soledad penadés
repeat 4[fd 100 rt 90]

Archive for the ‘hacking’ Category

20061013 How about a nice game of chess?

War games

Warning: if you haven't seem this movie don't keep reading - lots of spoilers below!

Don't remember how, but I ended up in the page of the manufacturers of the computer which Mathew Broderick used on the mighty War Games, called IMSAI 8080. That page has plenty of trivia and funny facts about the equipment, specially the tricks they did for making the computers stand out more - like adding more leds and indicators (obviously useless), or how did they cheat to make the computer type a complete sentence instead of having to type it by themselves each time (if you pay attention you realise they never mispell a single letter while typing in the movie, and there's a lot of typing in that non-mouses movie!).

So I decided that it was time to revisit one of my child classics. If I recall properly is almost 20 years since I saw the movie so there are lots of details that I missed or forgot. But when watching it again - oh now I understand how I ended up studying Computer Science! that big 8" floppy disk, the synthetiser, all the BIG switches there, and the "Yeah whenever I build I system, I always leave a backdoor". It was so suggestive even then, when I didn't understand the whole meaning of things and didn't know almost nothing of english… Now it has been quite interesting since an important joke was lost in the spanish translation, and it is the name of the super computer. What in spanish was simply W,O,P,R, in the english version is pronounced quite similarly to whopper, which is quite funny.
I remember it was also when I started to learn some programming, with LOGO. I used to write programs which output a "Logon:" (even if I didn't know what it meant) and just didn't work until we entered "Joshua". All with that green screen computer… aaah, those were the times, deffinitely…

It was very funny because my school mates were worrying about He-Man and Barbies and I was trying to figure out how to do the kind of pixelated abstract graphics which used to accompany every computer magazine article. But my most important worry was: if we built programs with Logo, and Logo was built with CP/M, which tool was used for creating CP/M?

That was also the time that I learnt how to play chess, so it was all like a converging movie. As I saw later, it had impacted more people than what I thought: first day in the uni, first lecturer's warning: "this is not a war games school - we do not teach how to hack here". You can't imagine our sadness faces…!

WOPR

The WOPR - aka the Whopper!

20061012 I deffinitely rule

I received one of those stupid lastminute emails in the new address that I tried to enter even if the system didn't allow me to do that.

So that it means that it worked.

I am so good! - yeah, I'm not even going to wait for your appreciation, thanks anyway.

Update:

Oh-my-god, I'm still laughing out loud x'D X'D =))

Why? I just received this email:

[...]

We are currently retained to find one/two Web Developers for a leading North American Technology company.  (Full time / permanent)

This leading ASP hosts and supports store fronts for large corporations including British Airways, Comet and lastminute.com.  The company also has partnerships with companies such as ebay.
[...]

I wonder if they would accept a couple of suggestions… x'D HA HA HA!

20051202 somebody is trying to hack your site while you're sleeping

I have been finding LOTS of hacking attempts on several sites I manage. Each time I look at the server error log I can find entries like these ones:

[Tue Nov 29 00:47:32 2005] [error] [client 209.128.104.183] File does not exist: C:/Webroot/xmlrpc
[Tue Nov 29 00:47:37 2005] [error] [client 209.128.104.183] File does not exist: C:/Webroot/xmlsrv
[Tue Nov 29 00:47:43 2005] [error] [client 209.128.104.183] File does not exist: C:/Webroot/services
[Tue Nov 29 00:47:48 2005] [error] [client 209.128.104.183] File does not exist: C:/Webroot/blog
[Tue Nov 29 00:47:53 2005] [error] [client 209.128.104.183] File does not exist: C:/Webroot/drupal
[Tue Nov 29 00:47:58 2005] [error] [client 209.128.104.183] File does not exist: C:/Webroot/community
[Tue Nov 29 00:48:03 2005] [error] [client 209.128.104.183] File does not exist: C:/Webroot/blogs
[Tue Nov 29 00:48:08 2005] [error] [client 209.128.104.183] File does not exist: C:/Webroot/blogs
[Tue Nov 29 00:48:14 2005] [error] [client 209.128.104.183] File does not exist: C:/Webroot/blog
[Tue Nov 29 00:48:19 2005] [error] [client 209.128.104.183] File does not exist: C:/Webroot/blogtest
[Tue Nov 29 00:48:24 2005] [error] [client 209.128.104.183] File does not exist: C:/Webroot/b2
[Tue Nov 29 00:48:29 2005] [error] [client 209.128.104.183] File does not exist: C:/Webroot/b2evo
[Tue Nov 29 00:48:34 2005] [error] [client 209.128.104.183] File does not exist: C:/Webroot/wordpress
[Tue Nov 29 00:48:39 2005] [error] [client 209.128.104.183] File does not exist: C:/Webroot/phpgroupware

I presume that the purpose of these little lamer script kiddies-hackers wannabe is to be able to enter a site through one of the xml-rpc interfaces that many web applications make available to be able to interact with other applications (via pings and so on), and then put an stupid message like "7H15 5173 |-|/\5 b€€|/| D3F/\C3D" (aka "This site has been defaced").

Well, guys, that's simply silly. Why don't you try and learn how to code something useful instead of using pre-made scripts to hack a site, or even better, stick your finger where you know and never put it out again!

And by the way, can somebody explain me if it corresponds to a new zombie-machines-exploiter virus? or is it just a brigade of bored teenagers?

20050116 5170 intrussions

It's incredible. I have just set up a w2k box, plus a firewall to stop stupid people with their infected computers to annoy me. In just few hours I have had more than 5000 tries to connect my computer through well known ports like 445, 5000, etc.
Looking at the firewall log, it can be clearly seen that almost all the intrussion attempts come from this very subnetwork (eresmas… aka wanadoo… aka uni2), thus generating a great amount of unuseful network traffic. Maybe the ISP's should block or filter somehow this kind of packets.
Well, I know it could imply an attack against each client privacy - I never allowed my isp to read the packets my computer sends. But in any case, and as far as I can remember from my studies… it is possible for a tcp implementation to know to which port is destinated a packet, without reading the packet contents (that is what should considered as a privacy intrussion), and then filter it - that's how firewalls work, roughly… So maybe it could be possible to build an ISP software filter that detects when a user/computer throws packets addressed to the same port to entire ip ranges and then block subsequent accesses once reached a given number or something like that.
Maybe the spanish information techonologies lawyers should focus their efforts into this kind of crime and not the peer to peer (p2p) and other type of themes which are much more sensationalist and spectacular. But that do not hurt as they told us.