Slashdot Mirror


Nmap Featured in The Matrix Reloaded

rajiv was among dozens to report that unlike most "Hacks" in film, The Matrix reloaded actually has an ounce of reality where other films would rely on fancy 3D graphics. You can see more at Insecure.org where they have screenshots. It's only on screen for a split second, but Tritnity uses Nmap to find a vulnerable SSH server, and then exploits it using the SSH1 CRC32 exploit from 2001.

33 of 574 comments (clear)

  1. Uhm... by Anonymous Coward · · Score: 5, Funny

    In response to :-

    > The Matrix reloaded actually has an ounce of
    > reality where other films would rely on fancy
    > 3D graphics.

    So in several hundred years time people STILL won't have patched their bloody SSH holes?

    Yah actually I guess that is reality ;o)

    AL

    1. Re:Uhm... by marx · · Score: 5, Informative
      So in several hundred years time people STILL won't have patched their bloody SSH holes?
      Inside the Matrix it's present time, and the exploit was launched against a standard power plant computer, not against a Matrix computer.

      So it's accurate.

    2. Re:Uhm... by soulsteal · · Score: 4, Informative

      While you're correct in saying that mission-critical private servers don't belong on public networks, look at the circumstances:

      She's IN the power plant.
      She's running the attack on a PRIVATE IP address.

      Personally, I think she wasn't on "teh Intarweb!!1"

    3. Re:Uhm... by The+Only+Druid · · Score: 4, Interesting

      Exactly.

      The only other alternatives I can think of at the moment are:
      1: Neo's power, unbeknownst to him, actually extends to distorting the real world, not just the matrix. This seems implausible and undesireably theological.
      2: Neo's power extends to controlling the machines somehow in or outside of the matrix. This could be a result of the machines' conception of Neo always including his matrix-bending powers. In other words, this would be a programming flaw in the machines. This seems a little lame.
      3: The ENTIRE "real world", including Zion, is inside the matrix. Just as the oracle seems to be part of a control scheme, so is the supposed ability to leave the matrix. I like this explanation, although its a bit dark for most people: it would be a serious philosophical blow to Morpheus, of course.

      --
      "Stumble before you crawl"
    4. Re:Uhm... by Nathaniel · · Score: 4, Funny
      "Yes this is all assuming that there isn't a meta-matrix in which the matrix is run. It seems pretty obvious to me that that is what the last scene was trying to portray in a subtle way.

      And if there is a meta-matrix, what prevents having a meta-meta-matrix and so on? Its really impossible to speculate the age of the matrix based on this information."

      Yeah, so there's a meta matrix, and Neo has woken up in that outer world, which explains the coma.

      Right, whatever.

      So I expect the third movie will go something like this: Neo realizes he is in the meta matrix, and begins to wonder if there is a meta meta matrix. He tries to wake up from that matrix, by hitting something to see if it also feels 'wrong'. Repeat this a few times, and Neo is just diving out windows each time he 'wakes up', until at the end of the third movie we see some pimple-faced kid take a dive out a high-rise apartment complex, and the movie ends with a news crew interviewing neighbors, who blame teen suicide on these new immersive video games.

  2. And there was much rejoicing.. by Trevalyx · · Score: 5, Interesting

    When I went to the 1AM showing on release night, there were a lot of interesting people.. When it got to the hacking scene, only a few people cheered, however, they did it with enough vigor that everyone else was caught of guard.. And when I tried to explain to the guy nibbling his foot next to me, "Nmap," I just got a blank stare...

  3. zero-day warez screenshots? by Speare · · Score: 5, Interesting

    Where did the nmap folks get all these screenshots of a movie that's ostensibly fresh-in-theaters? And why oh why did they name their sources? I'm imagining Agent Smith from the MPAA will be giving out a few cease and desist visits soon.

    --
    [ .sig file not found ]
    1. Re:zero-day warez screenshots? by ThePatrioticFuck · · Score: 5, Interesting

      If you read the article @ Insecure, the guy says when he heard it was in the movie, he asked if anybody could send him some screen captures and ended up being flooded with pics, video, etc. And mentions he found it strange that many of them showed Windows Media Player in the capture :) TPF

  4. No IPv6 huh? by hillct · · Score: 5, Funny

    Severla hundred years in the future and still, IPv6 hasn't been adopted. Personally, I'm not suprised. It'll take an act of god to get it deployed.

    --CTH

    --

    --Got Lists? | Top 95 Star Wars Line
    1. Re:No IPv6 huh? by Waffle+Iron · · Score: 5, Funny

      Even if everyone on Earth were ready to migrate to IPv6, it still wouldn't happen. As we found out in Independence Day, IPv4 is an entrenched *intergalactic* standard. There are just too many star systems involved to be able to roll out this upgrade in the forseeable future.

    2. Re:No IPv6 huh? by markov_chain · · Score: 5, Funny

      Recall the first Matrix, where Agent Smith rants about the humans' deficiencies, and mentions the failure of an early beta version of the Matrix. It failed because they made the simulation too good, and people were missing all the pain and suffering.

      So they put IPv4 back in.

      --
      Tsunami -- You can't bring a good wave down!
    3. Re:No IPv6 huh? by Goalie_Ca · · Score: 4, Funny

      What are aliens supposed to do without their evil bit?

      --

      ----
      Go canucks, habs, and sens!
  5. Private Network! by Anonymous Coward · · Score: 4, Informative

    Now we know that we cannot hack into the Matrix from our Personal Computer:

    As you can see on the screenshot, the IP is 10.2.2.2, which is on the 10.0.0.0/255.0.0.0 network reserved for private usage.

    It's impossible to reach such an IP directly (without hacking their server / router / firewall first) from an arbitrary point of the Internet.

    Damn!

    1. Re:Private Network! by mrpuffypants · · Score: 4, Funny

      After assing the movie I promptly went home and changed my entire home IP network to the 10.2.2.x subnet. The home FreeBSD server is now 10.2.2.2, so everytime I jump in to modify the firewall or whatever I can feel like I'm "hacking the matrix" ...my life is pathetic :(

    2. Re:Private Network! by feldy · · Score: 5, Funny

      After assing the movie

      The sad thing is, I have no idea what verb you were actually trying to use.

    3. Re:Private Network! by PhoenixK7 · · Score: 4, Funny

      I tinted my terminal green after seeing it, so don't feel so ashamed ;)

  6. Before you say it... by tbmaddux · · Score: 5, Informative
    ...exploits it using the SSH1 CRC32 exploit from 2001.
    I'm sure there will be lots of funny jokes posted about using a 2001 exploit far into the future, patching systems, etc. etc. However, while the Matrix films are set in the future, the Matrix is set in the present, at the "peak of your civilization" according to Agent Smith. So it is appropriate for Trinity to hack a present-day system using a present-day exploit. She could even be ahead of her time, if the first movie was set in 1999 and it's only 6 months later, then the Matrix might not even have gotten through Y2K yet (did I just spoil the third movie).

    Aside from the amusing idea of having someone hack a computer program using their avatar inside the computer-generated construct of the Matrix, this sameness of the Matrix over long time periods raises an unanswered question in my mind. Why don't the people notice the lack of advancement in the Matrix? Over a hundred years of 1999-ness... no stunning advances in CGI, or science, or anything!

    --
    Can't you see that everyone is buying station wagons?
  7. nmap is easily fooled by Adam+Rightmann · · Score: 4, Funny

    While namp is a neat hack, before any of you juvenile deliquents think of using it to commit computer hacking felonies, be aware that it is easily fooled.

    If you look at the source code, you can see which ports it queries, and which responses it maps against. We used this for great affect at Adequacy, http://www.adequacy.org, editing the registry of our Win 2k box, and the configuration files of the various TCP/IP programs to make it appear as a simple FreeBSD to the casual hacker.

    Oh, the laughs were on us when those script children proceeded to attempt to hack us with canned scripts for use against FreeBSD, only to fail. The looks on their pimply, greasy faces were probably priceless, only to be matched when the local law enforcement arrived at their parents house to confiscate their computers.

    --
    A. Rightmann
    1. Re:nmap is easily fooled by antsquish · · Score: 5, Funny

      ... and after all that work making it appear as a FreeBSD box, you go and confess to all of slashdot that it's really a Win2k box...... I guess that saves everyone a bit of work? :-)

  8. Screen Shots ?! by gurnb · · Score: 4, Funny

    How do they have screen shots ?! Is it possible that this movie has been leaked out to the INTERNET?!

    It's madness I tell you, madness!!!

    Still waiting for disc 2 to d/l, so I can verify this for myself. Purely for educational reasons.

    --
    "This must be a Thursday, I never could get the hang of Thursdays."
    1. Re:Screen Shots ?! by Istealmymusic · · Score: 4, Insightful
      Is there anything morally wrong with downloading an esoteric release of Reloaded online? I went to the movies, paid my money, contributing to the $44 billion or so profit of Warner Brothers. I don't feel guilty downloading a crappy quality VCD to notice all the details and things I missed. (But I did notice the terminal with ssh and nmap on it).

      Nothing wrong at all.

      --
      "The lesson to be learned is not to take the comments on slashdot too literally." --Vinnie Falco, BearShare
  9. Pix by spoonist · · Score: 4, Interesting

    Pictures can be found on Fyodor's site.

    Oh, and I must say, that Trinity freakin' kicks ass. As you can see from the pictures, nmap says "No exact OS matches for host". Trinity goes ahead and throws the sploit anyway without knowing the system's architecture AND IT WORKS!

    That just kicks ass.

    A big Eartha-Kitt-Cat-Woman growl for Trinity.

    1. Re:Pix by kampit · · Score: 5, Funny
      Yeah, and if you look at the pictures closer, you notice

      (The 1539 ports scanned but not shown below are in the state: closed)
      /t State Service
      /tcp open ssh


      So she does know there's an sshd running on the system, then she throws the 'spoit and it works.. maybe you'd prefer it if there had been a 3 hour sequence where she coded up her own exploit, DDoS'd the whole matrix and pranced around in the nude saying 'marvelous!', but sometimes you just have to make sacrifices to please the general audience :)
  10. Well that's why she had to BREAK INTO the office! by cculianu · · Score: 5, Informative

    If you will remember the movie, that computer _was_ on a private network. She had to break into this private secure office building before she even began hacking. So she was behind the firewall already because she was physically in the building.

  11. Reading too much into it... by Mossfoot · · Score: 4, Interesting

    What gets me is how some people go out of their way to nippick the movie to pieces "oh this is stupid, this makes no sense" and others love it so much that they read WAY too much into it.

    Take all the religous and phylosphical stuff about it. Yes, there is a lot of connections in there, it was put in the same way that other good story tellers use myth to make their world and stories feel more real and grander. The first Star Wars trilogy comes to mind. But then you have people who think every little thing is an intentional reference to something or other.

    One example. I heard that Neo dies for 72 seconds before he comes back to represent the 72 hours (3 days) Jesus died. I timed it, and it's crap. You can find 72 seconds in there, sure, but there is no place you can say "okay logically you start Neo's death here and his coming back to life here" and it adds up to 72 seconds. Very fuzzy logic going on there. But it is symtimatic of how much people want to find meaning in things like this.

    Is this a bad thing? Perhaps. One of the complaints I've heard of the sequal is that it's trying even harder to sound psudo-religious-phylosophical as a result of this faction of the fandom base.

    Tolkien said it best when he got annoyed at how people thought The Lord of the Rings was an analogy for World War 2 (and would be rolling over in his grave if he knew how people tried to equate the movies with September 11 and the war against terrorism).

    "I think that many confuse 'applicability' with 'alegory'; but the one resides in the freedom of the reader, and the other in the purposed domination of the author"

    Hey, didn't Morpheus himself say "free your mind"? Stop thinking every gawd damn word is meant to be spiritually profound! :P

    --
    Fuzzy Knights: New RPG Strips Tuesday and Friday!:
    http://www.fuzzyknights.com
  12. Comment removed by account_deleted · · Score: 4, Funny

    Comment removed based on user account deletion

  13. Re:Sexy by geeber · · Score: 4, Funny

    mmmmm Trinity... She can exploit me any time she wants!

  14. Theories and Spoilers by neema · · Score: 5, Interesting

    Off-topic on the nmap discussion, but on-topic as far the Matrix goes, here is something I just thought of. It's pack full of spoilers for reloaded and speculation about revolutions, so consider that your warning.

    SPOILERS AND SPECULATION FOLLOW:

    Now, the theory that Zion is really a matrix within a matrix has been floating around and I happen to agree with it. The premise of the movie, I think, is that not only is Neo "The One" from the first layer of the matrix (which was exposed in the first movie), but happens also to be the small percentage that becomes "The One" in the second layer of the matrix, something the machines didn't count on.

    As for him having to make a decision between saving Trinity and saving mankind, I don't think he's gotten to the choice yet and that will come in revolutions. The Architect said that the expulsion of humans from the first matrix servered a purpose for the machines, so, theoretically, perhaps Morpheus, Trinity and the rest of them are actually computer programs, to assist moving the dissident population of the first layer of the matrix to the second layer. Of course, there is a possibility they are not aware of their own existance. This would explain Morpheus' adamant belief in "The One" (it's been programmed in him). Of course, Neo's love for Trinity complicates things and I think that will be the choice in the third matrix. He will have to decide between destroying this second layer of the matrix, which would destroy Trinity the computer program too, or preserving it because of his love for her.

    Feel free to point out flaws, because I'd really appreciate that.

    1. Re:Theories and Spoilers by Jason+H.+Smith · · Score: 5, Interesting

      Just got back from my third viewing tonight. It took that many times for all that architect talk to sink in. A few thoughts...

      First, AFAICT, they are definitely still in the Matrix. The architect is intentionally difficult to follow, but I think his point was, the 99% acceptance rate is nice, but something must be done with those who do not accept. And the answer is simply have the Matrix make them think they busted out. Also, there's no need for any meta-Matrix, as the first Matrix could easily simulate the escape. Think chroot vs. user-mode Linux. But that's a small point.

      If you watch again, you will notice the Merelvengian (sp) say that Neo's predecessors had much more respect, and also that he has survived those predecessors, and he will survive Neo. But that's all said before you know what he means. But what I got is that eventually, the shit hits the fan, and they just reboot the whole damned thing every hundred years or so (not a bad uptime).

      Also, unlike you, I think he made the choice. Neo chose not to go to the source. At first, I thought this was weird, because the Neos on TV did the same. I thought this was the previous recordings (i.e. all 6 made the same choice); but after watching again, it looks like the TVs are showing now, not the past. That makes sense. This is the first time Neo made the wrong choice. I'm thinking this fits the Hollywood formula pretty well. The previous 5 Neos were simply benevolent mankind-lovers; but this time, we get the predictable theme that love conquers all or such.

      I thought it was pretty cool, but the plot is treading into dangerous ground. When you start blurring reality with dreams, you're walking on cheesy, overused deus ex machina storylines. It's easy to get lame and make crap. E.g. look at how dumb Existenz ended up being. But then, I liked Total Recall, so there is hope for a great finale.

      So I think there's still a lot up for grabs. Since Zion and the war are still a computer simulation, for all we know, there might not even be a war going on at all! Although there probably is, since it wouldn't be very Hollywood to just handwave away two movies worth of bad guys.

      Anyway, I'm thinking now that they know they're still in the matrix, perhaps the people in Zion will start breaking the rules and have some actual means of fighting the approaching machine army? Or maybe they'll all just pop up a level, leaving the machine army there to twiddle their thumbs.

    2. Re:Theories and Spoilers by OmniVector · · Score: 5, Interesting

      ****SPOILER ALERT****

      I think the best explination i've heard, or at least the one I like the most, is someone said Neo is really just a computer program too. The purpose of Neo, and the whole reason 5 different versions of him have existed alreay, is to try and find the "perfect" AI. The Matrix is really run by humans, the the humans are trying to find a version of Neo that will truely be human enough to be considedered actual AI.

      If you remember where Trinity types in her password to crack the power system, Z1ON0101, the binary 0101 translates to 5. Is Trinity aware of this being the 5th incarnation through the fact that she too is just a computer program or is this just odd coincidence?

      For the people who say the 2nd was too much action, and not enough plot i think it was twice the plot and action... This second one raises a lot more mindfuck questions.

      --
      - tristan
  15. Re:I KNEW it was too good to be true by caluml · · Score: 4, Funny
    Or to put it another way - maybe all script kiddies are like Trinity? :)

    Maybe the pimply-faced 14 year old stereotype is just a myth put about by the gorgeous women that actually deface websites, and DDoS IRC networks?

    I mean, who's **actually** met a script kiddie?

  16. So you're the bastard... by HardCase · · Score: 4, Insightful
    ...who's always talking during the movie. Hey, do you have a cell phone too? And a beeper? Maybe a crying child or two?


    All of this managed to make my Matrix experience just that much harder to enjoy.


    -h-

  17. My new password ... by LoudMusic · · Score: 4, Funny

    Will NOT be Z1ON0101. However, I will be adding that to my dictionaries (:

    --
    No sig for you. YOU GET NO SIG!