Slashdot Mirror
A Peek At Script Kiddie Culture
Brian Bruns writes "NewsForge is covering an article on the Script Kiddie Culture, in an interview with my co-admin Andrew Kirch. It provides insight into a culture that not many people fully understand, or get to see."
Search, copy, paste.
Woho! Im leet!
..or want to see.
Use Minidisc? Join the Minidisc.org forums.
...or care about.
Are people looking for some Gibson-esque secret cabal of script kiddies, who are building operating systems at age 8, can speak in hex, and have secret h4X0r access to everywhere?
I think people watch too many movies. Or is defining 'script kiddies' as a culture an attempt to rationalize the level of ignorance we experience when trying to comprehend all of computing technology? Since nobody can be good at everything, is it a mental safety valve to create uber-computer users, who 'get it', who can do 'cool things', who are 'in the know'? Isn't this the same thing as creating Gods to explain otherwise unknown natural phenomena?
I want to delete my account but Slashdot doesn't allow it.
The most amusing implications are:
a) Its a culture.
b) Someone would actually want to see it.
10 years ago I did the script kid thing for a bit (before having a life). Its a bunch of kids who's parents are not really involved in their lives, and have nothing better to do than look for a digital mate by typing "A/S/L?!?!??! and talking about their privates.
I could seriously care less.
Where do I sign up for this scam?
The quote that says young adolescents have no social life is pretty damn funny.
Best Community for Gaming and Gadgets!
_xXx_h4x0r3rZer0_xXx [#31337] d00d sl4shd0t p0st1d 0ur sh1zzl3 m4h n1zz73
XxX-|-Ne()-|-XxX [#31337]
XxX-|-Ne()-|-XxX [#31337] l4m3rz!@_!@
MoFscker
Original
(laugh... it's funny)
In soviet russia, kiddie scripts you!!!
Look no further.
where they mention that "no one wants to download grsecurity" or "tru64 is where it's at" or "some kiddies target Solaris and Irix because that usually means a big pipe".
Try a little reading comprehension first.
THIS THING CAN TURN ON A DIME, MACROSSZERO STYLE ALSO FUCK BETA, ~NYORON
From what I understand of script kiddies they mostly do stuff from sheer boredom (what ever happened to the good ole outdoors?) and for the extra pseudo attention they get from it. Surely by attempting to interview and do articles on this 'culture' they are just pandering to the desires of these script kiddies. And rather than helping them to realise that they need to grow up etc, the extra attention is only going to make them have a greater desire to wreak havock with their 'leet skills'
If at first you DON'T succeed, Skydiving is NOT for YOU!!
Back in my day, we didn't have computers. We would see how long we could balance on a flagpole or we would see how many goldfish we could fit in a telephone booth. Hell, once I danced the Charleston on a flagpole for 12 hours. Won me a brand new LaSalle. Now, pranks and mischief are all electronic, done with them newfangled computers by them so called script-kiddies.
Takes the fun out of being a kid if you ask me. Hmmmpphh
Unknown host pong.
Is this guy just making stuff up as he goes along. I swear he comes off like Gibson at GRC for christ sake. Secret groups of anti-social 11 year olds taking down whole isp's because their male "competition" for the heart of an equally dysfunctional haxo4 chica is a subscriber.
Back in my day we used to play with a soldering iron and a box of kleenex, now-a-days you rugrats just open up hax.exe and go at it, a terrible way to carry on.
I never would have guessed!!
Please tell me someone accidentally hit the submit to post this article onto slashdot ;)
From an admin's perspective, a DDoS is the scariest attack of all. There's nothing you can do to prevent it, and nothing you can do to stop it.
An admin whose network is being DDoSed really doesn't have much hope of doing anything. Their inbound communication line to the outside world is being flooded with so much garbage information, the signals that they want to get over that line are simply drowned out. Incoming connections can't get a turn going down the pipe, so they time out. He's powerless, everything in his shop is nice and secure, but can't function without geting any useful requests. That poor admin can call his ISP... but there's really not much the ISP can do from their side of the line.
The real problem in a DDoS attack is not that the final victim's security has gone wrong, but the security of other computers elsewhere on the Internet have been compromised, and they've been turned into zombies contributing to the DDoS flood. The DDoS will not subside until nearly all those machines are all patched, but that's not something the victim's people can do. They have to wait for the Anti-Virus providers and software providers to knock down the flamethrowers that are all being shot in the same direction.
Any time you're relying on third parties who don't work for you to save your business, you're really up a creek and are throwing yourself on the mercy of the tech world. Hopefully they'll save you in time, because there's really not much you can do from your own datacenter.
Losers are losers are losers are losers. It doesn't take much more talent than it takes to break into a department store and steal stuff. People who depend on their software vendor to keep crackers out have no one to blame but themselves when script kiddies attack, but what those kiddies are doing is still wrong.
We had a script kiddie (didnt know it at first) trying desperatley to hack several of our servers, I reckognized the IP block he was on and called up my buddy who was the sysadmin for the ISP he was connected from, Soooo he gave mne his name and address. Me and my dad Im 6'2 230 lbs and my dad looks like george carlin on steroids, well we knocked on the door of a very nice house at about 4:00 pm , to the door comes a pimpled faced rugrat about 14, I told him we were here about the hacking attempt on our server, the kid turned purple, andd I honest to gfod thought he was gonna piss himself , we had a nice little discussion and told him the next call was to the FBI for attempted bank robbery as we hosted several credit unions, never had anymore problems from this fellow. We did take a baseball bat along just in case he was bigger than we were , This was going back some time 96 or so.
Since when does "stupid" count as a culture?
Well back in my day we swallowed goldfish...
From excellent karma to terible karma with a single +5 funny post...
"As a rule of thumb, unless you have paperwork from a judge saying you can touch a compromised machine, or you own the machine in question, don't touch it.".
What the fuck are you reading?
I think I have a comparison to sum this up.
Script Kiddies is as much a Culture as 1337 5p34k is a Language.
Buy Steampunk Clothing Online!
"Dude that DOS attack was so seven-three-three-plus sign!"
anti-lameness anti-lameness anti-lameness
I noticed that microsofts statment that (if|when) Linux gains as much popularity as Windows, we will find that it is not inherintly more secure because "Using Linux does not make you defacto smarter"
Reading this I knew that SOMEONE would bring it up, so I might as well be the first
I think that as linux sits right at this moment, it does make one smarting to be using it, simple because it requires the user to be more aware of their system. I do not see this changing in the near future either, not because of the technical inability of linux to emulate Windows automagic configuration, but because the people who write the software do not seem to want that (I know I don't).
So does this mean Linux is more secure by default? I would have said yes if you asked me a week ago, but this last weekend I was at a LAN party and installed Linux on several machines of friends who were interested in learning about it. What I saw made me realize that in the hands of an average (l)user, Linux can be LESS secure
The thing is, even after my lecure I still had people choosing root passwords like "poopoo" and "iforgotit". Not only that, after a brief tutorial on how to do basic system administration through YaST (I installed SuSE 9 on their boxen), I had at least 3 people go in and turn on every single network service that was offered. One of these people even set up his box as an anonymous FTP server with read and WRITE priviliges to the root directory!
At the same time I had another guy logging on to IRC as root and downloading files, while I was taking care of these machines someone else had already created a user account and given the user name and password out to several people in his AIM buddy list.
I'm the last person to say that we should include less software with a distrobution. I think the fact that most distorbutions contain a complete operating environment is a good thing, but with a little bit of knowledge these people had already made their system much much less secure than a windows box with the security updates applied would have been.
The whole point of that rant being (other than just getting that off my chest), as linux becomes more popular I can easily see scripts writen to take advantage of clueless linux users just the same as there are scripts to take advantage of clueless windows users.
Famous Last Words: "hmm...wikipedia says it's edible"
After reading ths, you do start to think what would happen if someone big like CNN or MSNBC ran a story on the FBI not bothering with a bunch of kids who seem to be more dangerous then Al Queda. Honestly, do you expect another 5 or 6 terrorist attacks tomorrow? What about 5 or 6 people cracking into servers, messing with corperations, DoSing government servers...
The Yasashii Syndicate ||
Is there an equivalent to what I've been telling the Hot Topic goth kiddies...
... for the script kiddie set?
"Go home, wash that sh*t off your face, and apologize to your mother"
Damn kids. The need to be beaten with an old Hayes modem. This doesn't sound all to far off from what some of the old-schoolers used to do and now suddenly it's a culture?
God, read a book.
Like "terrorists," "script kiddies" and other "h4x0r" types just do this sort of shit for the notority and publicity. Unlike terrorists, they have no real goal. Therefor, once the publicity, which creates a justification for the activity, disapears the activity will become unprofitable in the sense that fame is a comodity which is worth something.
It'd be better just to ignore the little fuckers until they grow up and go away. At least, that is how it seems from where I sit.
Obviously not what he is quoting.
I used to use AOHell back in the day. Does this qualify me as a script kiddie?
Save your IQ from dropping a few points by not clicking the link in that article. :-O
Beware: In C++, your friends can see your privates!
0wr F4th3R, wh0 0wnz h34\/3n, j00 r0x0rs! M4y 4|| 0wr b4s3 s0m3d4y Bl0ng t0 j00! M4y j00 0wn 34rth juss |1|3 j00 0wn h34\/3n. G1v3 us th1s d4y 0wr w4r3z, mp3z, 'n pr0n thr0ugh a ph4t |. 4nd cut us s0m3 sl4ck wh3n w3 4ct lik3 n00b l4m3rz, juss 4s w3 g1v3 n00bz 4 l34rn1n wh3n th3y l4m3 2 us. Pl34s3 d0n't l3t us 0wn s0m3 p00r d00d'z b0x3n wh3n w3'r3 t00 p1ss3d t0 th1nk 4b0ut wh4t's r1ght 4nd wr0ng, 4nd 1f j00 c0uld k33p th3 f3i 0ff 0wr b4ckz, w3'd 'pr3c14t3 1t. F0r j00 0wn 4ll 0wr b0x3n 3v3r 4nd 3v3r, 4m3n!
Timothy said it best:
from the culture-is-a-strong-word dept.
the point of Dexter's laboratory. Some kid driven to demented acts of violence and creativity by the inane action of his older sister.
"She's a scientist and a lesbian. She's not going to let it slide." Orphan Black
http://myboringlife.com/
She use to have guys ping flood each other to prove their love. Her handle was akitten. Time had an article on her too. OH and http://www.misslavey.com is another
Krikey... here we see the script kiddie in his native habitat, his parents spare room... look at how he asks for warez and 733t scriptz in AOL chatrooms...
We musn't approach too quickly or we'll startle the little feller...
Build Your Own PVR/HTPC news, reviews, &
Everyone please take the time to configure your gateways to drop outgoing packets with spoofed source addresses. This doesn't take long and potentially saves everyone else a ton of grief. Logging these funny packets is also a good way to tell if a machine on your network has been compromised.
...is that some of these kiddies seem to strive to bring down the one thing that gives them any sense of purpose.
Like the attacks on the root servers, well done, bring the domain name system down, now update your hosts file by hand when you want to visit a website/chat on irc to your mates about how 31337 you are.
I am NaN
...the interviewed party sounds like he's making things up as he goes along for greater exposure and interest. There is nothing there that jumps out to me and says "liar", but at the same time, I think that the interviewee might have been, er thinking about this topic too much and might be blowing things out of proportion just a little bit.
Do people on IRC attack conference line services? Oh yes, I've seen it being done several times, and FoF is something of a wheel in this scene. Are said hijacked conference lines used for neferious purposes? I'm sure once in a while, but really they are mostly used for the purposes of socialization... same as has been the case with phreaking the past.
What do people do the first time they phreak? They call a faraway place and talk to someone just because it is neat to talk to someone in England, or Fiji or somewhere far away without cost.
What is the primary use of these phreak'd conference lines? Socialization, a way for people who are geographically distant who have got to know each other on IRC to talk to each other without cost. Believe you me, the content of these conversations is far more likely to contain dreary e/n stuff rather than Plots To Take Over The World.
The intimation that this culture could somehow be for sale to nefarious people and powers is frankly outrageous and hysterical at the very same time.
-- benton.
I know this is just asking to get flamed, but if these kids had some proper motivation and direction, they could probably do some pretty impressive stuff.
I know script kiddies are the bottom feeders of the hacker/cracker world, but most are still very young. But they obviously have enough technical knowledge to cause alot of trouble, and channeled in the right direction they could probably grow up to be fairly proficient developers and really become an asset to the tech community.
But then maybe I'm just being naive and optimistic.
ce n'est pas un Sig.
Um, he specifically said that you can't take control of somebody else's compromised machine even if you just use that control to remove the trojan that allows people to take the machine over. That is legally considered the same thing as hacking their machine in the first place.
mmMMmmmMMMMmmm.. po-TA-toes!!!
...isn't so bad if you're learning by example with the intent to escape being a follower. A script kiddie in the best sense is analogous to being an apprentice. In the worst sense it's a term for annoying no talent hacks with nothing better to do.
I don't think there are many programmers who weren't at one time or another "script kiddies" who simply cut and pasted code and then tweaked it a bit to see what happens.
There isn't really any problem with this as it's a good way to learn how to code quickly depending on your learning style.
The problem comes in when you cut and paste code and mistake yourself for having some kind of talent. Those are the annoying ASL types.
Anybody can cut and paste code. It takes talent to take the code and make it your own or even just apply it to something it hasn't been applied to before. I took a pretty standard and quite buggy A* implementation and turned it into a blazingly fast scalable path finding class suitable for doing real time path finding over massive (miles of 10m data) distances by land or air.
And I still only have a vague idea of how A* works.
Ben
Work Safe Porn
I've noticed this happen a few times. Some small website puts up an interesting article. Some one submits it to Slashdot, who runs with it. Then "big" websites like Wired or News.com pick up on the story - timed so coincidentaly that I'm pretty sure that at least some of them are reading Slashdot. Finally, it hits traditional media - newspapers and somewhat less frequently, TV. So, who knows.
That ad struck me like a satanic poster hanging over the crucifix in church.
Call (206) 338-5780 COLLECT for information about a genuine BA, BS, MA, MS, MBA, or Ph.D.
...in my dirty clothes hamper than these asses could dream of.
Wow...these people exchange nude photos of each other, exchange phone numbers and other important data, get fucked over by all their "friends" they've never met, and then try it again. I'll stick with video games, thanks.
There are operators on [major IRC network] who dedicate a large part of their time to finding and deleting these drones and drone servers, along with contacting providers whose machines are putting out the binaries. It should be noted however that this activity is ILLEGAL and viewed by the authorities as a violation of computer crimes laws. As a rule of thumb, unless you have paperwork from a judge saying you can touch a compromised machine, or you own the machine in question, don't touch it.
Picking up and putting your fingerprints on a gun found in the street is unwise. So vigilantism or "policing your network" or server is illegal. If you touch those compromised boxes, you go to jail; if you don't, the kiddie, seeing you, might very well turn around and packet you. It's not a good situation.
Anyone have an example of someone doing this and getting busted?
Crikey!
"If you think nobody cares if you're alive, try missing a couple of car payments." Earl Wilson
Here is a much better site portraying script kiddie culture on a daily basis
Look at the very end of the paragraph you quoted....."or you own the machine in question, don't touch it."
I thought the same thing until I reread it in disbeleif.
interesting article. :sigh: you know, if I knew how to use a computer, I could RULE THE WORLD!! :(
This space available.
And here I thought the article was about youth Shakespeare groups!
I think you're in the wrong article...
I know its too much to ask to RTFA, but at least read your own f***ing post!
or you own the machine in question, don't touch it."
These kids could be doing something useful. Like writing linux code or something. When I was a kid (read: preteen), I was learning how to code websites and work on computers. Now, it's a career.
Well, at least they are murdering the preppie kids in school. I'd rather be DDoS'd than Uzi'd.
Jay | http://oldos.org
I'm betting that the kiddies play a role, in much the same way the messenger does for the author of the letter.
And like the messenger, they are more likely to get shot by the good guys when the let a hack loose into the wild.
Could it be that a few black (and possibly white) hatters find that they serve a purpose?
You are checking your backups, aren't you?
didnt = didn't
reckognized = recognized
mne = me
Im = I'm
andd = and
gfod = god
Damn... I sure as hell hope you're not a programmer at your job. If so, I'd love to see some of your code
#!/usr/been/purl
opin(INFILE,"/etc/paswd") || die("Fil naught fownd");
Sorry about making fun of you, please don't bring your dad to my house.
A peek at script kiddie culture
:)
Friday March 05, 2004 - [ 08:00 AM GMT ]
By: Robin 'Roblimo' Miller
The more things change, the more they stay the same. Andrew D. Kirch, security administrator for AHBL, infiltrated several script kiddie groups and shared some of his findings with us via IRC. From the (edited) interview transcript, you'll learn that one of the "new waves" in DDoS coordination is hijacking corporate conference call facilities, which is really an update of good old '60s-style phone phreaking, plus some insight into why some DDoSers do what they do -- and some tips on how they might be stopped.
Roblimo:
How and why did you get started tracing DDoS perpetrators?
Andy: Part of it landed in my lap, and part of it was the attacks on the blacklists last summer. I met a [foreign] hacker a few years back on [major IRC network], and we founded an IRC network. Last March he contacted me, as I have some influence on [major IRC network]. An administrator was running illegal (against network policy) code, and they wanted someone from the outside that could independently log and prove it.
Roblimo: So this started on IRC?
Andy: Correct. Most things that these kiddies are doing are coordinated on IRC, or hijacked conference lines through carriers like AT&T or XO.
Roblimo: When you say "hijacked conference lines" do you mean phone conference lines?
Andy: Correct, business conference lines.
Roblimo: I've seen nothing in the press about this problem.
Andy: There is still an element of phone phreaking, it's simply upscaled in technology. Want to talk on one right now?
Roblimo: How does one go about hijacking a phone conference line?
Andy: That's one I haven't figured out yet. I'd have to assume it'd involve wardialing extensions into the system. Occasionally they're also liberated from work.
The policies on [major IRC network] allow quite a bit of freedom and privacy and make an excellent place to coordinate actions if they're to be taken off the network, or start "wars" with each other. Largely these actions have been ignored up to now. These kiddies band together into groups that have something between a street gang and Mafia personality. Friends of friends type stuff. When there's a major war, as there was a month or so ago, alliances get changed. The same occurred when the RPC.DCOM exploit came out last May. (And no, May isn't a typo.)
Editor's note: per the link above, the RPC.DOM exploit wasn't known to most of the world until September 2003.
The [hacker] group I've been monitoring just picked up a few people who are into that sort of thing, but I haven't seen them work much yet. A common theme is everyone switches sides about once every 6-7 months.
Roblimo: Switches sides?
Andy: Consider the people and the medium. You've got a lot of adolescents, and young adults with minimal if any social life. The interaction is not going to be on the same level as people with broader social experience. Considering that, and the ability to cripple a medium-sized ISP, there's going to be relationship issues, especially when you throw the sparse quantity of girls into the mix.
There was a girl in the channel, went by the nick ricki [name changed to maintain confidentiality]. Along with the phone conference aspect, there's also the prank calls. Friends even prank each other. Well, one of the guys pranked ricki. She took offense, and convinced two members of the channel to take it over. Both sides started firing packets, and my line was down for about 2 hours until the channel was sorted.
The war isn't really won on IRC. A win looks something like this: (if it's still up) http://www.geocities.com/kylegotpwnt/. This guy hung up on a conf when it was decided to prank him. So the general course of a war is that words get exchanged over whatever the current "drama" is. Packets are fired, and shellhosts or IPv6 tunnels go down. Then there's a mad rush to "pull dox
We don't need no stinking sig!
Hmm... I never was a script kiddie, I could very well be, I'm of the right age, heh. Maybe because the fact that I know several ways to screw up routers and computers I have always thought that creating something is much better then distroying something.
Though from I see in the article most of these so-called Script Kiddies probably have more skills then I do, or at least more will to find remote holes and such.
The key to stoping these people is to teach them that creating a program, or using their knowledge to fix the security problems they find will pay a lot better then simply attacking remote systems and downloading/writing damageing scripts and worms. Maybe not a perfect solution, but I think such reconditioning would certianly stop the majority of them.
I don't have time to comment my code, the program is late already.
what, like a slayer poster?
Wonderful. Now the vandals have a culture. Charming. Let's next do an article on the graffiti "artists" who spraypainted my brother's garage. How about the spamming "free speech activists?" Or the good souls at NAMBLA?
Vandalism is vandalism, and crime is crime, no matter how you dress it up. Criminals have a long history of pretending to walk to the beat of a different drummer, being misunderstood, put-down, trod on, etc.; but at the end of the day, they're just fucking criminals looking for a scapegoat instead of taking responsibility for their crimes.
"People who do stupid things with hazardous materials often die." -- Jim Davidson on alt.folklore.urban
A Peek At Script Kiddie Culture
Posted by timothy on Saturday March 06, @06:03PM
We all know "5cr1p7 k1dd13z" don't have much of a social life, so there should be plenty of them around to comment on this article on a Saturday night. The Slashdot editors are smarter than a lot of people want to give them credit for.
Rank Presidents by th
I think the biggest problem with DDoS attacks is that users who are outwardly sending a DoS might just not care to realize that they're doing so. Afterall, it doesn't harm them. It drives somebody else out there insane, but there's no harm to them in losing the upbound bandwidth cycles they weren't going to use.
Maybe at this point capping a cable modem's upbound bandwidth, or at least charging more for the overage would make the user who uploads DoS packets that contribute to a DDoS have to pay for doing so...
Yeah, I know this is the RIAA's dream because it'd also cripple P2P uploaders, but they weren't up to any good anyway either. If you've really got something to share, get yourself a web server at some server farm somewhere...
Andrew D. Kirch aka "trelane" is a known "packet kiddie" amongst most EFnet IRC operators and administrators. He's very much an active member of "sigdie" run by OseK (http://geocities.com/osek_owned) which does indeed (D)DoS other IRC servers amongst other people/businesses. trelane has also been seen bragging about "taking down" servers such as irc.qeast.net and irc.vrfx.com. I've also been told that the provider of a current efnet server almost sued him civilly for his involvments in attacks said provider received. Long story short, this "kiddie" is by no means a white hat who managed to work his way behind enemy lines to fight the good fight of ridding the world of packet kiddies as he'd like to portray. Mr. Kirch is very much a "kiddie" himself, and should be treated / dealt as one.
Paul Vixie quoted in the article (via a link)
'Recommendation: upgrade your peering requirements to include language like:
Each peer agrees to emit only IP packets with accurate
source addresses, to require their customers to do likewise,
and to extend this requirement to all other peers by $DATE.
Where DATE = (now() + '6 months') or some other negotiated value.
Peering agreements are so thick with political BS, they can't even stop ISP's like UUNet who are the biggest spam friendly ISP's around.
Basically everyone is trying to use standards for protocols to correct this, engineers trying to correct political problems.
Kids do all sorts of anti-social stuff, but, even when they're mostly minding their own business, they get pissed on. I love it how everyone expects *teenagers* to spend their free time caring for puppies and the homeless.
Here in a decent-sized city in the (yay) midwest, the evening activities available to those under eighteen are: bowling, cruising, wandering the streets aimlessly, and, ummm, well that's pretty much it.
Everything in town closes at 9:00. *Public* parks close. There's a constant crackdown on 'cruising' for some reason. There's an 11:00 curfew for everyone under-18.
So, the choices for a kid growing up around here are: 'sit in your room all evening with your computer' or 'break some sort of law'. Apparently, now our fearless leaders have found a way to make 'sitting in your room' against the law as if they would rather these kids be roaming the streets vandalizing cars and buildings. Great.
At least, this way, they are actually learning some things about computers and causing *very* little damage in the process. I think we all need to be a little more realistic: kids cost money and destroy things. The fact that *the internet* isn't a little more kid-proof should be of more concern to everyone than the slightly-less-than-moral decisions made by a bunch of teenagers.
"I assumed blithely that there were no elves out there in the darkness"
If Joe Average's cable modem bandwidth is getting sucked up by some kiddie script, he should care. Especially when his ISP sends him a warning letter saying hes using up too much bandwidth when the most graphic intense site he's visited that month is CNN.com.
Bob Businessman definately should care as well. That dedicated T3 line he uses at work is being used to get information to his consumers. If the site starts to get slow due to a worm causing him to download hundreds of gigs of pr0n, not only will his consumers get angry but his employees may suffer in effeciency...
It provides insight into a culture that not many people fully understand, or get to see.
Or respect.
but his employees may suffer in effeciency...
because they are wanking off to said 'pr0n'
The only insight here is a load of pre-pubescent kids will continue to act pre-pubescent online. They can be just as obxnoxious in the cyberscape as they are in real life, the only difference being you can't reach out and slap them in the face.
Someone's gotta do it, and if you don't, be sure the society will, sooner or later. Nice attitude btw.
The sad part is people SHOULD care. Everyone from Joe Average to Bob Businessman should take notice of this.
Are you kidding me?
I mean, I know we're all techies here, but lets break out of our shells for a second. This matters to people who make over 40k a year. Joe Average works in a factory and lets his kids use the internet for schooling. Do you think Joe Average, who was raised on libraries and encyclopedias, cares even for a second about whether his ISP goes down for 6 hours? Joe Average has to deal with bills, healthcare, school, drugs, gangs, crime, etc. etc. Joe Average needs tax dollars spent ensuring the welfare of our society, not the welfare of Bob Businessman's T3 lines so profit margins remain high.
Putting feds on the case of script kiddies is taking away from money and manpower that our society desperately needs. We need more concern over corporate accountability and less for corporate profits.
-- "Man is born free, and everywhere he is in chains." Jean Jacques Rousseau
the only thing I did find sad about the article is that no one cared about them much... just like "oh let's just throw them all in jail, they are dumbfucks anyways!"... it's a kinda sad state of affairs, instead of thinking on how to divert their attention to something more useful and perhaps trying to help them with getting a social life... my posts are useless... hehe
Joe Average needs tax dollars spent ensuring the welfare of our society, not the welfare of Bob Businessman's T3 lines so profit margins remain high.
Generally I agree, except...
Bob Businessman is Joe Average's boss's boss's boss. When his T-3 line for the site that sells whatever widgets Joe Average is putting together gets sucked dry, it costs the company money. Six months later, when they have a shareholder meeting coming up, that expensive worm might cost Joe Average his job in a layoff.
It's important to recognize that the resources needed by some people aren't the resources needed by everyone. But by the same token, it's also useful to recognize when the resources sucked up by one abuse end up costing others important resources down the line.
Don't you wish your girlfriend was a geek like me?
What I didn't get was he was saying these are people without any social life. I am not intimately close to skriptkiddie culture, but my impression has been that these people are highly social, but highly sociopathic. My friend's brother was one of these. All they're interested in is what is 'cool' and 'powerful' and being 'l33t', having the fastest video card etc. Alot of them use Windows because the badness associated with Microsoft is actually 'cool' to them, as weird as that sounds. This fits the profile of the average virus and worm author, and I don't see why scriptkiddies would be any different.
I for one welcome our new script kiddie overlords..
That image would be suitably analogous, yes.
Anywho...with that said here's my $.02:
I think that everyone posting above me has their own valid points which I shall paraphrase here.
1. We don't want money being thrown away to fight a battle that may or may not be won, if winning is even a real possibility.2. We can agree that the actions of these "script kiddies" is to some degree detrimental to business. Seeing as how s#it rolls down hill, it can also have an impact on us blue collar folks. I think it's accurate to say that the negative impact will grow and become more noticeable as time passes.
So, what kind of happy medium can be found amidst the viewpoints which say either "It's a waste of resources to fight." or "Something must be done."?
Should officials not try to trim the fat from current programs and then allocate the new resources to fight this growing problem? I'm responding here off the cuff so I sheepishly admit I don't have a prepared list of potential candidates for severence. But, therein lies my question; Where is the government and general law enforcement concentrating that is perhaps irrelevant.
I know plenty of people here can come up with a long list of things our government wastes money on. Furthermore I'll bet'cha we can get over half those involved in the discussion to agree to the slashing of this or that. What say ye pantheon of knowledge?
---
Every hour wounds. The last one kills.
I remember being in a friend's dorm room about 8 years ago and watching him show me how he floods people off of irc with a CTCP flood. This was the beginning of the DoSnets. His bot was linked up to about 400 others that would all send commands to a specific user at once. I can only imagine the technology change in the last 8 years. From the sounds of it though, it's the same old crap, just using different protocols.
I also remember when winnuke came out. It was nearly impossible to use the internet for about 6 weeks, until microsoft got a patch out. I put a linux machine up as a firewall and logged all of the attempts. It was like people were just winnuking all of the available ip space. After winnuke, it was teardrop, then smurf. I'd never seen a windows machine crash so fast.
ahh...the good old days. I'm suprised this is just now getting attention. It was no big deal when single computers would crash all over the internet, but when CNN.com or AOL.com gets attacked, it's a big deal all of the sudden.
Why read the article when I can just make up a snap judgement?
So, compared to Joe SixPack, is Joe average in the direction of Joe FourPack or more in the direction of Joe EightPack?
"When the going gets weird, the weird turn pro" -- HST
Everyone from Joe Average to Bob Businessman should take notice of this.
Add to that list the front-line TSRs and CSRs who are often the first to hear of new discoveries and ignore them.
Imagine this: a young marginal power-user stumbles upon an unintentional feature that is repeatable. She can either seek approval from the software publisher, whose *SRs who aren't allowed to break from the script to actually respond to the problem properly (or they don't have the time to understand potential exploits/bugs explained in non-technical terms by a kid), or she can tell a slightly more/less skilled user and brag about it. This gathers approval and self-esteem for everyone involved in sharing but keeping the secret, which encourages the finding of more secrets, and the development of skills related to doing so.
This slow and informal spread of the bug itself, and the skills required to see/use/expolit it can go on for *months* before it reaches someone with the correct skillset to recognise the security problem, and is able to communicate that problem to someone who can actually fix it (see: malformed C strings, DOS device names, a number of Hotmail... issues, which were in the wild and reported multiple times before vendors took notice).
So yes, being aware that there are people out there who are seeking popularity, approval, etc by _finding flaws in others' work_ (not an unfamiliar concept in meatspace) is useful to the bottom line.
There are 1.1... kinds of people.
(Not to be confused with 'punk rock', the style of music that embraces the point of view: "This is shit, everything is shit, life is shit, you are shit, I am shit".)
"When the going gets weird, the weird turn pro" -- HST
From an online search, cf is an abbreviation for confer (Latin for compare).
As I understand it, the citation form "see" would have been a better choice for the parent as it is used to cite to a source out of which a comment made directly follows. For example, the parent's comment that script kiddies seem quite technical (which follows from the article's discussion of kiddies having exploits before anyone else).
As authority, I used the much-maligned "Bluebook", infamous with law students.
Hmm. In good /. tradition, I had not read the article. After reading the parent post, I had to read the article to satisfy my curiosity as to what citation form was best. Good job!
I'm sorry, could you please finish that last sentance? I'm feeling unfufilled.
autopr0n is like, down and stuff.
...of watching my friend playing winquake on kitty1.stanford.edu. He ran into a guy playing with an aimbot, so we decided to exact revenge.
We got his IP (really simple in that game!), and I cobbled together a little batch file to start 50 or so instances of ping (continuous, max byte size). We then "ping flooded" (both connections were dial-up, so it wasn't a big flood, but big enough) him and gave him a 5000 ping (while my friend, meanwhile had about a 20000-25000 ping). The guy caught on that something was up after a few minutes then got pissed, yelled at the obvious culprit and logged off. My one and only venture into the "land of the l33t h>x0r".
On a side note, that story impressed some friends and several weeks after it happened, once they finished setting up their LAN, they tried to see how hard it would be to slow down their network (100 mbps, really awesome back then) using that method. They did it eventually, but started running low on memory in the machine they were using (two many instances of ping!)
Si hoc legere scis nimium eruditionis hebes
This young white dude, computer programmer family man is found shot dead. In his house. With an exotic WW-II German pistol.
The crack team of Briscoe and Green do their leg work, and they come across an old black dude who is somehow connected to the young white dude in a financial scam. The cops think "salt and pepper" team and one crime guy turning on his partner.
The D.A.'s office goes to work on this and what finally emerges is 1) the black dude is an upstanding citizen and a war hero (hence the WW-II war trophy gun), 2) the white dude lost his job and turned to cybercrime to support his family, 3) the black dude had no connection to the white dude apart from that the white dude picked a random victim to scam for identity theft, 4) the black dude, finding all of his net worth was scammed, used his charm and his war hero "street smarts" to get the ISP to give up the address of the guy who ripped him off.
Like many Law and Order episodes, the whole thing is Hollywood and little connection to real cops, victims, and criminals. On the other hand, the writers are not that creative and probably use some news stories as a jumping off point.
Like the better of the Law and Order episodes, it makes you think. What right did the white dude have to pick a random victim and take all his money? What right did the black dude have to get his revenge as murder? What right does society have to put an 80 year old man (the black dude) away for seeking his own justice?
But to me the moral of this episode along with the baseball bat incident is what goes around comes around. No, I don't think threatening a 15 year old with a baseball bat is a good idea, and the 15 year old and parents can get in a lather about their "rights." But a 15 year old with access to a computer (and the parents of said 14 year old) could appreciate that if one could hack into someone's server, owner of such server could hack back to track you down, and such owner could be meaner, tougher, better connected, or in a much worse mood than you. And somehow going after people who threaten 15 year olds with bats under those circumstances doesn't seem like the highest priority for the courts.
ignore it. it was funny. XxX-|-Ne()-|-XxX is way too long a name for irc anyway, you greasy monkey.
It's a culture, it's not a culture. What's a culture? Offer anything? No you didn't, you just we on...
No one can find a logical continuity from your parent's reply to yours. Doing this doesn't automatically make everyone who sees this believe that, in fact, there must be a point, and therefore conclude that you must be making some insightful remark that they cannot understand. You should also work on your writing before waxing pretentious. "Verbal tubgirl" indeed, give me a break.
Anyway, IMHO, it is a culture of sorts (*mostly* of avg to semi-intelligent, young, slightly-to-very antisocial teens finding a way to act out their angst). Arguably the very definition of losers, but everyone is at that age to someone and/or themselves. Interesting to read a bit. But no one is forced to, obviously.
When asked what he thought of script-kiddie culture, the real hacker replied, "I think it would be a good idea."
20 January 2017: the End of an Error.
Now switching to "Puppies around the World."
Are people looking for some Gibson-esque secret cabal of script kiddies, who are building operating systems at age 8, can speak in hex, and have secret h4X0r access to everywhere?
It's an annoying habbit of people to add an artifical quality control to socital consepts.
Religions are dismissed as "Not a religion" becouse the religion is diffrent from the one they believe.
This being a bit far from (but related too) the querk of establishing a quality standard on products most people don't agree to.
For example whimpy hot sause will be called "Catsup" by most people who enjoy spicy foods.
Same thing with culture. Junk culture is still a culture. We are familure with the rich indepth cultures of the world. By those standards the United States has no culture at all.
However cultures of the anchent past will set the bar much higer.
Just becouse the culture is nothing but teens trying to impress each other dosen't change the fact that it is a culture. Just not as enlightend or functional as the cultures your familure with.
I don't actually exist.
"Script Kiddies is as much a Culture as 1337 5p34k is a Language"
1337 5p34k aint no language,dig? Jive be a language.
My Blog
wankers.
Why do you need an *entire* article to communicate this?
siggy played guitar
My brother had some trouble with a script kiddie who got mad because my brother didn't give him the respect he thought he deserved (my brother isn't a geek, but at least I've taught him well in the disdain for script kiddies department), so the kid started trying to mess with my brother's e-mail and instant messenger accounts. This particular kid wasn't knowledable enough do any real harm, but if he did know more, I don't doubt that he would try to pull stuff like the kiddies in the article, and that he'd do it for similar reasons.
Eagles may soar, but weasles don't get sucked into jet engines...
Interesting!
Until now, the idiocy of the school yard jerk was something you had to put up with when you were a kid, but thankfully left behind when you graduated. But now juvenile crap overflows into the 'real' world, and can affect even the most insulated ivory tower type. Is this the first time?
I remember bullies and morons in school. The 'play'ground held a unique undercurrent of threat and horror for me as a kid. Going to school included genuinely believing that every day there was the possibility that you might be tortured and murdered by some half-wit big kid with a cruel streak, and that the safe world of adult supervision was unaware of most of the hells being perpetrated. Being a kid was a horror in many ways.
So what can be done about the skript-kiddie 'threat'?
Zip. Let the adult world suffer, I say. Think of it as payment for forcing kids through such a horrific 'education' system. There are only two other institutions which are so similar in structure and ideology, and they are the military and the penal system. School sucks, and aside from the handful of friends I made there, I hated nearly every aspect of it. The most valuable lessons I learned were how to survive it. Little else was of much use except shop class, typing class, art class and any time where there happened to be one of those very rare adults who inspired. You know the ones I mean. The good teachers who somehow defied the system and taught you valuable lessons in the face of all the state-ordained mind control. (Learn how to Obey and be Bored out of your mind doing repetetive tasks. A robot factory cranking out Perfect Workers.)
I also think it's neat that the Skript Kiddies are the geek version of 'Moe' type bullies. There's an ironic balancing in effect there somehow. .
-FL
with bbbuuuuttttttteeeeeeerrrrrrrrr
Andy: Consider the people and the medium. You've got a lot of adolescents, and young adults with minimal if any social life. The interaction is not going to be on the same level as people with broader social experience. Considering that, and the ability to cripple a medium-sized ISP, there's going to be relationship issues, especially when you throw the sparse quantity of girls into the mix.
So what's the difference between script kiddie culture and slashdot culture?
And is this a report on script kiddie culture or a blatant jab at MS? This roblimo guy is about as subtle as FoxNews.
scott
Mt dew is a great agar for growing script kiddies...
"Sic Semper Tyrannosaurus Rex."
It's easier to sell companys, government agentcys and cable modem users on using reasonable security precautions with half a million children running around with viruses and such looking to screw with anyone who gives them half a chance than it is to sell them on the notion that the 6 big bad nasty terrorist black hatters will crush them like a grape if they make the sligtest mistake.
People will assume they are safe from the big time terrorist dude becouse "I'm not a sereous target".
DDoS attacks against major targets use hacked cable modem users desktops.
Spammers use Worms to establish a spamming network.
ID theft resulting from the simplist of mistakes.
That stuff happening today.
When telling people how important security is:
With out script kiddies
"Why would anyone attack me?"
"Your system can be used as a launching point for all sorts of attacks"
"Yeah right."
It's hard for a person to picture how "they alone" could be be a target and they'd be right becouse they aren't alone. But the details sound like SiFi to most people and they tune you out.
With script kiddies.
"Why would anyone want to attack me?"
"Becouse your an easy target. Script kiddies need no other reason"
I don't actually exist.
The article is essentially a sham. I've seen more than enough AC comments in response that claim that Andrew Kirch is nothing more than a lowly script kiddie (trelane of sigdie). While there is some truth to what he's saying, he's putting it in a light which makes it seem all more impressive (because he was a part of it).
Is he distancing himself from it, or just trying to get more attention? I don't know.
But take it all with a large grain of salt. Your own experiences with kiddi3s (if they differ, and according to some other comments they do) - are probably more accurate.
THIS THING CAN TURN ON A DIME, MACROSSZERO STYLE ALSO FUCK BETA, ~NYORON
What Mr. Lamo thought he was doing was demonstrating to the NYT that they had a security problem.
2. Launch volley of Hellfire missiles at convention.
3. And everyone lived happily ever after.
--- Ban humanity.
Can be found here
Its a saturday night, all the script kiddies are out on their rollerblades red boxing and playing wipeout on a wall screen at the club, or maybe thats only on weeknights...
"Sic Semper Tyrannosaurus Rex."
Script kiddies have their own CULTURE?! Wow, who knew! I always thought they just tried to rip of genuine hacker culture. Learn a new thing every day! Thanks Slashdot!
- Code Dark
n/t, rick james bitches
"The operation timed out when attempting to contact www.ahbl.org" ... ahem .. i guess the kiddies got the better of him .....
.....
LOL ROFL
'Script kiddie' and 'culture' are a contradiction in terms. It makes about as much sense putting together the words 'Microsoft' and 'security'.
Max
My god carries a hammer. Your god died nailed to a tree. Any questions?
I wouldn't be able to dance the Charleston on a dance floor for 12 hours.
Script kiddies need shooting.
fucking lames
It amazes me how stupid he thinks people are. I know him on EFNet (I'll make it clear now I stay well away from the "culture" or whatever the hell it is). I often see the trouble he causes or stirs up, often in places that want nothing to do with him. I have absolutely nothing against Brian Bruns, as I've never seen him cause the slightest bit of trouble.
"Infiltrated several script kiddie groups and shared some of his findings with us via IRC" - Wow, that's nearly as rich as him calling anyone a social reject. "infiltrated" is somewhat deceptive.
He's a small time packet kiddie that loves to immerse himself in the shit, drop names (as he does in the interview), and whore himself at every opportunity.
Shortly after the article got posted...
[nick] did they pay you?
[trelane_] , nah
[trelane_] but the hits it brings the ahbl and the new subscriptions helps
[trelane_] shoulda plugged [some hosting company he has something to do with]
Yeah, they're logs an "Anonymous Coward" has posted to Slashdot. They shouldn't be trusted.
[trelane_] there's going to be more articles
God forbid...
Shut the fuck up Donnie.
I'm sure most people on slashdot have already been here...in fact I'm quite confident it was posted on slashdot itself when it first went up, but for anyone who didn't read it then, here is the report that went up on Gibson Research Corporation after they got ddos'ed http://grc.com/dos/grcdos.htm enjoy
I don't know if I would call "script kiddie'ism" a culture. Doesn't culture imply some sort of organisation?
Maybe it's still too early in the morning for me, but I didn't understand much of what that article said. OK, Kiddies organize in gangs and they hang out on IRC. What else is going on?? What does the 'war' consist of, who controls more machines on the internet? And it's being fought by copy & pasting the lastet Viri, Trojan Horses etc. and spreadng them around? Why can't IRC be secured, after all those years?
Some understandable explanations would be much appreciated...
Scipt kiddie is the name minor hackers gives to a cracker that succeeded in its attempt so he publicly doesn't look like he knows what he's doing.
Fact: most so-called hacker actually opperate the same way script kiddies do, it's easier to use an already written software to hack into something so as to understand it than to reinvent the wheel each and every time, geeks know that. Most would-be hacker get frustrated when a virus writter or cracker succeed in doing something (whatever it is) because they simply can't do what he did, downsizing their exploit by calling them script-kiddies or packet monkeys just show how frustrated they are not to be the one in the spotlight.
Worst than a script-kiddie is the would-be hacker calling crakers script-kiddies so he looks to be above "that juvenile attitude", at least the script-kiddie does something more than talking/bragging, he shows proof.
Who cares what tool you use, it's the result that's important, plus, finding a "hacker tool" that actually works is an exploit in and out of itself so...
a mirror for http://www.geocities.com/kylegotpwnt/ ???
Sig (appended to the end of comments you post, 120 chars)
Large companies have multiple IP addresses and pipes. It then becomes possible to reconfigure so that only one pipe becomes stuffed and normal traffic is redirected. It is more of a problem when you don't have so much spare capacity.
...if you're able to separate "normal" from DDoS. What you describe works pretty well against DoS, or protecting a VPN over Internet or some such thing. But the entire point of a DDoS is to be so distributed, you can't tell them apart. If you could, why not just drop the packets instead of redirecting them to a single pipe?
Kjella
Live today, because you never know what tomorrow brings
And Joe Poweruser? He should peek at the iptables-log, laugh, drink a cup of coffe and get back to his code.
GAAH! MY PRINTER IS ON FIRE!!! PUT IT OUT! PUT IT OUT!
...you give them a dumbed down distro, and not something they can manage to screw up *that easily*. Except there hardly is such a distro today (to the degree it exists, it's for a Linux guy to be root, and normal people regular users.)
Linux as of today is made by powerusers for powerusers. A few distros try to dress it up otherwise, but it's only a thin layer of illusion. But to be honest, I don't think any of those boxes are much worse than windows.
I've seen people share their full C:\ drive with complete write access too, both on LAN parties, anon ftps and whatnot.
The difference is, I suspect that in the future a lot more PCs will be remotely administered. Like yesterday, my dad couldn't get on the Internet. I logged into the Linux router from 400kms away, checked the status, pinged his machine (did the fscking cable fall out due to vacuuming or something?), all was well there. So after some light troubleshooting on his Windows machine, all was well.
If that had been on Windows, I wouldn't know what the hell just went wrong. It could have been the DSL line, the router, the cable, or his machine. And troubleshooting by phone is soooo fun, particularly for a guy I had to specifically spell that "Your user is [abc], and your password is [def]" and he's asking me "It came out as [abcdef], should I have hit Enter?" #%#%. Anything more complex, I think you understand how that'd go...
Kjella
Live today, because you never know what tomorrow brings
I'll be impressed when they can send out the "anti re-elect Bush" spam via the white house's mail server =)
"If any question why we died, Tell them because our fathers lied."
http://216.239.41.104/search?q=cache:RiinoRQI_lMJ: www.geocities.com/kylegotpwnt/+&hl=en&ie=UTF-8
-- Note: If you don't agree with me, don't bother replying. I won't read it.
wow. sorry to hear your school was a big pile of shit. but just because yours sucked doesn't mean everyone else's did.
hell, _i_ went through school at the 'bottom' of the social ladder, and it was still a valuable experience for me. if the 'play'ground held such terror for you, there was always the library...
yes, there were always the elements of boredom and ininspiring teachers. but how exactly is that different from the real world?
what exactly do you suggest, anyway? pamper kids through school completely insulated from real life with blinders and elevator muzak?
Yeah, the high tech equivalent of showing butts and having a circle jerk. Who considers the sandbox or playground a, "culture", what a bunch of moroons taking some snot nosed pukes prattle way too seriously.
which is, of course, that the internet was never about capitalism or big business. No one is supposed to be selling or buying *anything* online, making money or losing money. It's about free speech and basically having fun and not about a bunch of suited dyspeptic american cattle eager to exploit anything and everything to make a profit.
Therefore, in the words of some song or other: Leave those kids alone.
Chat in irc long enough... and you get to see all those things, easily.
;)
I don't get involved with such groups there are a couple of people who hang out in "normal channels" and are yet put of these groups as well.
Kind of interesting, to see whats happening there, without being really there.
And if you are an ircop, you get to see alot more of these stuff then normal - some of them are just plain strange.
The point of DDoS is that it hits everyone. Sure we get huge numbers of DDoS attacks at work, sure none has ever taken us down. But the check that we have to write to ensure that is huge, millions a month.
Here is a take on this issue from Phill Hallam-Baker:
OK so a second bite at the same article, lets take a look at those DDoS schemes.
According to the article the ISPs are unresponsive to take down requests, the FBI do not take notice. I know that people keep making this complaint but there are high tech crimes units in the major cities and they are looking to takedown these guys. And at the moment the demand is such that DDoS is being treated as if it was a littering offense.
I think we need a better primer on how to prepare a case for law enforcement. I guess it is possible if you read the article carefully that the desk guy thought this particular person had been getting evidence by hacking.
We can't expect to do this with law enforcement in the loop every time. Lets change the model, law enforcement only get involved if the ISPs fail to act, and instead of just going after the hacker there is a liability for the ISP.
This is consistent with fire department model of government security regulations. You can do pretty much anything to your house decoration wise. Government only gets involved when safety is the issue. In particular the fire dept won't let you build a house that is a fire-trap, in part because it might set fire to buildings arround it.
Here we have ISPs that are forwarding bogons. It seems to me that this should not be that difficulty to prevent. A $500 box performing passive listening at the cable head end could sound an alert when there is a bogon attack. You don't have to look at every packet, all you need to do is to look at a sample. If you see an ethernet MAC spewing bogons you shut it down.
Another approach would be to push the bogon prevention right to the cable modem. Why on earth would these let bogon injection take place in the first place? Sure there will be some hacked modems, but DDoS is comming from hijacked machines.
Cable modems, NAT boxes and the like should have limiters built in to prevent the creation of ridiculous numbers of SYN packets or outgoing UDP packets to reserved system ports like DNS. It is pretty easy to think of numbers that should be no inconvenience to any legitimate use, and there could be an option to turn them off in any case. But why give every home user the equivalent of a loaded machine gun when they don't need or want one?
Reduce the value of your machine to a hacker, reduce the probability of attack?
Looking for an Information Security student project suggestion?
Try http://dotcrimeManifesto.com/
Nigga, pleez...
Hallicrafters has been out of business for 30 years or something.
As a licensed ham, I can tell you that 99.99% of hams are a bunch of boring fucks. A small elite minority of hams have some technical skills when it comes to RF, but the vast majority are mostly plug-n-play appliance operators. Most american ham operators are cranky republican-racist-libertarian-facist types. And of course, when it comes to any type of computer or internet knowledge hams are among the most clueless of lusers.
as long as noone dies from this goverment and other groups will not care. sure its lost communications and so on for a while but noone got hurt.
its just like with roads, nothing happens to them unless someone ends up dead. its the sad truth but someone have to die these days before we get a reaction from anyone...
comment first, facts later. http://chem.tufts.edu/AnswersInScience/RelativityofWrong.htm
No. I don't give a rat's left cheek whisker
about script kiddie culture and I am dissappointed
in any writer that writes about such insipid
drivel instead of something worthwhile.
No, I won't read the article and I'm not even
going to read everyone else's postings.
It's like dog-doo on the sidewalk. Unless
it's your dog, or your sidewalk, WALK AROUND IT!!!
Check all the links on that page. See what I mean?
Never under-estimate the ability of a compiler to act as a spellchecker.
omico---
This is an outrage! We are talking about script kiddie porn here, for God's sake! I am very disappointed by the law enforcement here! Very disappointed!
Sincerely,
Pan Tarhei Hosé, PhD.
"Homo sum et cogito ergo odi profanum vulgus et libido."
Please mod parent up: +5, Funny!
The sad part is people SHOULD care. Everyone from Joe Average to Bob Businessman should take notice of this.
Joe and Bob should get advice from a competent computer tech. Script kiddies do what they do because there are so many unsecured boxes out there. You don't need a real pro to at least get some basic security. The one problem that's hardest to deal with is a ping flood. It's a problem because it's super easy to nail users on the Internet with ports wide open, users that click on malware e-mail attachments without even considering the source or the content.
If I chose to be a kiddie, I could go out and spread malware through via e-mail tomorrow, and rack up thousands of ping zombies over a couple of weeks. Jeez, I wouldn't have to lift a finger, I could just google some code and tweak a few things. I couldn't care less about script kiddie culture; It's the same as latchkey kid "culture" has been for the last 20 years (the slang may change, but behavior is the same). The real issue is the fact that technology allows an unattended latchkey kid drenched by material wealth (equipment and network service) act out his unchecked, hormone-influeced frustration and seriously disrupt any endpoint on the Internet.
Fred
"A fool and his freedom are soon parted"
-RMS
Learning to deal with the bullies and morons is part of your education in dealing with society at large. The bullies simply use lawsuits or gossip instead of fists when they are older, 8^) The social education aspect of school(forced interaction with peers) is quite important.
See, that's evidence of the program running right there.
Why have school at all?
There are many, many other models of education which could be employed.
Consider. .
I didn't learn how to read or write at school; I learned that on my own. My father liked math, and tried to teach me, but I found it thoroughly confusing and dull. I did poorly in it in school, and only use the most rudimentary aspects of it in my daily life with no detriment. I can balance a bank statement and write a java script, but all of that I learned on my own because I wanted to.
In fact, very few of the valuable skills or knowledge I use on a daily basis were learned in a school 'program'. I learned some of it in school, but that's only because I spent so much time physically being there.
Technical colleges and such need not change. The kinds of kids who want to learn to become doctors and engineers aren't getting a free ride today anyhow, and the ones best suited to such studies are going to pick up the entry skills on their own.
In fact, I have had to un-learn much of the crap they forced into my head through grade school and highschool. 'History' and social studies. Feminism. --Ever notice that many of the books they made you read in school were boring as hell? --Almost as though they didn't want kids to enjoy reading for fear that they might go off and do more of it in their own time?
But anyway. .
While I do value the unintended social lessons I learned by attending school, there are many other much healthier ways for large groups to mix and learn from one another.
The more I consider it, the more I think the educational system is a total croc.
-FL
Even if you're a extremely careful and make sure your connection isn't compromised, that doesn't mean your company's, co-workers', family's, or friend's connection is safe as well. In the grand scheme of things, this sort of thing hurts EVERYONE. You just don't hear or realize the side effects.
Man, you need to make better friends with our buddy, the comma. I'm interested in your points, but it's hard to read a bunch of repetitively structured sentences in a row like that. Especially when they don't link together very well. At least vary the length or something. Sheesh.
Oddly enough I got this impression from one of ESR's essays about advice to hackers... He said something like "And don't call yourself a 'cyberpunk'". I wonder what he meant by that.
"When the going gets weird, the weird turn pro" -- HST
Well, there are a lot of people who try to emulate an early 21st century version of the lifestyle they read in those books, and then people who couldn't be bothered to read but found the style and attitude cool. Eventually it spreads out to people who see The Matrix and decide to dress in black leather trenchcoats and sunglasses.
esr's jargon file entry for cyberpunk includes the cultural extension to the original literary definition.
Tax dollars? Welfare of society? Exactly when did this topic become an excuse to wax pathetic about leftist ideology? Individuals and the communities we create are the only ones that can help ensure the welfare of society because WE ARE society. The problems that exist are the result of our failings as human beings, and that isn't something that government can change. Individuals can, and even then only sometimes. Government is good at fixing simple problems that are clearly defined, not complex problems whose nature is hotly debated.
Western civilization and the US in particular is about as close to utopia as humanity is ever going to get. We have it so good here that its almost unbelievable. Compared to the rest of human history this is heaven on earth. Yet some people have the arrogance to believe that perfection is somehow possible and that they are the prophets who will lead the way. Bullshit. Leftist ideology is brainchild of brilliant minds unhampered by the constraints of common sense or an understanding of human history. The most you can hope for in any society is to instill in the people a respect for individual rights, a sense of fairness, and the willingness to defend those rights. Attempts to help those who won't help themselves are ultimately harmful because you can't help someone who won't help themself AND you've wasted those resources that could have been used for something worthwhile.
Quit trying to fix problems you don't understand with methods that don't work, ok? Stop being a constant worry to the rest of society keeping us up at night wondering what kind of naive retarded bullshit you're going to pull next. You can't fix broken people. All you can do is hope they don't breed.
If you want to keep an eye on corporate corruption then by all means do so. Just please don't pretend that you're looking for corruption when in fact you're looking for any excuse to try and replace something that works with something that doesn't, namely communist/socialist bullshit.
Possibly what is more frigtening than anything else is the fact that you probably don't even understand the positions you espouse. You back them because they make you feel good, or because they sync with whatever emotional issues you won't deal with. If you understood human nature and how the world really worked you wouldn't back bankrupt ideologies that have been proven time and time again to result in catastrophe. The world may not be perfect, but you can't make it a better place by replacing something that mostly works with something that never does.
This stuff ain't reall..
And the guys who talk about it, usually this is
the only social life they have.
Just say no to license servers!!
Reading these posts, I'm struck by the dismissive attitude many people have of the 'kiddies, the assertation that most of what they do is out of boredom and the repeated claims people are making that they did similar things when they were kids.
Undoubtedly what a script kiddy does is damaging but it seems that they are mostly stooges, acting as mules for a minority of malacious skilled individuals further up the chain. They seem to me more the tools of power than the wielders of it, more victims of manipulation than a force in their own right. I think we need to consider what we can do about that.
These kids are you guys a few years back, trying to invent themselves as grownups. Treated right, they are the next generation of responsible, productive hackers. Otherwise they are bored, disenchanted loners altering and re-releasing malicious code. Why? Because there's nothing cooler to do.
The way we behave is an accumulation of the habits we acquire and values learned through experience. There needs to be an effort to include these kids. To encourage and harness the talent amongst them, rather than just simply labelling and ridiculing/reviling them. Otherwise we just reinforce the l33t mentality of a 'wannabe' outgroup.
Hollywood teaches that the only way for a geek to be cool is to trespass, damage and steal. The thread runs through War Games, through Mission Impossible, through Matrix. Unfortunately the hacker gets to wear the leather jacket and shades while the geek gets the white coat or dodgy nylon suit. Not hard to say who is cooler to a 14 year old boy and not hard to see why there is a draw towards trying to fit the role online.
We need to try to get these kids directly involved with what we do. If we can teach them the habit and the satisfaction of working together to build things they will be less pushed towards breaking them. Some will make a genuine input, the rest will be kept out of trouble - at least to an extent. It won't stop the problem completely but it will help. Our own community will become enriched as they mature.
We need to teach our values to these script kiddies. We need a white hat Yoda and a Clan Bear creche.
My God, it's Full of Source!
OUTSIDE_IP=$(dig +short my.ip @outsideip.net)
That reminded me of this.