Slashdot Mirror


Hackers: Under The Hood

jyre writes "ZDNet Australia has a special report that profiles and interviews five hackers over the next five days. Day 1: Raven Alder's page is up now (inludes photos). Day 2 will be Attrion.org creator, Jericho. Day 3: Adrian Lamo. Day 4: Kevin Mitnick and Day 5: L0phtCrack creator, Mudge."

19 of 280 comments (clear)

  1. Ah, Attrion. by FlyingJesus · · Score: 5, Funny

    I love attrion.org! It's the best way to start my day, opening the old browser and surfing on over to attrion! First on my list of things to do in the morning!

    Mods don't hurt me :)

  2. Prominent (and "notorious") hackers by Incognitius · · Score: 5, Insightful
    Remember that many of these "hackers" are reformed, and thus attempting to sell their services. They aren't really "notorious" hackers and are often out of touch with the hacker community.

    This is to be expected from a mainstream publication that intends to present "hacking" in a mainstream light. I say, read at your own risk.

  3. Re:She looks halfway decent at least by nadda · · Score: 5, Funny

    dude, that's her first grade photo.

  4. Definition by the_enigma_1983 · · Score: 5, Insightful

    But are they going to define hacker? Are people going to see this as a bunch of articles about some scum who break into computers, or are they going to see a bunch of articles about people who have an intimate knowledge of computers? Either the meaning of the word hacker needs to change, or another word for the computer savvy needs to be found.

    1. Re:Definition by raven_alder · · Score: 5, Interesting

      Well, if it was a "scum" definition, I would think that I wouldn't have qualified to be interviewed. Behold the angelic halo. [grin]

      I've had this argument with journalists before; it's one of the reasons that I tend to avoid being interviewed.

      "Tell me about your secret blackhat teenage years!"
      "Uh, I never had a secret blackhat teenage phase."
      "Oh, come on, you can tell me."
      "No, really, I didn't."

      Repeat ad nauseum.

  5. Perhaps we'll see by Crudely_Indecent · · Score: 5, Insightful

    more high profile 'hackers' explaining their driving influences. Raven Alder bashing script kiddies and suggesting that users learn how to use their toys is a good way to start. I wouldn't argue for a second with a girl that is as cute as Bjork and could audit my security.

    --


    "Lame" - Galaxar
  6. L0pht crack by solid · · Score: 5, Funny

    Mmmmm... L0pht password cracker. *urgh!* "Me use brute force!" *urgh!*

  7. It's the stories that are always masked by stigma. by Anonymous Coward · · Score: 5, Interesting
    I find it fascinating to look at the lives or hackers just as you would the lives of movie stars or politicians. There is such stigma attached to these pseudo-celebrities that people often don't get so interested in their stories. I thought tonight's article was a much better article than the recent nytimesmagazine article on script kiddies.

    I'm actually surprised there have not been more television biographies on hackers. It seems A&E Biographies, Discovery Channel, Learning Channel etc. would want to tell these stories.

    www.reeddavid.com

  8. Perfect Ad by Jade+E.+2 · · Score: 5, Funny
    That's got to be the most perfect ad-to-article match ever. The interview contains these paragraphs:
    "The root problem that the security industry has is ... unscrupulous people selling to an uninformed market. The managers buying security products don't understand security at all, and so they trust the vendors to tell them what is best," Alder argued. "And somehow, conveniently, what is best has a great overlap with whatever that particular vendor happens to be selling."

    ...

    "[Companies] have the latest and greatest firewall that nobody has ever bothered to configure, or a very expensive intrusion detection system (IDS) that nobody has the understanding to tune."

    And the ad on the page says "Today's threats require a lot more than a firewall. This is a lot more than a firewall. Symantec Gateway Security 5400 series" (Ad here.)

    That's about the most perfect example of what she's talking about anybody could have come up with...

    1. Re:Perfect Ad by raven_alder · · Score: 5, Interesting

      I thought it was nicely ironic myself. I didn't have anything to do with choosing the ads, of course, but if I had I couldn't have done better. [grin]

  9. Attrition!? by Anonymous Coward · · Score: 5, Insightful

    Yeah alright, they had a defacement archive back in the day, they're dried out now. What have they done since then and really what good was the defacement archive? All it really did was encourage defacements.

    The other guys have either shown skill, or created something. And lets shut up about "cracker v.s hacker" BS. Hacking is a SKILL SET, you can define black hat, grey hat, white hat from there if you want. Just because someone breaks the law doesn't mean they aren't a good "hacker" and are suddenly a "cracker".

    Also remember not all intruders are "dumb kiddies" there takes skill in a real intrusion even if you are using pre-canned exploits. There is a hacking mindset to getting into places. Its the same mindset used in writing unique code, among other things. Its not all dotslash. Thats like saying U.S Special Forces are 'kiddies' since all they do is a pull a trigger. Wrong.

    So tired of these people ranting and raving about 'cracking'. Get your head out of your asses and get off the bandwagon.

  10. I agree. They aren't interesting. by Anonymous Coward · · Score: 5, Interesting

    If you aren't computer-ignorant. But the media are computer-ignorant, and are happy to stay that way.

    A few years ago a major New Zealand ISP was "hacked" -- or so the media said. The biggest talkshow host of the time interviewed the alleged "h4x0r" live, and proclaimed him to be a "computer genius". We were all in deadly and imminent danger of being hacked by guys like him he said.

    The "hacker" in question was a 13 year old whose friend's older brother worked for the ISP. The older brother had stupidly given his staff login and password to his kid brother, who had, naturally, shared it with his friend, the "genius hacker". This friend then logged in and deleted a bunch of hosted websites. Pretty frikken 1337, huh?

    Take the little assholes out and beat them with wet towels, then make them parade naked through the streets. A fit punishment for such computer Uber-Gurus.

  11. Re:She looks halfway decent at least by raven_alder · · Score: 5, Insightful

    Hi. It's really nice to know that whatever I can do technically, that it's my cup size that really matters. I'm 28. I do backbone security, incident response, vulnerability assessment, and pen-testing. I work in varying capacities with Nessus, Snort, and the Open Source Vulnerability Database. And fuck you. http://www.oneeyedcrow.net/securitygeekfemme.html

  12. Not that 1337 by Magickcat · · Score: 5, Insightful

    If they were really oh so 1337, nobody would have ever heard of them, and they wouldn't be talking about their escapades either.

    --

    Si tacuisses philosophus mansisses. If you had kept quiet, you would have remained a philosopher.

  13. An open letter to the anti-trolls. by rjh · · Score: 5, Insightful

    First, in the spirit of full disclosure: I know Raven. I know her well enough to be thoroughly impressed by her and her competency. By "thoroughly impressed" I mean "vaguely intimidated", too, and you know, that's not a bad thing to feel. Gives me an incentive to work that much harder. Competition is good.

    Reading this thread so far has led me to dismay. What thread dominates? Something that's so crude that it ought to be beneath our dignity to respond, even to condemn it. A few people have jumped on the trolls, modding them down into oblivion or responding to them.

    Here's a question: why? All it's doing is giving the trolls publicity. All it's doing is making people think that gender is an issue, because if it wasn't an issue, why would such a firestorm exist? If it wasn't an issue, why wouldn't the trolls just get modded into oblivion and go ignored, like the GNAA trolls?

    If you want to make a statement, if you want to condemn the immature and third-grade behavior of the trolls, if you want to say "look, I for one welcome competent people and I don't give a damn what plumbing they've got", the best response is not to jump on the troll bandwagon and respond to them.

    Mod them into oblivion, and let them be forgotten.

    They are nothing. For nothing, let there be nothing.

    If you want to make a statement, if you want to make a stand, if you want to say "look, I have no clue who this woman is, but frankly I'm appalled by some of the behavior here"... well, hey. Respond to this thread. Mod up responses in this thread. Let's take the publicity away from the trolls and put it to productive use. Let's see if we can't get a few dozen Slashdotters to make a positive stand instead of going around and giving the trolls what they want--furor.

  14. Re:She looks halfway decent at least by raven_alder · · Score: 5, Insightful

    All feminists don't necessarily agree... just like "hacker" can have a whole bunch of different connotations, so can "feminist". And, like many other minority groups, we are often known by our extremists. I think that makes it all the more important for those of us who *aren't* extremists to use the term rather than abandon it.

    For clarity's sake, I am a feminist in the "I believe in equal rights" way, not the "I believe in special treatment" way. I do not believe in or condone banning books. (Indeed, my car has a "Read banned books" sticker on it.) And you can see my take on feminism and porn, as relevant to your linked Foucaultian debate, right on my site. [grin] So, I suspect that we largely agree. Thanks for a thoughtful and intelligent comment. It's refreshing.

  15. Raven definitely knows her shit. by Kelvin · · Score: 5, Insightful

    Admittedly, my only experience working with her was spending three days on the same team as her during last year's capture-the-flag contest at defcon, but it was pretty clear that she's very good at what she does.

    The kind of stuff she does is far above and beyond the sort of "easy pickings" you're imagining.

    Don't project your own script-kiddyness onto people actually have skills.

  16. Re:Question for Raven, since I noticed you're read by raven_alder · · Score: 5, Insightful

    Okay, so you don't want to specialize at the moment. Fair enough. I am assuming that your wanting to understand "how things work" is programming in general and not security programming/code audit?

    In short, find something that you are interested in and take it apart. [grin] You don't necessarily have to follow a structured academic program to become proficient in a field, whether your intent is to make it your hobby or to make it your profession. My academic background is entirely not in CS, and though I have many friends in CS academia, what they do can be very different indeed from what I do day to day. I learned mostly by experimentation and research on things that I was interested in.

    So, find something that you like. Look at the source code, if it's available. Try to figure out what does what. Change things around, and see if you can make it better. One of the best ways to learn for many people is by doing. If you don't know what needs doing, volunteer for a project that is already established and is looking for people. Open Source is so helpful this way -- it feeds your resume *and* helps the community.

    My first programming language was Perl. I was told by many geeks that this was a bad choice -- it would give me bad habits if I ever wanted to move to a language with a more rigorous structure. They were right, but it was both a good and bad thing. When I started doing C, and in particular when I started poking at kernel code, I had a lot of extra learning to do. But Perl was still a good way for me to start, because when I started programming I wanted to do quick scripting, not kernel hacking, and the flexibility of Perl was great for me.

  17. Re:She looks halfway decent at least by raven_alder · · Score: 5, Insightful

    Far from my first time here, but the first time I bothered to get a login, yes. [grin] I knew someone was going to bust my chops for that.

    And no, I wasn't shocked by the immature comments, but I gave the trolls one reply. Why? I'm not interested in an extensive flamewar, but a lot of women just shut up and look uncomfortable when stupid sexist bullshit happens. So, that was my token protest. I'm not intending on feeding them any more, and I doubt I changed any of their minds, but I probably made a few lurking women feel better.