"Hacking", nomoi kai alla

[Alexios Chouchoulas]

On Fri, 19 Jun 1998, Fotopoulos Ilias wrote:

[ Peri "social engineering", argh poso m'eknevrizei aftos o "oros" ]

> Dystyxws elaxistoi apo toys xrhstes exoyn thn aparaithth
> ekpaideysh/enhmerwsh,

  Ki omws, to prwto pragma pou grafei s'oles sxedon tis symbaseis einai kati
san: Oros 0: O Xrhsths tha krathsei to synthima tou aporrhto. Den tha to
grapsei se efkola anagnwsimh morfh, den tha to metabibasei se tritous
epoudeni, den tha epileksei synthima pou einai efkolo na brethei, klp klp.

  Einai to PRWTO pragma pou mathaineis. An pas na kaneis mathima Unix kapou,
otan sou dwsoun to logariasmo sou, to PRWTO pragma pou tha sou mathoun kata
pasa pithanothta einai pws na allazeis to synthima sou kai na dialegeis
kainourio kai pws na mhn to dineis se kanenan gia kanena logo.

  Fysika lusers yparxoun panta. Axem, exw kanei ki egw social engineering,
alla gia kalo skopo ("espaga" to systhma sto opoio douleva -- meta apo mia
epithesh kai email s'olo ton kosmo gia to social engineering, thelame na
doume an ta diabasan kai ta katalaban. Kammia elpida. Lusers can't read).


> Meta, to briskw ligo mikropsixo na odhgh8ei mia ypo8esh "hackin'" sta
> dikasthria. Wraia, ekane zhmia, prepei na plhrwsei as poyme, alla oyk an
> labeis para toy mh exontos.

  Eksartatai apo to ti "zhmia" ekane. An mphke sto site enos panepisthmiou
kai ekane overwrite olous tous diskous grafontas "perierga" jpeg sta raw
sectors, tote nomizeis oti tha ton afhsoun? To thema den einai an mporei na
plhrwsei h oxi. Den pas ton cracker sto dikasthrio gia na plhrwsei, alla ws
paradeigma pros apofygh. Yparxei kai poinh fylakishs, oxi mono prostimo kai
plhrwmh twn zhmiwn (ta eksoda olikou downtime twn file servers merikwn
ekatontadwn GB einai teratwdh).

    To allo site PANTA krataei logs. To allo site PANTA mporei na se piasei. 
    Yparxei allhlegkyh metaksy administrators. An broun ena allo site ap'to
    opoio perases, tha ta broun ola.

  H parapanw zhmia (format se diskous organismou) den einai asteio pragma.
Mikropsyxia einai na kaneis kati tetoio ex'arxhs. Ti kerdises? Eisai pio
eksypnos? Oxi, apla ksereis na xrhsimopoieis exploits pou brhkan alloi.


> Giati? Den mporw na katalabw giati na ginei
> kati tetoio, kai efoson o admin gnorizei poios einai, egw 8a protina na
> ton parei ena thlefono na pane gia kafe kai na ta poyne...

  Afto eksartatai apo ton admin kai ton cracker. Kai th zhmia. An o typos
aplws perase apo to systhma ws root, paei kala. An perase gia na
katastrepsei, proswpika tha ton epairna thlefwno kai tha milousa stous
goneis tou gia th nomothesia. META tha phgaina gia kafe mazi tou (fysika me
to aparaithto LART).


> Oson afora thn zhmia, re paidia yparxoyn kai ta backups, oso gamatoi
> admins kai na eimaste isws na arostisoyme mia mera kai na mas 3efygei
> kati, opote ta backups einai ypoxrewsh mas.

  Estw to parapanw panepisthmio me peri ta 500G xwrhtikothta, h perissoterh
kateilhmmenh. Ta backups kostizoun peri tis 75.000 drx ana Gb. Dhladh polla
lefta. Par'ola afta, kapoios kanei backups kathimerina. To problhma den
einai to backup. PREPEI na kratas backups, einai ypoxrewtiko kai krisimo.

  To problhma einai kati pou oi perissoteroi sygxronoi xrhstes agnooun
teleiws: to downtime. O xronos ston opoio to systhma den leitourgei, einai
AKRIBOS. Se mia trapeza einai apistefta akribos. S'ena panepisthmio einai
kalytera, alla kai pali panakribos. Mexri na epanaferthei enas kai mono
diskos twn (eikasia) 9G apo DAT, to downtime exei efksithei para poly. H
diataraksh ths omalhs leitourgias olou tou organismou (pou sto katw katw
eksartatai apo tous ypologistes tou) tha exei kostisei sourealistika posa.


> Epeita, eipo8ikan kapoia pragmata gia parakoloy8hsh kai logs. Oloi 3eroyme
> oti ta logs kataskeyazontai, mporw na ftia3w oti logs moy zhth8oyne (me
> thn analogh amoibh bebaia :-p). H parakoloy8hsh omos, apo texniko h mh,
> einai aparadekth!

  Logs yparxoun panta, kai poly leptomerh fysika (pisw sto paradeigma tou
tmhmatos, ena split site me kammia 200ria peers kai kammia 10ria megalous
{file,name,*} servers exei anagkh poly prosektika trabhgmena kai organwmena
logs. Afta peri parakolouthishs einai teleiws paranoid (me thn agglikh
ennoia ths lekshs). Akoma kai s'ena mikro systhmataki me 30 xrhstes on-line,
o ogkos plhroforias pou prepei na koitaksei kapoios olh mera an einai na
parakolouthei tous xrhstes einai TERATWDHS. An thymamai kala, eixa prin apo
xronia ypologisei ligo (teleiws aftaireta) kati san 60M gia 10 dial-in
grammes olh mera.


> Parabiazei katafora ta dikaiomata mas.

  Akribws, kai to site exei anagkh na threi th dikh tou plevra tou
symbolaiou me to xrhsth gia na einai kalymeno nomika.


> 3erw oti einai pagia politikh olwn twn megalwn ellhnikwn ISP na sniffaroyn
> toys ppp users toys kai ayto einai teliws aparadekto!

  E? Yparxoun apodeikseis gi'afto? Gia *olous*??? Giati den tous exete
bgalei sth fora?


> Proteinw loipon se oloys mas na afierwsoyme ligo xrono kai na diabazoyme
> to 1984 toy orwell. Kai na skeftoyme ayta poy grafei, egw prosopika pantws
> den 8a h8ela na exw "ena megalo aderfo" kai etsi apofeygw na to paizw ki
> egw megalos aderfos.

  To 1984 einai h mia akrh. H allh einai systhmata xwris synthimata me
devices/arxeia globally readable/writable ap'olous. Kai afto einai eksisou
dystopiko oso kai o Megalos Aderfos.

  Xrysh tomh kanenas?


> PS: an kapoios endiaferetai to ti shmainei hacker, an 8elei mporei na
> episkeftei to http://www.hack.gr/server/

  Fobamai na paw ekei. Na antiproteinw ta:

\begin{itemize}
	\item      http://www.ccil.org/jargon
	\item      http://www.ccil.org/~esr/faqs/hacker-howto.html
	\item      http://www.ccil.org/~esr/hacker-hist.html
\end{itemize}
\end{document}

% gamwto, to'ksera oti to technical writing tha empaine kai sthn fysiologikh
% zwh mou. Argh!!!


A.

-------------------------- ,o88,o888o,,o888o. --------------------------------
Alexios Chouchoulas         '88    ,88'   ,88'   http://www.vennea.demon.co.uk 
The Unpronounceable One    ,o88oooo88ooooo88oo,     alexios at vennea.demon.co.uk

--
====================================================================
Gia boithia (h na diagrafhte) e-mail sto majordomo at argos.hol.gr
Ta archives tis listas einai sto http://www.argos.hol.gr/lists :
prin steilete kapoia erothsh psakte mipos exei hdh apanththei.
Gia opoiodipote problima stilte e-mail ston owner-linux-greek-users
====================================================================