Saddam's Inbox Hacked

MotorMachineMercenar writes "Wired News is reporting that Saddam Hussein's email account (press@uruklink.net) has been hacked into. The account had a five-letter login with the same password. Messages in his inbox sent from all over the world included everything from death threats to business propositions to offers to sell him WMDs. A choice quote from the article: 'One AOL user sent Saddam a one-word message: 'Imminent.' Attached to the Aug. 6 e-mail was a photograph of an atomic mushroom cloud.' I wonder what the login was." You'd think it was "press," password "press," but if it were that obvious I think someone would have said so.

Comments

Re:All Saddam's email are belong to us!

[Lemmy Caution]

I can't stand Bush, but Bush is no Saddam. Saddam is a murderous thug, a gangster whose gang controls a country. It's as if Tony Soprano ran a country, but with fewer moral qualms. I don't think the US should be rattling its sabres and I don't think another war is warranted, but Saddam is still an asshole of the widest caliber.

That said, Iraq is probably the only Arab country where women can wear whatever they want, fully participate in political life (well, to the same limited, oppressed amount the men can, anyway) and have full legal equality in both professional and personal domains. It's better to be a woman in Iraq than to be one in Saudi Arabia, or Kuwait, or even Egypt. To some extent, that's due to the nature of the Baath party's platform, and also to the fact that Saddam is a very secular thug.

Re:All Saddam's email are belong to us!

[Hard_Code]

Not to argue with your conclusion, but:

doesn't gas its own citizens

Oh really?

US germ war tests on civilians

Tuskegee syphilis experiment
more

US eugenics program
more

Intentional radiation of civilians during nuclear testing
more

Gulf War Syndrome, which was at first completely ignored and lied about, and finally recently acknowledged (although we still don't know what it is, nor do we know whether the government really knows or not - there have been accusations of experiments on our own soldiers).

not to mention:

Genocide of indigenous peoples as official policy
by the way, this shit was [is?] still going on in uncomfortably recent history still going on:

Article II of the Genocide Convention also expressly prohibits
involuntary sterilization as means of "preventing births among" a
targeted population. Yet, in 1976, it was conceded by the
U.S. government that its ÒIndian Health ServiceÓ (IHS), then a
subpart of the Bureau of Indian Affairs (BIA), was even then
conducting a secret program of involuntary sterilization which had
affected approximately forty percent of all Indian women of
childbearing age. The program was allegedly discontinued, and the IHS
was transferred to the Public Health Service, but no one was
punished. Hence, business as usual has continued in the ÒhealthÓ
sphere: 1990, for example, it came out that the IHS was inoculating
Inuit children in Alaska with Hepatitis-B vaccine. The vaccine had
already been banned by the World Health Organization as having a
demonstrated correlation with the HIV-virus which is itself correlated
to AIDS. As this is being written, a Òfield testÓ of Hepatitis-A
vaccine, also HIV-correlated, is being conducted on Indian
reservations in the northern Plains region.

Supposedly, Himmler kept a framed photograph of a Native American, as a reminder of the splendid example the United States provided.

The list goes on and on. Sure, Saddam may be a war criminal. But our own history is not so rosy...in fact it is pretty fucking disgusting and we need to wake up to that fact. We don't have the moral highground we profess to have. In fact Iraq's entire history pales in comparison to the atrocities that have been committed in the names of US citizens. This doesn't make either right. It makes both wrong.

No more hacking Saddam's inbox?

[Jouster]

So, rather than actually shutting down the ports in question, they just turn off DNS resolution for webmail.uruklink.net. Of course, their NS entries still exist, and a quick subnet scan on port 8383 (nice of them to choose an odd port number, wasn't it?) reveals that adding

62.32.60.16 webmail.uruklink.net

to your /etc/hosts (or C:\windows\system32\drivers\etc\hosts for us Windows users) quite nicely lets us into the webmail system.

Alas, the user/pass is not "press"/"press", nor a mispelled "sadam"/"sadam". Ah, well.

Jouster

Re:No more hacking Saddam's inbox?

[Jouster]

And for those who care...

# nmap -vv -P0 -O -p 25,110,8383,8389 62.32.60.16 #webmail.uruklink.net

Starting nmap V. 2.54BETA31 ( www.insecure.org/nmap/ )
No tcp,udp, or ICMP scantype specified, assuming vanilla tcp connect() scan. Use -sP if you really don't want to portscan (and just want to see what hosts are up).
Host (62.32.60.16) appears to be up ... good.
Initiating Connect() Scan against (62.32.60.16)
Adding open port 25/tcp
Adding open port 8383/tcp
Adding open port 110/tcp
The Connect() Scan took 12 seconds to scan 4 ports.
Warning: OS detection will be MUCH less reliable because we did not find at least 1 open and 1 closed TCP port
For OSScan assuming that port 25 is open and port 33201 is closed and neither are firewalled
For OSScan assuming that port 25 is open and port 39570 is closed and neither are firewalled
For OSScan assuming that port 25 is open and port 39827 is closed and neither are firewalled
Interesting ports on (62.32.60.16):
Port State Service
25/tcp open smtp
110/tcp open pop-3
8383/tcp open unknown
8389/tcp filtered unknown

No OS matches for host (test conditions non-ideal).
TCP/IP fingerprint:
SInfo(V=2.54BETA31%P=i386-redhat-lin ux-gnu%D=10/28 %Time=3DBD8674%O=25%C=-1)
TSeq(Class=TR%TS=0)
T1 (Resp=Y%DF=Y%W=564%ACK=S++%Flags=AS%Ops=MNNT)
T2( Resp=N)
T3(Resp=N)
T4(Resp=N)
T5(Resp=N)
T6(Re sp=N)
T7(Resp=N)
PU(Resp=N)

TCP Sequence Prediction: Class=truly random
Difficulty=9999999 (Good luck!)
TCP ISN Seq. Numbers: 5E47AE5C A0B64F86 4F9BF508 BFC8A529 A3713D10 9EA869AA
IPID Sequence Generation: Busy server or unknown class

Nmap run completed -- 1 IP address (1 host up) scanned in 94 seconds

Jouster