Slashdot Mirror
The Reverse Challenge: Winners Announced
asqui writes: "The Reverse Challenge was a contest from The Honeynet Project to essentially reverse engineer a binary captured in the wild running on a compromised honeypot. The contest ran during May of this year and the submissions have been judged and the winners announced. Dion Mendel took first place with 43.4 points out of a possible 50. The binary turned out to be a tool for performing remote DoS attacks from compromised hosts, with its instructions being cunningly supplied via the lesser known IP protocol 11. This binary is currently being used in the wild but there is little reported activity, probably because sysadmins are focused on the other more dominant protocols."
You have just caused an evil-grin to appear on the faces of many trojan writers. They now have another 'cunning' trick to add to their arsenal.
A samrt Sysadmin knows to check slashdot.org once per day to see what irreposnible hints you are giving to script kiddies..
Of course without these slashdot.org posts I would be out of a job..so I guess hey bring on more slashdot.org posts!
Don't Tread on OpenSource
The Art of Licking Butt
I lick girls' rumps. I like to lick girls' rumps. Girls like to have their rumps licked. Most girls won't admit they've had their rump licked, let alone enjoyed having their rump licked. But believe you me, if you lick a girl's rump, she'll love you for life. In fact, that was my high school yearbook quote.
My conviction to "slurping the brown pucker" doesn't stem from some traumatic experience I encountered during my anal stage of Freudian development. I mean, sure mommy dearest used to administer the "Burning Knitting Needle Catheter Punishment" when I would accidentally "makey poo-poo in me diap-diaps," but I knew that mommy dearest's austere methods of discipline were only an expression of her unconditional maternal love. No, my affinity for heiney hole spelunking was motivated and fostered by my anatomical, not psychological, irregularities.
You see, I have a small penis.
Forget about the penile deficiency that cruelly yet so naturally accompanies the average Anglo-Saxon male, it's much worse than that. For instance, after a cold shower I look like a seven year old. Girl. I often wish I were hung like a black guy. No, not from a poplar tree. I mean "hung" in terms of having a penis the size of an enraged Ugandan spitting cobra and testicles that resemble an immigrant Italian mother's Christmas dinner meatballs.
"What fuck wrong you? That where poop come from!"
So, long before I convinced that first girl (without the use of Thunderbird wine or a cast-iron mallet) that I wasn't so repulsive when compared to Rocky Dennis of Mask fame, I knew I would have to go the extra mile down Aretha (Urethra) Franklin's "Freeway of Love." Yes, I would have to go down like ValuJet.
On one of my first G-spot mining expeditions I struck climactic gold. While I observed a slight twitching as my tongue found my attractive victim's tinkle hole (as it is technically known), I noticed an almost epileptic reaction when I accidentally lapped her greasy donut. From that moment on, my cheese curl of a penis was not an issue, for I had found a way to fill the void, and it was by filling the void with my tongue. Black hole tongue won't you come?
After a cold shower I look like a seven year old. Girl.
When I divulge to other guys that I French kiss the devil's onion ring, their reaction is usually, "What fuck wrong you? That where poop come from!" First I ask them why they're talking like Cro-Magnon men, then I explain that there is a significant difference between a female's buttocks and the buttocks of her male counterparts. A guy's ass is a fecal cavern of pooplagtites and pooplagmites formed when ass broth continuously smothers and cakes sweaty mounds of bung fur. Dung dreadlocks if you will. In other words, it would be comparable to making out with a pet store's garbage can in mid-July. In contrast, it is imperative that a female maintain a high level of rectal cleanliness to safeguard her vagina from infection. In general, girls' sphincters are cleaner than boys' mouths. But let me warn you perspective stool munchers. Excremation point! On one occasion, I looked like I had just eaten a Snickers bar. They have peanuts in them, you know.
In general, performing analingus will prove to be a pleasurable experience for both you and your female companion. So don't kiss your girlfriend's ass, eat it. If you want her as a soul mate, be an ass soul mate. Because much like this article, true love is tongue and cheek.
Swoop down on your head they shall. Look out, there is no time for you to run. Not that it would matter. They are fast. And fly through walls. You will be subverted and will follow their philosophies as they are your own. Thanks a lot governor.
Barred gates enclosing the compound. Monkeyus fall around me. I sip on a drink, then throw it at the bossman. Fuck that. AAAaaa. Time to axboodle the norlombard. P'neesnash.
Please see subject line. I win. All praise to your deity of personal choice.
I've been reading this site for the last few years. In the last few days, I realized that I only read it out of habit, and I've been frantically trying to find any reason to continue reading. I want some reason to justify my behaviour all this time -- something to prove that I haven't been wasting my time. I've found no reason. It seems to me that all the technically capable people have long ago left or stopped posting, and all that remain are a bunch of dumb-ass losers with no real skills or insight.
The stories where never the reason to read this site -- CmdrTaco and the rest are not stupid, but they are pretty damned smug, not nearly as smart as they think they are, and simply don't have anything very interesting to say. Their stories were interesting only as long as they were able to generate interesting replies. They no longer do. I don't know if SlashDot has simply imploded on its own popularity, or if abuses of the Moderation system have driven off the sensible posters, or if my own standards have changed. But I do know I'm no longer interested in reading anything on this site.
See you all on the dark side.
What a fabulous troll your post was.... or how fabulously stupid you are. It's impossible to tell.
OSDN | Our Network | Newsletters | Advertise | Shop Slashdot All OSDN Sites freshmeat Linux.com LinuxGram NewsForge OSDN.com Slashcode SourceForge.net X
:)
:)
/etc/protocols . The protocol specification is in the header of the 20 byte beginning part of the IPv4 datagram. It's a 8 bit field.
/etc/protocols* What the hell is protocol 11?
/etc/protocols for mysterious acronyms.
...for saving the honeypot, your own poohbear doll
... with the pleasing side-effect of triggering a mouseover color change for over half the text in the opening paragraph when rendered with Mozilla.
:11
/. effect..... Do I win?
/*
...
The Reverse Challenge: Winners Announced | Log in/Create an Account | Top | 85 comments | Search Discussion
Threshold: -1: 85 comments 0: 68 comments 1: 46 comments 2: 19 comments 3: 11 comments 4: 5 comments 5: 2 comments Flat Nested No Comments Threaded Oldest First Newest First Highest Scores First Oldest First (Ignore Threads) Newest First (Ignore Threads)
The Fine Print: The following comments are owned by whoever posted them. We are not responsible for them in any way.
About the binary (Score:5, Informative)
by eaglesnax on Monday July 08, @12:13AM (#3839660)
(User #238705 Info)
I participated in the contest, and to answer a few questions:
1) Protocol 11 is used in this tool simply as a messaging protocol. No attempt was made by the author to adhere to the published NVP RFC. The author simply sticks 11 in the protocol field of the IP header. Think of each packet as a UDP packet, no handshake, etc...
2) Protocol 11 is not used to perform any of the DoS attacks. The attacks are fairly standard DoS attacks like TCP SYN, and ICMP echo floods.
3) Protocol 11 get through many firewalls because sysadmins only set up rules to block unwanted TCP, UDP, and ICMP packets.
4) Single incoming protocol 11 packets are used to trigger compromised hosts to perform selected DoS attacks
I hope that helps
Chris
[ Reply to This | Parent ]
Re:About the binary by pmineiro (Score:1) Monday July 08, @01:39AM
Oh c'mon... (Score:4, Informative)
by stirfry714 on Sunday July 07, @10:53PM (#3839358)
(User #410701 Info)
In response to the people criticizing the information about the protocol used...
Now someone can't even mention general characteristics of a hack without being criticized for giving information to "script kiddies" or "trojan writers"?
We know that security through obscurity is a poor excuse. I'd rather have this stuff out in the open so I and others can deal with it, than have it known only to a few...
[ Reply to This | Parent ]
Fascinating (Score:3, Informative)
by SpatchMonkey (what's that?) on Sunday July 07, @10:43PM (#3839322)
(User #300000 Info)
This really is fascinating stuff. Note that most of the entrants used the disassembler known as IDA, available here [datarescue.com]. There was also much discussion of this contest recently on various security-related mailing lists. [securityfocus.com]
Hopefully they will be doing a similar contest again next year. In the meantime, I guess we'll just have the Scan of the Month to analyse.
[ Reply to This | Parent ]
I should have asked before the contest but (Score:3, Funny)
by jsse on Sunday July 07, @10:50PM (#3839347)
(User #254124 Info | http://slashdot.org/ | Last Journal: Wednesday May 22, @09:55AM)
How can we tell if some of the contestants were not the same group of persons using that binary?
If this was the case then reverse engineering it might be pretty straight forward.
Just wonder, not accusation made.
[ Reply to This | Parent ]
Re:I should have asked before the contest but by alphaCoward (Score:1) Monday July 08, @01:23AM
Protocol 11 information (Score:3, Informative)
by lingqi on Sunday July 07, @10:56PM (#3839383)
(User #577227 Info)
P. 11 is RFC 741 - NVP (network voice protocol)
look at it here [networksorcery.com].
[ Reply to This | Parent ]
Re:Protocol 11 information Sunday July 07, @11:07PM
Re:Protocol 11 information Sunday July 07, @11:17PM
Re:Protocol 11 information Monday July 08, @12:24AM
Re:Protocol 11 information by ctar (Score:1) Monday July 08, @12:40AM
Explanation of "Protocol 11" (Score:3, Informative)
by josh crawley on Sunday July 07, @11:27PM (#3839516)
(User #537561 Info)
Well, what I've pulled from websites and the RFC:
1:It's a protocol. In IP speak, It's under the same secion that TCP(6), UDP(17), ICMP(1), and others fit under. On unix boxen, it can be found in
2: It was created specifically for voice transfers, along with "telephone emulation" (just the way you interface with the tele). I believe that many, if not all, webphones use this IP protocol. I also think that GSM and US telephones(that use IP networks) use this protocol to transfer voice data.
Some were asking how this could flood your system.... Well, what's the difference TCP and UDP? Or how about ping floods??? Well, it's all data being sent to you. Doesnt matter what 8 bit field is switched... It's still garbage data (if you didnt request it). It fills up your receving connection.
Hopefully I've explained what this is. I'll probably be modded redundant as somebody probably wrote a better "explanation" while I wrote mine. Oh well.
[ Reply to This | Parent ]
Re:Explanation of "Protocol 11" by Frater 219 (Score:2) Monday July 08, @12:21AM
Re:Explanation of "Protocol 11" by jareds (Score:2) Monday July 08, @12:21AM
Re:Explanation of "Protocol 11" by meanman (Score:1) Monday July 08, @12:13AM
this one goes to eleven (Score:2)
by Dr. Awktagon on Sunday July 07, @10:50PM (#3839348)
(User #233360 Info | http://slashdot.org/)
*checks
Do routers even route protocol 11? Would it make it to its DoS destination? Interesting. Per usual slashdot behaviour, I haven't read the articles yet, but I hope they discuss this a little more.
Hmm.......
[ Reply to This | Parent ]
Re:this one goes to eleven by maunleon (Score:3) Sunday July 07, @11:16PM
Re:this one goes to eleven by MavEtJu (Score:3) Monday July 08, @12:34AM
Re:this one goes to eleven by Anonymous Coward (Score:1) Sunday July 07, @11:23PM
Forgive my naiveness but (Score:2)
by jsse on Sunday July 07, @10:58PM (#3839388)
(User #254124 Info | http://slashdot.org/ | Last Journal: Wednesday May 22, @09:55AM)
What is the use of protocol 11?
Would it be harmful if I just block it off?
How may I do the blocking with ipchains and iptables?
Thanks
[ Reply to This | Parent ]
Re:Forgive my naiveness but (Score:4, Informative)
by elandal on Sunday July 07, @11:47PM (#3839585)
(User #9242 Info | http://slashdot.org/)
It's Network Voice Protocol, and it's safe to block unless You use it (and You should know if You do).
I have default DENY, and specific ACCEPT rules. As everything I do ACCEPT contains a protocol, this means that unknown protocols are denied. For as long as You run only IPv4, no multicast, and so on (like most people do - although IPv6 is gaining), You only need icmp, igmp, tcp, and udp. Read
If You default to ACCEPT, or have very broad ACCEPT rules based on just eg. the IP addresses, You can, with ipchains, deny as follows:
ipchains -A input -j DENY -p nvp
Not tested, but should work.
[ Reply to This | Parent ]
Re:Forgive my naiveness but by Craig Davison (Score:1) Monday July 08, @12:08AM
Re:Forgive my naiveness but by catbutt (Score:1) Monday July 08, @01:42AM
ObSpinalTapRef (Score:2)
by tswinzig on Sunday July 07, @11:16PM (#3839484)
(User #210999 Info | http://teddy-swinzig.com/)
"This protocol goes to eleven."
[ Reply to This | Parent ]
achtung! (Score:1)
by eyegor on Sunday July 07, @10:42PM (#3839316)
(User #148503 Info)
Quickly!!! Arrest the winners!!! They have obviously violated the DMCA!!!
[ Reply to This | Parent ]
Re:achtung! by Anonymous Coward (Score:1) Monday July 08, @12:01AM
MmmmmMMm (Score:1)
by Eidolon909 on Sunday July 07, @10:42PM (#3839317)
(User #589869 Info)
I have a cunning plan, Lord Blackadder.
[ Reply to This | Parent ]
the prize... (Score:1)
by skydude_20 on Sunday July 07, @10:42PM (#3839319)
(User #307538 Info)
[ Reply to This | Parent ]
Re:the prize... Sunday July 07, @11:01PM
Bad joke (Score:1)
by KlippoKlondike on Sunday July 07, @10:50PM (#3839350)
(User #558812 Info)
Actually, the winner cheated. They used a 2. Oh man, i kill myself.
[ Reply to This | Parent ]
Reverse-Engineering Their HTML (Score:1)
by great throwdini on Sunday July 07, @10:52PM (#3839354)
(User #118430 Info)
The results link posted above (http://project.honeynet.org/reverse/results/) is wonderfully tortured HTML
Hey, I found it interesting...
[ Reply to This | Parent ]
Re:Reverse-Engineering Their HTML by Com2Kid (Score:1) Sunday July 07, @11:01PM
Re:Reverse-Engineering Their HTML Sunday July 07, @11:04PM
Re:Reverse-Engineering Their HTML by neuroticia (Score:1) Monday July 08, @01:45AM
Re:Reverse-Engineering Their HTML Sunday July 07, @11:43PM
Forgive my naiveness but (Score:1)
by jsse on Sunday July 07, @10:53PM (#3839357)
(User #254124 Info | http://slashdot.org/ | Last Journal: Wednesday May 22, @09:55AM)
What does protocol do? Would it be harmful if I block it off?
How may I do that with ipchains and iptables?
[ Reply to This | Parent ]
Re:Forgive my naiveness but (Score:5, Informative)
by GigsVT on Sunday July 07, @10:58PM (#3839393)
(User #208848 Info | Last Journal: Sunday July 07, @08:25PM)
"Network Voice Protocol"
Your guess is as good as mine, as usual, someone who had no previous clus about nvp will google it and make a +5 informative post, so just wait for that.
As far as blocking it in ipchains,
-A input -s 0/0 -d 0/0 -p 11 -j DROP
[ Reply to This | Parent ]
Re:Forgive my naiveness but by jsse (Score:1) Sunday July 07, @11:01PM
Re:Forgive my naiveness but (Score:4, Informative)
by mamba-mamba on Sunday July 07, @11:51PM (#3839593)
(User #445365 Info)
I suggest you read the info on the pages referenced in the top-level post. Here is an excerpt.
Detection
=========
Any network traffic using an unusual protocol should be suspect. This tool
uses protocol 11, but could easily be recompiled to use another protocol.
As protocol 11 is not currently used, any network traffic using this
protocol should be assumed to be communication between handlers and agents
of this tool. The signature for detecting agent / handler communication
was described in the previous section.
Note that the source address of a packet from handler -> agent should not
be assumed to be the actual address of the handler. The source address in
the IP header is most likely to be spoofed. Similarly, data from agent ->
handler is often faked to increase the difficulty of tracing the attacker's
whereabouts.
To hide from casual detection, the agent changes its process name to
[mingetty].
This is the standard getty for RedHat, and Slackware versions pre 7.0.
To detect a running agent on a system, netstat can be used to determine
if any processes are using protocol 11. The following command and
response shows a running agent process.
# netstat -pan | grep raw | grep
raw 0 0 0.0.0.0:11 0.0.0.0:* 7 5226/[mingetty]
If found, all instances of mingetty should be killed (to ensure that
children are caught as well). This will kill valid mingetty processes
as well, but they will be respawned by the init process.
# ps ax | grep mingetty | grep -v grep | awk '{print $1}' | xargs kill -9
The system should immediately be taken off the network and analysed to
determine how the attacker gained root access.
I don't believe it would do you any harm to block protocol 11. I would recommend that you block all protocols except for udp, icmp, and tcp, while you are at it. In fact, you can probably allow TCP and UDP only if you are a home user. I would just allow ICMP for the hell of it. Just set up a default incoming policy for all packets of "DROP," then accept all TCP packets, or all TCP packets meeting certain criteria, as desired. iptables allows you to specify protocols by number or name in a rule, using the "-p" parameter.
You should be able to block everything except TCP with something like:
iptables -F INPUT
iptables -P INPUT DROP
iptables -A INPUT -p TCP -j ACCEPT
if you also want to accept UDP (you do), then add this:
iptables -A INPUT -p UDP -j ACCEPT
for ICMP:
iptables -A INPUT -p ICMP -j ACCEPT
Note that ping, and a variety of other things, use ICMP, so I reccommend that you enable it.
Proper firewall configuration is a complex topic (and I'm not an expert at it). What I have posted above is not intended to create a safe firewall. I am hoping that you can figure the rest out yourself, or modify the above to suit your needs.
I have to run, so good luck.
MM
--
[ Reply to This | Parent ]
Re:Forgive my naiveness but by CoolVibe (Score:2) Monday July 08, @12:35AM
Re:Forgive my naiveness but by SpatchMonkey (Score:1) Sunday July 07, @11:07PM
Re:Forgive my naiveness but by SpatchMonkey (Score:2) Sunday July 07, @11:10PM
Re:Forgive my naiveness but by Meowing (Score:1) Monday July 08, @01:50AM
Re:Forgive my naiveness but by maunleon (Score:1) Sunday July 07, @11:20PM
Re:Forgive my naiveness but by maunleon (Score:1) Sunday July 07, @11:22PM
Re:Forgive my naiveness but Sunday July 07, @10:55PM
Interesting summary (Score:1)
by Anonymous Coward on Sunday July 07, @11:15PM (#3839480)
From the bonus questions [honeynet.org]:
Summary
The program was written in 2000, being inspired by the media attention of the trinoo and TFN DDOS tools. The programmer is most likely young with limited personal resources. The programmer has a low skill level and resorts to the "cut and paste" style of programming. The programmer possibly resides in Europe and socialises with other blackhat style programmers. The programmer is male, overweight and has no social life other than his computer. He wears glasses and was bullied throughout school. He uses computers as a way of getting back at the world which has maligned him. You decide where reality steps aside and Hollywood takes over.
[ Reply to This | Parent ]
Re:Interesting summary Sunday July 07, @11:42PM
Arg... (Score:1)
by Peridriga on Sunday July 07, @11:35PM (#3839539)
(User #308995 Info)
Oh The Irony Of It All
tool for performing remote DoS attacks
[ Reply to This | Parent ]
Re:Arg... by damiam (Score:2) Sunday July 07, @11:45PM
Is it really NVP? (Score:1)
by maunleon on Sunday July 07, @11:42PM (#3839566)
(User #172815 Info)
So here's my question... since everybody is calling this protocol NVP..
Most machines are not configured to handle NVP. Windows, I don't even know if it has such support. So why did the writer choose NVP? Who is listening to it?
Or is it more correct to say that the writer simply happened to tag his IP packets with #11 as the protocol, which just HAPPENS to be NVP? His implementation may really have nothing to do with NVP except that it uses the same protocol #.
Of course, the source has been DoSed (or slashdotted, however you want to put it) so I can't really look at it.
[ Reply to This | Parent ]
Re:Is it really NVP? by mamba-mamba (Score:1) Sunday July 07, @11:58PM
Re:Is it really NVP? by Anonymous Coward (Score:1) Monday July 08, @12:06AM
$28,000 (Score:1)
by tek_hed on Monday July 08, @01:40AM (#3839924)
(User #123623 Info | http://slashdot.org/ | Last Journal: Saturday February 02, @08:10PM)
From the results page [honeynet.org]:
The cost to contract out this analysis would most likely run at least $350 a hour. At that rate, the average cost for analyzing this binary would have been $28,000.
This must be good news for the participants, not to mention the winners!
[ Reply to This | Parent ]
d'oh! (Score:0, Troll)
by Jucius Maximus (j13moh@nOsPAm.netscape.net) on Sunday July 07, @10:41PM (#3839307)
(User #229128 Info | http://slashdot.org/ | Last Journal: Saturday July 06, @04:34PM)
"The binary turned out to be a tool for performing remote DoS attacks from compromised hosts, with its instructions being cunningly supplied via the lesser known IP protocol 11."
You have just caused an evil-grin to appear on the faces of many trojan writers. They now have another 'cunning' trick to add to their arsenal.
[ Reply to This | Parent ]
Re:d'oh! by Anonymous Coward (Score:-1) Monday July 08, @12:26AM
I am a big fat dumb idiot. (Score:0)
by Anonymous Coward on Sunday July 07, @10:43PM (#3839323)
I don't understand. What is IP protocol 11?
[ Reply to This | Parent ]
a smart Sysadmin (Score:0, Troll)
by linuxislandsucks on Sunday July 07, @10:45PM (#3839333)
(User #461335 Info | http://www.diaries.com/ShareMe/)
A samrt Sysadmin knows to check slashdot.org once per day to see what irreposnible hints you are giving to script kiddies..
Of course without these slashdot.org posts I would be out of a job..so I guess hey bring on more slashdot.org posts!
[ Reply to This | Parent ]
tnemmoC esreveR (Score:0)
by Smelly Jeffrey on Sunday July 07, @10:50PM (#3839349)
(User #583520 Info)
!skcor todhsalS !tsetnoC esreveR eht si ti esuaceb esrever ni tnemmoc a gnivael ma I
[ Reply to This | Parent ]
Re:tnemmoC esreveR by Anonymous Coward (Score:-1) Sunday July 07, @11:17PM
Re:tnemmoC esreveR by Anonymous Coward (Score:-1) Sunday July 07, @11:24PM
Need help! (Score:0, Offtopic)
by ObviousGuy (ObviousGuy@hotmail.com) on Sunday July 07, @10:53PM (#3839359)
(User #578567 Info | Last Journal: Monday June 10, @01:15AM)
Pooh has got his head stuck in the honeypot!
[ Reply to This | Parent ]
Re:Need help! Sunday July 07, @11:07PM
This has been annoying the hell out of me (Score:0)
by Anonymous Coward on Sunday July 07, @11:03PM (#3839424)
This is great. From the source:
* dns queries:
* SOA queries for
* com
* net
* de malformed packet
* edu
* org
* usc.edu
All of these dumbass machines (mostly in Australia) kept hitting my primaries with questions for those! I couldn't figure it out, and no amount of searching on Usenet turned up any help. Now at least I know it's due to some idiot worm drilling me.
Now I get to convert my IP addresses to hex and see what else is up there in that table. Blah.
Feb 22 09:16:46 dns1 named[58]: denied query from [203.134.113.201].4763 for "usc.edu" IN
Did anyone else see this?
[ Reply to This | Parent ]
Here's the RFC straight from the horse's mouth. (Score:0)
by tim0thy on Sunday July 07, @11:10PM (#3839459)
(User #585890 Info)
http://www.ietf.org/rfc/rfc741.txt [ietf.org]
[ Reply to This | Parent ]
Usefulness of NVM/Port 11 (Score:0)
by tim0thy on Sunday July 07, @11:13PM (#3839473)
(User #585890 Info)
The important design objectives of the Network Voice Protocol (NVP) are:
- Recovery of loss of any message without catastrophic effects. Therefore all answers have to be unambiguous, in the sense that it must be clear to which inquiry a reply refers.
- Design such that no system can tie up the resources of another system unnecessarily.
- Avoidance of end-to-end retransmission.
- Separation of control signals from data traffic.
- Separation of vocoding-dependent parts from vocoding-independent parts.
- Adaptation to the dynamic network performance.
- Optimal performance, i.e. guaranteed required bandwidth, and minimized maximum delay.
- Independence from lower level protocols.
[ Reply to This | Parent ]
What the Fuck? (Score:0, Troll)
by You'reAFuckingMoron on Sunday July 07, @11:25PM (#3839514)
(User #587707 Info)
I've been reading this site for the last few years. In the last few days, I realized that I only read it out of habit, and I've been frantically trying to find any reason to continue reading. I want some reason to justify my behaviour all this time -- something to prove that I haven't been wasting my time. I've found no reason. It seems to me that all the technically capable people have long ago left or stopped posting, and all that remain are a bunch of dumb-ass losers with no real skills or insight.
The stories where never the reason to read this site -- CmdrTaco and the rest are not stupid, but they are pretty damned smug, not nearly as smart as they think they are, and simply don't have anything very interesting to say. Their stories were interesting only as long as they were able to generate interesting replies. They no longer do. I don't know if SlashDot has simply imploded on its own popularity, or if abuses of the Moderation system have driven off the sensible posters, or if my own standards have changed. But I do know I'm no longer interested in reading anything on this site.
See you all on the dark side.
[ Reply to This | Parent ]
Re:What the Fuck? Sunday July 07, @11:34PM
A comparison and notes on moderation Monday July 08, @01:08AM
On Trolls by Anonymous Coward (Score:-1) Sunday July 07, @11:33PM
FROST DDOSED PIST (Score:0)
by Anonymous Coward on Monday July 08, @12:42AM (#3839750)
Haha suck it trolls I 0wn you I got the frosty DDOS pist or for you nonl33t trolls and mods, the first DDOS post! haha who 0wnz j00? I 0wnz j00!
[ Reply to This | Parent ]
An ipchains question (Score:0)
by Anonymous Coward on Monday July 08, @01:47AM (#3839952)
I start out with
echo " Deny and Reject Everything"
ipchains -P input DENY
ipchains -P output REJECT
ipchains -P forward REJECT
Will the above block out all protocols or do I have to DENY them one at a time.
[ Reply to This | Parent ]
First musical post! (Score:-1)
by Mr F J Musical-Troll on Sunday July 07, @10:39PM (#3839297)
(User #582606 Info)
Another first post, another song [hypermart.net].
[ Reply to This | Parent ]
I PLEDGE ALLEGIANCE TO YOUR FP by L.Torvalds (Score:-1) Sunday July 07, @10:40PM
Re:I PLEDGE ALLEGIANCE TO YOUR FP by Big_Ass_Spork (Score:-1) Sunday July 07, @10:45PM
Ahhhh!!! by Anonymous Coward (Score:-1) Sunday July 07, @11:10PM
IAWTP by Big_Ass_Spork (Score:-1) Sunday July 07, @11:53PM
I did salvia by YourMissionForToday (Score:-1) Monday July 08, @12:17AM
Re:I PLEDGE ALLEGIANCE TO YOUR FP by Anonymous Coward (Score:-1) Sunday July 07, @11:19PM
Giant Flaming Pigeons!! by Anonymous Coward (Score:-1) Sunday July 07, @11:05PM
Re:First musical post! by Anonymous Coward (Score:-1) Sunday July 07, @11:21PM
Re:First musical post! by Mr F J Musical-Troll (Score:-1) Sunday July 07, @11:24PM
Jerry Was A Race Car Driver (Score:-1)
by The Lyrics Guy on Sunday July 07, @10:42PM (#3839315)
(User #539223 Info)
Primus - Jerry Was A Race Car Driver
Jerry was a race car driver
And he drove so goddamned fast
He never did win no checkered flag
But he never did come in last
Jerry was a race car driver
He'd say "El solo number one"
With a bocephus sticker
On his 442 he'd light 'em up
Just for fun
Captain Pierce was a fireman
Richmond engine #3
I'll be a wealthy man when I get
A dime for all the things that
Man taught to me
Captain Pierce was a strong man
Strong as any man alive
It stuck in his craw that they
Made him retire at the age of 65
Jerry was a race car driver
22 years old
Had too many cold beers one night
And wrapped himself around a telephone pole.
[ Reply to This | Parent ]
Analingus (Score:-1, Troll)
by Anonymous Coward on Sunday July 07, @10:53PM (#3839367)
The Art of Licking Butt
I lick girls' rumps. I like to lick girls' rumps. Girls like to have their rumps licked. Most girls won't admit they've had their rump licked, let alone enjoyed having their rump licked. But believe you me, if you lick a girl's rump, she'll love you for life. In fact, that was my high school yearbook quote.
My conviction to "slurping the brown pucker" doesn't stem from some traumatic experience I encountered during my anal stage of Freudian development. I mean, sure mommy dearest used to administer the "Burning Knitting Needle Catheter Punishment" when I would accidentally "makey poo-poo in me diap-diaps," but I knew that mommy dearest's austere methods of discipline were only an expression of her unconditional maternal love. No, my affinity for heiney hole spelunking was motivated and fostered by my anatomical, not psychological, irregularities.
You see, I have a small penis.
Forget about the penile deficiency that cruelly yet so naturally accompanies the average Anglo-Saxon male, it's much worse than that. For instance, after a cold shower I look like a seven year old. Girl. I often wish I were hung like a black guy. No, not from a poplar tree. I mean "hung" in terms of having a penis the size of an enraged Ugandan spitting cobra and testicles that resemble an immigrant Italian mother's Christmas dinner meatballs.
"What fuck wrong you? That where poop come from!"
So, long before I convinced that first girl (without the use of Thunderbird wine or a cast-iron mallet) that I wasn't so repulsive when compared to Rocky Dennis of Mask fame, I knew I would have to go the extra mile down Aretha (Urethra) Franklin's "Freeway of Love." Yes, I would have to go down like ValuJet.
On one of my first G-spot mining expeditions I struck climactic gold. While I observed a slight twitching as my tongue found my attractive victim's tinkle hole (as it is technically known), I noticed an almost epileptic reaction when I accidentally lapped her greasy donut. From that moment on, my cheese curl of a penis was not an issue, for I had found a way to fill the void, and it was by filling the void with my tongue. Black hole tongue won't you come?
After a cold shower I look like a seven year old. Girl.
When I divulge to other guys that I French kiss the devil's onion ring, their reaction is usually, "What fuck wrong you? That where poop come from!" First I ask them why they're talking like Cro-Magnon men, then I explain that there is a significant difference between a female's buttocks and the buttocks of her male counterparts. A guy's ass is a fecal cavern of pooplagtites and pooplagmites formed when ass broth continuously smothers and cakes sweaty mounds of bung fur. Dung dreadlocks if you will. In other words, it would be comparable to making out with a pet store's garbage can in mid-July. In contrast, it is imperative that a female maintain a high level of rectal cleanliness to safeguard her vagina from infection. In general, girls' sphincters are cleaner than boys' mouths. But let me warn you perspective stool munchers. Excremation point! On one occasion, I looked like I had just eaten a Snickers bar. They have peanuts in them, you know.
In general, performing analingus will prove to be a pleasurable experience for both you and your female companion. So don't kiss your girlfriend's ass, eat it. If you want her as a soul mate, be an ass soul mate. Because much like this article, true love is tongue and cheek.
[ Reply to This | Parent ]
I have the first post assgoblins. (Score:-1, Troll)
by Anonymous Coward on Sunday July 07, @11:15PM (#3839481)
Please see subject line. I win. All praise to your deity of personal choice.
[ Reply to This | Parent ]
Appendix: A portion of a book, for which nobody yet has discovered any use.
All trademarks and copyrights on this page are owned by their respective owners. Comments are owned by the Poster. The Rest © 1997-2002 OSDN.
[ home | awards | contribute story | older articles | OSDN | advertise | self serve ad system | about | terms of service | privacy | faq ]
There is one problem with your statement. That problem is that, unfortunately, while it might sound vaguely accurate, it is actually dangerous, silly and presents a lack of understanding about networking.
What you are referring to as "protocol 11" should more properly be referred to as "port 11". Ports are numbered from 0 to 65535. All TCP and UDP connections take place over a port. For instance, web servers, which provide HTTP (a TCP protocol) provide their connections on port 80. So a web browser that wants to request information from a web server contacts it on TCP port 80. Now, if that same web server was an email server, it would handle SMTP on TCP port 25. If it was a DNS server, it would respond to queries on UDP port 53. (It might also respond to queries via TCP on port 53). As far as is practicable, TCP and UDP ports are kept in sync.
It might help to think of TCP as FM Radio, and UDP as AM Radio. The port designation is analagous to selecting a station (99.5 or 105.3) on the radio.
So, in fact, the firewall rules that you provide are absolutely worthless as they allow all traffic in no matter what port it comes in on.
In the interest of being complete, I should mention that ICMP doesn't use ports. It has a roughly analagous feature called types.
You might want to search for, read, and understand some basic networking information before you post any more "security advice".