Slashdot Mirror


Mitnick Calls for Hacker Stories

ram writes "Famed hacker and master social engineer Kevin Mitnick has been commissioned to write a new book following the success of his first text The Art of Deception. The new book, tentatively titled 'The Art of Intrusion' will tell the stories of real hacks, with the names of attackers obscured to protect them from the authorities and their victims. Mitnick has called on retired hackers to come forward with their stories, offering a $500 (283) prize for the best story that makes it into the book, and a $200 payment for all stories that make the final draft."

242 comments

  1. I got some to contribute. by Anonymous Coward · · Score: 0, Funny

    But i'm afraid to talk about them. Statute of limitations and all that ;-)

    - not logging in for this one sorry.

    1. Re:I got some to contribute. by harikiri · · Score: 2, Interesting

      It's not just statute of limitations, but rather where they exist and if they exist.

      In my younger days I did some mischief along those lines, but considering the number of countries that I traversed in my electronic travels, I'd be a little concerned if any of them raised any flags.

      Especially since some of them that "old" folks like me used to traverse have less than pleasant human rights records.

      --
      Man watching 6 MSCE's around a sun box, looks alot like the opening scene's of 2001:space odyssey...
    2. Re:I got some to contribute. by Texas+Rose+on+Lava+L · · Score: 3, Interesting

      You'd better hope that this troll doesn't know what he's talking about.

    3. Re:I got some to contribute. by ShadowBlasko · · Score: 5, Interesting
      While I do not personally have any to contribute, I have a friend who most likely could.

      Unfortunantly, he is rather busy at the moment.

      I would send him an email and tell him about it, but I don't think he's gonna be answering anything electronic for a little while.

      No, this is not a joke. Yes, this is a real friend of mine. And yes, I am probably a rat bastard for posting this on here. However, he did some of this from *home*!

      Jesus eppie, I thought you knew better than that!

      I guess the reason I am posting this is for all those of you who think that "thrill hacking" for fun, and not doing any real damage, will just get you a slap on the wrist if you are caught. Bet thats what eppie thought.

      --
      There are 4 boxes to use in the defense of liberty: soap, ballot, jury, ammo. Use in that order- Ed Howdershelt Via Tass
    4. Re:I got some to contribute. by AndyFewt · · Score: 0, Redundant

      Ah crap, I hope he will firewall *.aol.com from the submissions page.

    5. Re:I got some to contribute. by Lord+Kano · · Score: 1

      Jesus eppie, I thought you knew better than that!

      You friend was also smart enough to threaten President Bush during a time when the country is at war.

      Sometimes it seems that people want to be caught.

      --
      "Hi. This is my friend, Jack Shit, and you don't know him." - Lord Kano
    6. Re:I got some to contribute. by ShadowBlasko · · Score: 1

      I don't specifically believe that part.

      No one that knows eppie, that I have talked to so far, ever heard anything about that.

      I'm not the tin foil hat type, but it just seems to me like a fast way to get him in a federal courthouse, and get the ball rolling from there.

      (Making it much harder for him or his lawyer(s?) to work to his defense.)

      --
      There are 4 boxes to use in the defense of liberty: soap, ballot, jury, ammo. Use in that order- Ed Howdershelt Via Tass
    7. Re:I got some to contribute. by ChaoticLimbs · · Score: 1

      Amazing that the "master password" that this company used was a normal dictionary entry. I use random alphanumeric strings ten digits long and I commit them to memory only once, then change them after every use. I wouldn't want my My Documents folder cracked. Some of the contents of My Pictures are embarassing. I also have my TurboTax data, for chrissakes!

    8. Re:I got some to contribute. by Lord+Kano · · Score: 1

      I'm not the tin foil hat type, but it just seems to me like a fast way to get him in a federal courthouse, and get the ball rolling from there.

      You don't need to be unnecessarily paranoid to not trust the government. Their past behavior is all you need, MK-Ultra or Cointelpro are both documented activities that alone are enough to engender a mistrust.

      LK

      --
      "Hi. This is my friend, Jack Shit, and you don't know him." - Lord Kano
    9. Re:I got some to contribute. by Glass+of+Water · · Score: 2, Insightful
      That's a very wierd article. First, the "Master Password" was a word from the dictionary??? Second, why would someone download tons of credit card data, and spend all that time doing it, and leave such an obvious trail, and not seek to profit from it? The article suggests that the prosecuting attorney believed that he did nothing further illegal with the info.

      These types af articles always seem to be a little strange. Would the "300 passwords" that he stole be a single password file, that maybe he brute forced the "Packers" password out of?

      And what's up with the bit about threatening the President? It's illegal to collect guns and bombs for use in harming the president. It's not illegal to say that you want to harm the president.

      More typical wierdness:

      Baas, 25, of Milford, admitted his hacking and theft of their customer information cost Acxiom -- of Little Rock, Ark., -- about $6 million. The tab included $2.4 million in Acxiom employee time and $1.3 million for security audits and encryptions upgrades for the company's computer system.
      He admitted what? How much employee time? At $40/hour, that's 480,000 hours. That's 240 full-time employees at $40/hr for a year. That's not including the audits and "encryptions upgrades".

      Too much nonsense in there.

      --
      There are no trolls. There are no trees out here.
    10. Re:I got some to contribute. by Darby · · Score: 1

      It's not illegal to say that you want to harm the president.

      Dude, before you go posting anything in this vein you should look up the fact that it is actually illegal.
      If you do something of this nature, the Secret Service will investigate it and they will probably find you. Assuming you are just screwing around, probably not much will happen other than a few agents showing up at your door for a chat, but that should be scary enough. You will be on a list, and if the president comes to your town, you will be watched.
      The Secret Service does not screw around, and they have absolutely no sense of humor whatsoever.

    11. Re:I got some to contribute. by Anonymous Coward · · Score: 0

      Voice of experience there Darby?

  2. Why is Mitnick so famous? by Pingular · · Score: 3, Insightful

    He is a famous hacker because he got caught. There are thousands of hackers much better (if that's the right word), so why does he get all the attention?

    --

    When anger rises, think of the consequences.
    Confucius (551 BC - 479 BC)
    1. Re:Why is Mitnick so famous? by Crypto+Gnome · · Score: 4, Insightful

      er, the 'attention' (most especially from the media) occured as a direct result of his being caught, or were you not paying attention at the time?

      Hiding under a particularly large rock?

      Or perhaps you were on your way here from (for example) Europa?

      --
      Visit CryptoGnome in his home.
    2. Re:Why is Mitnick so famous? by Anonymous Coward · · Score: 0

      Have you seen that shite film called TakeDown aka Hackers II?
      I laughed for ages after watching it, there;s little fact to the film at all

    3. Re:Why is Mitnick so famous? by Anonymous Coward · · Score: 0

      that is a stupid question, good day.

    4. Re:Why is Mitnick so famous? by modpod · · Score: 5, Interesting

      because he was held without a trial for so long.... and eh, in the mid 90's people in the phreaking/hacking community decided to rally behind him. that part, i don't remember the specifics of. also, he was one of the first publicly discussed (newsmedia, websites) individuals banned from computer or electronic device use. funny sidenote, in highschool several years back, i was testing innoculate's latest patches for the school (without telling the network admin bumblehead), and i ended up being banned from touching all electronics at school nearly indefinitely! they wouldn't even let me troubleshoot a printer or a vcr... fools. it was funny though, and i was the first such case in the school district. go figure.

    5. Re:Why is Mitnick so famous? by Anonymous Coward · · Score: 2, Informative
      He is a famous hacker because he got caught. There are thousands of hackers much better (if that's the right word), so why does he get all the attention?


      Because, he was considered a martyr. I remember 2600 was reporting that the original sentence (total amount of charges) could add up to 465 years in prison, or some astronomical number. He was extremely brazen in his ability, and it really isn't that interesting of a story. I prefer better stories. For example, when Wired reported about the LOD wars, Phiber Optik, etc.. I don't ever remember Mitnick being on the front cover, though.
    6. Re:Why is Mitnick so famous? by Anonymous Coward · · Score: 0

      Why is this post rated "Insightful"?

      FYI, every lowly script-kiddie I've met in "Europa" has a silly grin on his face when Kevin Mitnick is mentioned.
      And his book is has at least been translated into French, German, and Czech.

    7. Re:Why is Mitnick so famous? by corebreech · · Score: 1

      Yes, he was held without a trial for a very long time.

      But that is reason to condemn the authorities, not praise Mitnick.

      Master social engineer? Are you people on drugs? The man doesn't even rate as script kiddie material!

      You want to worship/revile a man for truly sinister acts with a computer? Go pick on somebody like a Pug Winokur.

    8. Re:Why is Mitnick so famous? by Anonymous Coward · · Score: 3, Insightful
      Well you didn't say so explicitly, but I've heard, even from the mouth's of some of the best hackers, the notion that the best hackers never get caught, and only bad hackers do get caught. I don't really buy into this logic, I think anyone can get unlucky. I mean, being a good hacker and never getting caught is like getting an ace and a face card in black jack - but you can still have a winning hand without that.

      I also disagree there are thousands of hackers better than Mitnick. There are better hackers than Mitnick, maybe dozens, possibly even hundreds. But not thousands. He was pretty good on DEC Vax/VMS when that was big. He was a great social engineer. And he had UNIX and the Internet down pretty good. I do agree calling him the best ever, or one of the best ever might not be correct, but he definitely had skills, he was up there.

    9. Re:Why is Mitnick so famous? by Anonymous Coward · · Score: 0

      Er, if they are good enough to not get caught, then nobody knows about them, right? So we can't pay them any attention, see? So the ones that get attention are the ones that go without getting caught for quite some time, but then do. Sort of hard to pay attention to the one's that get away with it.

    10. Re:Why is Mitnick so famous? by Jugalator · · Score: 2, Insightful

      There are thousands of hackers much better (if that's the right word), so why does he get all the attention?

      Because they aren't known? :-)

      I guess media has made Mitnick famous and that's why. But I'd be very interested in hearing of another hacker, whose hacks has been fairly well documented.

      --
      Beware: In C++, your friends can see your privates!
    11. Re:Why is Mitnick so famous? by Anonymous Coward · · Score: 0
      I have a point to make I forgot in a previous post.

      Let's say you hack something once, and get away with it. OK, you are a hacker and never got caught - but you hacked into one thing. See? It's like being at bat once, and getting a home run. Ok, your slugging average is offically 4.000, but that don't make you Babe Ruth? You see what I'm saying?

    12. Re:Why is Mitnick so famous? by pro-evil · · Score: 0

      Actually your batting average would be 1.000. 1 at bat divided by 1 hit = 1 Totally offtopic.

      --
      Why frag? Can't we all just pose for a screenshot?
    13. Re:Why is Mitnick so famous? by Anonymous Coward · · Score: 4, Insightful

      He is famous because he got caught and, perhaps more importantly, because the authorities either decided to make an "example" of him or were actually deluded by the exaggerated portrayals and feared him.

      Note that reading "The Art of Deception" is very enlightening as to what Kevin's skills and knowledge are really focused on. As someone with more than enough technical knowledge, but very limited social engineering skills (and no particular desire) to actually break into systems (I often find holes and create exploits, but only on my own systems, and I report them to the project or vendor), I can appreciate what his skills are, how they differ from mine, and how totally detached from reality the common perceptions about the danger of technical vs. social hacking skills are.

      I think that the reason Kevin got caught is because he wasn't acting rationally - he wasn't hacking for profit, with the appropriate caution to avoid getting caught, but because he was driven to it. He was probably far more active than cautious hackers. He probably misestimated the level of efforts that would be used to track him, because prior to his case, there weren't many high-profile cases.

      It doesn't necessarily imply anything, good or bad, about his skills. Perhaps about his judgement at the time.

    14. Re:Why is Mitnick so famous? by lingenfr · · Score: 1

      How about Kevin Poulsen? Pretty famous, had some skills, still does and uses them intelligently.

    15. Re:Why is Mitnick so famous? by ReallyQuietGuy · · Score: 2, Interesting

      definitely had skills

      actually i am a little curious

      i remember reading about things he had done (e.g. "mitnick attack" (connection hijacking?) where IIRC you take down a genuine host by basically DoS-ing a legitimate machine and then impersonate that machine, made possible because the TCP increment value was predictable and not random)

      it definitely took an understanding of the way TCP etc. worked in order to come up with something like that (i guess it was really him who came up with it and not something he learned elsewhere?)

      but then, things have evolved in such a manner that these problems/holes/exploits are no longer possible - you can't hijack an SSH shell this way, for example (who nowadays still uses telnet on the open net?), TCP stacks have been rewritten, etc. - how many of the old-line "skillz" are still applicable nowadays?

      have the original hackers (i guess i should call them crackers instead) maintained their "lethality" in the face of progress, or is it always a new generation of people who just "understand" the current state of the tech who develop the knowledge/whatever to break into machines of that era, after which at some point they "lose" it and then no longer are able to follow evolution/development?

    16. Re:Why is Mitnick so famous? by zaffir · · Score: 1

      For a fascinating read about LOD, MOD, and Phiber Optik, check out Masters of Deception. It's a fascinating read, even for someone young enough to have not been a geek when this all went on.

      --
      "Upon attaching the waterblock to my penis, I began to notice that I know nothing about computers." -- JRockway
    17. Re:Why is Mitnick so famous? by Directrix1 · · Score: 1

      Woudn't it be funny if this was just a way to catch more hackers (used to reduce Mitnick's sentence), and not really something where people get prize money. Hilarious.

      --
      Occam's razor is the blind faith in the natural selection of least resistance and in universal oversimplification. -- EF
    18. Re:Why is Mitnick so famous? by barrettlight50 · · Score: 1

      This reminds me of the line from The Usual Suspects

      'The greatest trick the Devil ever pulled, was convincing the world he didn't exist.'

      It would be interesting to know what this guy accomplished that was never publicised.

    19. Re:Why is Mitnick so famous? by true_majik · · Score: 2, Interesting

      It was unjust to have Mitnick held w/out bail/trial for years, that they were charging him for millions of dollars on behalf of companies who did not even report such losses in Annual Reports, asinine how they would not allow him/his lawyers to copy the HD of evidence they had of him (they wanted him to give them the pw to decrypt the info). ETc etc etc. However, Bernie S.'s story was more interesting to me than Mitnick's. He wasn't doing anything to defraud the phone company. He was simply selling something that Radio Shack was *also* selling at the time. Selective prsection if you ask me. Charging him for *potentially* having materials that could be used as explosives? That's crazy. And on top of that, the material they believed to be explosives turned out to be dentist's putty left behind by the previous tenant. Ehh, just read his story if you haven't already. http://www.2600.com/law/bernie.html

    20. Re:Why is Mitnick so famous? by D'Sphitz · · Score: 1
      Maybe i'm missing something here, or maybe i just dont "get it" in which case i'm sorry for those who do, but what is the big thing with stealing telephone service? Wasn't Mitnick into that too? I mean, come on, drop the caller id and 3-way you can get your very own telephone line for $20/month. I mean, unless you had a soviet (communist) girlfriend whom you talked to 12 hours a day, why steal telephone service? either way, why steal telephone service out of all the things in the world you can steal? and why on earth do people care so much about people who steal telephone service?

      Retarded.

    21. Re:Why is Mitnick so famous? by Anonymous Coward · · Score: 0

      He was caught because he was ballsy and went after huge targets that prided themselves as being non-hackable.
      The guy that caught him (can't remember his but it's in is biography) used illegal methods to track him down, all with cooperation from the feds. And his 'best' friend and hacking buddy turned against him and provided tips to the feds.

    22. Re:Why is Mitnick so famous? by superflex · · Score: 1

      The issue wasn't really with stealing local telephone service. Phreakers used their knowledge of the phone system to get access to conference calling systems and long-distance trunk lines, often so they could talk to other tech. people on the conference calls and call BBS's long distance for free. Also remember that back in the days of telecom conglomerates, long-distance calling wasn't nearly as cheap as it can be now, and there wasn't much of an internet beyond ARPA.

      --
      sigs are for suckers
    23. Re:Why is Mitnick so famous? by irc.goatse.cx+troll · · Score: 1

      I laughed, I cried, I served time.

      --
      Pain lasts, kid. Its how you know you're alive. Sometimes I think this growing up thing is just pain management-TheMaxx
    24. Re:Why is Mitnick so famous? by irc.goatse.cx+troll · · Score: 1

      Read his book (you can find a .doc of it if you search hard enough.. pirating a hacker book, oh the irony). You'll change your mind. People never really understood that he isn't much of a hacker, but he DOES know his social engineering. His being caught was a direct result of pissing off the wrong person (shimumora). Mitnick was praised for having to go through all of this (maximum security prison for most of his term), and generally still being a cool guy after he got out. Maybe his list of accompishments sint as huge as others, but he def. has the mindset. Hell, I'm sure in a few years when the statute of limitations runs out his accomplishments list will grow by a lot -- Think that list of PBX question/responses he uses to testify against ATT(?)

      --
      Pain lasts, kid. Its how you know you're alive. Sometimes I think this growing up thing is just pain management-TheMaxx
    25. Re:Why is Mitnick so famous? by drwho · · Score: 1

      Don't read this book expecting facts. Slattala and quitner really failed on their fact checking. MOD pulled a great social engineering job with this one.

      I know, I was there.

  3. Not as it would at first seem.... by Crypto+Gnome · · Score: 0

    Obviously this is not in the same league as the recent RIAA "amnesty".

    --
    Visit CryptoGnome in his home.
  4. I wonder if by dan+dan+the+dna+man · · Score: 5, Insightful

    he will take care to protect the identities of the targets too. I can see no end of trouble when "A Big Co." finds out they were completely rooted and had no idea..

    IANAL - lets say for the sake of argument I was an ex-hacker with a story to tell that ended up in print. Even with this much vaunted anonymity I would still be worried about publically confessing my misdeeds. Especially in the UK where hacking offences can be covered with anti-terrorist legislation these days.

    --
    I don't read your sig, why do you read mine?
    1. Re:I wonder if by coolhelperguy · · Score: 0

      IANAL either but, there should be some law of sorts in the UK (there is in the USoA, it seems like a good idea, so I guess the UK has it) that says that you can't be charged on new laws for offenses committed before the laws were passed (I think it's Ex Post Facto or something).

  5. Wait a second... by JamesD_UK · · Score: 5, Insightful
    Sounds like a cheap and easy way to write a book if you ask me.

    1. Get others to produce the content of your book
    2. Publish
    3. ???
    4. Profit!

    1. Re:Wait a second... by Anonymous Coward · · Score: 0

      Umm, yeah, just like dictionaries.

    2. Re:Wait a second... by Crypto+Gnome · · Score: 3, Insightful

      Books in one sense are very much like music.

      Anyone can write a book, can even get it published.

      However, of the thousands (hundreds of? or is it millions?) of books published every year, FAR too many of them SUCK for one reason or another.

      Having published one, and being comissioned for another based on the strength of the first, this is likely (though not guaranteed) to Not Suck.

      Even so, profit is by no means guaranteed.

      --
      Visit CryptoGnome in his home.
    3. Re:Wait a second... by Esteanil · · Score: 2, Funny

      1: Get advertised on /. 2: Thereby, get others to produce the content of said book 3: Give $200 to all making "the finals", thereby getting their personal info. (Where did you say I should send the money?) 4: Sell personal details & story to company in question 5: Profit, profit, profit

      --
      I'm a dreamer, the world is my playpen. But hey, I'm a serious person, I can't dream all the time.
    4. Re:Wait a second... by Slur · · Score: 1

      Indeed! Someone should use that idea to create a news web site for nerds.

      --
      -- thinkyhead software and media
    5. Re:Wait a second... by AllenChristopher · · Score: 2, Informative
      That's a good point. Why aren't the newspapers taking the time and money to stage the events they cover? Pretty lazy just waiting for something to happen before they write about it.

      Seriously, though, publishers do just what you've suggested:

      1. Commission someone to write a book for you.
      2. Publish.
      3. Give the author a tiny little bit of the money, and keep the rest.
      4. Profit!

      There's no ??? because it's a well-established model, but the the Profit! is optimistic... many books don't earn enough money to pay for the author's advance. It's the blockbusters that pay for the flops, and the flops that create enough volumes to convince customers that a bookstore is any good.

      Mitnick is following the journalistic model, though, because he isn't asking people to submit finalized text for him. He's going to write the book from the source material he's given.

    6. Re:Wait a second... by DavesWorld334 · · Score: 1

      I was thinking the same thing. Isn't he using a ghost/co writer also? He antes up a few bits and pays probably US$1-2K for about a dozen others and presto, insta book.

      Unless we're talking about a tiny fraction of the overall book being hacker-submitted, seems to me the payout should be pro-rated based on the length of the story, etc... Otherwise Mit's making out like a bandit. We all should get gigs this good.

      Anyone who submits a story is either foolish or desperate for attention.

    7. Re:Wait a second... by dipipanone · · Score: 4, Insightful

      What, you think Mitnick actually *wrote* his first book himself?

      Perhaps he did, but given how modern publishing works, I'd be very surprised if that were true. These works are most likely ghostwritten attempts to cash in on his outlaw celebrity status (as told to A. Hack) and the follow-up is another attempt to capitalize on the Mitnick brand(tm) and its status in the burgeoning script kiddie market.

      You don't really think an editor commissioned this book because its likely to be a valuable contribution to culture, do you?

    8. Re:Wait a second... by gustgr · · Score: 2, Insightful

      How can he totally trust on the histories he will receive ? Asking the history sender for details ? Do you guys think that a very imaginative mind can came up with a 'fantasy' history and got it published and no one (including Mitnik) note that it is fake ? Details and checking with the press publications doesn't asure that the content really happened. I would like to know how reliable are the histories.

    9. Re:Wait a second... by jsailor · · Score: 4, Informative

      AGREED. I published a book and paid out a much greater sum to contributors than what Mr. Mitnick is offering. Especially for the components that will make is book interesting to a wider audience. The key with publishing is to attract as large as an audience as possible - which the anecdotal stories will certainly help to do because they give the masses an insight into the hidden world.

      In general, royalties for U.S. sales are 5-10% of the sale price of the book from the publisher - usually 50-55% off of the cover price. Foreign sales often yield a fixed price per unit sold. Really geeky books have an audience of 5,000-10,000 readers. Mass market geek books 2-10 times that. The anecdotes will push this book well beyond that. I rant, but do the math and you'll see that $200 and $500 is very exploitive.

    10. Re:Wait a second... by Anonymous Coward · · Score: 0

      or desperate for money? $200 is better than $0. It's not much though considering the risk the hacker has to take.

    11. Re:Wait a second... by LabMistress · · Score: 1

      I almost hate seeing Kevin get Slashdotted, because it always inspires the same boring commentary. The stories are a small part of the book. They are there to make it interesting. The bulk of the work is the writing up of how the attack could have been mitigated, which is what Kevin and William Simon will do. Your comments about the profit margin are way off base. He's asking for one story of a hack from about 10-20 people, not their life story. It's not like when Markoff made over a million dollars telling a story (Takedown) loosely based on Kevin.

    12. Re:Wait a second... by ReallyQuietGuy · · Score: 3, Insightful

      it's not just "cheap" in this sense. think about it. miserable $200 if your contribution gets into that book? what kind of book advance would you think he got?

      $500 for the BEST story that gets in? you have got to be kidding.

      how many stories will he be able to include in the book? 10? 20? 30? so for an outlay of, say, $6000 or so he will be able to tack on to the cover a blurb about how the book is chock ful of real, exciting, etc. etc. stories "From the Dark Underside Of The Internet!!!!"

      is that worth more or less than $6000 in terms of sales?

    13. Re:Wait a second... by Skuld-Chan · · Score: 1

      I'd almost believe that Mitnick wrote the first book himself - at least the draft. The first book covers the same ground repeatedly, and his summarizations in the ends of each chapter certianly sound like him.

    14. Re:Wait a second... by Anonymous Coward · · Score: 0

      http://www.azillionmonkeys.com/qed/kdm.txt
      Here is apparently the first chapter which went unpublished for obvious reasons (just read it and see why), reading this, then watching the movie takedown gives you a good insight on how it unfolded..

  6. one thing for sure... by Janek+Kozicki · · Score: 4, Funny

    IT people and security-concerned people will hopefully learn a lot from this book.

    good to see security improving as the time passess....

    --
    #
    #\ @ ? Colonize Mars
    #
    1. Re:one thing for sure... by arth1 · · Score: 1
      IT people and security-concerned people will hopefully learn a lot from this book.

      good to see security improving as the time passess....

      Changing people's mindset won't happen that easily.
      People will be idiots about it for a long long time -- it's not part of our genetics or culture to inherently distrust delegation and unconfirmed communication. We haven't even caught up with the invention of the phone yet, and people believe whoever is on the other side is who they say they are.

      In the mean time, we can at least enjoy an anthology of amusing hacker stories, and feel better than the average Joe in that we haven't been hacked yet.

      Regards,
      --
      *Art
  7. Confirmation by Tango42 · · Score: 5, Insightful

    How does he intend to confirm the stories are true? If he is trying to keep indentities quiet, he is going to have problems confirming them.

    1. Re:Confirmation by bunhed · · Score: 1

      The truth is irrelevant, it's the story that matters. Just ask George, or the RIAA, or M$ecurity, or...

    2. Re:Confirmation by malaire · · Score: 1

      Article mentions that he will confirm stories.

    3. Re:Confirmation by dipipanone · · Score: 1

      Hopefully, by seeing if he can replicate the intrusion himself...

    4. Re:Confirmation by bruthasj · · Score: 2, Insightful

      Easy. Just look up all the cracking activities that have occurred in the last five years via google or the library (newspaper articles). Then seek after the stories in a more specific way. Find out who did it. Interview them. Cover up their names and place their extremely detailed intrusion technique.

      The confirmation can be had by the sys admin saying, "Yep! That corresponds to the logs we had!" If someone really wanted to get that nitpicky.

      I'd even recommend that Kevin meet these people in a completely anonymous fashion so the authorities couldn't leverage him to get after his interviewees.

  8. nice gig by Anonymous Coward · · Score: 5, Funny

    Let's see...I'll give away a few hundred dollars for some stories of hacks, put them in a book and make thousands of dollars from it. I think he's still a damn good social engineer.

    1. Re:nice gig by foobario · · Score: 1

      It works for Scott Adams, who has been drawing cartoons based on my life (and the lives of many of you I'm sure) for years. Once he got the ball rolling he just had to farm his email account for more ideas...

    2. Re:nice gig by Anonymous Coward · · Score: 0
      Let's see Mitnick issues a request for hacks and untold stories for $200 and he turns the retard (who admits his crime) in for a 10,000.00 reward. Oh yeah sign me up.

    3. Re:nice gig by VonGuard · · Score: 1

      Yeah, the best part about this is the fact that Mitnik has probably already been paid for this book. All he has to do is pick some stories, ask someone like Poulsen to write an intro, and BANG, he gets to call himself a published author.

      And, isn't he not allowed to use email?

      --
      Don't Crease the Weasel!
    4. Re:nice gig by Anonymous Coward · · Score: 0

      Nice to see you're keeping up on the news. he is allowed to use e-mail and the Internet since January 2003. The stories are a small part of the book, as the analysis and discussion of mitigation will be the bulk of it. BTW, he is already a published author. He wrote "The Art of Deception" last year.

  9. '3' filled in for Crime; it does pay by Animaether · · Score: 3, Insightful

    1. Perform illicit activity (crime: 'hacking' or 'cracking' for those who prefer that term)
    2. Get away with it.
    3. Get paid for story publishing.
    4. Profit!!!

    Seriously though, as I'm sure many of these hackers/crackers will be heralded as (demi-)heroes by many visitors of Slashdot, and I understand that often the sentences for those caught are ridiculous, it should not be forgotten that they -did- commit a crime.

    Now, they were 'smart' enough to not get caught for that crime, too. Which means they can gloat about their hack/crack in private of with tight friends or do whatever the heck they want with it already.

    But now they're getting paid to talk about those hacks/cracks - and retain their anonimity ?

    There's something very wrong with that picture, in my humble opinion.

    1. Re:'3' filled in for Crime; it does pay by Crypto+Gnome · · Score: 1

      This is only different in that he doesn't hide behind anonymity.

      Face it , people..... Break Laws + Write Book = Profit is a well known and often-used formula.

      --
      Visit CryptoGnome in his home.
    2. Re:'3' filled in for Crime; it does pay by Anonymous Coward · · Score: 1, Interesting

      Hell yeah. How do you gain the respect of a bunch of people who are obviously non-conformist social outcasts? You perform "illicit" activity. Who hasn't thought of it? And who hasn't read about it? "Hacker" (more than not a cracker) gets busted, tells his story to the media, and gets paid. Sometimes part of me honestly wishes for that notoriety. There's some sort of twisted appeal about it.

      Particularly because of this new homeland security deal, what honestly is the best way to catch a thief? Hire him.

    3. Re:'3' filled in for Crime; it does pay by nathanh · · Score: 3, Insightful
      Seriously though, as I'm sure many of these hackers/crackers will be heralded as (demi-)heroes by many visitors of Slashdot

      Why would you think that? Whenever there's a Mitnick story on Slashdot the overwhelming majority of posts say "he got what he deserved" and "hackers are good, crackers are bad". I very rarely see anybody defend what Mitnick did; in fact, I don't think I've ever seen anybody defend what Mitnick did.

      If anything, I would say the "Slashdot meme" is strongly opposed to criminal acts with computers.

    4. Re:'3' filled in for Crime; it does pay by Scarblac · · Score: 1

      Seriously though, as I'm sure many of these hackers/crackers will be heralded as (demi-)heroes by many visitors of Slashdot, and I understand that often the sentences for those caught are ridiculous, it should not be forgotten that they -did- commit a crime.

      Yeah, that used to mean something. Nowadays, who hasn't downloaded an MP3?

      --
      I believe posters are recognized by their sig. So I made one.
    5. Re:'3' filled in for Crime; it does pay by Crypto+Gnome · · Score: 1

      Downloading an MP3 is not a crime.

      My nephew recorded an MP3 (his digital voice recorder encodes to MP3 format) of himself singing me Happy Birthday, I downloaded it.

      Please tell me which law I broke, exactly?

      --
      Visit CryptoGnome in his home.
    6. Re:'3' filled in for Crime; it does pay by Anonymous Coward · · Score: 1, Informative

      The copyright for happy birthday is currently owned by AOL Time Warner - Congratulations - you've broken the DMCA.

      (http://www.snopes.com/music/songs/birthday.htm)

    7. Re:'3' filled in for Crime; it does pay by Stephen+Samuel · · Score: 5, Informative
      My nephew recorded an MP3 (his digital voice recorder encodes to MP3 format) of himself singing me Happy Birthday, I downloaded it.
      Please tell me which law I broke, exactly?

      Copyright. The copyright on Happy Birthday is not expired. and it won't for another couple of decades (unless copyright laws change again).

      --
      Free Software: Like love, it grows best when given away.
    8. Re:'3' filled in for Crime; it does pay by Crypto+Gnome · · Score: 1

      Shame you never bothered to actually read the article you linked to. Even more of a shame you just plain flat-out don't understand the implications of copyright law.

      Does this mean that everyone who warbles "Happy Birthday to You" to family members at birthday parties is engaging in copyright infringement if they fail to obtain permission from or pay royalties to the song's publisher? No. Royalties are due, of course, for commercial uses of the song, such as playing or singing it for profit, using it in movies, television programs, and stage shows, or incorporating it into musical products such as watches and greeting cards; as well, royalties are due for public performance, defined by copyright law as performances which occur "at a place open to the public, or at any place where a substantial number of persons outside of a normal circle of a family and its social acquaintances is gathered." So, crooning "Happy Birthday to You" to family members and friends at home is fine, but performing a copyrighted work in a public setting such as a restaurant or a sports arena technically requires a license from ASCAP or the Harry Fox Agency (although such infringements are rarely prosecuted).

      --
      Visit CryptoGnome in his home.
    9. Re:'3' filled in for Crime; it does pay by Anonymous Coward · · Score: 0
      If anything, I would say the "Slashdot meme" is strongly opposed to criminal acts with computers.



      except, of course, piracy.

    10. Re:'3' filled in for Crime; it does pay by Anonymous Coward · · Score: 2, Interesting
      Whenever there's a Mitnick story on Slashdot the overwhelming majority of posts say "he got what he deserved"


      He was arrested, convicted and sentenced in 1989 for doing something that at the time wasn't a crime; kept in solitary confinement for months on end; eventually released and was arrested again in 1992 for supposedly breaking parole conditions (he didn't); imprisoned for years without charge or trial and eventually has to incriminate himself to be released. Meanwhile he has to idly stand by why Shimomura and Markoff slander him repeatedly -- the most vicious slander incidentally being the accusation of the "crime" for which he was originally imprisoned (which Markoff more or less admits to spinning for "good-copy" at the end of "Freedom Downtime").

      Who deserves that?
    11. Re:'3' filled in for Crime; it does pay by Anonymous Coward · · Score: 0

      I don't remember seeing anyone defend what Mitnick did - he doesn't even do that himself.

      However, a lot of people have major problems with how he was treated. He was held without bail and in extremely restricted conditions with rather flimsy reasoning (supposedly because of fears that he could start World War 3 if he had access to a telephone). His jail sentence might not have been unreasonable (then again, considering that it was more than for many types of violent crimes, that's a matter of opinion), but the release on the condition that he not have access to computers was unusual and, in the opinion of many people, unreasonable.

      Personally, I think that for any cracking activity, especially if not for personal gain, if the treatment and sentence is worse than for violent criminals such as rapists, that's pretty unreasonable.

      Seriously. My girlfriend has been raped (long before I met her), and although I don't believe in the death penalty, if I had the opportunity to have the guy who did it killed, I'd do it. What his actions have caused in the life of someone I love are a far greater harm than a few million dollars worth of damage to corporations that can afford it (one of the major "damages" presented against Mitnick in court was ridiculously inflated values for the fact that he had managed to obtain copies of the source code for operationg systems from corporations such as DEC).

      Mitnick's case is, in part, an example of how fairly minor crimes by outside individuals against corporations are sometimes (too often) prosecuted more aggressively than violent crimes (apart from select murder cases) against people or crimes by executives against stakeholders in their "own" corporations.

    12. Re:'3' filled in for Crime; it does pay by br0ck · · Score: 1

      in a public setting such as a restaurant or a sports arena

      But isn't the RIAA saying that his nephew making the file available for anyone to download IS a public setting?

    13. Re:'3' filled in for Crime; it does pay by IronBlade · · Score: 1

      Incorrect. RTFA.

      Royalties are due, of course, for commercial uses of the song, such as playing or singing it for profit, using it in movies, television programs, and stage shows, or incorporating it into musical products such as watches and greeting cards; as well, royalties are due for public performance, defined by copyright law as performances which occur "at a place open to the public, or at any place where a substantial number of persons outside of a normal circle of a family and its social acquaintances is gathered."

      --
      Important info:
      http://www.lifeaftertheoilcrash.net
      http://dieoff.org/synopsis.htm
      http://www.peakoil.net
    14. Re:'3' filled in for Crime; it does pay by Crypto+Gnome · · Score: 1

      Of course, the fact that he just emailed it to me means you (and the RIAA) are too full of assumptions.

      --
      Visit CryptoGnome in his home.
    15. Re:'3' filled in for Crime; it does pay by Jswalden86 · · Score: 1

      Seriously though, as I'm sure many of these hackers/crackers will be heralded as (demi-)heroes [...], it should not be forgotten that they -did- commit a crime.

      Since when has that mattered to anyone? (link to news about a certain ex-NY Times reporter and a book deal...)

  10. Interesting... by puddpunk · · Score: 5, Interesting

    Personally, I could see this turn of events coming. Having read books such as Cyberpunk and Takedown and watched that doco "Freedom Downtime" I've drawn the conclusion that Kevin appears to be more "misguided" than dangerous and also more "attention seeking" than a model hacker for script kiddies to chase after.

    I must admit though, I would be _very_ interested to read this book when it hits the press :)

    1. Re:Interesting... by abulafia · · Score: 0, Flamebait
      Having read books such as Cyberpunk and Takedown and watched that doco "Freedom Downtime" I've drawn the conclusion that Kevin appears to be more "misguided" than dangerous and also more "attention seeking" than a model hacker for script kiddies to chase after.

      I don't mean to be an asshole but...
      You've consumed enough media to form an opinion, have you?

      Thank god we have such watchdogs.

      (I think Kevin was an asshole. Not that he 'deserved what he got', but he was a jerk. More power to him on writing books and whatnot.)

      I suspect you also have strong opinions on the best round to use to take down a PCP taking psycho killer, no?

      --
      I forget what 8 was for.
  11. Sure, offer me $200... by Pollux · · Score: 5, Insightful

    ...and I'll be happy to give to you some kinda fish story. Yea, there was that time back in '83 where some buddies and I were sitting 'round our dorm room and thought, "Hey, how long's it been since someone's busted into Langley's database?" And so, we all tossed five bucks in a pot for the first to break in and find the SS# of the Director of the CIA...

    Really, how are you gonna know that these stories are actually real?

    1. Re:Sure, offer me $200... by mysterious_mark · · Score: 1

      Since when did the truth ever get in the way of a good story? (just ask G.W.) MM

    2. Re:Sure, offer me $200... by rf0 · · Score: 1

      Give the location of the currently rooted box and the access method?

      rus

    3. Re:Sure, offer me $200... by Anonymous Coward · · Score: 0


      You know it's fake if the story starts with:

      So I typed LOAD "h4x0r",8

    4. Re:Sure, offer me $200... by Anonymous Coward · · Score: 0

      dammit!!! We agreed never to talk about that night! Now I am going to have to kill you.

  12. Expect... by 222 · · Score: 1

    The cell phone listed to be redirected to some middle age cattle rancher by the end of the day.

    kthxcellhack

  13. Cheap content by Andy+Smith · · Score: 2, Insightful

    Even if the book includes as many as 100 stories, that's only $20,000. We can be sure that Mitnick will be making a lot more than that, and the publisher will be making much, much more.

    Don't most honest, law-abiding people nowadays disapprove of criminals profiting from their crimes? Well it sure seems like Mitnick is profiting from his crimes with this book because the publisher is using his name to sell it.

    Kinda cheap and sleazy if you ask me, which you didn't.

    1. Re:Cheap content by shish · · Score: 1

      > Don't most honest, law-abiding people nowadays disapprove of criminals profiting from their crimes?

      Yes, but most people don't consider mitnick a criminal - I can't actually remember what he did (I did know, I just forget :/ ), but whatever it was he's been somewhat over-punished for it.

      --
      I mod down anyone who says "I will be modded down for this", regardless of the rest of their comment
    2. Re:Cheap content by Night+Goat · · Score: 1

      Actually, it'd be $20,300 because the best story gets $500. But your point's valid, I'm just being a dick.

    3. Re:Cheap content by Andy+Smith · · Score: 1
      Actually, it'd be $20,300 because the best story gets $500. But your point's valid, I'm just being a dick.
      hehe, at first I put in brackets "plus $300" but I thought that would prompt a flood of replies saying it was $500 and I'd have to reply and explain the difference, so I took it out :-)
  14. Oh wait! by Ryvar · · Score: 1

    Welcome to Slashdot, chief . . .

    For what it's worth, I have a good story involving some (requested, of course) intrusion testing on a senior security worker at Microsoft's personal web server that came about because of a Apache vs. IIS argument on IRC. Pity it was just a simple application of RainForestPuppy's modified UNICODE exploit (read: a script-kiddie hack), or I'd submit it . . .

  15. Most funny story I heard by Krapangor · · Score: 3, Interesting

    was a typical social engineering story.
    Some hacker wanted to haxor some local republican servers. But these things turn out well secured, so he needed some physical access to the boxes. So he claimed to be a fundamentalist protestant (well, he didn't put it this way obviously) and asked the local repubs for some help for anti-abortion protests. He convinced the people to paint transparents in the server room. Ownage occured mysteriously. Well, not so mysteriously, 'cos the FBI got him in the end.
    To save his honour, it must be said that he indeed turned up at the anti-abortion protest, even throwing some tomatoes.
    Well, he was a crazy Nader follower. Quite funny , when you think about it - the hacker helped in the repubs due to the bad press in the end. And even Nader helped Bush by sucking votes away from Gore. These ecos can be very strange some times.

    --
    Owner of a Mensa membership card.
    1. Re:Most funny story I heard by copper22 · · Score: 1

      I have an even better one: sigh

    2. Re:Most funny story I heard by Anonymous Coward · · Score: 0

      Mensa: Never before have so many been so proud to do so little with so much.

  16. Nuclear War with a Telephone ... Holy Cow. by leoaugust · · Score: 3, Interesting

    Four of his years inside were served before he was even tried, and he was forced to endure eight months in solitary confinement because "the government said I could start a nuclear war if I had access to a telephone," Mitnick says.

    Holy cow, is this serious ?

    But, just imagine if J. Reno could come up with the Nuclear War stuff for Mitnick, what a field day J. Ashcroft would have had if he had a chance ... Or maybe Ashcroft is already having a S&M ball. It is all so secretive nowadays.

    Lucky Mitnick...

    --
    To see a world in a grain of sand, and then to step back and see the beach where the sand lies ...
    1. Re:Nuclear War with a Telephone ... Holy Cow. by Crypto+Gnome · · Score: 2, Informative

      For Serious: Another "wild one" often passed around whas that he could phreak the phone system by whistling into the handset.

      Yup! they seriously thought he could blow a consistent and exact 2600Hz (amongst other requisite frequencies) with just his mouth.

      As opposed to, for example, hypothetically, some cheap crappy plastic whistle from a box of Captain Crunch.

      --
      Visit CryptoGnome in his home.
    2. Re:Nuclear War with a Telephone ... Holy Cow. by Anonymous Coward · · Score: 1, Informative
      Not true.

      I can't be arsed to find a link but it's not hard to track down. He was found guilty of cloning cell phones and was serving time for that while awaiting the trial for his PC hacking stuff. There is info on some US gov sites as that kind of info is available to the public.

      The whole "Free Kevin" movement was likely led by a series of un-informed angsty 12 year olds.

    3. Re:Nuclear War with a Telephone ... Holy Cow. by grumling · · Score: 1
      Yup! they seriously thought he could blow a consistent and exact 2600Hz (amongst other requisite frequencies) with just his mouth.

      There are plenty of folks out there with perfect pitch, and quite a few of them can whistle!

      Not as hard to believe as some of the Captain Crunch stories I read over the years - like the entire phone exchange in his van that he used at pay phones.

      --
      "Well, good luck finding a judge that doesn't run a bestiality site."
    4. Re:Nuclear War with a Telephone ... Holy Cow. by MegaHamsterX · · Score: 1

      He was blind, sound was his world.

    5. Re:Nuclear War with a Telephone ... Holy Cow. by Anonymous Coward · · Score: 0

      Who says you need to do it exactly and consistently ? You just get it pretty close and vary it until you get the desired result (not to mention that electronics don't care whether the signal is exactly 2600 Hz, as long as it's fairly close, due to no electronics being able to get it exactly either).

      For instance, I was able to whistle at 1600 Hz well enough to fool a piece of electronics before. I'm sure, with practice, I could have done it consistently.

    6. Re:Nuclear War with a Telephone ... Holy Cow. by jbplou · · Score: 1

      If they did put him in solitary they just made this reason up. Because I highly doubt the Air Force really believes somebody could hack missile control systems with a phone.

    7. Re:Nuclear War with a Telephone ... Holy Cow. by ChaoticLimbs · · Score: 4, Interesting

      Actually, I learned how to dial the telephone by whistling and vocalizing two different notes at the same time. I used to amaze my friends by dialing for pizza using only my voice and whistle. It's a wierd kind of whistle but with loads of practice and careful listening to and copying a standard touch tone telephone, I think anyone could do it.
      Never underestimate the power of a geek with no social life.
      And that's the ONLY thing I will admit to. Note non-anonymous post.

  17. And to his surprise .... by bain · · Score: 4, Funny

    An anonymous coward sends him detailed information about how his own computer was hacked and information sent to Tsutomu Shimomura, causing his capture.

    --
    Sanity is a majority vote.
  18. I've got a story by rf0 · · Score: 5, Funny

    Well d00d I got this l33t tool called t3ln3t. I connected to other people computers and got things like "SSH-1.99-OpenSSH_3.7.1p2". The 0th3r kidi33s were like. "D00D!!". I was like w0ah. I am so l33t

    Rus

    1. Re:I've got a story by Anonymous Coward · · Score: 0

      kewl. u r so l33t

  19. Crazy Legal Question by Crypto+Gnome · · Score: 4, Interesting

    So, if someone breaks the law, and then tells you about it afterwards (but before they're brought to justice) doesn't that make you (in legal terms) an accessory after the fact?

    --
    Visit CryptoGnome in his home.
    1. Re:Crazy Legal Question by howiefl · · Score: 1

      Isnt someone on probation also still connected to the law? What if his 'stories' that were sent to him were subpoened?
      Thanks but no thanks.
      I'll pass on this one.

    2. Re:Crazy Legal Question by Anonymous Coward · · Score: 1, Informative
      Only some crimes are covered by accessory charges... they need to be offenses against the United States or some such, including murder. Merely finding out that you neighbour is parking in a handicap spot does not compel you to hand him over to the police. If it did, people would never get anything done between turning people in, and we'd really have a police state of the Soviet kind. Every person would be afraid to talk to his neighbour about anything.

      I doubt that would help with a book about hacking, since many of the crimes are reasonably against the country itself. However, Mitnick is acting as a journalist, which gives him a certain amount of protection when it comes to proecting his sources. I wouldn't risk it if I had a prior conviction and was on probation, because for him even the contempt charge sometimes used to pressure journalists is a really serious thing, but he's not exactly afraid of authority.

      Yada, yada, NAL.

    3. Re:Crazy Legal Question by bobbozzo · · Score: 1

      His probation has already been completed.

      --
      Nothing to see here; Move along.
  20. You should read his existing book by anti-NAT · · Score: 3, Interesting

    including the missing chapter.

    Mitnick's 'Lost Chapter' Found

    While there are always two sides to a story, from what Kevin says, it sounds like Markoff and Shimomura exploited the situation for all the $$$ they could get.

    --
    The Internet's nature is peer to peer - 20050301_cs_profs.pdf
  21. Let them hack their way into the book by bain · · Score: 5, Interesting

    Setup a Machine and they can hack into it to submit their stories.

    This way if they are good enough not to be traced, the chances are good they actually did something real. It also removes most of the possible "script kiddies" submittions ;P

    --
    Sanity is a majority vote.
    1. Re:Let them hack their way into the book by spydir31 · · Score: 1

      Unfortunatly, being good enough not to be traced means they're also good enough not to get $200

    2. Re:Let them hack their way into the book by bain · · Score: 1

      If you're good enough, not to be traced, hence good enough to break into any machine, without trace, do you really think they will mind NOT getting $200, They prolly rip off $10 000 easily a day from some insecure creditcard site ;P

      --
      Sanity is a majority vote.
    3. Re:Let them hack their way into the book by Lord_Dweomer · · Score: 1
      And yet why do I have the feeling there would still be a "frIsT p0st" and a link to everybody's favorite goat man.

      --
      Buy Steampunk Clothing Online!
  22. Fuck the corpos! by Anonymous Coward · · Score: 1, Interesting
    I was a hacker from 1989 until 1996, when I got a job as a systems administrator. I personally know most of the well-known people from that time period, within and without that scene.

    And as far as Kevin goes, he's had a hard time so I forgive him for it. But I am not going to give stories so these corporate bastards can figure out how to keep people out. I am totally down with the grey-hat backlash that has started - people who are connected with the hacker scene and then go work for ISS or @stake or wherever, and make money off of it. Selling out is bad enough, worse is people who were with the hacker community, start working for security companies, and maintain contact with the active hacker community on an active and "professional" basis.

    I am totally down the grey-hat backlash. I see there being two classes - workers and idle heirs. Idle heirs own the majority shares of corporations, thus they control the corporations, thus they control the means of production. I think they have no right to this, and thus I as a worker hacking into a corporate computer am more justified being on there than even another worker following orders from the heir (e.g. working at the company).

    I think the fact that hacking machines is a crime is as much bullshit as the fact that more black men in the US go to prison than go to college. Yes, I DO think I have the right to hack anything I want, even if isn't mine - if you look at say bond ownership in the US, about half is owned by 0.5% of the population, and 90% is owned by the poorest 90% of Americans. I could give a flying fuck about these heirs and what they own. I am for anarchy and anarchism - fuck all authority, workers control the means of production. Parasitism like profits, interest, dividends, rent at an end. Up against the wall motherfuckers, this is a stickup!

    There used to be a good web page on the hacker backlash against security BS, but it shut down. Here are some links, maybe the page will pop back up. Or maybe YOU can join the movement.

    Speech at H2k2

    post to full disclosure

    post to indymedia

    This is good shit

    And here are some links about other topics

    Chomsky rules

    Learn about anarchism

    And there's lots of good books on how the working class is regularly ripped off by the man. Just remember - people like Paul Krugman are good, but light. Check out the more radical analysis as well. Workers of the world unite! No gods, no masters!

    1. Re:Fuck the corpos! by Anonymous Coward · · Score: 0
      Ah, I see I'm being modded up and down.

      Anyhow I posted about the grey hat backlash, and ANARCHY! But I didn't post much about hacking

      I don't know much of what's going on but it seems to me like a lot of hacking is dead nowadays. I don't mean using a skript to hack a web page in Poland, I mean hardcore hacking - people who control the phone system, NCIC, the X.25 networks. Well X.25 might be going out, but I mean people who get into corporate networks, which are behind heavy firewalls and dialups have SecureIDs. I mean Global 500 companies. And of course some of them are more important than others - like the old Baby Bells. Of course systems where money and credit are floated around are big too, although most people I knew usually ripped off credit reports more than credit cards.

      Where did these people go? A lot of them joined security companies, which I think sucks. Some of them went into other lines of engineering like me. Some were suave and went into management, sales and that sort of shit for tech companies. Some went into non-tech jobs. I see what people hack nowadays and it's like someone elses web page. People were owning serious shit back in the day.

      I see that the grey hat backlash and the analysis with the notion of class, relations of production and so forth are coming in, which I think is good. Beyond that, people used to own serious shit, not use lame bugs and hack someones web page with it. Denial of Service? I never did it. Because the point was to OWN them, a DOS always seemed lame to me - hacking in and crashing it, that's cool, DOS'ing it seems like what got Bill Maher fired - shooting people from planes hundreds of meters away. But anyhow, there's more to life than the Internet! There's dialups, the telephone system, private corporate networks. At least people are wardriving for 80211b or whatever it's called - that's a way to get into corporate networks. Too many assholes publicize this of course - see grey hat backlash.

    2. Re:Fuck the corpos! by Anonymous Coward · · Score: 0

      One thing I remember was the ANI Failure. ANI Failure means the phone company doesn't have your information, ANI is the transmission of the number you're calling from (Caller ID is a CLASS feature, which is a little different). Anyway, you used to call up this number and an operator would say "What number are you calling from?". You'd have to give one in a particular area code, and I believe particular exchanges, and then she'd put you through. It was a good way to call people and not get Caller ID'd or traced - it was basically impossible to trace the call. Originally the number 800-LOD-ANIF was going to forward to it, but then word leaked out and it was changed to another 800 number. So you'd dial an 800 number from a payphone or even your house, an operator, who would not know your number would ask what it was, and then connect you anywhere. The three components for this would be. 1) The number to dial to get the ANI Failure (this was the big find) 2) The POTS number for a WATS (800) number 3) RCF (forward) the POTS number to the ANI Failure POTS number It was pretty cool, then it died.

    3. Re:Fuck the corpos! by Anonymous Coward · · Score: 0

      One of my favorite stories, although I probably don't tell it well, is one time someone on IRC pissed me off, so I owned his machine. Well it turns out he owned the machine, and had a bunch of other machines in that subdomain (it was like physics.university.edu or something). So we engaged in a battle over these machines to throw the other guy off. We killed each others TTY processes, I changed his password but he had multiple accounts, as did I (I ran Crack). He had root earlier than I which was a problem but I was on several machines so he couldn't use it to his advantage as much. He even shut down a lot of login processes but I was still on. And eventually I won the battle and booted him. I felt quite victorious, we had fought a war over control of this sub-domain and I won. I always made fun of him on IRC after that for having owned him.

    4. Re:Fuck the corpos! by ShadowBlasko · · Score: 1
      "Where did these people go?"

      To Jail this week.

      Theres your big company hackers you disenchanted fool. A friend of mine too. Up the river for a good long time.

      Wanna know where they went? They got smart and stopped doing this.

      --
      There are 4 boxes to use in the defense of liberty: soap, ballot, jury, ammo. Use in that order- Ed Howdershelt Via Tass
    5. Re:Fuck the corpos! by Anonymous Coward · · Score: 0

      I think you are confusing two different issues here.

      One is the unethical distribution of wealth and power, which I am inclined to agree with.

      The other is the ability to examine and disrupt the systems of others, which is not always related.

      There are lots of small, honest corporations, with little resources to genuinely secure their systems, owned by the actual people working for the same corporation.

      Personally, I'd like to see more of the blame shifted to the vendors providing insecure systems and, internally to corporations, the departments responsible for securing the infrastructure enough.

      Still, exploiting vulnerabilities just because systems are vulnerable is, IMO not ethical. Personally, I would have absolutely zero desire to go after anyone who hacked into a system that I was responsible for...as long as they did no significant damage I'd consider it my failure to secure the system. But I'm exceptional in that I can afford to think this way.

      Unfortunately, most people in the position to secure systems are overridden by others who have ridiculous, non-security-conscious demands (such as having Outlook as the corporate standard mail client)...and then they still accuse the IT guy for not securing the systems if something goes wrong.

      The world is massively unfair, taking advantage of security problems often merely compounds the problem by causing additional problems to innocent parties.

    6. Re:Fuck the corpos! by Anonymous Coward · · Score: 0

      " if you look at say bond ownership in the US, about half is owned by 0.5% of the population, and 90% is owned by the poorest 90% of Americans"

      about half (say 50%) is owned by 0.5% of the population - OK

      and 90% is owned by the poorest 90% of Americans

      ??? - 50% + 90% = too much

      surely it should read:

      50% of bonds owned by 0.5% of population, and other 50% of bonds owned by 90% of pop. (the poorest Americans).

  23. My favourite Free Kevin cartoon... by marko123 · · Score: 1
    --
    http://pcblues.com - Digits and Wood
    1. Re:My favourite Free Kevin cartoon... by identity0 · · Score: 1

      My favorite is this one, personally. "Good lord, what did they *do* to him in prison?!" - one of the funniest cartoons ever : )

  24. can't remember... by Anonymous Coward · · Score: 0, Offtopic

    a real hacker doesn't remeber he hacked in
    to a major Company.

    this is the ultimate personal security solution!

    a real hacker "dreams" his hacks and wakes up
    the nex day without knowing what he did.
    it's called "dreamwalk hacking" :)

  25. Re:'3' filled in for Crime / Not Quite Correct by Crypto+Gnome · · Score: 1
    The ideal list would be
    • 1 Perform Illicit Activity
    • 2 Get Caught
    • 3 Plea Bargain/Turn States Evidence
    • 4 Get let off lightly (and I use that term loosely)
    • 5 Write book detailing the exciting life you've led
    • 6 Write second book, detailing others who've had similar lives
    • ... Public speaking engagements, TV Shows, etc ad-infinitum ...
    Although in this particular case, I believe he skipped 3 entirely and did not do spectacularly well on item 4 either.

    Remember people, don't take shortcuts!!!
    --
    Visit CryptoGnome in his home.
  26. Ethics? by DuranDuran · · Score: 1

    At our university, the Ethics Committee will not allow research to be conducted where the subject may divulge self-incriminating information. I'm not sure how this would sit in that context.

    --
    "You can justify anything by putting it in quotes, adding a famous name and making it a sig" - Albert Einstein
  27. Great Idea! Easy Money!! by Ann+Elk · · Score: 1

    Just send your story, along with your bank account info & PIN to Kevin. He'll take care of the rest...

  28. Mitnick is social engineering you! by SexyKellyOsbourne · · Score: 4, Insightful

    We all know Mitnick is in quite a bit of trouble, but the fact that he's a good social engineer still persists. He was traumatized in jail, and most of what he was severely punished for was probably due to non-cooperation, in that "hacker" attitude, with very influential people. Most likely, he got out of such things by giving in and cutting deals.

    Before you send in any good stories, be they fact or fiction, think of this: what if FBI / Homeland Security agents are on the case working with Mitnick, reading those letters that will supposedly go into the book and tracing who sent them? They've been known to do similar things to get people to brag before, which is the easiest way to catch people, or at least make it seem that way. With John Ashcroft and Tom Ridge in the government, they will stoop to any low to put hackers, whom they view as terrorists, behind bars.

  29. Honeypot? by Locky · · Score: 0, Funny

    Wow! A free motorboat!

    1. Re:Honeypot? by arose · · Score: 2, Funny

      Moderator needs more Simpsons.

      --
      Analogies don't equal equalities, they are merely somewhat analogous.
  30. best hack... by Anonymous Coward · · Score: 3, Interesting

    use Social Engineering to get "hackers" to publicly brag about their illicit activities, in exchange for modest "prizes."

    collect reward money AND complete parole obligations.

    retire.

  31. hacker by Jacek+Poplawski · · Score: 1

    Famed hacker and master social engineer Kevin Mitnick has been commissioned to write a new book following the success of his first text The Art of Deception.

    Famed doctor and master of friendship Charlie Manson has been commisioned to write a new book following the success of his first text Medicine for Beginners.

  32. im a paid hacker by Anonymous Coward · · Score: 4, Interesting

    I'm an active penetration tester, have been for some years. I can tell you now that from all the testing i've completed (including lots of clients in the financial sector and govt.) I wouldnt even be entertaining the idea of remotely telling anonymous tale stories. The risk is just too great. And for a measily $200?

    Give me a break.

    When you've proven to a client that millions could potentially be stolen, the last thing you'd want to do is discuss it in a book, anonymously or not.

    1. Re:im a paid hacker by CrackedButter · · Score: 1


      As an an active penetration tester, what tools do you find the most useful for the job? Does one use a thumb with a fingerdom, the tongue or the good ole fashioned but ever so reliable, cock?
      Or does all one have to do today to become a penetration tester is look at the goatse.cx man wallpaper?

    2. Re:im a paid hacker by Anonymous Coward · · Score: 0

      I'm an active penetration tester

      no comment

  33. He is just covering his tracks !! by Pingo · · Score: 4, Insightful

    I think he needs the anonymous hacker contributions as a smokescreen for some of his old unknown hacks.

    This guy has probably done more than he is accused for and has got an urge to brag about all his hacks. Doing so might get him into more legal trouble and he needs some anonymous hackers as legal frontends. //Pingo

    --
    --- Linux or FreeBSD, it's like blondes or brunettes. I like both. ---
    1. Re:He is just covering his tracks !! by juuri · · Score: 4, Interesting

      Look this stuff is just crazy.

      I used to be very involved in the scene years ago under many names: juuri, syy, ^_, y, y-windoze and on and on. Mitnick was not this legendary figure people are making him out to be. Those who were around then know of others who did much more than him and got away with a fuckload more. Thinking he is using this as smokescreen is giving him some status as legendary.

      The truth of the matter is most hackers absolutely paled in comparison to stuff done by the phreaks of the 80s. Even before the rise of the script kids there was very little original stuff going on. One person would figure something out and use it for a few months before trading it to someone else and then it would enter the scene.

      You guys need to understand back then yp was everywhere and insecure, nfs was completely exploitable in many ways, telnet daemons were retarded (-fr00t anyone?), hosts abounded with +s in the hosts.equiv, firewalls didn't exist, source routing still worked and on and on. Even back then secured hosts were easily comprimised by finding a single account on a badly secured host, just like today.

      It always pains me on slashdot when these articles come up and people fall all over themselves to heap praise on people like Mitnick who were nothing more than petty opportunists with a good sense of trading. Mitnick getting caught also ended a lot of the fun for many of on networks; most people don't recall the extreme lockdown that went into effect on well.com and other community sites of the time.

      --
      --- I do not moderate.
    2. Re:He is just covering his tracks !! by zoeblade · · Score: 1

      This guy has probably done more than he is accused for

      You mean more than owning something that "looked like explosives" and some crystals? (At least, this is according to the documentry Freedom Downtime ).

    3. Re:He is just covering his tracks !! by phrogeeb · · Score: 1

      No kidding, Mitnick is so lame. I also used to be very involved in the scene, juuri maybe u remember me, i had many pseudonyms: j4x the h4x... PhorkPhreak ... MaZTer of DizAsTeR ... zeroCool ... once BackDoorThreat, but that was only once...

      I remember back in the day, there was no such thing as shadowed passwd files and almost every other machine's root password was "sex" or "secret." I was the first one to figure out that there was this little issue in sendmail having to do with a buffer overflow that would give ya root on the machine... I only told my very best friends on the very most elite of all BBSes....

      Why, once I hacked into the IRS using only a 36 baud modem, a laptop, and my ass. No kidding - let's see Mitnick type using his butt cheeks. That guy's such a poser.

      Juuri we should get together sometime for beers and reminisce about the good ol' days when well.com was leet and Mitnick hadn't already ruined all of our fun.

      --

      ------

      "Will the highways on the Internet become more few?" --George W. Bush, in Jan. 2000

    4. Re:He is just covering his tracks !! by paganizer · · Score: 1

      Take a look at juuri's slashdot user number, and shut the fuck up.

      --
      Why, yes, I AM a Pagan Libertarian.
    5. Re:He is just covering his tracks !! by cerberusss · · Score: 1
      It always pains me on slashdot when these articles come up and people fall all over themselves to heap praise on people like Mitnick

      I'm not praising him for his hacker skills, but I will praise him for the nice book on social engineering. It was clearly written and because of the separate short stories, easy to read.

      --
      8 of 13 people found this answer helpful. Did you?
  34. it's worked before by proradium · · Score: 4, Informative

    http://www.underground-book.com/ this style of book has been done before (in australia anyway) and with relative success. The best part about that book was how the author made it available for the public to d/l. an interesting read ...

  35. Easy Money by Jormundgard · · Score: 1

    Mitnick has called on retired hackers to come forward with their stories, offering a $500 (283) prize for the best story that makes it into the book, and a $200 payment for all stories that make the final draft.

    Meanwhile, he makes $500k off book sales.

  36. I knew it... by ayjay29 · · Score: 2, Funny

    ...he's got a job with the FBI now.

    --
    Offtopic, Inflammatory, Inappropriate, Illegal, or Offensive comments might be moderated up.
  37. Not heroes by Anonymous Coward · · Score: 0

    Hackers aren't heroes. They're the computer age equivalent of teenagers with spray paint. True, some of them only do 'good' things, but the vast majority are in it for the mischief they can cause and the notoriety thay might gain from their peers. These people are criminals. Mod me down to -10 if you like, but those are the facts.

    1. Re:Not heroes by Anonymous Coward · · Score: 1, Interesting

      Well, many people find graffiti a fascinating branch of art. Sure its done with other people's property, just like hacking, and that's why they are both illegal. But what is admired is not the defacement but rather the skill, the artwork.

    2. Re:Not heroes by proradium · · Score: 2, Informative

      hacker (from http://www.kernelthread.com/mac/apme/tools/)
      [originally, someone who makes furniture with an axe]
      1. A person who enjoys exploring the details of programmable systems and how to stretch their capabilities, as opposed to most users, who prefer to learn only the minimum necessary. RFC1392, the Internet Users' Glossary, usefully amplifies this as: A person who delights in having an intimate understanding of the internal workings of a system, computers and computer networks in particular.

      evil ??

  38. Bold highwaymen by AllenChristopher · · Score: 4, Interesting
    There have been a couple of ideas put forward in response to your question... my feeling is that Mitnick isn't famous because he was caught, but because he dared to go for the big score, and because he ran.

    Running from the authorities using his advanced level of hacking skill, creating new IDs and such as he went, having stolen the data for the intellectual thrill of it, not for financial gain, then improperly held by a vengeful government... That's a classic tale. I don't know if it's a true story, but that was the popular perception at one point.

    In the 18th century, there was, in England, an absolute adoration of the highwayman. There were courteous highwaymen like Dick Turpin, whose victims had only this regret: that they could not have met him under other circumstances and been friends. There were brutal highwaymen, like Jack Sheppard, who was noted for his violence and for escaping Newgate with fetters on his limbs. There were gallant highwaymen, like Claude Duval, whose arrest was supposedly mourned by women across the country.

    Other countries and that and other times have had the same respect for any bold thief. John Dillinger is the best modern example.

    And as for getting caught, the populace believes that if you live bravely enough as a criminal, you WILL eventually get caught. That's really the basis of the admiration. If you could simply escape the government by being strong enough, as in the 1200s, you'd only be feared as a danger to all. It's the assurance of eventual capture that gives living on the edge its glamour. This, in particular, applies to Mitnick where it wouldn't to a mere modern carjacker, because we know the carjackers aren't caught. There are so many muggers and rapist and straight-up burglars who prey on the populace directly and succeed that we can't respect them. We fear them. A bank robber or a hacker can go after the big score, the wealth of the very rich, and leave us entertained participants.

    There are, of course, plenty of major criminal hackers who do get away with it, as with any other crime, hackers we never hear about because they stayed safe, played it smart all the way. Some of them may be reading this now. Hi boys... you're assumed to be mean of spirit, not to have aimed high enough to get caught, mere embezzling rats or at most a sort of criminal investment banker. How does that feel?

    Eventually the statute of limitations will start to run out on modern hackers who have done some pretty cool things, and we'll start to read the full stories of the ones who did go for the big score and get away with it in the Net age, just as we now revere some of the early phreakers who dared and won. Until then, the successful hacker will remain the province of fiction.

    It's also interesting to note that in the 19th century, it was felt that the effect of the poems and plays about thieves had the same deleterious effect that comic books, rock music and video games were later held to have.

    This post is reacher for 600 words, though, and beyond this I might as well write a properly-researched article, so I'll leave it here.

    1. Re:Bold highwaymen by the+pickle · · Score: 1

      There are, of course, plenty of major criminal hackers who do get away with it ... you're assumed to be mean of spirit, not to have aimed high enough to get caught, mere embezzling rats or at most a sort of criminal investment banker. How does that feel?

      I would imagine that Andy Dufresne feels pretty damn good about it, actually.

      p

    2. Re:Bold highwaymen by Anonymous Coward · · Score: 0
      Running from the authorities using his advanced level of hacking skill, creating new IDs and such as he went, having stolen the data for the intellectual thrill of it, not for financial gain, then improperly held by a vengeful government... That's a classic tale. I don't know if it's a true story, but that was the popular perception at one point.

      Read Takedown.
      He has an advanced bragging skill.
      Little hacking skill.
      Tried to profit from the data he stumbled across.
      Ran once, had to be held...duh.

    3. Re:Bold highwaymen by ReallyQuietGuy · · Score: 1

      my god its sad that a post like this can only go up to +5

  39. I don't need to send a story in... by FyRE666 · · Score: 3, Funny

    ... I can take money out of Kevin's bank account any time I like ;-)

  40. Ummmm... by Ponfyr · · Score: 1

    So what happens if Kevin uses your story in his book but dosen't pay the agreed monies?

    Who is gonna sue him?

    1. Re:Ummmm... by Anonymous Coward · · Score: 0

      He's get's Hacked in to.

  41. Dr K's book by sparkes · · Score: 1

    If you don't like the thought of helping Mitnick make any more money why not help dr k with his hacker tales book
    Not only is Dr K a dude but he is also a little more in touch with the hacker scene. I particulary like his fuck computers let's hack talk and brumcon

  42. Form of Payment? by Joel+Bruick · · Score: 1

    I assume he'll be paying us...I mean, these "hacker" folk in small, unmarked bills, right?

  43. JAIL KEVIN by Anonymous Coward · · Score: 0, Flamebait

    Send Kevin back to jail!

    Hacking is wrong and evil. Look at the nimda worm and the blaster virus... all done by HACKERS! And now we are PRAISING Mr Mitnick? What next, give Kevin Poulsen a job writing about comp. security? Don't make me laugh. These guys were social leppers who destroyed thousands of lives with their needless hacking.

    SEND KEVIN BACK TO JAIL WHERE HE BELONGS!

  44. Money. by JVStalin · · Score: 2, Interesting

    Hackers would get more money writing for SysAdmin.

  45. A War story by DrSkwid · · Score: 1

    Back in the BBS days my leet friend was a warez courier. To facilitate this a certain amount of phreaking was required. At the time there was no Computer Misuse Act. He was eventually arrested. The cops had a list of all the alleged phone calls. Each one constituted a separate criminal offence. They had to read him the entire list of calls and he had to answer 'yes' or 'no' to whether he agreed he had made the call. It took them *ten* hours.

    It turned out the only thing they could charge him with was 'theft of electricity' and when it went to court he got fined 80.

    There was also the time another friend rigged the 'Stars In their Eyes' final when they included to new gee whizz internet voting as part of the viewer voting.

    How we laughed when Matthew Kelly (the child abuser!) said "we've had a phenominal response on our website".

    They've got a bit cleverer these days with cookies and IP logging but thank goodness for anonymizing proxies

    --
    There are places where the networks are not touching,and there are places where they are-Boeing's Lori Gunter
    1. Re:A War story by Dogtanian · · Score: 1

      How we laughed when Matthew Kelly (the child abuser!)

      For the record, that case was dropped- there's not a sniff of evidence that it was true. Do you think they'd have let him back on TV if there was even an ounce of suspicion?

      --
      "Slashdot - News and Chat Sites Deviant". (Click "homepage" link above for details).
    2. Re:A War story by DrSkwid · · Score: 1

      fair comment, I didn't know it had been dropped.

      I haven't seen him on TV since.

      Poor fella.

      --
      There are places where the networks are not touching,and there are places where they are-Boeing's Lori Gunter
  46. One of my favorite books about hackers by dr_canak · · Score: 4, Interesting

    I may have posted this link some time ago, but I think it's worth a repost. "Underground" by Suelette Dreyfus is, to me, a very interesting book looking at the hacking/cracking culture of the mid 1980's.

    It follows the stories of several hackers/crackers in Australia, Germany, and the United States. To me, it really reads more like an ethnographic anthropological study, than about hacks per se. But I found it very interesting. And best of all, the entire book is available for free:

    http://www.underground-book.com/

    in a download version.

    jeff

    1. Re:One of my favorite books about hackers by g00z · · Score: 1

      Crap, seems to be slashdotted already. Damn.

      I gobble up stories like these, and I'm sure I'll read Mitnicks compiled book when it comes out. For me, and I'm sure many others who were involved in the "scene" in the late 80's, early 90's this stuff is pure war story material. It's much like how people that were involved in any major war (WWII, Vietnam) get obsessive over movies like Full Metal Jacket and whatnot. You can see yourself in the people depicted in the stories.

      Back in the day, as another poster pointed out, security was next to nill and people were getting away with anything they wanted. I would guess that somewhere around 9,000 former hackers got away with all sorts of interesting exploits and were never caught. Reading those stories today would be great.

      Gotta go. This telenet account I dialed into from a PBX is about to wrap around it's billing cycle and die. Keep it k-rad.

      --
      "The Wright brothers were the first to fly with a heavier-than-air machine, but boy did they have a lousy plane"
    2. Re:One of my favorite books about hackers by SolubleFrank · · Score: 1

      They made the book into a short doco/film that aired on the ABC earlier this year.

      Overall it was quite interesting, but the pedantic among us would find a few inconsistences.

      --
      Feed me a stray cat.
  47. Make it better than the first one by NaCl · · Score: 1

    I was not expecting much from the first book, but I must say the first book is a beautiful piece of corporation crap. It's not computer oriented, it's more like "buy my book, make your company better".

    "The Art Of Deception", I know what you mean, Mitnick.

    --
    I shot the sheriff
  48. story by Anonymous Coward · · Score: 0

    0nc3 up0n 4 71m3...

  49. Re:Crazy Legal Question? by mummers · · Score: 0

    Now, I know Mitnick's explicitly asking for tales from retired hackers but what if...
    ...Retired hacker sees potential for making a few $s. Decides to come out of retirement. Hacks. Retires again. Sells story to Mitnick as a, now retired, hacker.

    IANAL but does this then amount to incitement to perform a criminal act?

    --
    --This isn't a man who is leaving with his head between his legs.
  50. A story by lalonso · · Score: 0

    One time I hacked the Slashdot moderation system and gave myself a +5 Funny.

  51. My Story by Anonymous Coward · · Score: 0, Funny

    So this windoze box is just staring me in the face, begging to be hacked, so I tried CraKit.exe, but that didn't work. But being a resourceful hacker, I didn't give up. I ran CraKit2.exe. But that didn't work either! Man this stupid box was resisting all my hacker powers. So I was like "Dude, what's your password??" and he told me.

  52. Not so glam... by rufus_tuesday · · Score: 1

    If this book ever sees the light of day it may just shatter a few myths about how exciting or otherwise 'hacking' really is.

    1. Re:Not so glam... by paganizer · · Score: 1

      Hmm.
      Back in the day (yo), it was a lot more exciting, because you didn't have quite the same penalty/reward ratio you have today.
      Today, I assume it would just be (hypothetically, of course) scary.

      --
      Why, yes, I AM a Pagan Libertarian.
  53. Mitnick and editing by dysprosia · · Score: 2, Funny

    I wonder whether Mitnick will have to edit and typeset some of his work on a typewriter, since he can't touch a computer...

    1. Re:Mitnick and editing by Anonymous Coward · · Score: 0

      Well, ummmm...actually, he can touch a computer.

  54. I keep hearing about crime... by Anonymous Coward · · Score: 0

    But watching CNN I don't know what crime is. Is it crime to do things or is it crime to report about them like CNN does?

  55. kevin MuSt've read BusinessWeak's(tm) outsourcing by Anonymous Coward · · Score: 0

    article?

    there's a rumour that both he, & robbIE have been .converted into corepirate nazi clones/puppets, & have joined fuddle's phonIE ?pr? ?firm? bouNTy hunter (screw your 'frIEnds' for monIE) program?

    has anywon tried robbIE's gnu 'dating' service yet? is the girl in the ad really a lonely geeky chick?

  56. Easy! by Anonymous Coward · · Score: 0
    so why does he get all the attention?

    Because those thousands of hackers much better than him want it that way.

  57. Re:Wait a second.....or a comic strip. by eggoeater · · Score: 3, Informative

    That's the model that Scott Adams has been using for about 15 years with Dilbert. He ran out of ideas after the first two years but at that point he was popular enough that people sent him screwy stuff that was happening in cube-farms. Now I admit he is brilliant at putting them in a humorous context, but they're not necessarily all his ideas.

    This sig best viewed in a drunken stupor.

  58. PGP/GPG Keys? by MikeBabcock · · Score: 1

    Does our friend Kevin have a PGP/GPG key that he would like used for these stories? I'm assuming many FBI resources will be concentrated on his ISP's chain of routers to the Internet to compromise the identities of any 'good' hackers that write in.

    I'd hate to stifle the book, and can almost guarantee that I'll buy it, but I'd like to make sure that people are able to protect their identities and not unwittingly reveal incriminating information about themselves.

    --
    - Michael T. Babcock (Yes, I blog)
  59. Yawn... by musicscene · · Score: 1

    Kevin has no spotlight any longer... time to actually make money? Ha! Welcome to reality.

    Can someone say, "Captain Crunch"?

    --
    "I'm not ashamed I can't function in society like I'm supposed to." - Paul Westerberg
  60. Watch out by CoreDump01 · · Score: 1

    wget http://nero-online.org/norway.jpg Note: This is not a picture in his sig, but a html file with lots of vbscripts in it. Dunno what it does, but since he is disguising it as a .jpg it can't be anything good.

    1. Re:Watch out by Anonymous Coward · · Score: 0

      That's just because "she" is just another karma whoring faggot. Mod fags down.

  61. You should see the clever hack I pulled on Mitnick by Anonymous Coward · · Score: 0

    He was pwned, it was freaking hilari -- Kevin, where are you going? Kevin?

    Does this mean I won't get $500?

  62. If you do this deal, you're an idiot by Anonymous Coward · · Score: 0

    $200..he's going to make a lot more than that on this book. The man should still be in prison and he should NOT be profitting from what he did. Why all the morons rallied behind this criminal is beyond me. He is no better than any OTHER spammer or hacker. People like him are what is slowly destroying the internet.

  63. Why these books are good by tarnin · · Score: 4, Insightful

    For people like us (slashdotters) these books are mostly tales and overly obvious statements. Interesting and sometimes fun to read. That's about it.

    To people NOT like us (read: small/mid company admins and even some larger company admins) alot of this is actually an eye opener. Case in point: Some of you may know that I work for a smaller, privatly owned ISP. Because of this, we cater to a bunch of mid/small businesses. I have suggested his first book for them to read. I have gotten no less than 20 call backs after they read the book with statements like "Wow, I never even thought of that!" and "Thanks for the book tip! Helped me out alot and we have tightned up security with our staff." You're lucky to find a semi-competent admin in companies this small (or an admin at all) let alone one who understand or has even heard of social engineering or any type of specific attack out side of what the main stream media reports.

    Keep in mind that alot of admin in these companies have heard DoS and DDoS before, maybe even the names of a few well know worms but they don't even know what they stand for or what they do. They are nothing more than the catch phrase of the week. Books like this are pretty invaluable to them as they are not written from a tech stand point (Hardening Cisco comes to mind) and are eaisly understood and easy to put into practice by someone who is the admin because they know what HDD stands for or were hired on the lowest possible salary.

    Don't get me wrong here, these are not the end all be all security books but they are a great boon to the customers that I service.

  64. Slugging Average (offtopic) by IronicGrin · · Score: 2

    >Actually your batting average would be 1.000. 1 at bat >divided by 1 hit = 1 Totally offtopic. Bill James would slap you in the head. The original poster referred to "slugging" average, not "batting" average. If you were up once and hit a home run, your SLG would be 4.000 and your BA would be 1.000. Batting Average = H/AB Slugging Percentage/Average (SLG) = (H+2B+2*3B+3*HR)/AB Sports may be anathema to most Slashdotters, but sabermetrics oughta be geeky enough for anybody. [oddly, this is my first post ever...]

  65. This is cover for reporting HIS OWN exploits... by Curious__George · · Score: 4, Insightful

    People are getting all righteously indignant and aren't seeing the real purpose of this offer. By appearing to anonymously post OTHER'S stories, he will be free to publish HIS OWN stories under some cover. He will be able to use the journalist's right to conceal the names of his sources to protect himself - and yet still tell his stories. I'm sure he will still use a few others, but the only ones that he can know really happened for sure are those HE performed.

    Curious George

    --
    ***General Consultant to the Human Race*** My opinions are free. You get what you pay for.
  66. Ho hum by fw3 · · Score: 3, Insightful
    As somebody suggested above, the likely actual motivation for this is probably Mitnick's restriction from profiting on describing his own criminal activities.

    As I see it Mitnick remains of the same mindset as when he first showed off his cracking skills to a group of peers and was surprised when they turned him in.

    Among his various complaints about his treatment by the Feds are that he was held without bail (gee, can you say 'established flight-risk'?), and that they held onto all of his computers (gee, after he declined to provide the encryption keys needed to access them as evidence?).

    He's also clear about being bitter toward the author of 'Takedown' (advice, "never get in an argument with someone who buys ink by the barrel and paper by the train-car") and Shimomura(sp?) (Let's see, you break into lots of machines, eventually you come up against someone better'n you and now you complain that they exact some revenge?)

    His notoriety seemingly guarantees a certain audience for he and his publisher to profit.

    Personally I've got no desire to help this guy along. In the excerpts from his book he has the brass to include himself in the 'hacker' ethic of places like LCS, Berkeley, JPL. Sorry, that image doesn't pass.

    --
    Linux is Linux, if One need clarify their dist: <Dist>/GNU Linux
    bsds are of course just BSD
  67. dodgy territory by Cenuij · · Score: 1

    I would have assumed most blackhats wouldnt need a cash incentive to propagate their infamy. More than that though, I'm not so sure this is a good move at all to pen a book of this sort. While i am of the opinion that security through obscurity is no security at all and that most arguments will support this; Mitnick may feel inclined to glorify some of these cracking stories. This might surely encourage budding crackers to continue with their attempts. Not big and not clever.

    --
    my other sig is written in brainfuck ;)
  68. Re:'3' filled in for Crime / Not Quite Correct by ryanr · · Score: 1

    Nor 5. It's illegal for one to profit from their crimes, Son of Sam law. He can't write his own story, at least not for several more years, which is why he needs stories from other people.

  69. The title? by LordK3nn3th · · Score: 2, Funny

    Chicken Soup for the Hacker's Soul.

    --

    ---
    Never criticize religion on Slashdot. You will be modded down for "Troll" no matter how factual it is.
  70. statute of limitations assumption by way2trivial · · Score: 1
    and five years from now, when the patriot act iv is released, and the terrorism clauses include hacking and no time limit?

    Have no trust that yer asses are covered by such limitations. until death

    --
    every day http://en.wikipedia.org/wiki/Special:Random
    1. Re:statute of limitations assumption by vegetablespork · · Score: 1
      Ex post facto. Can't change a statute of limitations or define a crime retroactively in the U.S.

      Yet.

      --

      Call (206) 338-5780 COLLECT for information about a genuine BA, BS, MA, MS, MBA, or Ph.D.

    2. Re:statute of limitations assumption by way2trivial · · Score: 1
      bullshit.. they do it with terrorism.
      breaking into a computer is 'hacking' with a X sentencing guideline and a Y statute of limitations..

      if a DA finds out at y+1 that a guy in his district hacked boeing.com, he'll file charges under something other than hacking laws that have expired..

      something like terrorism laws that have a sentencing guideline of x^2

      http://www.sacbee.com/content/news/projects/libert y/story/7989769p-8926319c.html

      --
      every day http://en.wikipedia.org/wiki/Special:Random
    3. Re:statute of limitations assumption by vegetablespork · · Score: 1

      Reclassifying the crime, while a workaround, is not retroactively lengthening a statute of limitations. Sort of like charging the LAPD officers in the Rodney King affair with violating King's civil rights after failing to obtain a legitimate conviction in the first criminal trial isn't double jeopardy.

      --

      Call (206) 338-5780 COLLECT for information about a genuine BA, BS, MA, MS, MBA, or Ph.D.

    4. Re:statute of limitations assumption by way2trivial · · Score: 1

      I agree, it's not retroactive lengthening of a sttatute of limitations. but if it looks like a duck, quacks like a duck.. it's a chickenshit fact of the legal world..

      --
      every day http://en.wikipedia.org/wiki/Special:Random
  71. Here is the Best Story by Brown+Eggs · · Score: 1

    You know, once I got a hold of this thing called the Legacy Key, which let me into any door in my high school. Me and my freshman buddy decided we would break into the school's computer and change our grades. We called the computer maintenance people to get the passwords to the computers. Then we broke into our high school using the key, got to the principals office, and started changing grades. But we got locked out of the computer midway, and we had to bail. Oh wait - that was just an episode of 90210.

  72. Hacker or Cracker? by radar2k2 · · Score: 2, Informative

    It sounds like this book is going to be about crackers and cracking and not hackers and hacking.

    Common usage tends to blur the meaning between the two concepts but I thought here on slashdot at least there was some instance that the two not get confused.

    1. Re:Hacker or Cracker? by radar2k2 · · Score: 1

      That should be insistence not "instance". My bad.

    2. Re:Hacker or Cracker? by Anonymous Coward · · Score: 0

      Enough of this jackassery. A criminal is a criminal regardless of your labelling system. hacker / cracker / ass master. Whatever.

  73. From the article: "...could start a nuclear war" by Daniel+Baumgarten · · Score: 2, Interesting
    Fame found Kevin Mitnick when the US government made an example of him, incarcerating him for five years for computer based offences. Four of his years inside were served before he was even tried, and he was forced to endure eight months in solitary confinement because "the government said I could start a nuclear war if I had access to a telephone," Mitnick says.
    If it really is possible to start a nuclear war from a telephone, I must ask, who's the genius who attached our nuclear weapons systems to the phone grid?

    Seriously. There's no way somebody able to handle the task of organizing such a large force would be idiotic enough to give nukes phone lines. Then again, we are talking about the United States government...
    --
    "Screw slashdot." -- Linus Torvalds
  74. Not hacking, but still a story by Anonymous Coward · · Score: 1, Interesting

    Screw the money bit. Just tell stories here.

    Here's one from around 1992. I was in Houston, talking to a friend just outside the city limits. While we were talking, my scanner landed on a cordless phone nearby. It was loud enough for him to hear, and we started hearing digits.

    I had a modem that would decode DTMF, so I patched it into the call and told it to start decoding. We continued listening, and sure enough, the chick on the other end made more calls. At some point she called a pager, so we got that number. Then she put in the number to call, which of course was hers. So now we had both of those.

    So a minute or two later her phone rings, and it's the guy she paged. They start talking about stuff, and meanwhile my friend has grabbed his second phone line and has started paging this guy. He's plugging in all kinds of wild stuff, and we can hear it going off over the phone. "Damn baby, my pager is blowing up!"

    Then he starts in on the actual chick. She has call waiting, so we hear it when she clicks over. She'd say something about going out for some burgers, and he'd ring up and say "don't eat burgers, eat chicken", or something like that.

    The best part is that she tried to use *69 (swbell having recently added the CLASS stuff), but it failed since he was on another telco. Those two companies didn't have the interconnects working for that yet, so he was unaffected by any of it.

    He didn't harass her for very long, but it was particularly amusing to me at the time. All it took was a scanner and a way to elude the most basic of call return services. Obviously I didn't do any of the calling, since my numbers would have been returnable. I just sat back and listened.

    1. Re:Not hacking, but still a story by Anonymous Coward · · Score: 0

      What's funny is that I can audibly decode DTMF digits. Yes, with nothing more than my human ears, I can state what digits are being dialed. I've got similar stories to the one you tell here. It's just fun fucking with people, whether it's 'hacking' or not!
      hehe

  75. Oh Come On, Get It Right by CrankyFool · · Score: 1

    Mitnick's not a hacker. We keep bitching about people who use 'hacker' when they mean 'cracker' and yet we ourselves don't use the right term?

    Mitnick's a cracker, pure and simple. If he didn't make his living back then off of crime, he sure as hell is did it later by writing a book about it.

    I don't see much of a difference between this book and "send me your stories of how you robbed some people in an alley and I'll give you $500." Except, of ocurse, that a bunch of immature of hypocritical punks will now scream how clearly, cracking is nothing like a real crime. I mean, information wants to be free! And, umm, we're doing these companies a favor!

  76. This one time ... by maelstrom · · Score: 2, Funny

    I haxx0red the GIBSON. Ph33r m3, I AM 31337.

    --
    The more you know, the less you understand.
  77. $200 is pretty standard by brokeninside · · Score: 1
    $200 is about the going rate for getting a short piece published in a compendium. You can call it a rip-off if you like, but the fact of the matter is that must of the people submitting stories would be unlikely to get published without the draw of Kevin's moniker on the cover. Given a choice between getting $0 and getting $200, I think most people would rather have the $200.

    Those who are convinced that the $200 is a rip-off need not submit their stories and try to find a better price elsewhere. I would be quite surprised to see very many published outside of Kevin's book, let alone published for more money than Kevin is offering.

  78. Oooh! I can submit one! by cellocgw · · Score: 1

    Gee... think a cheap trick, written in VAX command line script, to emulate logons and steal passwords will win me anything? :-)

    --
    https://app.box.com/WitthoftResume Code: https://github.com/cellocgw
  79. Look at it from the other point of view by brokeninside · · Score: 1

    How many of the authors submitting stories could actually get them published somewhere else for more money than Mitnick is offering?

  80. Since when is publishing social engineering? by brokeninside · · Score: 1

    There are a good many publishing houses that routinely produce books in this format and pay authors about the same amount ($200) per piece.

  81. Oh yeah... by nametaken · · Score: 1

    This is clever...
    Uhm, I rooted the primary node on the carnivore system... here's the complete process I used. Yeah, I am l33t.

    Now, please send check to:
    Name B. Real
    123 Myhome St.
    Normal, IL

    Might as well tell them what time you're going to be home too.

  82. MOD PARENT DOWN by Anonymous Coward · · Score: 0

    Don't click on the users www URL. Her (his) url is nothing more than a fancy vbscript goatse link.

  83. washed up... flame or funny,,? by Dragoonkain · · Score: 0

    kevin mitnick is a washed up cracker in dire need of money.. any real "hacker" with a mind of their own would not participate in this or exposing themself in any public domain. Mitnick is the fucking britney spears of the cracking world..

  84. active penetration tester by Anonymous Coward · · Score: 0

    go penetrate this.

  85. Re:Crazy Legal Question? by Crypto+Gnome · · Score: 1

    That would be hard to argue, as he's specifically asking for "bad things you've done in the past so that I can educate people how to not have them happen again".

    --
    Visit CryptoGnome in his home.
  86. A lousy $200? by krisamico · · Score: 1

    Who is going to risk incriminating him or herself for a mere 200 bucks? I wouldn't even walk across the street for that. That notwithstanding, who would want to tell their story to a hacker that's been compromised already? Were I one who "hacks", I would not even give the time of day to a hacker who has gotten pinched by the feds.

  87. good hack by Anonymous Coward · · Score: 1, Funny

    My plea agreement restricts me from telling stories of my own hacks until January 2010, which is why I'm looking for stories from people like you.

    Heh, smart way to get around that plea agreement. Write a book of stories about "other people's" hacks, and, umm, don't say what their names are.

  88. Payment... by jsnikeri · · Score: 1

    I don't understand how he is going to pay the contributors back anonymously. I sure as hell don't consider cashing a $500 check from kevin mitnick at my local bank very secure.

  89. Sting Operation by Anonymous Coward · · Score: 0

    Doesn't this sound like a sting operation?

  90. I 0wnz0r3d j00 f00s by emtboy9 · · Score: 0

    So like, there I was in this Gibson, and it was like, leet d00dz! I was like, looking through these files and was like finding like this stuff, and these files taht were like really leet and I like downloaded them and stuff...

    I dunno... on the one hand, script kiddies by the thousands sending in tales of hacking some other kids BBS back in the day... oh wait, most script kiddies arent old enough to know what a BBS is anyway... never mind.

    But either way, I will probably pick up a copy when it is released, if for nothing other than the entertainment value.

    --
    "Our funds have never taken part in toxic or death spiral convertible financings of any sort" -BayStar's managing partne
  91. Definition of computer terrorism in the UK by pchown · · Score: 1

    The Terrorism Act 2000 has several requirements for a computer break-in to be considered a terrorist act. It must be "designed seriously to interfere with or seriously to disrupt an electronic system" which would exclude some break-ins. For example, someone who just looked around would not be caught. DoS attacks are caught but the downloading of information may not be.

    The act must also be "designed to influence the government or to intimidate the public or a section of the public" and be "for the purpose of advancing a political, religious or ideological cause". This is going to exclude the huge majority of computer crimes. Even some political hacks will be excluded. For example, when al-Jazeera's website was hacked, it was for the purpose of advancing a political cause. It was not, however, for the purpose of influencing the government. It was for the purpose of influencing the public, but this is not enough; notice the different wording for acts aimed at the government, and acts aimed at the population.

    The DDoS attack on spamhaus.org is an interesting case. It clearly satisfies the first part of the test, seriously disrupting an electronic system. It is probably intended to intimidate people who are involved in campaigning against spam. Is spam a political or ideological cause? I don't know; I suspect only the courts would be able to answer that.

  92. Watch out by Moeses · · Score: 1

    Perhaps Mitnick made a deal with the Feds to nab more hackers and this is how they're getting their leads?

    I wouldn't contribute anything with too many real details.

  93. I was thinking the same thing by Colymbosathon+ecplec · · Score: 1
    When I read this I thought "where's the incentuve for anyone to come out"? Say I've already been paid for a job, and the the sum offered for the story is not even worthy of being considered a pittance, especially considering the potential ramifications of betraying my clients trust (we're going to kill your family first-then we'll decide what to do with you). And I don't need to brag, because I don't care what others think. Furthermore, the attention would hinder my progress. Not that I've ever broken any laws *cough cough*

    I just don't trust Asscraft and Ronald Dumsfeld and the whole "Patriot Act" gestapo setup. Crime Pays, and They Know It.

    President Bush to Liberate Alaska

  94. PINGULAR = SIR HAXALOT by Anonymous Coward · · Score: 0

    Good lord, "Sir Haxalot", do you ever stop being an idiot?

  95. "... and who should I make the check out to?" by ChiaBen · · Score: 1

    Anonomous stories. Unverifiable, anonymous stories. Hrm, and who should I make the check out to, mr.....? Sounds silly to me.

    --
    "If voting could really change things, it would be illegal. " - Revolution Books, NY
  96. My personal Mitnick story by PopStar · · Score: 2, Interesting
    I know that I am coming into the discussion much too late for most people to see this comment, but when I saw this story I thought that I should share my personal Kevin Mitnick story.


    When I was going to school, I worked at Kinko's. I worked at the branch in Thousand Oaks/Westlake California, which happens to be a more upscale community. We used to get all sorts of notable people coming in to get copies. While most of my co-workers were always freaking out when the more mainstream celebrities would come in (Tom Selleck, Hulk Hogan, Heather Locklear, Will Smith, and Martin Lawrence are a few that spring in to mind), I was always more impressed by some of the more obscure personailities that would come in, including my personal favorite Bas Rutten - who, incendentally, is such a nice guy that none of my co-workers would believe me when I told them what he did for a living.


    However, the one "customer" that was the most interesting was Kevin Mitnick. For those of you who do not know, Kevin lives in Thousand Oaks. At the time, he lived about a quarter mile from Kinko's. He came in just about every day over a three month span. Myself and one of the graveyard guys were the only ones who even knew who Kevin Mitnick was. He used to come in, with a laptop, and set up over in one of the corners. He would never plug into our network, which was kind of odd, so everyone just assumed that he was coming in just to have a place to do some work.


    One night, our cleaning crew discovered an 802.11b wireless internet hub hidden under a table. It was plugged into our network. The next morning, we unplugged it (FWIW, I believe the graveyard guy ended up taking it home). That day, Kevin came in, went to his normal spot, and started up his laptop. He started looking around, real confused, and walked over to where we had found the hub. When he saw that it was gone, he started looking really panicked. He went and picked up his laptop and left, all the time holding a piece of paper up to hide his face from the cameras. That was the last time he ever came in.

  97. How does it feel by AMystery · · Score: 1
    you're assumed to be mean of spirit, not to have aimed high enough to get caught, mere embezzling rats or at most a sort of criminal investment banker. How does that feel?
    As I sit here enjoying the weather in this extradition resistant south pacific island my swiss banker is busy keeping track of the 23 numbered accounts, each with exactly 17.5 million. For me it feels warm and relaxed to be of such mean spirit. How about you? How does it feel to be noble and enjoying the winter weather from your one room apartment with a partial view or if you've already been caught, to be enjoying the attentions of your roommate in whatever maximum security prison you deserve for stealing credit card numbers?
  98. Humans, luckily, can feel more than one thing by AllenChristopher · · Score: 1
    There's a distinction between how a success feels about the money and conditions of life, and how he or she feels about being hated and envied.

    For example, I'm sure Gates is quite happy with his money and power... but I wonder how he feels about being cursed by hundreds of thousands of people every day.

    So the question remains... how does it feel to be feared and reviled by so many?