assume you are already a CISSP or network security guru. Being a "For Dummies" book means that it is written from the assumption that you don't know anything and the information is written in plain English and in terms that even a child could often understand.

One of things that makes "For Dummies" books like this one great is the use of humor and icons to help lighten the information while also pointing out the key points and highlighting the "need to know" information. Hacking For Dummies walks the reader through basic computer and network security and progresses through various topics of hacking such as hacking applications or hacking various operating systems.

Anyone interested in this topic, but especially those who are new to the world of computer and network security, should read this book. It is great on its own, but also provides an excellent foundation for someone interested in proceeding to more detailed works such as Hacking Exposed.

Tony Bradley is a consultant and writer with a focus on network security, antivirus and incident response. He is the About.com Guide for Internet / Network Security (http://netsecurity.about.com), providing a broad range of information security tips, advice, reviews and information. Tony also contributes frequently to other industry publications. For a complete list of his freelance contributions you can visit Essential Computer Security (http://www.tonybradley.com)

Rating:
Summary: Very Limited
Review: This book should be titled "penetration testing" with the subtitle "without any actual information on how to go about penetration testing, per se".

There are two schools of thought about disseminating detailed information on exploiting security vulnerabilities (that "it's a necessary evil" and "it's immoral"). So, the author is in good company to be in the later group.

Only, why then WRITE A BOOK entitled "Hacking"? The title seems close to fraudulent to me. Anyone hoping to find out how to crack from this book is going to be sorely disappointed. For example, while password cracking is passably well-covered, there isn't even a mention of how crackers get their hands on password files. The author spends only two paragraphs and a few bullets on rootkits--treating them like viruses or worms--despite the fact that they are critical cracker tools. There is a lot of discussion of portscanning without any discussion of how to penetrate the systems you've scanned.

So, you say, "Who cares about would-be criminals!?" Ok, but this book is not going to provide much real value to would-be white-hats either. You will find very little concrete advice on penetrating client systems from this book. However, the book does have quite a bit of advice and a number of tips about setting-up the gig (e.g., "Agree in writing"), general issues (e.g., "Don't test production systems during business hours."), and how to write the report (e.g., "prioritize vulnerabilities").

Actual admins will find very, very little of value. The "Plugging security holes" chapter is only five pages long! The tips sprinkled around are often poor or abstract (or common sense). The book provides little information on how attacks will occur. And it's quite marginal in describing the hacker psyche.

The book is full of links to software. But then so is Google and this book won't help much in choosing between most of them (i.e., my favorite tools were barely mentioned :).

I did (finally) identify a group who might benefit from this book: people who HIRE penetration testers--by educating you about how the process works. (Without giving away any of the trade secrets that might allow you to be self-sufficient!) It might also be a broad (shallow) introduction for the complete novice to security in abstract.