Fun Things To Do With Your Honeypot System

← Back to Stories (view on slashdot.org)

Fun Things To Do With Your Honeypot System

Posted by ryuzaki0 on Sunday July 30, 2006 @06:27AM from the more-than-just-keeping-bees dept.

An anonymous reader writes "Whitedust is running an interesting article on honeypots and their uses. From the article: 'Most papers deal with the potential gains a honeypot can give you, and the proper way to monitor a honeypot. Not very many of them deal with the honeypots themselves... Honeypots can be used to ensnare and beguile potential hackers; entice them to give you more research information, and actively defend your production network."" From the article: "Once an attacker has taken all the trouble to set up shop on your honeypot, he'll probably want to see what else there is to play with. If your honeypot is like most traditional honeypots, there's not much for an attacker to do once he gets in. What you really want if for the attacker to transfer down all the other toys in his arsenal so you can have a copy as well. Giving an attacker additional targets with various operating systems and services can help him decide to give you his toys. The targets can be real, but you'll get almost as much mileage if they're simulated. A good place to start is to put a phantom private network up hung off the back of the honeypot."

136 comments

Like I Have That Kind of Time by aaronhaley · 2006-07-30 06:31 · Score: 3, Insightful

In addition to all of the things on the network I normally have to do at the office let me set up an entire phantom network just to "jack" with hackers. Yeah, I'll get right on that.

--
--And sektor spoke and said unto the people. Hey, buttwipe hand me the cheezeos.
1. Re:Like I Have That Kind of Time by Anonymous Coward · 2006-07-30 06:40 · Score: 0
  
  If you don't have the time to work out how to analylse how people are attacking your network and part of your job or indeed your job is defending your network; you shouldn't be damn well doing it.
  
  Standard.
2. Re:Like I Have That Kind of Time by Anonymous Coward · 2006-07-30 07:14 · Score: 0
  
  Not only that but you are not "sticking it to man" by toying with a these crackers because 99.99% of the time, that cracker you are messing with is an automatted script. Wow, you showed that script and automatted process a thing or two. If your hacked box does not respond as it should, it will be treated as one of many that are owned and not quite acting like the other X that are owned by the same script are.
  It's not like someone is watching all of these owned PCs and providing them with food, water, and the correct amount of light on an individual basis.
3. Re:Like I Have That Kind of Time by Ant+P. · 2006-07-30 07:43 · Score: 2, Interesting
  
  Sounds like a good idea for a livecd, actually.
4. Re:Like I Have That Kind of Time by moro_666 · 2006-07-30 20:08 · Score: 1
  
  agreed. you should always examine what's going on and who is doing it. in some cases where the law won't bend in your direction, you can even do a counter attack with the child's own toys and teach him a fairly nice lesson. it isn't nice or legal but it feels good.
  
  --
  
  I'd tell you the chances of this story being a dupe, but you wouldn't like it.
What is Honeypot by in2mind · 2006-07-30 06:31 · Score: 3, Informative

For those who dont know what a honeypot is: [From Wikipedia.]
____________________________________________
Honeypot is literally the term for a container of honey but is used in several different ways, often playing off the image of sweetness being used as a lure:
* A computer system set up as a trap for attackers; see Honeypot (computing)
* Traps designed to catch conventional criminals; see honey trap

--
Wincopy
1. Re:What is Honeypot by portmapper · 2006-07-30 06:40 · Score: 2, Informative
  
  A honey trap is fun to prepare, but beware of actually beeing exploited. To limit damage, it will help to put a transparent firewall in front of the honeypot and start blocking (perhaps allow a few outbound connections, and then block). You don't want your owned honeyput as a base of attack, do you? The OpenBSD packet filter has the needed funcionality using an OS that does not have a few local root kernel exploits a month.
2. Re:What is Honeypot by Anonymous Coward · 2006-07-30 07:05 · Score: 0
  
  What is a Honeypot? Jesus, how low Slashdot has dropped, why it's almost Digg.
3. Re:What is Honeypot by nv5 · 2006-07-30 07:29 · Score: 1
  
  I understand it's customary not to RTFA before commenting. However for those amongst us, who do break that rule from time to time, the TFA is actually discussing that very issue in the paragraph "Traffic Mangling":
  
  Once you've got the Wiley hacker attacking your honeypot, the last thing you want to do is let him attack the rest of your network from the honeypot, or worse, attack someone else's network. A good line of defense in this instance is traffic mangling.
  
  Traffic mangling requires an inline box running software like Hogwash. ...
4. Re:What is Honeypot by masterzora · 2006-07-30 08:50 · Score: 2, Funny
  
  The difference is that here he's just karma whoring whereas on Digg they would genuinely need such an explanation.
  
  --
  Remember, open source is free as in speech, not free as in bear.
5. Re:What is Honeypot by Anonymous Coward · 2006-07-30 08:59 · Score: 0
  
  You did not understand that traffic mangling is not the same as using a firewall.
6. Re:What is Honeypot by donaggie03 · 2006-07-30 10:14 · Score: 1
  
  Why mark this redundant? I didn't know what a honeypot was . . To be fair, I was kinda getting the idea from the context of the other posts, but the definition still helps.
  
  --
  Three days from now?? Thats tomorrow!! ~Peter Griffin
7. Re:What is Honeypot by Anonymous Coward · 2006-07-30 10:18 · Score: 0
  
  Yeah - I mean "interesting things to do with your honeypot" . . . I only opened this article because I thought it was porn.
Nice... by Anonymous Coward · 2006-07-30 06:32 · Score: 2, Interesting

Nice article.

What with the rumours that Mckinnon was caught by a US Military Honeypot it's interesting to read what can be done with sych systems.
Think you missed the point... by Anonymous Coward · 2006-07-30 06:34 · Score: 0

The idea is not to have a good chuckle at script kiddies and such. It's to get some inside info on what kind of tools they use, and how. Which in turn, will allow you to (hopefully) better understand how and where your network may be compromised.
1. Re:Think you missed the point... by aaronhaley · 2006-07-30 06:39 · Score: 2, Insightful
  
  No I get the point. I was making a joke, but I still thing it's silly. Why don't you just secure your network and you don't have to worry about it. Unless I worked for a security company or network vendor I wouldn't waste my time trying to score a hacker's toolkit. Unless I'm running something that's home made I don't really need to honeypot it. The # of "real" hackers out there compared to script kiddies is very small. I can download the script kiddie tools myself if I want. Nice AC post by the way.
  
  --
  --And sektor spoke and said unto the people. Hey, buttwipe hand me the cheezeos.
2. Re:Think you missed the point... by heinousjay · 2006-07-30 06:52 · Score: 5, Funny
  
  Why don't you just secure your network and you don't have to worry about it
  
  Oh, is that all? Good to see you've boiled network security down to a single step. I'd say write a book, but it would only have one page so that's probably a waste of your time.
  
  --
  Slashdot - where whining about luck is the new way to make the world you want.
3. Re:Think you missed the point... by mewp · 2006-07-30 07:17 · Score: 1
  
  Oh, is that all? Good to see you've boiled network security down to a single step. I'd say write a book, but it would only have one page so that's probably a waste of your time.
  
  Haha owned.
4. Re:Think you missed the point... by udderly · 2006-07-30 07:33 · Score: 1
  
  Haha owned.
  
  Supposed to be "pwn3d"
5. Re:Think you missed the point... by alfs+boner · 2006-07-30 07:36 · Score: 0, Flamebait
  
  You got 0wned, dumbass.
  
  --
  Listen p*ssy. I'm sure your the same homo that posted earlier about alf's boner and you just want to remain anonymous fo
6. Re:Think you missed the point... by mcrbids · 2006-07-30 17:03 · Score: 3, Insightful
  
  Why don't you just secure your network and you don't have to worry about it.
  
  In my life, I've identified a few key words that are highly accurate in ferreting out people who waste time. One of these is "paradigm". Those who wax poetic about "paradigm" are typically those who haven't bothered to figure out how things work, and are trying to convince you to do whatever it is that they think might work.
  
  Big waste - RUN!
  
  I've come to discover that "just" is a key word. It positively identifies those who have no idea what they're talking about. The most rediculous, inane, and useless activities I've ever seen all started with the word "just" in the job description. Like:
  
  "Solar power is feasible - just bring down the cost of manufacturing"...
  
  or,
  
  "Sex is no big deal - just get a girlfriend"... (big one for many who peruse these boards)
  
  or,
  
  "The software works great - we just need to change a few basic assumptions..."
  
  So, watch that word, "just". It usually fortells major catastrophe and certainly unrealistic expectations!
  
  --
  I have no problem with your religion until you decide it's reason to deprive others of the truth.
7. Re:Think you missed the point... by NickFitz · 2006-07-30 22:55 · Score: 1
  
  Just today I had somebody asking "Have you seen the email about that little problem?" I replied that no, I hadn't, but I had seen the one about the bloody big problem.
  
  --
  Using HTML in email is like putting sound effects on your phone calls. Just say <strong>no</strong>.
And a fun way to get free warze. by LWATCDR · 2006-07-30 06:43 · Score: 5, Interesting

Just put on unpatched Win 98 box naked on the Internet and a wait. You will soon have a hard drive full of porn and warze.

Actually it sounds like fun. Throw up VMWare and a few images and you could make an enter virtual network for a hacker to go nuts over.
Add in a PDP-11 Emulator, some hacked NASA and Air Force sites, a fake database or two, some Word documents showing that the US has a secert base in the middle of the everglades.....
could be fun.
Sounds like a great Hacker DnD game. Get a bunch of people to set up these things and the game is too find out what the is going on. :)

--
See my blog http://ilovecookes.blogspot.com/ for light hearted technical information.
1. Re:And a fun way to get free warze. by quonsar · 2006-07-30 06:57 · Score: 1, Funny
  
  Thou shall not use an programming language that works on only one OS.
  Thou shall not program computers in any language until having mastered the one you speak and write in.
  
  --
  
  Sacred cows make the best burgers.
2. Re:And a fun way to get free warze. by LWATCDR · 2006-07-30 07:13 · Score: 1
  
  Thanks I missed that typo.
  
  --
  See my blog http://ilovecookes.blogspot.com/ for light hearted technical information.
3. Re:And a fun way to get free warze. by tfried · 2006-07-30 07:28 · Score: 3, Interesting
  
  A place, I once worked at, had a dozen or so entirely unpatched Win98 boxes connected directly to the net - for years. And guess what? Of course I wouldn't have trusted those boxes one inch, but I've never heard of any hacking troubles with those boxes, either (ok, neither IE nor Outlook were used on those computers, but other than that, no protection at all).
  
  Yes, Win98 may be seriously vulnerable in hundreds of ways (even though it has hardly any networking functionality), but it just isn't targetted nowadays, in my experience. Try the same thing with WinXP, and you're compromised in less than a minute.
4. Re:And a fun way to get free warze. by winkydink · 2006-07-30 07:33 · Score: 2, Interesting
  
  Actually, a lot of malware is already vmware-aware and avoids hosts running windows under vmware. More and more getting this functionality every day.
  
  --
  "I'd rather be a lightning rod than a seismometer." -Ken Kesey
5. Re:And a fun way to get free warze. by dugjohnson · 2006-07-30 07:45 · Score: 1
  
  I'm just curious as the the grammatical rule that makes it "an programming language". I thought you use "an" when the following word begins with a vowel or a silent "h" as in "an hour". Could you point me to the rule that makes "an programming language" preferable to "a programming language".
  
  --
  My brain is overly lubricated
6. Re:And a fun way to get free warze. by kasperd · 2006-07-30 07:53 · Score: 1
  
  Actually, a lot of malware is already vmware-aware and avoids hosts running windows under vmware.
  If they can tell the difference, it means the emulation is not as good as it could be. In that case you probably should look for a better emulator.
  
  --
  
  Do you care about the security of your wireless mouse?
7. Re:And a fun way to get free warze. by Clovert+Agent · 2006-07-30 08:05 · Score: 3, Insightful
  
  A place, I once worked at, had a dozen or so entirely unpatched Win98 boxes connected directly to the net - for years.
  
  I seriously doubt it - not if you mean "in the last several years". Any unprotected box hanging directly off the net will be scanned and fingerprinted within minutes if not seconds of connecting, and exploited automatically. Botnets aren't kiddies' toys anymore: they're very professionally run and your unpatched '98 box is just grist for the mill.
  
  About five years ago I timed scans off a dialup connection in, let's say, a hostile part of the world - average of around 20 seconds from connect to scan. It hasn't gotten any better since.
8. Re:And a fun way to get free warze. by Joe+U · 2006-07-30 08:19 · Score: 4, Insightful
  
  And if he corrects it to read:
  
  "Thou shall not use any programming language that works on only one OS. "
  
  Then it's a typographical error, most likely a soft-broken 'Y' key, and the joke falls apart. Making fun of someone with a broken keyboard is just mean. He might be on his way to CompUSA right now for all you know.
  
  Now, if he corrects it to read:
  
  "Thou shall not use a programming language that works on only one OS. "
  
  Then it's grammatical, and the joke will hold up. The world will be safe from poor grammar. You will have fulfilled your destiny. Crush the lesser races, conquer the galaxy, unimaginable power, unlimited rice pudding...Etcetera, etcetera...
  
  (or not)
9. Re:And a fun way to get free warze. by Anonymous Coward · 2006-07-30 08:22 · Score: 0
  
  Oh no, the emulation works great. They tell by looking at the name of the display driver. Either it's a special one provided by vmware to optimize the performance, or it's one for some ancient framebuffer-based hardware that noone sane uses anymore. Duh.
  
  Cheers, Kuba
10. Re:And a fun way to get free warze. by Anonymous Coward · 2006-07-30 08:31 · Score: 4, Informative
  
  I'm surprised a /.'er would recommend VMware, with XEN the clear winner in the honeypot niche. Just check out The Potemkin Honeyfarm for more info... These guys are actually able to deploy an image is less than a second and do all sorts of whacky business to delude hackers into believing they're roaming the internet freely :-)
11. Re:And a fun way to get free warze. by Magic5Ball · 2006-07-30 08:32 · Score: 1
  
  If they can tell the difference, it means the emulation is not as good as it could be.
  
  No, the emulation is better than good if leaving signs like VM video card strings in place keeps the script kiddies away.
  
  --
  There are 1.1... kinds of people.
12. Re:And a fun way to get free warze. by x2A · 2006-07-30 08:37 · Score: 1
  
  You do, which is why the poster has corrected their sig to say 'a' instead of 'an'. You (as I) didn't see the reply pointing out the 'an' until it was fixed, making it look as if the reply suggested using 'an' instead of 'a', but a lil extra thought makes it obvious that it was the other way round.
  
  --
  The revolution will not be televised... but it will have a page on Wikipedia
13. Re:And a fun way to get free warze. by Anonymous Coward · 2006-07-30 08:41 · Score: 0
  
  You should be more tolerant. Perhaps English is not his native language? How can he improve if he's not allowed to write...
14. Re:And a fun way to get free warze. by x2A · 2006-07-30 08:43 · Score: 2, Insightful
  
  No, the emulation's fine, vmware was never designed to be undetectable, instead it was designed to provide a stable host-machine-hardware-independant machine... ie, if I installed Windows (known for not coping with motherboard/chipset changes well at all) in vmware on one machine, and move the virtual machine to another completely different set up machine, it will still run with no problems and no driver changes required. This is one of the things that makes vmware such a great tool.
  
  This means that you can detect that specific hardware configuration and tell that it's vmware.
  
  --
  The revolution will not be televised... but it will have a page on Wikipedia
15. Re:And a fun way to get free warze. by solid_liq · 2006-07-30 09:31 · Score: 1
  
  Thou shall not program computers in any language until having mastered the one you speak and write in.
  
  I take this to mean you do not program computers in any language? After all, you have not mastered English either. You left a dangling preposition. The correct way to phrase this is:
  
  Thou shalt not program computers in any language until having mastered the one in which you speak and write.
  
  ;)
16. Re:And a fun way to get free warze. by GC · 2006-07-30 09:59 · Score: 2, Interesting
  
  That is a load of crap, though I admit it will probably depend on your IP range.
  
  I routinely check a few Class-Cs and it takes around 5 minutes for a scan to appear on our firewall logs. Mostly 1433 port these days, which Win98 will quite hapilly drop.
  
  After about 30 minutes I *might* get a port 139 scan, which many Win98 installations will *still* drop.
  
  Cut the crap and the Microsoft bashing, I'm much more concerned about the spate of port 22 scans, and the brute force ssh password attacks going on right now.
17. Re:And a fun way to get free warze. by donaggie03 · 2006-07-30 10:19 · Score: 1
  
  Psh ... duh ... How can he improve if we aren't here to relentlessly torment him on his mistakes?
  
  --
  Three days from now?? Thats tomorrow!! ~Peter Griffin
18. Re:And a fun way to get free warze. by Cid+Highwind · 2006-07-30 11:13 · Score: 2, Interesting
  
  Cut the crap and the Microsoft bashing, I'm much more concerned about the spate of port 22 scans, and the brute force ssh password attacks going on right now.
  
  Fail2ban is your friend. Throttle those ssh botnets down to a few login attempts per hour and eventually the operator will go after a less secure target.
  
  --
  0 1 - just my two bits
19. Re:And a fun way to get free warze. by elyons · 2006-07-30 12:53 · Score: 1
  
  //Thou shall not use an programming language that works on only one OS. /Thou shall not program computers in any language until having mastered the one you speak and write in. . . .having mastered the one in whichyou speak and write.
20. Re:And a fun way to get free warze. by OverflowingBitBucket · 2006-07-30 12:58 · Score: 1
  
  If your aim is to hide the fact you are running on a virtual machine, you are quite correct. VMware may not be the best choice.
  
  But calling for a "better emulator" because you are using a tool for a purpose outside of the one it was designed for is a bit rude. It's a bit like asking for a better spreadsheet than Excel because you are having trouble writing a book with it. Not quite the right tool for the job.
  
  VMware does a nice job of hosting a guest operating system inside another. They don't try to hide the fact it is a virtual machine at all (check driver names, certain memory ranges, disk serials, presence of VMware tools, etc). I'd rather have the option of running at a decent speed without being burdened by the virtual machine going to great lengths to hide itself from the guest.
  
  Having said that, having an optional toggle to turn on machine-hiding features would be really, really nice, and no doubt make the tool much more useful for hosting honeypot systems.
21. Re:And a fun way to get free warze. by TheLink · 2006-07-30 14:05 · Score: 1
  
  Well if malware refuses to run on vmware guests, then that's good for me - because I run a fair number of servers as vmware guests, including my firewall.
  
  BTW: is it copyright infringement if you redistribute a hacker's tools without his permission? Could the hacker use the DMCA as well?
  --
  
  Too many replies beneath your current threshold
22. Re:And a fun way to get free warze. by NormalVisual · 2006-07-30 14:27 · Score: 4, Funny
  
  That reminds me of a joke I heard years ago:
  
  A new Harvard freshman was lost and looking for the library. He approached what obviously was an upperclassman, and asked "Excuse me, could you please tell me where the library is at?" The upperclassman looked down his nose at the freshman, and replied, "My good sir, here at Harvard we do *not* end our sentences with a preposition." The freshman is a bit taken aback, and rephrases his question: "Okay, could you please tell me where the library is at, asshole?"
  
  There aren't too many grammar jokes out there, so I guess you have to take them as you can get them.
  
  --
  Please stand clear of the doors, por favor mantenganse alejado de las puertas
23. Re:And a fun way to get free warze. by Matey-O · 2006-07-30 15:19 · Score: 1
  
  I'll vouch for this. My firewall had exactly 1 open port. ssh. I created an unintentionally weak account when configuring samba and the system was pwned in less than 24 hours.
  
  --
  "Draco dormiens nunquam titillandus."
24. Re:And a fun way to get free warze. by jayloden · 2006-07-30 17:35 · Score: 1
  
  Even better, use Joanna Rutkowksa's Red Pill technique, which effectively identifies a VM in a single instruction based on the address of the IDTR.
25. Re:And a fun way to get free warze. by aztracker1 · 2006-07-30 18:16 · Score: 1
  
  Xen can't run windows.. for that you need VMware, Qemu, or some other virtualization program. Curse you vile microsoft for removing the Xen support you had earlier on... (IIRC, MS was one of the first companies to support Xen)
  
  --
  Michael J. Ryan - tracker1.info
26. Re:And a fun way to get free warze. by shadowmas · 2006-07-30 18:17 · Score: 1
  
  This is why i disabled root login and plain password login on the remote ssh virtual server which i own. now the only way to login to it is using a normal user account (with ssh key) and then do a su or sudo.
  
  They can try all the passwords they want but they simply won't be able to login. you could also change the port which SSH runs on and tar-pit any ip ranges which give you constant trouble (It's really fun to see bot's stay for hours on end trying to check a single login).
27. Re:And a fun way to get free warze. by quonsar · 2006-07-30 19:31 · Score: 1
  
  wow. just, wow. i'm literally deafened by the incredible WHOOSHING sound occurring in this thread.
  
  --
  
  Sacred cows make the best burgers.
28. Re:And a fun way to get free warze. by traabil · 2006-07-30 19:52 · Score: 1
  
  About five years ago I timed scans off a dialup connection in, let's say, a hostile part of the world - average of around 20 seconds from connect to scan. It hasn't gotten any better since.
  
  Surely, someone must have made tools to beat 20 seconds - I mean, it's gone five years.
29. Re:And a fun way to get free warze. by x2A · 2006-07-30 22:36 · Score: 1
  
  I don't think this will work on hard virtual machines, such as new AMD/Intel processors that virtualise the privileged instructions on-chip with additional circuitry (as her 'blue pill' would indicate), but checking the hardware configuration still would (except in 'blue pill' type configurations where IOMMU's etc are used to fully simulate the external environment, but we're going off track a little here).
  
  --
  The revolution will not be televised... but it will have a page on Wikipedia
30. Re:And a fun way to get free warze. by ShadoHawk · 2006-07-31 00:22 · Score: 0
  
  Where do I sign up for the unlimited rice pudding? No really! I need to know!
31. Re:And a fun way to get free warze. by Anonymous Coward · 2006-07-31 03:15 · Score: 0
  
  I thought Xen could run Windows? /?
32. Re:And a fun way to get free warze. by freeweed · 2006-07-31 04:06 · Score: 1
  
  It isn't a load of crap.
  
  Just this past weekend I had to switch providers, and of course verify the connection without a router or other firewall in between me and the outside world.
  
  Firewall software on the laptop picked up 139 attempts within the first 60 seconds. Within 5 minutes I had well over a dozen common ports being probed: the usual NetBIOS ports, 1433, 1434, 21, 80, 23, 69, and a few others.
  
  Didn't see a single port 22 attempt in the 5 hours I left the laptop "naked". Haven't bothered to check the router's logs since as it drops just about everything.
  
  It isn't Microsoft bashing to point out that the vast majority of computers on the Internet run Windows, and the vast majority of scans aim at common open Windows ports. Hell, there are botnets still running that haven't changed in 5 years or more, still going at the old Win95/98 "single character password" crack.
  
  --
  Endless arguments over trivial contradictions in books written by ignorant savages to explain thunder in the dark.
33. Re:And a fun way to get free warze. by Almahtar · 2006-08-01 10:29 · Score: 1
  
  I can vouch for this. A while ago I hooked a box running snort up to a residential cable connection as a databases class project. It logged attacks perpetrated against it, ran whois queries on offending IP's, categorized attackers and attack density by country, etc. You'd be amazed how frequently attacks and scans were perpetrated. Heck, 2 of the first 10 attacks on our server came from IP's owned by the US Department of the Interior :-p I don't want to slashdot the server (residential cable is pretty brittle...), but I can watch its homepage and watch the little AJAX ticker of the latest attack change a few times a minute...
Fun things such as... by Anonymous Coward · 2006-07-30 06:44 · Score: 0

...watch the cracker do god knows what and then get hassled by the feds?
NASA by wootest · 2006-07-30 07:05 · Score: 3, Funny

Host NASA servers? :)
Idiot by Frosty+Piss · 2006-07-30 07:10 · Score: 0, Offtopic

Do you have so much time on your hands that you find it amusing to prattle on about common spelling errors? Or does it some how make you feel superior to spot a misused "an" and point it out to the whole world as is "see, this person is an idiot, whereas I am a superior human!". Good lord, get a life.

--
If you want news from today, you have to come back tomorrow.
1. Re:Idiot by Anonymous Coward · 2006-07-30 08:01 · Score: 3, Funny
  
  Do you have so much time on your hands that you find it amusing to prattle on about common spelling errors? Or does it some how make you feel superior to spot a misused "an" and point it out to the whole world as is "see, this person is an idiot, whereas I am a superior human!". Good lord, get a life.
  
  Errors:
  1. "Somehow" is one word.
  2. as is "see, this person is an idiot As is?
  3. a superior human!". With the type of English that one uses in the U.S., sentence-ending punctuation is usually contained within the quotation marks and one doesn't usually use two of them in one sentence.
  4. Good lord Generally, "Lord"--when used in this context--is capitalized.
  
  Damn, it's great to have so much time on my hands so I can feel so superior!
2. Re:Idiot by udderly · 2006-07-30 08:04 · Score: 2, Insightful
  
  Dude (or Dudette), are you new here? Didn't you realize that correcting other people and then feeling superior is what /. is all about. Heck, it's one big "I'm smarter than you" pissing contest.
3. Re:Idiot by Anonymous Coward · 2006-07-30 10:11 · Score: 0
  
  Damn, it's great to have so much time on my hands so I can feel so superior!
  
  feel, being the operative word.
4. Re:Idiot by Anonymous Coward · 2006-07-30 10:30 · Score: 0
  
  "Waa! Waa! Waa! I can't write English so I'm going to attack those who point out my mistakes instead of improving myself."
  
  Stop whining and read a grammar book instead. Who the hell was stupid enough to mod you as "Insightful", another former D- student?
5. Re:Idiot by Anonymous Coward · 2006-07-30 10:41 · Score: 0
  
  I can't write English so I'm going to attack...
  You missed a comma; that should be, "I can't write English, so I'm going to attack..."
6. Re:Idiot by Anonymous Coward · 2006-07-30 11:30 · Score: 0
  
  With the type of English that one uses in the U.S., sentence-ending punctuation is usually contained within the quotation marks and one doesn't usually use two of them in one sentence.
  
  This is correct usage in English-as-one-has-been-taught-by-liberal-arts-maj ors, however it is incorrect in English-as-it-is-used-in-international-technical-c ommunications. Quotation marks enclose input or output string reproduced verbatim, without sentence-ending punctuation to avoid confusion ("ls /usr/bin" and "ls /usr/bin." return very different results). Guess which we use here on slashdot...
a fake shell by Per+Wigren · 2006-07-30 07:13 · Score: 4, Funny

Something funnier (IMHO) would be to write a simple wrapper over the shell which gives crazy error messages and other things:
root@honeypot:~# whoami I have no idea. root@honeypot:~# ls PRESS PLAY ON TAPE root@honeypot:~#
and so on... :)

--
My other account has a 3-digit UID.
1. Re:a fake shell by TheRaven64 · 2006-07-30 08:01 · Score: 2, Funny
  
  On a network I used to admin, I added a companion of the well known 'whoami' command; a 'whereami' command, which always replied 'You're in the village.'
  
  --
  I am TheRaven on Soylent News
2. Re:a fake shell by joper90 · 2006-07-30 08:05 · Score: 1
  
  That is hardcore..
3. Re:a fake shell by east+coast · 2006-07-30 10:27 · Score: 1
  
  What's so funny about "PRESS PLAY ON TAPE"? Oh, I see... you think you're all fancy with all your "floppy drives" and "hard drives" now don't ya?
  
  --
  Dedicated Cthulhu Cultist since 4523 BC.
4. Re:a fake shell by complete+loony · 2006-07-30 14:27 · Score: 1
  
  You're in a maze of twisty passages all alike. You are likely to be eaten by a grue.
  
  --
  09F91102 no, 455FE104 nope, F190A1E8 uh-uh, 7A5F8A09 that's not it, C87294CE no. Ah! 452F6E403CDF10714E41DFAA257D313F.
5. Re:a fake shell by Anonymous Coward · 2006-07-30 21:15 · Score: 0
  
  pickup the lamp
6. Re:a fake shell by Ronald+Dumsfeld · 2006-07-31 02:53 · Score: 1
  
  Something funnier (IMHO) would be to write a simple wrapper over the shell which gives crazy error messages and other things:
  Would giving you the root password to the Deathrow cluster help with this?
  ssh root@dahmer.vistech.net
  password: password
  
  You might want to Nmap the machine first, there's something screwy with it though. ;-)
  
  --
  Where's the Kaboom?
  There's supposed to be an Earth-shattering Kaboom.
7. Re:a fake shell by Gulthek · 2006-07-31 06:16 · Score: 1
  
  $whoami
  
  'You are number six.'
  
  $whoareyou
  
  'That would be telling.'
Most people.. by dubbreak · 2006-07-30 07:13 · Score: 5, Funny

Most people use their honey pots for surfing the web, checking email and sometimes playing games.

--
"If you are going through hell, keep going." - Winston Churchill
Nice Agenda by Anonymous Coward · 2006-07-30 07:16 · Score: 0

What rumours? Are you actually even interested in honeypots? A look at your post suggests your primary interest is in McKinnon.
1. Re:Nice Agenda by gd23ka · 2006-07-30 08:30 · Score: 0, Troll
  
  Go away back to Wikipedia where that kind of bullshit belongs.
Heh. by Renraku · 2006-07-30 07:28 · Score: 2, Interesting

Give them a virus that you wrote. Put a bunch of what appear to be self-extracting zip files in a directory and attach a virus to the extractor. Give them fun names, too. Like Montauk Project, Philadelphia Experiment, Roswell, etc.

--
Job? I don't have time to get a job! Who will sit around and bitch about being broke and unemployed then?
1. Re:Heh. by Lehk228 · 2006-07-30 10:00 · Score: 1
  
  what makes you think they would run your SFX zip files? AFAIK every archive app can unpack SFX files as well as regular compressed files
  
  --
  Snowden and Manning are heroes.
2. Re:Heh. by Jeremi · 2006-07-30 12:51 · Score: 2, Interesting
  
  Give them a virus that you wrote.
  
  On that note, has anyone done any security audits of the popular remote-exploit tools? It would be fun to write a "special" version of wu-ftpd 1.0 (or whatever) that recognizes when a particular tool is trying to exploit it, and responds by taking advantage of a bug in that tool to give you a root shell on the attacker's machine.... ;^)
  
  --
  
  I don't care if it's 90,000 hectares. That lake was not my doing.
Risk to others by Anonymous Coward · 2006-07-30 07:30 · Score: 5, Insightful

What if someone uses the trojans, etc. they install on your honeypot to launch an attack on some other site? Since your express purpose is to watch what they do, you can't claim ignorance.

Are you liable for any damages?
Are you causing problems for law enforcement or other sysadmins by helping the attacker obscure their identity?

Seems like you would need to filter outbound traffic VERY carefully. It would be almost impossible to do this without the attacker knowing -- they'd realize it was a honeypot and get the hell out of there.
1. Re:Risk to others by Anonymous Coward · 2006-07-30 09:17 · Score: 0
  
  I sure did RTA:
  
  "It's impossible to stop all outgoing exploits with manglers, but it can give you peace of mind that the outside world is relatively protected from your compromised honeypot [...]"
  
  Very reassuring.
  
  And what about all the morons who read an article like that and think it would be fun to set up a honeypot, but don't bother with all the hard, boring, work of isolating it?
2. Re:Risk to others by Jeremi · 2006-07-30 12:54 · Score: 1
  
  What if someone uses the trojans, etc. they install on your honeypot to launch an attack on some other site?
  
  I'd say that a proper honeypot would simulate the other site as well. Once you've taken the blue pill, there's no escape... ;^)
  
  --
  
  I don't care if it's 90,000 hectares. That lake was not my doing.
3. Re:Risk to others by Anonymous Coward · 2006-07-30 15:28 · Score: 0
  
  What if someone uses the trojans, etc. they install on your honeypot to launch an attack on some other site?
  
  Easy. Then just use a simulated honeypot instead of the real thing. =)
Honey can lead to infant botulism by itismike · 2006-07-30 07:43 · Score: 5, Funny

Sorry to do this, but I think that it is somewhat careless to assume that all new parents that might be reading Slashdot are in fact aware of the unique danger that honey presents to infants. Just in case someone comes across this and isn't aware, please look into the concerns related to infant botulism before getting the bright idea to feed your newborn some honey. Now go ahead and make the jokes - I just think that this needed to be said.
1. Re:Honey can lead to infant botulism by neiltrodden · 2006-07-30 08:01 · Score: 1
  
  I'm only replying to this post so that I can validate that, a: it is real, and b: I am NOT hallucinating.
2. Re:Honey can lead to infant botulism by Anonymous Coward · 2006-07-30 08:08 · Score: 0
  
  I think your joke-o-meter is miscalibrated... either that, or mine is.
3. Re:Honey can lead to infant botulism by rylin · 2006-07-30 08:16 · Score: 1
  
  Well, camel spiders ARE bad for babies!
4. Re:Honey can lead to infant botulism by Guru2Newbie · 2006-07-30 08:32 · Score: 1
  
  But camel spiders dipped in honey are delicious!
5. Re:Honey can lead to infant botulism by Anonymous Coward · 2006-07-30 08:41 · Score: 0
  
  And you have done neither, since you might be having a hallucination that your post has both appeared and generated this response.
6. Re:Honey can lead to infant botulism by itismike · 2006-07-30 08:47 · Score: 1
  
  You must be new here. Please click Parent to see the relivance.
7. Re:Honey can lead to infant botulism by rivetgeek · 2006-07-30 09:03 · Score: 1
  
  ....Im guessing you might be new EVERYWHERE. My point still stands, the article, thread, and conversation has nothing to do with giving honey to children. Please exit the high horse ride to your left.
8. Re:Honey can lead to infant botulism by JYavner · 2006-07-30 09:48 · Score: 1
  
  The probability is about 15 million to 1 against a baby being harmed by honey. If you really care, why don't you avoid putting the baby in a car seat (200,000 to 1 chance of death every time Baby goes for a ride)?
  
  The "no honey for babies" thing makes as much sense as the "no aspirin for children" thing. Some kid died from an ultra-rare syndrome and the parents decided to make the death "meaningful" by going on a crusade against a usually-harmless substance. Breast milk is much better than honey, anyway.
9. Re:Honey can lead to infant botulism by Anonymous Coward · 2006-07-30 09:56 · Score: 0
  
  wont somebody PLEEEEZ think of the children!
10. Re:Honey can lead to infant botulism by Anonymous Coward · 2006-07-30 10:05 · Score: 0
  
  the article, thread, and conversation has nothing to do with giving honey to children.
  Yes, that was the point of the joke, which are are stubbornly refusing to get even when beat over the head with it. The comment "This article has nothing about babes and bees. Everyone knows that babes just love fresh honey." prompted the poster to "misinterpret" talking about babes as babies and to post his "helpful" tip. Get it now?
11. Re:Honey can lead to infant botulism by Jeremi · 2006-07-30 12:57 · Score: 1
  
  Breast milk is much better than honey, anyway
  
  True, but I'll be damned if I can find a place that will sell it to me. For now I guess I'll just stick with soda.
  
  --
  
  I don't care if it's 90,000 hectares. That lake was not my doing.
12. Re:Honey can lead to infant botulism by __aaclcg7560 · 2006-07-30 15:42 · Score: 1
  
  When I made my reference to "babes", I meant a female adult. I forgot to consider that this reference to a honeypot might just be way to above most /. readers. Honey and nipples are a great combination. :P
13. Re:Honey can lead to infant botulism by Anonymous Coward · 2006-07-31 03:13 · Score: 0
  
  Don't worry, he won't reply. He's off sheepishly pretending he doesn't care, meanwhile that inner voice inside of him is going, "Fuck. I'm stupid. I think I'll stay off Slashdot for a few weeks and hope people forget how stupid I was today."
A swarm by Anonymous Coward · 2006-07-30 07:54 · Score: 0

Drive around randomly blasting a half dozen points with the MAC addresses starting with 00008F (Rayethon Systems and the fine maker of these). Unfortunaly those in the Middle East would be the only ones to get the joke.
Just one problem - by njdj · 2006-07-30 08:16 · Score: 3, Insightful

a fake database or two, some Word documents showing that the US has a secert base in the middle of the everglades....

You'll then get pulled in by Homeland Security and shipped to Gitmo for revealing that the US has a secret base in the middle of the Everglades.
1. Re:Just one problem - by aztracker1 · 2006-07-30 18:13 · Score: 0
  
  Maybe you could point out one example of someone (a U.S. citizen) being shipped to a U.S. run prison on foreign soil? Not to be a troll, but wtf!? You know, I really can't stand G.W. and to be honest, I think Huessane(sp) should have had a bullet through his head back in the late 70's, or the very least in the early 90's.
  
  I'm just sick of seeing crap like this everywhere I turn... Yeah, you hate Bush, you feel cheated, you think the war is all about the oil.. whatever. The fact is that half the crap that comes out of the media machine is just that, crap.. liberal, conservative, all crap.
  
  At least I can say one good thing about G.W. Bush... you know where he stands on things, because he doesn't change his answers, speaches, or actions because it's what the latest poll's results were twisted to say. The majority isn't always right... In any case, I'm so sick of seeing political B.S. spewed every chance some asshole on slashdot gets.
  
  --
  Michael J. Ryan - tracker1.info
2. Re:Just one problem - by Anonymous Coward · 2006-07-30 21:47 · Score: 0
  
  "...human beings and fish can coexist peacefully..." - Glad I know where he stands there...
  
  "I'm so sick of seeing political B.S. spewed every chance some asshole on slashdot gets"
  
  Er, Pot. Kettle.
3. Re:Just one problem - by Dion · 2006-07-31 00:38 · Score: 1, Insightful
  At least I can say one good thing about G.W. Bush... you know where he stands on things, because he doesn't change his answers, speaches, or actions...
  Dude, there are two things wrong with this:
  
  It's perfectly fine to change your mind when new data comes to light, holding on to a belief against evidence is stupidity.
  
  Bush does change his standpoint from time to time, just look at the whole "Let's ignore Bin laden" to "war on terr".
  
  Really, Bush and his handlers have run your country into the ground, demonstrated their complete lack of respect for human and civil rights as well as your own constitution and yet there are sheep like you who just bend over while praising the Great Leader.
  
  I mean, doesn't a graph like this one tell you that Reagan, Bush I and Bush II are not conservatives, but rather creditcard maxing out white trash?
  
  Doesn't conservatism mean spending less money?
  --
  -- To dream a dream is grand, but to live it is divine. -- Leto ][
4. Re:Just one problem - by Anonymous Coward · 2006-07-31 01:10 · Score: 0
  
  Well, since I'm not a U.S.A. citizen, it'd be quite likely. (But it'll be the CIA, not homeland security.)
pr0n by Khashishi · 2006-07-30 08:48 · Score: 3, Funny

Just fill the honeypot with pr0n and there will be plenty for the hacker to play with.
1. Re:pr0n by fusion9290991 · 2006-07-31 19:33 · Score: 1
  
  As long as it doesn't make my network interfaces stick together...
  
  --
  remember to loot and pillage before you burn!
no longer honeypot by bobamu · 2006-07-30 08:48 · Score: 1

now a honey cluster
or a hive?
this has endless potential
I feel a little ashamed now
Honeypot considerations by Dryanta · 2006-07-30 09:11 · Score: 2, Informative

Make sure that everything rlogs to an append-only hardened blackbox with a high securelevel. Preferably obsd. Also, make sure you have banners that will hold up in court. A honeypot is not something to be viewed as 'extra work' for a network administrator, but ESSENTIAL when combined with a few IDS sensors. It is the way to keep on top of your overall network security, and gives you a few extra IP blocks to add to your overall firewall ruleset. If you are really lucky, you will bring down some asshat that tries to compromise the network you have spent all those hours configuring and hardening.
Fun things to put on honeypots by Animats · 2006-07-30 09:23 · Score: 4, Funny
- Call up a venture capitalist friend and ask for some rejected business plans for really stupid business ideas. Put them on your honeypot.
- Get some publicly available geophysical data for real oil wells, and change all the locations to somewhere else with comparable geology but no oil.
- Get some rejected porno images from people in the industry. Buy the reproduction rights. Put Digimarc watermarks on them. Wait for them to reappear elsewhere. Sue. Profit.
Bad advice by frovingslosh · 2006-07-30 09:24 · Score: 2, Insightful

from the aericle:
Simulated traffic can be used in conjunction with simulated targets....If you want to really see what the attacker is all about, simulate traffic that looks like someone trading MP3s, or traffic that looks like someone transferring business documents. If the attacker spends most of his time looking at the MP3 traffic, he is probably pretty harmless. If he spends his time looking at the documents, he is probably pretty dangerous.
Yea, right. Great advice, right up to the day that the RIAA and their FBI thugs come breaking down your door and taking every computer that you own and anything else they want too, because the hacker that broke into your system and saw all that traffice was an RIAA hacker.

--
I'm an American. I love this country and the freedoms that we used to have.
1. Re:Bad advice by frostoftheblack · 2006-07-30 10:42 · Score: 1
  
  The key word there was simulate. I'm sure if you really had the time to devise a system like that, you'd find legal mp3z and faked or otherwise declassified business documents. Ha.
  
  --
  Do not mark in this space. For official office use only.
2. Re:Bad advice by Anonymous Coward · 2006-07-30 12:55 · Score: 0
  
  So they would use evidence they gained whilst illegally hacking into your honeypot?
  
  Not to mention it is only simulated traffic, so you aren't really distributing the files, so they don't have a case anyway.
3. Re:Bad advice by frovingslosh · 2006-07-30 16:23 · Score: 1
  
  No wonder you post as an AC, with insight like that! Sure it's simulated traffic, that would hardly stop the law from breaking down your door, destroying your stuff and generally making your life miserable if the RIAA asked them too. Would the RIAA hacking be illegal? Sure, there are plenty of cases of that and worse on record, but the law applies to you and somehow not to them, or have you not been paying attention. And of course you are just setting yourself up for extreme legal fees, the ones that RIAA racketeering typically threatens people with as part of their "pay us five figures now, or even if you are innocent we'll run your legal fees up so high that you'll wish you did" approach to filing suits on people. Is that approach itself illegal? Yup. Do they get away with it? They sure do.
  
  --
  I'm an American. I love this country and the freedoms that we used to have.
Consider how this one looks to a visiting non-Geek by umbrellasd · 2006-07-30 09:45 · Score: 4, Funny

"Fun Things To Do With Your Honeypot System"
non-Geek: "Is this a sexual reference? I don't get it...are they talking about that weird cyber thing?"
"From The Article" by jonabbey · 2006-07-30 09:50 · Score: 2, Insightful

Zonk, is it necessary to edit down what your submitters give you and take half of the post to include part of the referenced article?

--
- jon

Ganymede, a GPL'ed metadirectory for UNIX
1. Re:"From The Article" by morie · 2006-07-30 20:39 · Score: 1
  
  So true!
  
  It's not like anyone was interested enough to RTFA in the first place, so why quote from it?
  
  --
  Sig (appended to the end of comments I post, 54 chars)
That was my experience in late-90s as well by billstewart · 2006-07-30 10:32 · Score: 4, Interesting
I used to have a lab with a DSL like and a couple of quasi-honeypot machines on it. The Win95 (or was it Win98?) machine was never bothered; the RedHat 6 machine kept getting brutally attacked every week so after a few rebuilds I named it "kenny". Now, the Windows machine was partly not bothered because it wasn't doing anything interesting enough to be very vulnerable - there wasn't a web or FTP server, it wasn't sharing any disks or printers, I usually used Netscape browsers instead of IE, and if you did break in all you'd get for your trouble was a Windows machine. I had another Linux box on the network that was always running a scrolling tcpdump (AFAIK nobody ever bothered it - I had fewer services installed on it because it only had 500MB disk), and could see a variety of interesting traffic.
- One week I saw it sending lots of pings to a university in Sweden. I checked with the admin there, who said it looked like my machine had been infected with Stacheldraht DDOS client and was reporting back to an infected machine at his site, and told me how to clean it up.
- Another week the pings were to Washington University in St. Louis. I forget whether their machine had attacked mine or mine had attacked theirs, but either way it seemed appropriate since they'd probably used wuftpd to break in to my machine. Cleaned it up again.
- Another week I did a "find" looking for something under root's home directory, and found a whole ~/.something directory I didn't recognize. I did an "ls", which couldn't find that directory - they'd replaced /bin/ls, but forgot to update the date stamp on the file, and also forgot to update the date stamp on /bin/ps. "ps" was hacked to not report the processes they were running from their hidden ~/.whatever directory - but "ls" wasn't hacked to hide things in /proc :-). So I cleaned up their semi-clever little rootkit.
- After I cleaned up one of the latter two attacks, their next act was an "rm -rf /" on poor Kenny. Stupid thugs; at least they could have tried something interesting.
--

Bill Stewart
New Fast-Compression-only CPR http://preview.tinyurl.com/dy575ks
Most cool business networks are semi-homemade by billstewart · 2006-07-30 10:50 · Score: 1

Many business network connections are made of vanilla parts - a web server, Pix or Checkpoint firewall, a VPN appliance for employees to connect from home, mostly static web pages or decorative Flash navigation. Pretty boring, and not much point in breaking in unless you want somewhere to run a zombie server or you're a skr1p7 k1dd13 who still thinks scribbing on websites is way 1337 k3wl. At most there's a pre-packaged e-commerce server that lets you order things with credit cards, but you could have gotten the credit card numbers from professionals, or if you're a professional carder you could have run a pr0n site and ripped off anybody who fell for your "age verification" trap.
But the more interesting networks for a cracker are usually at least semi-custom - they may have some standard components, but maybe they're arranged in some customized combination, or there's a bunch of dynamic-html scripting that wasn't written quite right so there are exploits to look for Maybe it's the database hooks you can feed malicious SQL, or maybe there's something else in there.
I agree that unless you're a security researcher of some kind, you probably don't need a source of new cracker tools - but if you're running a customized production site, you do need to know what's being used to attack you, so you can block against it, whether it's your own company or whether it's a type of service you're providing to multiple customers.

--

Bill Stewart
New Fast-Compression-only CPR http://preview.tinyurl.com/dy575ks
Yeah, like you'd trust *those* warez... by billstewart · 2006-07-30 10:53 · Score: 1

Sure, there are worse places to get warez, but the type of people who crack into a site to get a place to store warez are _not_ the types of sources you'd want to trust.

--

Bill Stewart
New Fast-Compression-only CPR http://preview.tinyurl.com/dy575ks
Shameless plug by LordSnooty · 2006-07-30 11:19 · Score: 1

http://www.csc.liv.ac.uk/~greg/sshdfilter/

Get this and your ssh brute force attack worries will be over. They're only popular because ssh tends not to block repeated attempts by default, and many other avenues have been closed to the crackers. So make sure you block this particular route.
Tis a pity ... by Infernal+Device · 2006-07-30 11:39 · Score: 1

Too bad you can't trace the hackers back to the source and order a hit squad on them ... well, maybe in Russia.

--
"My God...it's full of trolls!"
It's all fun and games... by JustJake · 2006-07-30 12:59 · Score: 4, Insightful

until someone uses your honeypot as a platform to attack someone else. Or were you thinking that bad guys never use machines under their control in this manner?

Who are these security people with so much free time that they can monitor a honeynet for hours on end and create bogus traffic to move across it in order to entertain a bored 16-year-old hacker from who knows where? Every serious professional I know is up to his eyeballs in real work.
1. Re:It's all fun and games... by Anonymous Coward · 2006-07-30 15:17 · Score: 0
  
  It's been said before, it will be said again: simulated targets.
2. Re:It's all fun and games... by avatar4d · 2006-07-31 03:54 · Score: 0
  
  You could simply have a router/firewall or something else monitor the traffic and send a message to you if any traffic comes from the honeypot/net. There should really be no traffic going to/coming from this section of the network so it would be easy to trigger.
  
  --
  Confucius say: "Man who associates with smarter men than himself is smarter than the men he associates with."
Obligatory by Shadyman · 2006-07-30 13:45 · Score: 1

In Soviet Russia, Honeypots hack YOU.
Re:And a fun way to get free warze. Raises by davidsyes · 2006-07-30 16:26 · Score: 1

computer RPG to a whole new.. umm. "level"...

But, I like the part about a secret base in the Everglades.

What would be cool is faking a database of chupacabra-human mutagenics data claiming the efficacy of a new breed of supersoldier.

--
Previously: "Linux... Toward the Sunrise..." Now: "Linux... Toward the-- No, now, part of Every Sunrise"
Nice point on language by FoamingToad · 2006-07-30 20:36 · Score: 1

I'm particularly wary of people over-using the word "obviously", as it's one that seems to be frequently used to prop up a shaky logical proposition.
Re:Consider how this one looks to a visiting non-G by Lissajous · 2006-07-30 23:31 · Score: 2, Funny

A visiting what? C'mon - I mean seriously.....this *is* slashdot!
In defense of 'Paradigm' by Bobby+Orr · 2006-07-31 01:16 · Score: 1

I like the word 'paradigm.' True, sometimes it is abused. Sometimes it is only a hand-waving obfuscation. However it is also correctly used, if only occasionaly. In those cases, it is a correct and careful word choice which refers to both method and reasoning ("A set of assumptions, concepts, values, and practices that constitutes a way of viewing reality for the community that shares them, especially in an intellectual discipline" -- dictionary.com). Is there any other single word which can replace 'paradigm?"
honeypots not just for networks... by Anonymous Coward · 2006-07-31 02:02 · Score: 0

There are honeypots for old-school dial-in hackers too, see Sandtrap, for example.
Undressing the ladies by Dareth · 2006-07-31 04:59 · Score: 1

... I hear undressing the ladies in Russia is easy... getting them to put down their knives,axes, and AK's is much much more difficult!

--

I only look human.
My mother is a halfling and my dad is an ogre, so that makes me an Ogreling
Re:And a fun way to get free warze. Raises by LWATCDR · 2006-07-31 06:04 · Score: 1

Well the secret base in the Everglades is because of a one of the greatest wastes of tax money in the history of Florida.
In the late 60s everyone thought SSTs where going to be the next big thing. So they started to build a replacment of the Miami air port 50 miles west of Miami out in the Everglades... Well the EPA came and stopped it but not before a HUGE runway, control tower, and many parts of the terminal where built.
Airlines used to use it for practice since it is a huge modern airport in the middle of no where with no traffic.
Show up really pretty on Google Earth :)

--
See my blog http://ilovecookes.blogspot.com/ for light hearted technical information.
the model is based on a Bee.o.wolf cluster by wilec · 2006-07-31 14:33 · Score: 1

"now a honey cluster"

Not exactly, the model is based on a Bee.o.wolf cluster

"'or a hive?"

Yes the hive organization is like that of Bee.ORG

"this has endless potential"

POT! Ok, this explains everything :)

"I feel a little ashamed now"

Really, yea you should, but then I guess so should I.
"Oh Papa I am so 'shamed" ... place this one :)

Wabi-Sabi
Matthew