Slashdot Mirror
Wired Reports On Korea's First Hacker Con
evanwired writes "Quinn Norton offers a great first-hand account of the first South Korean Hacker con. Marked by conservative dress and polite conversation, the group was nevertheless still very much concerned with the shortcomings of computer security." From the article: "A police crackdown three years ago left South Korea's hacking community broken and fragmented. One of the conference's more animated speakers, 'Xpl017Elz,' complained that many of Korea's best and brightest hackers wound up emigrating to more receptive environments with better pay for security researchers. But he also demonstrated a large and difficult divide between how the hacker communities behave in Korea and the United States. Xpl017Elz's presentation focused on four (of a reported seven) attacks he developed against Red Hat's Fedora Core using ExecShield. He demonstrated privilege escalation, where a logged-in user can become root and take over the machine, and remote code execution, wherein an external attacker can gain root without a login."
The police are going after all those Starcraft/WoW hackers. They need do something more productive with their lives. Maybe hacking Minesweeper on Windows Vista?
Anyone else notice the only picture thumbnail that worked in the article was the one with RMS?
Refuse and resist, comrades!
Did he get confused when someone explained to him what a secure password is and you shouldn't use your name?
"It's not democracy." I'm from the US, what is this 'democracy' you speak of?
Just because an idea is popular doesn't make it right.
"Hi, we're going to just cut-paste from the article like we always do except we have the reading comprehension of an american highschool football player and can't even pick paragraphs that make sense."
Every day I'm reminded why I adblock and don't subscribe here. I can get URL Cut & Paste on IRC. And it's realtime.
I think the context was more that Security Researchers refer to themselves as hackers. Hence relocating for better pay, if you're an internet-based criminal, you can do that pretty much anywhere.
After dabbling in infosec, I realized that there was a trend
not to release security bugs back to the community.
When it comes to linux, is it not amazing the lack of new
exploits lately? the lack of worms invading us, besides silly
awstat cgi type worms?
The people who can find the bugs and create an exploit
have shut out the rest of us.
I am quite glad they did. My job seems a lot easier when
these bugs are known by people who won't abuse them. Criminals
seem too dumb to make them and the occasional leak is quickly
traced back to the doofus who shared it.
the bar has been raised to hack a linux box. good for all of us.
no more kids searching out the last 0day release and scanning
the internet for people who did not patch.
Who says they are getting paid? Wishful thinking...
Hacking into someone's network uninvited and posting some silly "hacked by" page is not security research.
I missed the part of the article where this is discussed. Can you please point me to it?
The article I read talks about someone who's created exploit code to get around a security measure developed by RedHat. I'm no expert at "ExecShield", but independently developing exploits to security measures sure sounds like Security Research to me.
What you're describing sounds more like script kiddies. It'd be nice if you actually presented some evidence that these guys are actually just script kiddies and not just assuming it because of what I can only assume is personal bias.
AccountKiller
That insecure? What the hell?
Not the first... Not even the first publicized one.
;)
Not really a dupe article, hrm... maybe Wired writers can't read Korean
- Adam L. Beberg - The Cosm Project - http://www.mithral.com/
"In Korea, only old people go to Cons."
No folly is more costly than the folly of intolerant idealism. - Winston Churchill
Trust Wired to get it wrong. The magic of subjective journalism. It is ironic that another /. article describes how the blogosphere is becoming recognized as unreliable.
I was a speaker there in August 2000 at the First WorldWide Top Hackers Conference 'IS2K' in Seoul Korea at the Millennium Hotel. We spoke for several days and even got to meet Kim Hyong-O, the Member of the National Assembly.
Ragnarok Online-Con, where execs talk about how they got their user/ Credit card database hacked.
It is important to note that ExecShield can only reduce the risk and impact of buffer overflow type security issues. The presence of these technologies should never be seen as a substitute for applying security updates provided by the operating system vendors.and ExecShield does not offer protection for kernel security holes.According to Redhat:
But it seems badly spelled hacker isn't interested in telling Redhat about the supposed flaws in their software (if that is where the exploits are targeted).
Ya just gotta love how Red Hat can take a perfectly good OS and slaughter it, and then have the gall to ask for money for a commercial version.
I hereby declare all Red Hat users and customers complete fools.
I found a bug in solitaire for windows 98 and earlier. When you flip the deck and undo 3 successive times it ends the game.
we just keep quiet about the rootkit on your system
rero
i r rorean racker
kekeke ^_^
i hax ur rerhrt
HACKED BY ROREANS
I didn't see the url for the actual conference in the article, but I might have been skimming too fast.
Just in case I really missed it:
Power Of Community