[Fwd: Re: Re: The Athens Afair: extremely off]

[Christos Ricudis]

-------- Original Message --------
Subject: Re:  Re: The Athens Afair: extremely off
Date: Tue, 3 Jul 2007 13:09:41 +0300
From: agiox at freemail.gr (AlxUnder)
Reply-To: agiox at freemail.gr
To: ricudis at komodino.itc.auth.gr
References: <4689F952.3080901 at komodino.itc.auth.gr>


Dimitrios P. Bouras wrote:
> The Athens Affair 
> By Vassilis Prevelakis and Diomidis Spinellis 
> > How some extremely smart hackers pulled off the most 
> audacious cell-network break-in ever: 
> > http://www.spectrum.ieee.org/jul07/5280 
> Eksairetika endiaferon ar8raki, grammeno gia ton poly kosmo, apo dyo 
> kataksiwmenous episthmones poy gnwrizoun ti grafoun kai prosexoun pws to 
> grafoun - se anti8esh me tous dhmosiografous pou den kanoun tipote apo ta dyo.
> Periexei merikes endiaferouses texnikes plhrofories. 8a eixe endiaferon na to 
> sxoliasei kapoios pou gnwrizei to software tou AXE.

Genika ayta poy grafontai sto ar9ro isxyoyn. Gia leptomerh elegxo 9a prepei
na diabasw pio prosektika to ar9ro, pragma poy den einai ths stigmhs. Merikes
parathrhseis:

- Gia kapoio atomo poy exei doylepsei gia to s/w toy AXE kai exei apokthsei
mia kapoia empeiria ths domhs twn s/w blocks (ennow toy poio kanei ti kai me
poia alla epikoinwnei), den einai idiaitera dyskolo na kanei ayta poy leei to
ar9ro. Pollh apo th doyleia poy ginetai etsi ki alliws jekinaei me th
diadikasia twn patches (perigrafetai sto ar9ro) gia na dokimastei, alla kai
san grhgorh lysh, prin perasei sthn epomenh ekdosh. Sth dior9wsh problhmatwn
to hacking einai o kanonas. H prosbash kai xrhsh ergaleiwn (compilers, CASE,
  klp.) ths Ericsson, alla kai eggrafwn ths Ericsson  *isws* na einai o
perioristikos paragontas-- analogws toy poso eykolo einai na ta brei kapoio
trito atomo ejw.

- *An* 9ymamai kala, apo palia yphrxe sto AXE h dynatothta Remote Maintenance.
Thn energopoieis mia fora se ena kentro kai meta toy kaneis updates klp. apo
opoy kai an eisai ('h sxedon). Oi diadikasies asfaleias parakamptontai an eisai
kai leitoyrgeis mesa apo to systhma. Analogws twn elegxwn poy ginontai, polles
fores arkei na leitoyrghseis mono mia fora mesa apo to systhma (ennow to systhma
synthrhshs ths Vodafone, poy einai asxeto toy AXE). De 9ymamai an ginetai oi
enhmerwseis na phgainoyn aytomata apo kentro se kentro (an kai ayto einai kako,
an 9ymh9ei kaneis to blackout ths At&T sthn anatolikh akth twn HPA).

- Ta s/w blocks poy exoyn na kanoyn me th nomimh parakoloy8hsh yparxoyn apo to
1996 peripoy kai isxyoyn kai gia periagwgh- mporeis na kaneis to gyro toy kosmoy
milwntas sto thlefwno (milame gia mia megaaalh syndialejh), na allajeis
dekades diktya kai oi parakoloy9oyntes na mh xasoyn stigmh apo th synomilia.

-To ar9ro, alla poly perissotero to sidebar (poy grafhke apo alloys), jexnane
merika pragmata:
1. H Ericsson exei arketa kentra anaptyjhs s/w ston kosmo, metajy allwn stis
HPA (htan megalo, den jerw twra), sthn India (poly kai fthno erg. dynamiko),
Italia, klp. To arxiko s/w ths parakoloy9hshs poy anefera parapanw eixe
anaptyx9ei sthn Elbetia. H Intracom exei edw kai xronia arketa ligoteres
doyleies se sxesh me ta xronia '90- '95, kyriws logw periptwsewn fthnoterwn
xwrwn (India), an kai einai f9hnoterh se sxesh me tis perissoteres eyrwpa'i'kes
xwres.

2. Edw kai kamposa xronia, den yparxei idiaiterh sxesh Intracom- Vodafone, apo
otan h Intracom poylhse to meridio ths sth Vodafone. Stelexh kai ypallhloi
exoyn metakinh9ei apo th mia sthn allh, kyriws prin kamposa xronia. Ypo9etw
oti kai twra, mesa sta fysiologika plaisia tha agoras, atoma allazoyn etairia.

3. To kentro yparxei sthn Paiania giati ta etairika kinhta ths Intracom htan
Vodafone, opote logw kinhshs boleye na yparxei sta9mos bashs ekei. Thn
oysiastikh ey9ynh to kentroy thn exei h Vodafone. Kai h ALPHA Bank exei ATM
stis egkatastaseis ths Intracom, alla h  ALPHA einai ypey9nh gi' ayta, oxi h
Intracom.

4. Epishs kaneis den anefere an yphrxan texnikoi ypallhloi (kai oxi p.x.
fylakes 'h ka9aristries) ths Intracom poy eixan dikaiwmata prosbashs sto
sta9mo bashs. Ayto einai shmantiko. An yphrxan, ereynh9hkan; Ti bre9hke;

4. Oi sxeseis OTE- Intracom htan apo xronia tetamenes (apo otan anelabe o
Voyrloymhs, epi Simith). Den eixe nohma opoiadhpote parakoloy9hsh to 2004,
akoma kai oi promh9eies gia toys Olympiakoys agwnes eixan ginei poly kairo prin.
Kai me tis plagies epafes poy isxyoyn sthn Ellada se oloys toys tomeis, den
nomizw na exei nohma h parakoloy9hsh genikws. O,ti 9elei kaneis to ma9ainei
plagiws.

   H *proswpikh* moy apopsh einai oti nai men opws lei sto telos toy ar9roy den
mporeis/ prepei na ka9istas ypey9ynh mia etairia gia tis ypoklopes poy eginan,
alla sth sygkekrimenh periptwsh pisteyw oti h Vodafone eftaige *oxi* epeidh
synebhsan oi ypoklopes, alla giati apo o,ti katalaba *epithdes* esbhse/
afairese stoixeia poy 9a boh9oysan sth lysh ths ypo9eshs, epithdes
apenergopoihse ta enoxa s/w blocks, oysiastika eidopoiwntas emmesa toys
"korioys" na sbhsoyn ta ixnh toys. Oi kinhseis aytes, *kata th
gnwmh moy*, den htan kinhseis panikoy, alla kala melethmenes linhseis gia
aposobhsh ey9ynwn.
    Epishs den akoloy9hse tis diadikaies poy orizei o nomos (p.x.
enhmerwsh ADAE), tis parekampse kai prospa9hse na apofygei to olo zhthma
akoloy9wntas thn (ellhnikh) plagia politikh odo, profanws  elpizontas na th
glitwsei. H epeidiktikh arnhsh synergasias me thn ADAE epishs  deixnei pros ta
ekei. Oyte kai h katastrofh twn logs, paroti nomotyph, deixnei kalopisth
symperifora.
   Epishs, h Ericsson paradidei (apo o,ti 9ymamai) katalogo me to ti periexetai
stis ekdoseis s/w poy dinei stoys pelates ths. Nomizw oti enas typikos elegxos,
mono kai mono gia na dei kaneis ti pairnei kai ti plhrwnei einai epibeblhmenos.

   Telos, na shmeiwsw oti mexri kai to Septembrio toy 2005 hmoyn ypallhlos sthn
Intracom (oxi sto AXE)-- twra den exw kanenos eidoys ejarthsh apo thn
etairia, oikonomikh  'h allh. Epishs me to Diomhdh hmoyna gia kati mhnes mazi
sto Naytiko (einai akoma sthn linux-greek-users, nomizw, gia soy Diomhdh!),
alla oyte kai apo ayton exw kamia ejarthsh !-).

Oyf!

AlxUnder
----
"Aahh, you seek meaning. Then listen to the music, not the song."
     Ambassador Kosh Naranek


-- 
Christos Ricudis				ricudis at itc.auth.gr
Systems Administrator				+30-2310-998656
IT Support Center
Aristotle University of Thessaloniki, GREECE