hacking at all time high

[Testin da Cable]

heh. register article here
evil script kiddies should be made to play Q3 on a 386 running NTserver as pennitance =P

 

[Durzel]

I wonder how much of this is attributable to autonomous scripts (ala Code Red worm, etc) and script kiddiez as opposed to what I would call real hacking - a genuine attempt by a single individual (or indeed group) to comprimise a clearly defined target.

I used to get portscans and various other exploit scans on my firewall at home on my cable modem. 99% of these could be put down to some fool blindly scanning entire IP ranges with "known" exploits that had been patched months ago. Very rarely did I find anyone actually specifically targeting my PC.

I've given up logging every single port scan, rpc.statd exploit sweep (a common favourite for script kiddiez), etc on the Linux servers here at work simply because the logfiles generated were immense. Nowadays I've got it set to log only repeated offenders, etc

 

[Mr_Horus]

Thats cos its prolly Data trying to annoy you

 

[Testin da Cable]

script kiddiots are all alike anal pain heh
imho, 99.repeater9 of the stuff you see/hear/read is done by some waste of carbon using something he/she doesn't even understand.

 

[Sir Frizz]

As the computer industry grows, so would the amount of everything associated with it like hacking because the number of people on computers would rise and the amount of people who are heckers would aswell(touch wood)

 

[stu]

grc.com has an interesting story about Steve Gibson's encounter with a 13 year old script kiddie. It's quite funny when Gibson reverse engineers the lad's bot and uses it to spy on him.

 

[Wazzerphuk]

TDC hacked his ISP today. He just told me.

 

[Wazzerphuk]

testin_da_cable (ICQ#123483611) Wrote:
lol uR a F3D trng 2 tr|cK m3H!!!!#23
I am 3733+ h4X0R!!!
u caNt c4+cH m#####33!!!1
I w|lL fIng3R uR p0rT!!!2

see?

 

[Testin da Cable]

AAAH IVE BEEN MADE!!!!221

 

[Will]

TDC - say it ain't so...

 

[Testin da Cable]

LIES!!

 

[Summo]

Can't dispute that evidence.

 

[Ch3tan]

Originally posted by Wazzerphuk
testin_da_cable (ICQ#123483611) Wrote:

I w|lL fIng3R uR p0rT!!!2

Id be very worried wazz

 

[Testin da Cable]

I will strike when he least expects it

 

[Wazzerphuk]

He's already found my pr0n (

 

[Testin da Cable]

and your mp3's
and your avi's
and that err 'other' stuff you kept in that hidden directory

 

[Wazzerphuk]

testin_da_cable (ICQ#123483611) Wrote:
nooo I only cyberterrorize money grubbing mega corps that squeeze the last droplet of hard earned dough out of their consumers in return for a measily ickle bit 'o bandwi....oh never mind






eeep

 

[Wazzerphuk]

mp3s aren't hard to find, there's over 2000 of the buggers in e:\mp3

 

[xane]

Like Durzel I get scanned by those "blind" probes far too often, but last night someone scanned me for the rpc.cmsd exploit for Sun/UNIX, although the firewall blocked it, unfortunately it was sufficient to knock me out of my online game

I got a full trace back, it looked like an ADSL line, and reported the details to the ISP. Being a fixed IP my evil mind is contemplating revenge

The ONLY way to deal with script kiddies is to get them reported, however, if the business of reporting every single attack is too much work, then use an automatic service.

http://www.mynetwatchman.com or http://www.dshield.org/ will give you a small client program that periodically processes and downloads your firewall log to their site where it is amalgamated into their database. This gives good analysis results, script kiddies will be easily spotted as the same IP will start to turn up at different places. They will do the business of reporting the attacks.

 

[Embattle]

The worse attack so far today acording to blackice is a subseven port probe...what ever that is

 

[stu]

camazotz: ADSL (at least the home version) isn't fixed IP, it's dynamic

Embattle: BlackICE is a really, REALLY shit Firewall. Don't take my word for it tho...

from grc.com

"And other firewalls such as BlackICE Defender, Conseal PC Firewall, and Lockdown 2000 were not even mentioned here because they offer NO PROTECTION and control against the very real threat represented by outbound Trojan, virus, and spyware communications. (LeakTest merrily communicates out through these firewalls without any trouble.)"

"As far as I could tell, BlackICE Defender had ABSOLUTELY NO EFFECT WHATSOEVER on the dialogs being held by the Zombies and Trojans running inside the poor "Sitting Duck" laptop. I knew that BlackICE Defender was a lame personal firewall, but this even surprised me.

The Zombie/Bot happily connected without a hitch to its IRC chat server to await further instructions. The Sub7 Trojan sent off its eMail containing the machine's IP and the port where it was listening. Then it connected and logged itself into the Sub7 IRC server, repeating the disclosure of the machine's IP address and awaiting port number. No alerts were raised, nothing was flashing in the system tray. The Trojans were not hampered and I received no indication that anything wrong or dangerous was going on.

I performed one final test: As I had with ZoneAlarm, I attempted to connect to the Sub7Server Trojan running inside the "Sitting Duck" machine on the IP and listening port number the Trojan was advertising all over the Internet . . . and it worked perfectly. I received Sub7's "PWD" prompt asking me to login."

 

[gremlin]

Originally posted by Stu-

Embattle: BlackICE is a really, REALLY shit Firewall. Don't take my word for it tho...

from grc.com
<random incessant alarmist crap removed>

And don't take Gibson's word for it either. He's a media-whoring, alarmist, hypemongering, headline-grabbing, techno-babbling, smug c*nt.

Oh, yes, BlackICE is poo

(Edit: amusing Gibson spoof).

 

[Testin da Cable]

Originally posted by gremlin

He's a media-whoring, alarmist, hypemongering, headline-grabbing, techno-babbling, smug c*nt.

but he also knows his stuff

 

[gremlin]

Originally posted by testin_da_cable
but he also knows his stuff

Yes, in the same way that the drunk irish guy sitting on the park bench with a can of special brew in his hand is completely and utterly convinced he knows everything about nuclear physics

 

[Testin da Cable]

heh cracking is easy
nuclear physics is hard [to spell]

 

[old.TUG]

TDC hacked into my peecee and installed netbus and elite

wot a wanker

 

[Testin da Cable]

heh stabbed in the back

 

[Embattle]

Yes I've read he reviews but I get pissed off with zonealarm always asking me to allow the same shit I've already ticked to allow always.

 

[Testin da Cable]

hmm I never had to do that Emb. Once was enough. Perhaps j00 have a h4X0r3d version that connects you to every bo network that ever was.

 

[Will]

What might also hamper the ability of the virus to spread is the relative unreliability of Microsoft web servers.

The Code Red virus lurks in the memory of a web server and is cleared when the computer is rebooted.

As Microsoft servers crash more often than many of their counterparts, this might limit the spread of the malicious code.

Taken from BBC News - everyone laugh at M$.