Slashdot Mirror
World's Worst Hacker?
An anonymous reader submitted a video clip that allegedly demonstrates a hacker working in a
honeypot.
If you fear for the future security of the internet, this video will set your mind at ease.
← Back to Stories (view on slashdot.org)
That was quick slashdotting..any alternate links?
That was quick slashdotting..any alternate links?
Here's the YouTube video I watched on his site while it was in Firehose.
My work here is dung.
OK for those of us behind firewalls what does he do?
In a thousand years, with a thousand more keyboards. But maybe he will produce all of Shakespeare's sonnets first.
Or he could be faking it.
Fight Spammers!
I think what we see here (and I am being serious) is outsourcing at work. He downloads tools from a subnet in Pakistan, likely homebase.
Just like anything from software development to customer service is being offshored to lowest bidder and services being performed by people without appropriate skills, simply because they are cheap. Same thing here - mass hacking is a business, and it is being outsourced to cheap unskilled labor. Look at this and laugh - then realize, this is the kind of quality of production that modern legitimate businesses rely on every day. Scary, ain't it?
Can somebody please explain me what he is trying to do? i just watched some wgets which downloaded some .tar.gz files and that perl is not installed so he couldn't run some scripts. that's it? or do i missed something?
Slashdot ya no es que lo era!
The best part was when he/she downloaded a copy of win2ksp3.exe.
Posting a link to a video on some guy's website...that is just mean.
http://www.youtube.com/watch?v=oJagxe-Gvpw
I like the background song. What is it?
The rest is plain sh*t.
Open Source Network Inventory for the masses! Kuwaiba
I might have to wait until later to view this. There are, like, 14 people on youtube right now and they have faster connections than I do.
For those who are getting a slashdotted server, here is the video.
"- What's so unpleasant about being drunk?"
"- You ask a glass of water."[from h2g2]
Gee I sure wish there some sort of video service that could host videos so that I could watch this video.
is there a future for CLI based sketch comedy?
Hey, let's try to CD into all kinds of directories that don't exist.
# /var/spool>cd /spool /var/spool>cd /samba /var/spool>cd /a /var/spool>cd /var /var>cd /spool /var>cd spool /var/spool>copy/pasted commands to download random tarball /var/spool>more failure to cd
No such file or directory
#
No such file or directory
#
No such file or directory
#
#
No such file or directory
#
#
#
#/var/spool>sudo aptitude ruby and stuff
sudo: command not found
#/var/spool>wget path/to/win2ksp3.exe
That's it, basically. If you can use telnet, telnet into 94.255.168.108 and it plays an animated text version of it all.
SSC
First I just thought "well, not everyone is a super smart irrelevant cubicle IT support geek" and shrugged at the point that was trying to be made - which, I guess, is something along the lines of "it's really this easy to break in to some systems, and it's great to laugh at people who.. err.. manage it, because not everyone knows what to do next."
Then I saw them downloading W2Ksp3, and realised that the whole thing is just a bit of sensationalism to get pageviews. The hacker is as genuine as the honeypot.
Here is the youtube link directly to the video, lord knows why that wasn't linked to in the first place. World's worst hacker
Violence is the last refuge of the incompetent. -- Isaac Asimov
I think watching the "Tracer T" video from NextGenHacker101 will also set your mind at ease about the future of hackers. http://www.youtube.com/watch?v=SXmv8quf_xM
Beware of the Redittor who loans you a Sharpie.
There is a metric buttload of idiots like that out here in the intar-webs. they are only slightly better than the nex level up that actually have some understanding but are still just script kiddies.
I think I need to set up a honeypot like that, I need some good entertainment.
Do not look at laser with remaining good eye.
a further 6 all with the same issue of clueless ahckers who have only used *nix systems a couple of times.
http://iwatchedyourhack.org
funny, but I want more.
The linked site is down, so here it is on youtube
Help find a cure for cancer. Join the [H]orde
Mirror anyone?
No wonder you posted anonymously, from shame... You also probably use a MAC and don't realize it.
Harrison's Postulate - "For every action there is an equal and opposite criticism"
I'd like to get a video of the server that is hosting the hacking video right now so we can watch it melt.... :)
This reminds me of Bill Cheswick's paper "An Evening with Berferd In Which a Cracker is Lured, Endured, and Studied," from the 1992 Winter USENIX Conference. (Paper is available directly from Mr. Cheswick's site here as a postscript file).
In it, he toys with an intruder for a number of days. He pretends the system has actually been hacked, gives up bogus password files, and manually pretends to be a particularly slow machine with a lot of easy holes in it. It's a well-written, excellent piece of writing. I recommend it to anyone who enjoyed this video.
Try this one:
Next Gen Hacker 101 - How to view someone's IP address going to Google
Oh that was painful. Did anyone here actually finish that video?
On Good old Youtube: http://www.youtube.com/watch?v=oJagxe-Gvpw
he must be a friend of this guy as he traceroutes to google and declares "here you have it, 10 people are currently using google", without a hint of irony. http://www.youtube.com/watch?v=SXmv8quf_xM
Everyone knows that the best hack is whiterabbit.obj!
GLaDOS for President 2016! "Well here we are again. It's always such a pleasure." -- GLaDOS, 2011
if perl was installed (as it is on almost every linux system these days) his scripts would have run.
First rule of information security: Never run anything you don't need to. If at all possible, don't even install it. Who cares about an exploit in ${PACKAGE} when you haven't got that installed anyway?
Any hacker worth their salt wouldn't be too disappointed that perl wasn't installed. He already had a root prompt and ls showed a .apt directory - there's a good chance apt-get install perl would have got perl in there in about 20 seconds flat.
this guy was simply to follow his cheat sheet and it didn't work. in fact, i see this as a complete failure of the honeypot scenario as it's supposed to provide a fake environment to gather intel. this honeypot does nothing of the sort and seems to be more for entertainment than anything else.
I'm not so sure. We now have a good idea what's on his cheat sheet and - more importantly - have a number of URLs where some potentially interesting scripts may be found. It's possible (though if this is the sort of thing we're dealing with, I'd venture unlikely) that those scripts might provide information about a hitherto unknown local exploit.
Also, is that # prompt literal? The guy is root but is failing to run things through sudo?
Rethinking email
What's that quote about the definition of insanity being attempting the same thing over and over and expecting a different result? :)
I guess even in Russia some 'hackers' are better than others:
Additional whois information for 213.248.54.246:
You can't handle the truth.
Looks like the time I got hacked (my fault, had a crappy password).
Idiot was so dumb he didn't zap the bash history file.
Spent a lot of time downloading and failing to install rootkits and other hacking tools, not having noticed that it was a UnixWare machine and not Linux.
Watch this Heartland Institute video
A Media Access Control?
/* No Comment */
So, back when I was an undergrad and used to play around on MUDs, my roommate and I wound up talking to a young woman who claimed to be a hacker. She wanted to get together, and asked if she could bring a friend. Figuring we were about to get incredibly laid, we invited her up to the university. Young and dumb, what can I say.
We met her and her friend at a rest stop. We waited for a long time, and were about to leave when an incredibly ramshackle old sedan rolled up, with its muffler clanking and rattling, its headlights flickering, and great clouds of blue smoke trailing out behind. A beautiful girl leapt out of the car, followed by her friend: a very tall, very skinny punker dude.
Our spirits were crushed, but being polite computer science students, we couldn't figure out how to get rid of them. They didn't have enough gasoline to get home, but they DID have booze. So we went back to the university.
Immediately they wanted to "hack a computer", and marched to the computer lab, which was still open. This was where we talked on the MUD. There was no talking them out of it. Trailing behind them, wondering what on earth they thought they were going to be able to do from a computer lab, we somberly shuffled along.
On seeing a computer, the girl leapt into action! jumping into the seat, she said "I'm gonna hack this bitch!" and her boyfriend perched on the back of her seat to egg her on. I said something like "hey, look, don't do anything that'll get anyone in trouble, ok?" and she said something like "don't worry, I'm leet, nobody's ever going to know I was here!" This did not soothe my fears. I was about to say something else when she got a DOS prompt, and started typing in random passwords.
> God
> File not found. (I don't remember the exact words)
> Sex
> File not found.
(This went on for a long time.)
My roommate and I chatted quietly a few feet away, greatly relieved. We admitted our suspicion that this person did not, in fact, know anything about computers, or possibly anything else. To our enormous relief, the person appeared to be harmless. Also, it was becoming clear that neither one of us were going to get any. We wondered what we should do. We didn't want to be rude.
Suddenly, I had a thought. "Let's get her into the MUD!" My roommate thought that was an excellent idea, so we said "Hey, somebody wrote this path on a piece of paper over there... Maybe it'll get you in!" She tried it, and was allowed to log into the MUD. She yelled out in triumph! She was invincible!
She played happily on the MUD for about a half hour, with her boyfriend proudly telling us how "leet" she's always been, and then we went back to our room. We let them crash on the suite couch, and they were gone in the morning.
I wonder how many "hackers" are like this? Just trying stuff they saw on TV, with no understanding of what's actually going on?
Anyway, she was gorgeous, so I think we can be forgiven for indulging her a bit. She was about 5'5, with pale skin, medium brown long straight hair down to her hips, and a mix of hippie and punk clothes. Such an appealing woman... Not really connected to reality, exactly, but definitely not boring.
Thus spake the master programmer:
"When the program is being tested, it is too late to make design changes." (Tao)
MACintosh...
Sorry Capitalization error...
Harrison's Postulate - "For every action there is an equal and opposite criticism"
I couldn't... poor misguided kid
-- no sig today
Oh god, he has pics also :)) and also pics of his girlfriend - her name is ely - so it was her account : ely.uv.ro :))
http://shoarec.5u.com/photo.html
Yes, it is literal. The machine doesn't have sudo installed, and he didn't try running it without sudo.
SSC
Oh yes, and "shoarec" means mouse.
PS. Yes, I live in Romania.
.sig: No such file or directory
You, like, didn't watch the video, so *whoosh*.
Today is red jello day - all workers must eat all of their red jello. Failure to comply will result in five demerits.
Pavlov would be proud. Just because repeating steps in Windows sometimes leads to success doesn't mean it works on every OS.
This is awesome... thank you to whoever posted this... I can't remember the last time I laughed like that... sigh... One of the funniest things about this video is that the average person would have no freaking clue why it's so funny. We are all major nerds.
Heh, I had my Redhat 4 box broken into using some remote samba exploit back in '97. (Been running Debian without incident ever since)
At least this "worst hacker" uses "history -c" at the end of his session. Mine just did a "rm ~/.bash_history" before he logged out ... at which point the shell just writes it over again with everything they did during their session, IP addresses and all :-P