Slashdot Mirror
New Phrack
Anonymous Coward writes "A new issue of the Phrack Magazine, #60 has been released today. It details some decent technique about kernel exploitation (OpenBSD), Cisco remote exploit, how to backdoor a core bzimage kernel and other stuff. The ascii based magazine is available at
phrack.org."
They stopped making their zine a long time ago... some of the ppl frmo F.U.C.K. formed www.attrition.org where you can find all the old copies of F.U.C.K.
unzip; strip; touch; finger; mount; fsck; more; yes; unmount; sleep
The gzipped tarball of Phrack #60 is available at http://www.phrack-dont-give-a-shit-about-dmca.org/ archives/phrack60.tar.gz
root@aio:~# nmap -sX -iR -p1- # Ho, ho, ho! Merry Xmas, everyone!
Because Slashdot is in fucking HTML you nimrod.
Saying Java is nice because it works on all OS's is like saying that anal sex is nice because it works on all genders.
After looking at Phrack #1 from 1985 I decided that I just have to run :_)
for i in `seq -w 1 60 | tac`; do wget http://www.phrack.org/archives/phrack$i.tar.gz; done
and spend this day on reading Phrack issues backwards. It's going to be a hellova nostalgic New Year for me...
root@aio:~# nmap -sX -iR -p1- # Ho, ho, ho! Merry Xmas, everyone!
Theres an article about hacking traffic lights. Do you think that now that the information is now open to a wide public, we will see traffic lights doing weird things?
I have never been a big fan of micheal, but if I he can bring some fresh air in to this stinkhole then more power to him. I've been reading slashdot for several years and I'm pretty damn sick of the endless stream of stories about DMCA, RIAA, MPAA, anything about MS that immediately has a score 5 comment about how unstable windows95 is, how some company in Canada that I've never heard of is doing a linux feasibilty study, a new 1000TB storage technology that will never hit the stores, etc etc. It's always a variation of some basic story that we've already heard a thousand times - the following discussion usually has NO variation. Everyone agrees Jack Valentini is an asshole, and about 50% of readers think MS can go to hell and the other 50% thinks they are just another big corp that sometimes does stuff we don't like but should be tolerated. Even "weird" is an improvement over the same old tired shit.
I remember back in the day, I was on an internship at a local comp-sci research center. Of course I was only given a lowly user account, actually even worse than that. Anyhow, I had fun exploring Solaris, creating a lot of core dmps mainly, and came about the new issue of phrack.
I had looked through a few issues before after reading about it in Bruce Sterling's "Hacker Crackdown". I had perused the all-time favorites: how to build a bomb, a gun, how to break into cars, and so on. Back then, phrack was already archieved on the www, but the newest issue was only available as tarball. After lunch break, the admin asked me if had been reading phrack, he refered to it as "hacker stuff"---yes, I said, annoyed about him snooping around.
But then I actually read the new issue.
There was an article in it about how to get root on a Solaris workstation, exploiting the availability of FORTH on Sparc machines.
I was sitting in front of a Solaris workstation.
I smiled.
I kept smiling.
Four days and a lot of experimentation later, the administrator found a new file in his personal TODO directory (yes, he had actually called it that). It read
*""""""""""""""""""*
[pHraCK]
MAYBE YOU SHOULD READ IT, TOO.
*""""""""""""""""""*
The link to the phrack article.
Imagine the Creator as a stand up commedian - and at once the world becomes explicable. -Mencken
Phrack is perhaps a good example of the line between black hat and white hat "hackers" being blurry. The articles are informative and well-written, and by intelligent people, not your typical 14 yr old cracker on ecstasy who launches DDOS attacks from haX0r'd machines. I've done a compilers course, but still found a lot to learn about compilers from a phrack article on buffer overflows. Also check out the essays at SANS .
I recall a story in an old 2600 about someone who managed to get caught hacking not traffic lights but those signs on freeways with giant LEDs telling people there is a traffic jam or whatever. Seems this guy changed the text to read "FUCK YOU ALL." Pretty funny, and relatively harmless, imho. But yeah it's not the same as messing with a traffic light, which could be really dangerous.
There is very little you can do with trafic lights. Most of them use physical relay lock outs to keep two of the signals going green in different directions at the same time. About all that could be done that could cause a problem is dropping the yellow time to close to zero but there should be a minium time for that as well. Other than that, you've got exactly the same risk as when the power goes out. Too bad in that case most people think they have the right of way on the main road and no company has been smart enough to put in some battery backed flashing LED's to hint to people that its tuned into a 4 way stop. Of course 99% of all intersections with traffic lights could be replaced with round-abouts and increase saftey but that won't ever happen.
What do you mean they don't make them like they used to?
Surprisingly enough, the textfile scene is quite alive!
Both www.textscene.com and scene.textfiles.com do what they can to stay on top of the newest tfiles.
stupid advertisement
www.angstmonster.org
While interesting, the article describes a vulnerability that already has been fixed.
A new issue of the Phrack Magazine, #60 has been released today
And the latest Computer Shopper is on the newstands. Just wanted to make sure no slashdotter let that one get by them.
license. When some people say "free" what they mean is without responsibility or repercussion. I believe in the gedanken that your right to swing your arms about ends at the tip of my nose.
Some people find this "restriction" intollerable. What's interesting is that these people often go on and on about their "rights" if you do anything to them.
Well, a good many of them grow out of that eventually, and the ones that don't we just call assholes.
Power always needs to be tempered with restraint, and the more power the more restraint.
As Ghandi once pointed out nonviolence is not weakness, indeed, the weak cannot be nonviolent. Only the strong, and only in proportion to their strength.
One can only be free in proportion to one's sense of responsibility.
Otherwise you're just some punk kid that a bunch of people with freedom are going to beat the crap out of in a back alley some day in the hopes that it'll jar something loose and you start to "get it."
KFG
this, IMHO, is the most valuable information in Phrack 60:
. html e r%201%20-%20Banned%20Edition.doc
Kevin Mitnick wrote a book, "The Art of Deception". The first chapter
has been deleted by the publisher at the last minute. It's available
on the internet:
http://www.wired.com/news/culture/0,1284,56187,00
http://littlegreenguy.fateback.com/chapter1/Chapt
[i linked this Phrack quote because Slash adds a space character to strings that wordwrap - can anyone tell me how to prevent this from happening?]