Slashdot Mirror
Bizzare Answers from Cult of the Dead Cow
tdsanchez asks:
How has the 'mission' and/or purpose
of cDc changed as the years have passed,
especially with the advent of pervasive
internet
connectivity and the 'death'
of classic dial-up BBS's?
cDc answers:
Obscure Images answers:
cDc's mission has never changed. We are still primarily motivated by the
desire to dominate the world. I think that if anything, the growth of the
internet has just been part of our plans for your tomorrow.
G. Ratte' answers:
The mission has never changed... it's always been about us trying to do
cool stuff.
The Internet has just made it easier to communicate and it's a lot less
hassle than when you had to worry about how fresh your long distance codes
were, back in the day.
Call my dead BBS! Demon Roach Underground, 806/794-4362. 2400 baud!
Apple II, baby!
Nighstalker answers:
The whole point of cDc is to communicate. While T-shirts and watches and
BO2K are the glitz, the core of cDc is communicating to and with the
world. The venerable T-File is the heart and soul of cDc and we will never
abandon this most basic and venerable facet of the telecom/computer
demimonde
Tweety Fish answers:
We are currently in the process of training our massive, highly secretive
ninja army.
M1000 asks:
How would you define the
implementation of security on the major
OS today?
- Windows95 / 98
- Commercial Unix
- Linux
- FreeBSD
- NT
- Windows 2000 (NT5)
- etc.
cDc answers:
Nighstalker answers:BR> If it's from MS, the security is crap. everything else is better by comparison. Linux is pretty good if you're a Linux guru. Same thing with any other flavor of UNIX. But no matter how good you are, there's someone out there who is better than you.
"The price of secure connectivity is eternal vigilance!"
--
DilDog answers:
- Windows95 / 98 - Shit happens
- Commercial Unix - Shit happens over RPC.
- Linux - When shit happens, you fix it.
- FreeBSD - Shit would happen, but there's no driver for it yet.
- NT - Shit wouldn't happen if you'd just spend a few months performing 300+ modifications to our default installation, you lazy sysadmin. Get your MCSE.
- Windows 2000 (NT5) - Shit happens over DCOM.
Tweety Fish answers:
Except for Window95/98, which I would characterize as sucking ass across the board, there's no simple answer to that question. All of those operating systems are (resonably) securable, in theory, but if you want to make the job of securing a box easier, why not run OpenBSD?
xmedar asks:
There is an episode of South Park
with cows worshipping a cow clock, and
when it is removed by the people, the
cows all jump
off a cliff, now I've heard
that refered to as the Cult of the Dead
Cow episode, is it anything to do with
cDc or are cults for dead
cows just in fashion right
now?
cDc answers:
Obscure Images answers:
We would like to believe that we were inspirational to the creators of
South Park, but we will defer to the obviously natural call of bovinity.
--
Reid Fleming answers:
Our lawyers will not permit us to comment upon the episode in question.
--
G. Ratte' answers:
Sure. I hear the next round of Calvin Klein ads will feature Kate Moss
munching a big
greasy cheeseburger as Kari Wuhrer cleaves an axe through a cow's head.
And a roomful of Italian boys with no chest hair look on in quiet
desperation. It's a scene straight from one of our industry convention
parties.
--
Nighstalker answers:
The universe is a chaotic system. If Ratte had been screwing around in a
sewage treatment plant, rather than an abandoned slaughterhouse, we cound
have been called the Cult of Recycled Shit. That the guys from South Park
had cult of suicidal cows may be our fault. maybe not.
--
Tequila Willy answers:
I know this episode well, and I've spent a lot of time studying the
various interpretations of this episode. Though the Cult of the Dead Cow
interpretation is a very plausible and popular connection to make, there
is
another very plausible interpretation that I think you will find
interesting.
The hands on the clock are metaphors for the phallus. The removal of the
clock
represents castration. The removal of the phallus limits sexual options
and
limited options are bad. The cows demonstrate their adherence to their
principle of "maximum freedom or death" by jumping off the cliff. You
might
ask yourself, xmedar, whether you have any principles that you would be
willing to die for.
--
Tweety Fish answers:
TV writers (comedy writers especially) tend to be unrepentant fanboys with
computers and tight deadlines... you decide.
Effugas asks:
To the various
illustrious(translation: I've worshipped
you guys for the majority of my life)
members of the Cult of the Dead Cow:
Moo.
That being said, I'd like to know what have been the most surprising events in the computer industry for you. Anything's fair game. What just came out of nowhere and knocked the Cult flat on its ass?
cDc answers:
Obscure Images answers:
We haven't been knocked on our asses yet by anything that has happened in
the computer industry. We're great at believing that whatever we see is
directly caused by our underground efforts. We would be knocked on our ass
if we didn't believe that. Oh yeah, Linus Torvalds is a cDc simulacra
unit.
--
Reid Fleming answers:
www.realdoll.com
www.jerkcity.com
--
GA Ellsworth answers:
http://www2.promisekeepers.org/
--
G. Ratte' answers:
I'm mostly surprised by what hasn't happened. I thought floppy disks
would get bigger and bigger 'til they became a 3-foot square, and you'd
use 'em for kites when they went bad.
I thought for sure bubble memory was going to take off, and pen-based OSes
would rule the industry, and I'd have an Amiga clipboard computer running
MS's BOB right now. It should have been Atari, not Microsoft.
--
Nighstalker answers:
Cheap powerful computers. Looking at the list prices of all my Commodore
128 gear shows me that the whole system cost more than a new iMac. Also,
PDAs are pretty surprising, how they just suddenly seem to be everywhere.
--
White Knight answers:
What surprised me most about the computer industry is how much less
attractive
Kiki Stockhammer is in person.
--
Tweety Fish answers:
You know they got these things now that can take a picture and put it on
the screen thingy? That's so cool!
sinatra asks:
A recent article (forgot the
reference) characterized codc members as
a bunch of social juveniles bound by no
particular ideals,
and lacking in both trust and
personal respect for other members as
well as the (cr|h)acker communities
at-large. The evidence
presented in the article
however was limited to on-stage behavior
and a virus of unknown-but-suspicious
origin on a distributed
CD. The codc archives paint an
equally murky picture, depending on the
reader's perspective.
So is there a codc code of ethics? Could such a thing ever be enforced?
cDc answers:
Obscure Images answers:
I can't answer for everyone, but I will say that I am a moral relativist.
I
think that the morality of an act is dependent on the context of that
action. As for a cDc as a group, we are a very close knit group, very
nearly a family, and to think that there would be someone amongst us who
would turn on us is an absurdity. The article in question was written by a
well known fool who would fit in better at a meeting of the John Birch S
ociety than a computer convention.
--
Reid Fleming answers:
No and no.
--
G. Ratte' answers:
Lacking in trust and personal respect? I wish I knew the article you're
referring to,
'cause those are some pretty strange assumptions.
But that's funny, that's interesting. We're the kids the newspapers used
to write about being diagnosed with "Pac-Man elbow." We're the kids with
the sore thumbs
from Atari joysticks playing "Combat" through our adolescence. We're the
first
generation to grow up hearing a modem squeal every day after school.
So if there's any lack of trust and respect for the (cr/h)acker community,
it's self-loathing and it's all in the family. Familiarity breeds
contempt.
The only ethic is to not be, uh, k-lame. Spreading viruses is not good.
--
Nighstalker answers:
I read that article. The author is an ignorant twat.
For what it's worth, I trust my very life with any cDc member. I trust them implicitly.
I suspect that cDc individually and as a group is far more ethical than
Microsoft. Anyone emails me, they get an answer directly from me, not some
flack from marketing.
--
Tequila Willy answers:
Dear Sinatra,
Who's codc? I've never heard of them.
--
Tweety Fish answers:
The nice thing about cDc is we're all cool enough, and all moral enough,
that there really is no need for us to enforce much of anything.
Personally, I'm constantly entertained by everything every other cDc
member
ever does, and I'd much rather have that than the 1700 page cDc Moral
Guide.
Incidentally, the author of that article also thinks that Richard Stallman should be arrested and charged with monopolistic practices, so, you know, you shouldn't believe everything you read.
[bog-oh] asks:
You folks have been around for so
long, surely you've seen the evolution
of both terms. Are you quick to take a
stand on misuse of
either, or do you just take it
all in stride? Some of the older
security folks out there are damned sure
that "hacking" is still purely
malicious, and "Cracking"
simply means breaking software
registrations and the like. What do you
feel each term represents
these days?
cDc answers:
Obscure Images answers:
We would like to take a stand on this nonsense once and for all. We are of
the firm opinon that the qualification for being a hacker is not something
that can be stated on clear moral grounds. As far as we are concerned,
crackers are something you eat.
--
Reid Fleming answers:
The term "cracker" is divisive, insulting, and should be considered
inappropriate in mixed company. Same for "honky" and "caucasian".
"Hacker" on the other hand, is perfectly fine for most social situations.
As in: "Hey, you! Hacker! Suck my dick!"
--
G. Ratte' answers:
Personally, I never use the term "hacking"... it's all just messing around
to me, and
some of it could get you into trouble. Whatever. "Cracking" means
removing software
protection, and a "cracker" is a white boy. I don't know when people
starting fussing over the terms and using "cracking" to mean system
intrusions, but I think it all carries the stench of journalist-invented
nonsense. Same with all that "white/black hat" crap. Nobody in this
situation uses those terms, and they readily identify the user as an
outsider.
--
Tequila Willy answers:
Dear Bog-Oh,
Your sensitivity is to be applauded in these times largely
characterized
by egocentric thinking. I appreciate that you've taken the time to ask me
what
I *feel* about these terms. I feel good about what each term represents.
Thank
you for asking.
--
Tweety Fish answers:
A cracker is somebody who cracks warez, and/or a pejorative term for a
white person. Any other meaning is never going to catch on in the media,
nor with the old school. It's just too complicated to remember the
distinction all the time. The people who are hackers by anybody's
definition have done some... uh... mischevious things in their time; it's
part of the nature of the beast. To say that "a real hacker would never
break into a computer system" indicates - to me - a lack of understanding
of the original meaning of the word. Of course a real hacker would break
into a computer system, if it was an interesting enough problem and they
didn't anticipate anybody having a problem with it. I agree that the media
should widen it's definition of what a hacker is, but that's not the
argument I usually see, especially here on slashdot. I see a lot more of
"they aren't a real hacker, because they break into systems and/or do
security stuff", which is plain silly.
Personally, I refer to people by whatever term they would like me to use, unless I don't like them.
Besides which, if you are doing something unexpected, unforseen, or disallowed to any system (which is my pocket definition of hacking) somebody is always going to think it's bad, until you laboriously convince them otherwise, on a case by case basis.
Why get caught up in semantic arguments when you could be doing cool things and get noticed for THAT, instead?
phray01 asks:
please be honest
- (1)boxers
- (2)briefs
- (3)panties
- (4)thongs
- (5)nothing
- (6)orange
- (7)Hemos the Hamster
cDc answers:
Obscure Images answers:
All of the above, though not necessarily at the same time.
--
Reid Fleming answers:
sacred vestments
--
GA Ellsworth answers:
Boxers for me..
--
G. Ratte' answers:
I refuse to answer this question, as I don't want to encourage your gross
masturbatory fantasies. What I choose to cover my massive, pulsating tool
swinging handily between my taut legs is my business, and my business
only. What should the touch of soft fabric brushing the tender head of my
otherwise steely rod matter to the likes of you?
Disgusting!
--
Nighstalker answers:
Sheer to the waist black seamed pantyhose for formal affairs.
--
DilDog answers:
All of the above.
--
Tequila Willy answers:
Dear phray01,
The etiquette in this case actually depends upon whether you were east or
west of the Mississippi when this unfortunate accident occurred. East of
the
Mississippi, the gas station attendant should remove the dog's head from
your
windshield wipers when cleaning the windshield. However, please be
prepared to
tip for this service. West of the Mississippi, it is usually considered
bad
manners to expect gas station attendants to remove any animal bits that
have
been wedged in your car parts. Thank you for asking.
--
Tweety Fish answers:
I actually try not to wear any slashdot operators that close to my skin.
Makes my pants look funny.
Foogle asks:
Let's face it - most people regard
the cdc as a bunch of script-kiddies
looking for some limelight. The
BackOrifice software really
made this worse, because it
was seen, not as an admin tool, but as
an application meant to propogate
cracking. How does this
make you feel? That is, what
are your personal thoughts on the cult's
activities and how do you think they
should be viewed from
the professional side of the
industry?
cDc answers:
Obscure Images answers:
cDc is not a group of script kiddies. We are united in our interest to
hack
the world, be it though computers, words, images, sounds, politics, money,
or sex. Those who consider us to be script kiddies ought to shut the fuck
up and write their own tools. Using tools doesn't make someone a script
kiddie, what makes a script kiddie is the use of other people's tools to
accomplish things they have no interest in understanding. It is
understandable for professionals to be concerned with our reputations, but
that is why we've been completely open with our tools. We have software
that can be used as very effective tools.
--
Reid Fleming answers:
Most professionals get it. The trojan horse problem was considered to be
low priority a year ago. Things have changed as a direct result of Back
Orifice and Netbus.
(By the way, you ever notice that sometimes journalists turn to Russ
Cooper for an "independent" perspective on Microsoft? And you ever
notice how often he agrees with the Microsoft position?)
--
G. Ratte' answers:
It's somewhat frustrating when something a lot of effort has gone into is
totally
misunderstood by so many people. A lot of people seem to have an
aversion to the big picture and how BO fits into a larger whole.
As for 'the industry,' . Rah rah venture capital, rah rah IPO.
"We've got this great new site, Hats4Cats.com, a brave new world
of headgear for our feline friends! We're seeking the perfect partners to
get
this off the ground right, and if you'll just look over this media kit at
your leisure
after the convention, we'll have someone call you in the next few days
about some great opportunities!"
That's 'the industry.' 'The industry' can kiss our collective cDc ass.
--
Nighstalker answers:
Most people couldn't plug in new RAM to their machines or install an
application with the aid of an installation wizard. More so for the people
that write about the digital underground who are not a part of the digital
underground.
BO was released to show up the miserable security of Windows, in the hope
that MS would do something other than issue press releases and that users
would be made aware of the pitiful security on their machines,
particularly when connected to the Internet. BO2K was released in response
to the pleas of countless IT professionals who needed a powerful admin
tool.
--
DilDog answers:
I don't feel one way or the other about it. I write code to fill a void
whenever I find I need something that doesn't exist. Hence, BO2K.
What Linux is to Commercial Unix, BO2K is to Commercial remote admin
tools. I mean, what kind of sick and twisted hax0r would want to use FREE
and POWERFUL software without having to pay out of their ass for it.
--
Tequila Willy answers:
Dear Foogle,
Thank you for being concerned about my feelings. However, I disagree
with
the metaphysical assumptions of your first question. I believe I choose
how I
feel and that the reaction of "most people" cannot make me feel any
particular
way. That being said, your second question seems more appropriate. The
Cult of
the Dead Cow should be viewed as what they are, namely, experts in global
domination.
--
Tweety Fish answers:
So the technical definition of Script Kiddie is one who uses pre-made
scripts or tools to hack sites, instead of developing their own tools.. by
that definition, how could we possibly be script kiddies?
In the larger sense of BO2K being an application meant to propagate cracking, yes, that might happen, but the way we're doing it does serious work to raise awareness of these issues. I think we're perfectly aware that this can be hard to understand, and we're perfectly willing to keep hammering our message home until people start to get it, and start working to fix these problems.
An_onymous Coward asks:
First of all I've got to say I think
cdc is pretty damn cool. I was digging
their .txts since I got my first dialup
shell account long ago.
Now, with you guys being so
security minded and all, there's only
one question I could think of for you:
If you were to build your
ideal network, with telnet,
ssh, www, ftp, pop3, smtp, file &
printer sharing, bind, etc... what would
be your ideal configuration to
maximize security? Please be
specific about Network OSs, routers,
network policies, protocols,
filesystems, permissions,
daemons, firewall rules, and
anything else that comes to mind.
cDc answers:
Reid Fleming answers:
Dedicated fiber lines in a star configuration. Ultra low tramissions,
only a few quanta, to foil optical taps. One-time pad encryption for each
packet. All plaintext messages composed in an alien language unknown to
anyone but the participants. The actual content of the messages being
hidden in subliminal channels too sensitive to be mentioned here.
--
DilDog answers:
For cryin' out loud. My ideal network doesn't have half of that crap
running. It can all be done with DCOM and HTTP. Just kidding!
I -know- this is a Linux crowd, but I'm tellin' ya, take a look at OpenBSD
for PROACTIVE security when it comes to that mission critical firewall
box, network monitor, webserver, etc.
--
Tequila Willy answers:
Dear onymous Coward,
First, thank you for your compliments. However I am left wondering how
many of our text files you have actually read. All of your questions have
already been addressed in detail in our text file, Wet Mount Slide.
--
Tweety Fish answers:
DUD3 Y3R TRY1N T0 B3 4LL SN34KY 4N' S0C1AL 3N1N33R US AN' SH1T A1N'T Y000?
B3TT3R US3 NM4P INST3D!@$#!@%
If you want a genuine answer to that question, I'm sure the l0pht would be able to answer it as specifically as you need for a small fee.
Freshman asks:
Since BO is/was a big deal, I'm
wondering what kind of companies have
tried to contact you and what they had
to say.
Did Microsoft ever give you
guys a buzz? The DoD maybe? CIA? If so,
what did they have to say?
cDc answers:
Tweety Fish answers:
We've been in constant communication with the CIA, NSA, and MOSSAD to make
sure that the government-specific backdoors built into BO2K meet their
tough standards for EoE (Ease of Eavesdropping).. we value the
contributions the US and other governments have made to these products,
and
look forward to working much much more with them in the future.
Microsoft hates us, I think.
rikek asks:
I've always wondered... what does a
group that produces "script kiddie
material" (no offense intended, it's
inevitable whether you
want it or not) feel about
their work? Every now and then I'm
plagued by contact with an "3R33+
H@X0R", who is most likely
some 14 year old without
anything better to do who is causing
some minor damage, without a clue as to
what a TCP/IP packet is.
The ratio of clueful hackers
cracking to script kiddies cracking has
gone way down over the few years, and
products like BO are
likely to blame. So what do
you guys think about this... would you
rather this turned around, or do you
feel that distributing tools to
nameless masses is a good
method at getting back at the real
evils?
cDc answers:
Obscure Images answers:
There will always be people who ride on the work of others. That's all
that
script kiddies are, poseurs, trendies or what have you. Back in the old
days after War Games came out there were floods of "hackers" out there and
these same comments were made. In the end, there is always a shakeout
process. Most of the current script kiddies will abandon their activities,
leaving the hardcore still in place.
--
Reid Fleming answers:
I suggest reading the section on Evolutionarily Stable Strategies in
The Selfish Gene.
--
G. Ratte' answers:
It's tricky, and I refuse to get into the kind of age/experience
penis-size wars that
always come up with this "lamers are running around with dangerous
scripts" thing.
Back Orifice is distributed the way it is to force an issue.
A hell of a lot of people should be upset their computers are wide open.
I've always hoped that people interested in our tools would seek out our
other material
and read up on what we're about. And that they'd be smart enough to
figure out that bumming
some hapless person's day by screwing up their computer is not a good way
to spend an afternoon. The end of all our text files from the last few
years says this: "Save yourself, go outside, DO SOMETHING!"
--
Nighstalker answers:
Virtually anything can be used for evil, as virtually anything can be used
for good.
One thing about BO2K is that the author deliberatly made it more difficult for clueless script kiddies to use. They're the ones who constantly plague us with badly mis-spelled complaints about how BO2K doesn't work. The IT professionals sing our praises about the power and ease of use of BO2K.
BO2K is forcing evolution to accelerate in the world of computer security.
we regret the damage that is done with BO2K. In the long run, we will all
be the better for this.
--
Tequila Willy answers:
I think you have raised an excellent question. However, I am doubtful
that
good products like BO can be identified as the cause of the diminishing
number
of hackers in comparison the the number of script kiddies. I believe that
each
individual must take responsibility for the character traits that they
choose
to cultivate in themselves. If the number of script kiddies continues to
grow
and more individuals choose to take the path of becoming a script kiddie
rather than pursuing hacking skills, then this seems more plausibly
interpreted as a sign of laziness or a short attention span on the part of
those who choose this path. I don't think that BO could be blamed for such
a
result. That being said, I would prefer to see more hackers than script
kiddies but only because I respect the skills of hackers more than the
skills
of script kiddies. And I would rather participate in a society populated
by
individuals I can respect.
However, I believe your question should lead us to thinking more about
what sort of behaviors should or should not be tolerated in cyberspace.
And
before we can address that question, it would first be helpful to conduct
an
inquiry into the metaphysics of hacking. I believe that many of the laws
regarding computer security issues are misguided because they make
fundamental
assumptions about the nature of the computer hacking environment that
simply
are erroneous.
--
Tweety Fish answers:
The ratio might have changed, but the total number of people with a clue
has increased, not decreased. Some 14 year old might get their start by
messing with bo2k at school, and then they might start writing plugins,
and
then they might need to do something stranger, so they'll mod netcat to do
suit their needs, and then they might realize how horribly insecure their
own system is, and install linux or freeBSD to mitigate that somewhat, and
then they might get out of school and go get a job securing corporate
networks with all the knowledge they've gained.
Kids will be kids. If computer security was a real priority for operating system vendors, Joe Random 14 year old would need a lot more than something as general purpose as BO2K to start trouble. He'd need... uh... a car, say, or some bleach and ammonia, or a lot of beer.
yoshi asks:
What should application and OS
designers do to build systems which are
more secure?
cDc answers:
Reid Fleming answers:
For starters, they should spend more time and energy on security than
UI design, documentation, or product packaging.
--
Nighstalker answers:
Learn from the mistakes of the past and the solutions of today. It's not
that hard to impliment security. It's just easier for lazy coders and
indifferent beancounters to blow it off by saying that, "This is not
something our customers are demanding in our product."
--
Dildog answers:
Proactive security measures. Encrypt everything. Eliminate HTTP and go
right to HTTPS everywhere.
--
Tweety Fish answers:
Make security concerns and security audits an integral part of the
development.
Alpha42 asks:
Okay.. Here's my question..
what ever happened to Obscure Images?! I
haven't seen anything from him in
AGES... Don't get me
wrong, I thought BO was good
and all, and I'm sure it's generated 99%
of the PR lately.. but I miss the
original cDc stuff.. the files!
:) And Obscure?! OH man...
cDc answers:
Obscure Images answers:
Hey, I'm still here, and I am as active as I have ever been.
I've never been gone, just acting back in the shadows. I do what I can to
help plan and implement our projects. Most of it comes without the glory
or
press attention, but it has to be done for us to be successful. Over the
past 10 years I've gone to school, gone out into the world, gotten
married,
and started to go a bit grey. Not related to my marriage, I assure you.
There will be more files from me, it's just a matter of finishing them.
Keep your eyes open, your mouths too.
As far as my poetry goes, I have an excuse. It was 10 years ago, I was a typical late teen with clinical depression and the idea that I could write poetry. I stand by my stories, but would rather see the poems fade away like my youth.
Oh yeah, you have seen me, everytime you see our Paramedia Cross logo.
--
Tweety Fish answers:
Near the end of the cold war, Obscure Images was captured by a splinter
faction of the KGB, and forced to write polemics, in verse, in a futile
attempt to turn the people of the former Soviet Union back on the true
path
to communism. He's back now, and doing fine, except for that twitch.
Effugas asks:
What tools, in your minds, would you
consider the most useful but least
acknowledged tool in your security
analysis collection?
When backed into a corner,
unsure how to whip something into shape,
what obscure and strange network(or even
non-network!) utility popped
into mind and either performed some
amazing function you couldn't imagine
coding yourself or gave
you the necessary cluephone
ringing (via source code peek) to pull
it off yourself?
cDc answers:
DilDog answers:
lsof. Use it.
Anonymous Coward asks:
My question is simple:
When will you start to do productive things ?
Ok, here is some context for the question. I know about BO2K ; and saw miscellaneous software at cDc site.
But on the other hand, the cDc has existed much longer than Linux itself, the FreeBSD team, NetBSD, and for probably as long as the FSF itself. One one hand you have a wealth of software (for instance here or here), on the other hand, after 15 years, you have a handful of cracking tools, one Windows administration package, an unorganized set of information, and stickers + temporary tatoos for sale.
In particular, it is a total mystery why since all that time, you haven't done one of the following:
- Review, summarize existing security systems, document and implement a robust security model. Unix model is total crap ; even Multics (design: 1963) was better (Multics achieved B2 security rating).
- Audit publically a freely available Unix (today done by OpenBSD instead).
- Write automatic assembly code analyzer to search for bugs (or at least for C). Commercial tools exist by now, and last time
- I tried to see if a free one existed, all I could found on cDc site was a "Tao of Windows Buffer Overflow" (a re-hash of techniques found for instance in Morris' Internet Worm in 1988. See Spafford's excellent report, and the Worm's FAQ).
- Lent a bunch of your machines, to hold contests such as "the best security model for Linux/BSD, running almost all possible services/servers, CGI, ...".
cDc answers:
Obscure Images answers:
While cDc does some programming, this is not the sole focus of our
efforts.
To compare us to the other groups you mention you have to realize that we
have different goals, as well as methods. We don't feel obligated to do
anything for anyone. Our work is directed by our desires and our goals,
not
the desires of the community. Everything we do is productive in our eyes.
We like to think that we've done work every bit as important as any of the
above groups. It's all a matter of perspective. We have no problem with
the
people who have given their time and energy to these other projects, but
we
are not like them. We do things when we want to, in the way that we want
to.
--
Reid Fleming answers:
Temporary tattoos are a CRITICAL ELEMENT of our security strategy. To
suggest otherwise is sheer lunacy.
--
G. Ratte' answers:
Wow. I don't know when I'm going to be productive. Mom wants grandkids,
too.
Why should we do those things? Maybe we will, maybe we won't. Why don't
you?
We do other things. As far as "lend a bunch of your machines to hold
contests..." that's funny,
what bunch of machines? None of us are wealthy.
You looked at our site and blew it off as a "handful of cracking tools &
an unorganized bunch of information." That's the first electronic
magazine ever, starting in 1984. It was a big deal to me when I was
fourteen and bored in a small town, and I was doing something new and
exciting and fun. I don't necessarily want to satisfy your weird little
computer fetishes. I've got a dog and a cat and a screwy relationship and
my picture in SPIN and no job and I'm busy.
Too busy for you.
To quote from cDc #300:
THE POINTyou could spend an hour counting the petals in a flower
by Bryan O'Sullivan
it might take you a year to count the veins in each petal
if you spent ten lifetimes, maybe you could count its cells
but you'd have completely missed the point
you fuckhead
--
Nighstalker answers:
And this comes back to my first answer. cDc is NOT ABOUT PROGRAMMING!
Programming and computers are only a means to an end.
--
Tequila Willy answers:
Dear Anonymous Coward,
Your question seems very serious and as such seems to be counter
productive. The Cult of the Dead Cow exemplifies the very attitude that
ought
to be cultivated considering the absurd nature of existence. Take a moment
to
contemplate your death and your own concerns about what counts as
productive
behavior may shift. You may think to yourself, "I am merely a mortal who
will
die, but I must live responsibility for the sake of those who will survive
me." But of course your friends and family will die and there will come a
time
when no one alive will even have a memory of your existence. And if that
weren't enough, at some point our own Sun will supernova, and when this
occurs, human life on earth will be destroyed. At that point, human beings
will not even exist to contemplate the fates of those like yourself who
died
long ago. From this perspective, all human actions seem to take on an
equal
importance: our concerns are absurd! To live freely and responsibility, a
mature human being must realize this point. Having fun, living and loving
well, being playful (and hence flexible in your living): these actions
take on
much greater importance than behaving in a serious (and hence rigid)
manner.
Your question is foolish because it is not asked with a foolish spirit.
--
Tweety Fish answers:
Read our files. Read our press releases. It's all about style, jackass.
Incidentally, the first of your suggestions is a primary goal of the
OpenBSD project, like you said. The second suggestion is a fine idea, why
don't you do it? (re: spafford's paper and the internet worm, the internet
worm didn't run on win32, now, did it?). As for the third suggestion,
gee,
that's a great idea. Why don't we kick down a couple hundred thousand for
a
semi-trailer we can turn into the cDc hackmobile, and load it up with all
these high-end systems we have sitting around, and hire somebody to drive
it around the country so people can mess with it for free!
We do what we're interested in, what's fun, and what's within our resources, plain and simple. And we try to keep it funny.
Descriptions of who these people are are at http://www.cultdeadcow.com/members/.
Using Dennis Chao's work as a base I implemented an interface for the Linux Back Orifice client in Doom! Now you too can Play Doom while you Blow up Windows Machines!
http://www.geocities.com/doomhack/
Joe.
Some people love 'em. Some people hate 'em. I congratulate them on doing a job no software firm wants to admit even exists: finding serious flaws in seriously flawed products.
---
---
Remember when "Truth, Justice, & the American Way" wasn't contradictory?
We do what we're interested in, what's fun, and what's within our resources, plain and simple. And we try to keep it funny.
Well said!! It was this kinda attitude that got me into the Internet long ago and it's this kinda attitude that the web needs more of.
Reading this article made me realise how much things have changed in the last 5 years. On the one hand I'm making money creating coroprate sites - on the other hand I miss the days when every time you turned your head, you found another FTP repository of bizarre text files ranging from Blue Box plans to ideas for wolrd domination.
(Whatever happened to the idea of paving the earth anyway??)
A little planning goes a long way...
This article gives us one more reason to "b0w to the c0w". I'm impressed. Thank you, cDc-ers and thank you Slashdot.
aÍÍ©ÍÌÍ£Ì'̽ͩÌÍzÍYÌÍÌY
It may not be news, but it is definately for nerds. This was informative and entertaining. Cool stuff. MORE!!
"When will you start to do productive things ? "
I find it amuzing when people say "it wasn't really productive". Productivity is objective. I can sit all day and not "accomplish" anything physical, yet in my mind I have sorted out many things. Sure, people would say I'm lazy and using excuses. But I'm not.
The cDc has been "productive" as long as I have known of their existance. Whether playing practical jokes or coding BO or other hacks. They have contributed, at the very MINIMUM, fear to the software society. Enough fear to make SOME software vendors actually test their products before shipping. Aside from that, I could go on for hours on what they have done "productively", but that wouldn't be very productive now would it? *grin*
SL33ZE, MCSD
em: joedipshit@hotmail.com
SL33ZE - Artificial Intelligence is No Match For Natural Stupidity -
G. Ratte' answers:
;-)
...What I choose to cover my massive, pulsating tool swinging handily between my taut legs is my business, and my business only.
I wonder if I would get hacked for making fun of him for this comment? [x]Post Anonymously
Also - after reading this article I have no sympathy for cDc getting the shaft by several anti-virus makers - when your image includes swear words and thinly-veiled slams on serious questions about your group - it's very difficult to take you guys seriously.
--
Second:
Personally, I refer to people by whatever term they would like me to use, unless I don't like them.
This is Politically Correct Liberal fascism! TRUE FREEDOM means accepting one's invariable obligation to be as rude as humanly possible to everybody at all times, except to like, uh, you know . . . white guys and Christians. And rich people. Rich people especially. Except Oprah, 'cause she's a chick and she's black so it's okay to be rude to her even though she earns more in a week than you'll earn in your life. If you're rude to xians, white guys, and rich people other than Oprah, you're viciously persecuting an oppressed minority. If, on the other hand, you're polite to "minorities" and chicks, then you are ALSO viciously persecuting that same oppressed minority (white/xian/rich-but-not-Oprah) all over again! Terrible, isn't it?
Contempt for simple decency and good manners is a sign of a dying culture. Period. Kudos to this cDc guy for grasping some faint shadow (at the very least) of that fact.
...i guess i am just a looser who digs programming and farting around and such with hardware and code...The things like cDc, Phrack, and PLA feed my soul. Their fresh, truly cynnical and brash way of answering questions and writing about items of interest really click with the way I view myself and others like me. Ya know, finding people who like hacking computers and stuff is so fskin hard that seeing people like me--except for way much cooler--get in the limelite is just cool. enough said...
Remember this...no eternal reward will forgive us now for wasting the dawn....(jim morrison)
From the interview...
NT - Shit wouldn't happen if you'd just spend a few months performing 300+ modifications to our default installation, you lazy sysadmin. Get your MCSE.
Which is completely unlike the statement "Shit wouldn't happen if you'd just gone to Red Hat's ftp site to download the latest patches, trolled the newstgroups to find the appropriate HowTos, read BugTraq for three weeks prior to installation, been running the correct firewall, never opened any ports other than 80, never installed anything that had a 'd' at the end, and had Linus Torvalds personally supervising the installation. You stupid BillG-loving Windoze Luzer."
I would like to know how cDc can make blanket statments about WinNT5/"2000" security? Security issues are the primary reason OS's get delayed from ship at Microsoft. Are they basing this statement upon how difficult it was to crack RC2, which is a beta? I'm assuming they at least have used win2k...
-konstant
-konstant
Yes! We are all individuals! I'm not!
"The Horrors of Ivan"
Coming soon, to FOX TV!
**>>BELCH
After meeting bits of cDc at DefCon 7
(Us: Hey G. Ratte, we heard BO2k is going to be open source...
G.Ratte: Open Sores! Ahhhhhh! {runs out of room yelling})
and seeing the BO2k presentation, I must say that you guys are crazy. Yup, crazy-pants. But BO2k is an extrodinary sys admin tool (tunneling throgh ssh makes me weep with joy) and the T-files are...interesting. Keep up the good work!
Anyone know where he was?
My dogma ran over your Karma....My Karma's a Greyhound: ugly, but strong. -You may think you know what, but I know who
I'm reading that book for my humanities class right now (perhaps Reid Fleming went to Boston University...). Anyway, the idea of an ESS being applied to anything outside of genes is condemned by the author; however, I can't say that it isn't tempting to do. For those who are interested, pick up the book and read Chapter 7. -avtr
hehe Seems to me like the cDc are having fun as Anonymous Cowards...
hehe Seems to me that the cDc are having fun on this thread as Anonymous Cowards... Maybe trying to break the moderation system? ;)
Could someone please clarify something about BO2k for me? In the interview with reference to Back Orifice, they state:
A hell of a lot of people should be upset their computers are wide open.
Now, as I understand it, Back Orifice will not run unless the victim (excuse me, "remote client") voluntarily installs it or is tricked into doing so. cDc also repeatedly emphasizes that BO2k can be used as a legitimate administration tool.
Are cDc suggesting that if I can write a remote administration program for an operating system, then that system is "wide open"? On what system is this impossible? If there is such a system, isn't that a failing of the OS rather than a security plus?
I know very little about cracking, but it seems to me the only security compromise in the BO2k scenario is social engineering. "Click on this c00l zip file, dude!"
Where's the security flaw? The fact that, once I have user permissions, I can do bad stuff? I thought... well isn't that obvious???
-konstant
-konstant
Yes! We are all individuals! I'm not!
Win2k crashes on my friend's machine when you exit Unreal Tournament.
Oh, and the RedHat update thing? (the RedHat 6 boxes we code on have been up since the beginning of the semester).
More like, "You go to RedHat's website, download everything in errata (1 command on any decent ftp client, try lftp), and upgrade everything you have installed (also 1 command).
If you do read BugTraq, you'd know that both RedHat and MS have a pretty decent record for acknowledging security holes quickly. The difference is that MS recommends a cheesy workaround and says "wait for the next Service Pack" (which break things more often than not; ZD's Tips for NT Admins include not applying Service Packs unless you know you need them, which is sad). RedHat meanwhile posts the URLs for updated packages in their messages.
You are of course free to run whichever you feel is easier to maintain in a secure state.
BO and the 2k is a series of abilities already present in windows software. -just made so ANYONE can use it. Not just microsnot. The point is that Microsnot puts it in the system in the first place, and nobody knows or cares. BTW, Ive known and hung with these guys in the past, they are right. Dont read the fine print, look at the big picture of what they are trying to tell everyone, and act on it.
My dogma ran over your Karma....My Karma's a Greyhound: ugly, but strong. -You may think you know what, but I know who
I'll be honest, I enjoyed this Q&A session. I like the cDc boys - Can't say I've ever had more fun than sitting in front of my computer on the school's network (back in HS) and ticking everyone off - I especially love opening/closing the cd-rom multiple times. Even better, say you have a game of quake2 going and there are no more spaces for you. In comes bo to save the day!
/.
Anyway, I applaud cDc for doing something creative with their time and being open enough to share it with
~Steve
--
"<r-xr-xr-x> Just try to edit me" -- www.ircnews.com
Can someone more clueful than I please define/describe lsof?
License: By reading this you are agreeing that you agree with me.
BO and the 2k is a series of abilities already present in windows software. -just made so ANYONE can use it. Not just microsnot. The point is that Microsnot puts it in the system in the first place, and nobody knows or cares. BTW, Ive known and hung with these guys in the past, they are right. Dont read the fine print, look at the big picture of what they are trying to tell everyone, and act on it.
Since you've hung out with them, maybe you have an insight I dont. However, Microsoft does release software tools that administer Windows remotely, under the name Microsoft SMS (System Management Server). Their website is:
http://www.microsoft.com/smsmg mt/default.asp?RLD=263
I do not believe you are stating a fact.
-konstant
-konstant
Yes! We are all individuals! I'm not!
As far as I know, the cDc members are great programmers. BO2K is clever code. No script kiddie could come up with this. However, script kiddies use it aplenty (see their comments.)
Additionally, I don't think that having conflicting views goes against a group's unity. If anything, they seem to work well with diverse opinions. Isn't that exactly what the Open Source movement is, as a whole? You can't get two coders to agree on anything out there (e.g. KDE vs. Gnome, BSD vs. Linux), yet we still seem to work as a cohesive whole when the movement comes under fire.
Finally, I think anyone judging a product by the images or words it includes - as a deliberate slam, no less - deserves to miss the point. They claimed BO2K was a statement from the beginning, and it actually makes sense. Did you notice how much Microsoft security is coming under fire lately? I'm starting to get pro-Linux jokes from non-hacker friends in the mail. I don't think they've ever seen a Linux login prompt, much less know what ls does. But still, they're being critical of commercial products because of the sheer amount of macro-viruses and other crap that's been out.
I take the cDc guys seriously for one big reason: BO2K. They proved a point, however juvenile you think they are.
"There is no surer way to ruin a good discussion than to contaminate it with the facts."
Whether you believe it or not is irrelivant. The SMS is the same type of thing, but with a name and price. If you've ever back-engineered the operating systems, you would know what is there. -Not only that, but you probably would hold a different opinion of those guys at MS.
My dogma ran over your Karma....My Karma's a Greyhound: ugly, but strong. -You may think you know what, but I know who
For once, we seem to be the self-conscious hackers, the ones who want a proper media image and good public relations, and wish our movement would receive more public recognition. This is exemplified in the hacker/cracker debate that will rage on on Slashdot for years to come, I think.
The cDc are techno-anarchists with a slant for educating the masses despite themselves. I believe them when they say they release Trojans in order to raise awareness. I also believe it's working, to a degree, and that the sacrifice to pay for that is that the hacker image as a whole suffers.
I get the feeling our positions are at odds with one another. We both dwell in the "digital underground" (sounded like a buzzword to me, but hey, the cDc guys used it). We both want to "educate" the masses and show them that consumerism is not the best technological solution.
However, the cDc does so at the cost of their image, and we do it at the cost of efficiency. However, I think that the hacker world needs both kinds: inflamatory anarchists who take nothing seriously, and ethical workers who communicate with the world.
They're right on one thing, though: a cracker is something you eat with cheese on top.
"There is no surer way to ruin a good discussion than to contaminate it with the facts."
I didn't see them say Linux was the end-all be-all for everyone; they stated several times that they were aware that this is a primarily Linux crowd. Go look at FTP installs of OpenBSD and then get back to us.
Reading these guys' statements, I couldn't help but think of something I read last winter, Hugo's Les Miserables. They fit so well with the group of revolutionaries from that, with the varying viewpoints and personalities all united in a weird way towards a common purpose of changing the world to a better place. I just hope the cDc fares better than Hugo's revolutionaries did.
That said, this was definitely a good interview. Lots of interesting stuff from a well known yet secretive group. Those of us who've come a bit late to the world of hacking can do very well to learn from the various different ideals of all the different communities out there. Thanks.
-Mike
After Lopht released it's notorious Lopht Crack program, I had hoped to see better things coming out of Redmond this time. Having talked with Muhamed Kadeeb, a Senior Developer on the Windows 2000 project, I think I have come to the conclusion that they can delay Win 2K as long as they want, and it still won't mean a damn. The basic security structure of Windows NT BEGS to be hacked and with these MCSE wielding "sysadmins" that think that having a piece of paper means something, just clicking the 'Next' button on an Install Shield script without thinking about what's going on, installing all sorts of shit on their servers, programs like BO will always find a home.
Also, I think that a serious look should be taken from a different perspective in the OS war. Lets think about the people that are admins on an NT run network vs. people that are admins on Linux run networks. Now I don't think I'm being to stereotypical here when I say that Linux admins are going to be FAR more likely to actually go through the steps necessary to secure that box than an NT admin. We are talking about the difference between a hacker (in the code hacker sense) versus an MCSE peon. Both systems need work to secure. Granted Linux systems are going to be secured tighter thanks to a host of reasons that I won't go into here, but there's always work to be done to get a network running well.
It's not always about the program. Remember there's always a person behind that computer and a lot of this depends more on them than the program.
Dissenter
Dissenter
"There is no knowledge that is not power."
After reading some of the cDc answers, I am supprised that they were posted. I know that we were warned, but I see the intellgence and wit of a A.C. post.
Had this been posted at any other time, it would have been moderated so far down that nobody would have been anoyed by the answers. I am not looking for censorship or even decency, just that slashdot stay consistent.
-I just work here... how am I supposed to know?
'There is a difference between mere cleverness and true insight.'
-- Jaco Pastorius, musician
I normally don't expect references to Richard Dawkins out of a hack group.. However, I believe that EVERYONE should sit down with a copy of 'The Blind Watchmaker' once. I've forced it onto most of my friends over the years, and have yet to hear a complaint. Insightful and about as gripping as any book on the sciences can be. Full of well-honed arguments and real-world cases to illustrate them. You'll want to read 'The Selfish Gene', too. They're both in paperback and still in print, so snag a copy off Barnes & Noble.
(I advocate the boycott of Amazon.com, and will until they stop all this obvious patent sillyness)
.sig: Now legally binding!
It is absolutely NOT free. They are asking $19.95 for it plus shipping.
a rtwin98se1.asp?
https://order4.microsoft.upgrade.com/scripts/st
Free music from Jack Merlot.
There's a couple of very good points they make:
(DilDog)
Windows95 / 98 - Shit happens
Commercial Unix - Shit happens over RPC.
Linux - When shit happens, you fix it.
FreeBSD - Shit would happen, but there's no driver for it yet.
NT - Shit wouldn't happen if you'd just spend a few months performing 300+ modifications to our default installation, you lazy sysadmin. Get your MCSE.
Windows 2000 (NT5) - Shit happens over DCOM.
I have never seen a more accurate description of these OSses.
Also, and that goes out to all you ignorant monkeys out there, they correctly identify the characteristics of a 'cracker', which is NOT intruding into other sites, that would be script kiddies, but BREAKING SOFTWARE PROTECTIONS!!!
If you think I'm wrong, I think you didn't have a computer back in the 80's. Dork!
Last, cDc always has been stirring up shit and I
applaud to them for doing so. Pissing on people who wear suits and don't like being pissed on is cool.
Small vocabularies? Are there any special words you would like to see in play? Let us know, we'll try to work them in somewhere.
We're all grown up, and what we do DOES have a higher purpose, but as far as masturbation goes, I'm analogue. Then again I suppose it could be digital, since I'm using digits. Think about that.
I may have a small vocabulary, but I can spell masturbation.
obscure images/cDc obscure@cultdeadcow.com www.cultdeadcow.com
Barnes and Nobles, after their recent purchase, is now BOTH the largest retailer AND the largest publisher in the US (I believe). They put many small book shops and publishers out of business every day. I don't feel sorry for them. On the other hand, Amazon.com is a CUSTOMER of these small bookshops. Order a book in Great Britain and it comes from the tiny bookshop down the street. That's money that goes into small businesses pockets. That's more choice, and a much more open system. Sure the Amazon "patent" might be silly, but I'm not going to cry for Barnes and Nobles.
It's 10 PM. Do you know if you're un-American?
But it seems to me that cDc must've missed something about
- Random people ask random question, but this being a slashdot forum, the questions get a bias towards linux/un*x, to start with.
- Some people then moderate the questions with a bigger bias towards linux/un*x.
- cDc then answers the moderated questions...
Where's the flaw? O.K. cDc may not have time to sample their own questions, being busy hacking/cracking/whatever... So my question is, redaing the questions that were answered, why haven't you sampled your own batch of questions?Was your intent pleasing the l*nux community? I don't think so reading your answers,,,, and it didn't look either like 'Your questions are so futile I laugh at them'
I don't get it, but then again, I don't get muych when I'm pissed either... (pissed is british english for drunk...)
Cheers,
---
"Hasta la victoria siempre!" El Comandante
As Spinal Tap was to the music industry....
It's the American Way..
ahh the pleasures of courier...
while yer at it mr taco, couldn't you set the bgcolor to "#000000" and the text to "#00ff00"?
Seriously though, you can't underestimate the creativity it takes to look at a cga monitor and imagine world domination. (domination=hercules graphics adapter, baby!).
I still don't know much about cDc itself. Are your identities secret? Do lots of people know who you are or do you lead two lives or something like that?
Has the cult grown much over time, or is it a group of core members that have been around since the begining?
Do you see each other often, or at all? Or do you just communicate over the net using aliases?
Are you guys geographically separated, or do you all live in one area? Where do you guys live? Is the cDc in the US?
--
grappler
Vidi, Vici, Veni
it's spelled masturbation. you fuckhead.
I can't find it.
Perhaps you should look into your own spelling. I'll agree that perhaps some of their rationalization is bullshit, but some of the rest is dead on. I especially liked their responses to the whole cracker/hacker debate.
Oh! M-a-s-t-.....I get it! You spell it A-P-P-L-E!, dont you? :)
My dogma ran over your Karma....My Karma's a Greyhound: ugly, but strong. -You may think you know what, but I know who
I reiterate.
And if that weren't enough, at some point our own Sun will supernova, and when this occurs, human life on earth will be destroyed.
Actually, long before the Sun goes Nova, it will swell up into a Red Giant, and when that happens its size will be so large that it will swallow up Mercury, Venus, Earth and possibly Mars as well. So the Earth will be destroyed by the Sun long before it explodes.
-Chris Andreasen
-Chris Andreasen
You can get Windows 98 SP1 for free which is the exact same thing Windows 98 SE is minus ICS.
The thing that was clearest in this Q&A session was the overwhelming difference between the 80's hacker and the 90's netgeek. The days when hacking meant figuring out how shit works, and when the morality of it was based on information must be free without any real other goals or intents was never as clear as it seems. There were always kids who attacked other sites for no good reason but a desire to show their stuff, wave their dick, be assholes without being caught. The same vandals who would egg a passing bus might take down a bbs using 99e99 or p1tt...
Hell, the notion that there were switches between me and the longdistance call was cool. The fact that you knew that somewhere there was a computer keeping track of billing was cool. The fact that you knew that it wasn't just magic was a big reason why hackers did what they did. To show that all the things that we take for granted are really exciting if you look at them, and the tricks you can do once you do that are amusing too!
Still I can't forget red blue rainbow black white lemonscented boxes that were supposed to do any number of things if you just followed these instructions and had a soldering iron. Script kiddies of the past.
What amuses me most in seeing this dialog is the sense that there is a productivity to programming something for someone else, that doesn't exist in the explaining the basis of such programs. cDc always was about the how it works and not how to do it. It was about giving you the manual, not selling you the source. OpenSource software is built on OpenSource knowledge of underlying systems. If we don't have the information we don't have the programs. To require a hacker to program for someone else is nonsense. The way you become a hacker is by having other hackers see you can do it yourself. Then they say, "He is a hacker" and you are. If you think you can become a hacker by doing it someone elses way, then you are silly. Original thought, exploration, lack of interest in authority, and a little bit of a desire to show off to people who might actually understand what you are talking about is what fueled the 'hacker' of the 80's.
The geek of the 90's is a different animal, with pratical usage of opensource being a commercial reality, productivity being a primary force behind contribution to a movement, love for knowledge being a real secondary. How many of the people on this channel have actually read their source code cause they wanted to know how it was done? As much as most of ya'll want to feel good because you know how to code, you don't NEED to code most of the time because someone else has done it, or done something close to it before. Hell the art of Unix is to take 5 programs that other people wrote and pipe your data through em without writing a bit of code.
Getting on cDc for being script kiddies is a joke. I am not even sure why we call them script kiddies. Using canned software is as old as the day. Yeah when I got my first modem I had to patch the thing through my game controler port to get dial tone detection, and wrote my first comm program in basic and assembler. When AE came into my hands, I never went back. Fact is that cDc may write tools that people who couldn't normally write, might find useful. Maybe cDc drops a few trojans into the mix... Maybe Microsoft gets burned on the ass because their marketers have whipped their techs in the internal battles so that nothing works right, but atleast it has the 'features'. cDc does what it does and doesn't apologize. The question of why they don't do more is very very well returned. Why don't you!
DLG
You wouldn't have to train anyone to use a word processor if the word processor could be abstracted to the (virtual) user picking up a pen and paper and starting to write
I was reading an article the other day about this new PC-type machine that you didn't need a printer for, it seemed to print characters RIGHT THERE ON THE PAGE. When technology defeats it own purpose, a giant step to the same place has been made.
:0-)
+&x
Though I disagree with your conclusions, you do make a valid point. The more "accessible" Linux becomes, through easy install, package management, newbie-friendly GUIs, and so forth, the less knowledgable ("brain damaged" to use your colorful expression) the average Linux user will be. This does bring with it a whole host of potential issues on how to preserve and improve Linux's good reputation WRT security. OpenBSD has IMHO found the correct approach, by being proactive about security issues. There is no reason this is incompatable with a system of managed .rpm or .deb packages, but it does require improvements to the underlying default configurations which have not been made yet.
.rpms, and .debs for all their various distributions. We all benefit from a level of responsiveness and security which Microsoft will be lucky to achieve sometime late in the next millenium. By adopting the improvements of other products, like OpenBSD, we can keep them green with envy until the universe goes cold, implodes, or whatever ...
We can fix it ourselves. The beauty of it is, when a security flaw is found, someone does fix it, and the fix propogates as tarballs,
The Future of Human Evolution: Autonomy
BackOrifice is a clever program, but it's not creative -- it's destructive. And the people who wrote it, distribute it, and proclaim long and loud what a great "administration tool" it is should be treated like the scheming anarchists they are. They shouldn't be called revolutionaries or treated like heroes. It doesn't help the situation at all.
-----------
"You can't shake the Devil's hand and say you're only kidding."
-----------
"You can't shake the Devil's hand and say you're only kidding."
Kiki Stockhammer was a lot better than Wesley Crusher.
SOME of us have that 4 years, and beyond. It shows how ignorant you are for cutting off information that may or may not be accurate before it is even reviewed. People like you spread your ignorance because negativity is contagious. -and you give education a bad name.
My dogma ran over your Karma....My Karma's a Greyhound: ugly, but strong. -You may think you know what, but I know who
I will be honest, I rarely post, for I am not an Uber-Geek. But I am a damn good deconstructionist, and I think this interview was a total hack. I have never seen anyone jerk-off the /. community so well; but if anyone could and would do it, cdc would. They said nothing at all; it was an amusing game. But they said it well. I say you replace the story icon with the MP's Flying Circus foot, b/c they (especially G Ratte and Tweety B) have really abused our attention with the utmost wit. I commend them.
If jack helped you off your horse, would you help Jack off his horse?
"There are only two things men want more than money, power, and sex; praise and recognition."
With all of the wanking going on, I am pretty sure you don't have time for a job with a 6 figure salary. Your college education really shows. Your well thought-out and spelled message is simple proof that your 4 years in college were a waste of money. Oh yeah, wank wank wank wank wank. Whew, wanking is work... maybe I could get paid 6 figures for this!
obscure images/cDc obscure@cultdeadcow.com www.cultdeadcow.com
You really don't get it, do you?
Under windows 95/98/NT any USER can install a trojan, making the entire system vulnerable to attack.
Wait a second here. Have you ever actually used Windows NT? You know they do have this thing called an 'Administrator' account, quite analogous to root on a UNIX. When properly configured you can have as much control over a user as any UNIX. I know, I run NT at home (along side my Linux and NeXT boxen) and I've had plenty of instances where I could not install something because of the fact I was not Administrator. I mean I hate NT as much as the next guy (I only run it because windows is the only non-Mac OS I can use for my apps) but we dont need to make up lies and half-truths to talk about how crappy it is. There's plenty of real reasons for that.
-Rich
Tequila Willy wrote: ...at some point our own Sun will supernova... Our sun will not explode; it does not have sufficient mass. In fact, our sun will turn into a big fat Red Giant in about 4 billion years. It will engulf the earth itself in this fattening stage before going planetary nebula almost 1 billion years later -- ejecting its outer shell of gas and dust into space like a giant cosmic burp. A nice white dwarf will be left behind for the viewing pleasure of those of us living one of Saturn's moons. Class dismissed. Test on Monday.
It seems to me, that, overall, BO2K is both a Good Thing and a Bad Thing.
A good thing, because it helps sys admins do their jobs in a much easier manner.
A bad thing, because there are a lot of script kiddies out there causing clueless 80 year old grandparents problems, etc.
IMO, the benefit of the good is outweighed by the harm of the bad. For every computer system that is made more secure through the use of BO2k, there are probably countless others that are penetrated and, in some way, harmed by delinquent teenagers. (I'm a teen still myself - I'm not getting down on my generation in any way - but it seems that younger teens are the main offensive group of BO2k users.)
The use of BO, me thinks, could be oriented so that 3l33+3 h/\X0r d00dz would not have access to it. Possible work arounds could be a corporate membership though a form of sorts. It would deter a large amount of lamers, while still allowing those who use BO for corporate purposes.
Granted, IMHO, the people at codc seem to truly be dedicated to anarchy, and are using this "security" front as a way as to not be decapitated through flames from security personel. It could be otherwise, but this is my take. I hope it is not so.
Also, there is the fact that there are already thousands, if not millions, of copies of the BO software already distributed, which could easily be aquired from a friend or a warez site. (And possibly newer corporate versions, if this feature were integrated. There will definately be people that figure out work arounds. Just because they use BO, they aren't necessarily stupid crap lamers. I know several very good hackers that use BO simply because it's easier that other methods.)
A mere
-------
CAIMLAS
~/ssh slashdot.org ssh: connect to host slashdot.org port 22: too many beers
There is no Muhamed Kadeeb at MS. Unless you spelled his name wrong.
Quit cracking so much smoke
What are your favourite movies?
Do you listen to other techno than Kraftwerk?
When is you new virus scan software out?
Generally I respect cDc and what they are trying to do and I have to agree, Windows needs some serious security upgrades at least as a server OS but I don't think that BO shows any Windows security flaws, but rather user security flaws. Question: If used by a computer illeterate user, which is more insecure Windows or Linux? (supposing the person could use Linux) Well, I'd have to say Linux. Think about it, BO relies completely con the idiocy of the user. If the user is smart enough to not install it, there is no problem. So if something like BO existed for Linux, it would rely off of the same method. Not a problem for people who just log in to systems run by a competent administrator, but what about an uneducated user running their own box? People like that probably often run as root, and something like BO could do FAR more damage if installed on a Linuz system as root. So what is my point? My point is that BO does not really reveal any security flaws in Windows itself. You could impliment a program that worked just like it in MacOS, Linux, UNIX or whatever. It exposes security flaws in users. There is nothing you can do to protect a system from its root user, if they are dumb enough to install a back door.
This was answered in other posts, and on cdc's site. These tools only utilize what is inherent in the operating system. The scary part is MS never told anyone 95 and 98 had 'em. That is the whole point. Flawed security backed by a company knowingly putting raw power in ther for someones use. -Probably their own. (of course, there ARE the NSA keys.)
My dogma ran over your Karma....My Karma's a Greyhound: ugly, but strong. -You may think you know what, but I know who
Wow. Great interview, made me happy. Can't say the questions themselves did, as about half of them seemed to be posed by people who simply Don't Get It.
What is this "if you're not churning out code you must be a script kiddie" shit? Did any of you fools participate in the BBSes of old? Do you remember a few small things called "community" and "culture" and "having fun"? I've always viewed cDc as a bunch of people who like fucking around with computers, sharing the information they attain, and having fun. They're not coding enough for you? What? That makes them *script kiddies*? These people were putting out textfiles before the term was invented.
Something really bad has happened to online culture since it left BBSes - but I'm guessing most of you are too young to know that, seeing as from general comments, few of the people on Slashdot seem to be out of high school (don't bother replying with "I'm 35 and have been in the community 50 years!" comments - you're in the minority). It ceased to be about having fun and doing cool stuff and became a matter of writing tons of code so you can eventually sell out.
cDc never IPO'ed.
'nuff said.
..of course, the free shipping I get sorta makes me biased.
(That's "Back Orifice", not "Body Odor") Here's a form letter I whipped up that anyone may use, so you won't have to write your own. This is covered under the GPL, so use and modify it as you want.
Be sure to fill in things in ()'s
I'm posting this as Anonymous for obvious reasons. And forgive the formatting, this used to be an 80-column e-mail.
Dear (ISP) Abuse:
At (time) (time zone) ((UTC time) UTC), on (date), the security
software I use on my home computer detected an attempted connection to
my system on UDP port 31337 from an address on the (offending domain) network,
(hostname) ((IP address)).
This behavior is consistent with a "Back Orifice" attack, Back Orifice
being a Trojan Horse program used almost exclusively for illicit purposes
to compromise the security of remote systems. The Back Orifice server
software, once installed on a computer system (usually without the owner's
knowledge) runs a server, usually on port 31337, allowing remote users
to attain unrestircted and unauthorized access to the infected system by
connecting to said port 31337. Certain individuals on the Internet,
commonly known as hackers, crackers, lusers, script kiddies, 31337 h4x0r
d00ds, etc. make it a practice to attempt connections to remote IP
addresses on port 31337, to determine if Back Orifice or some other
Trojan software is running on the remote system, and if it is, to attain
unauthorized access to the remote system, steal and/or destroy data on
the remote system, or launch a denial of service attack or other destructive
activity against the remote system. (31337, the port used by Back Orifice
and other Trojan computer software, is a common term in the 31337 h4x0r d00d
community, being a somewhat twisted form of the word "elite")
Attempted unauthorized access to remote computer systems violates federal
law of the United States, as well as the acceptable use policies of most
Internet Service Providers and computer networks. Even to administrators
of systems that are not vulnerable to such attacks, it is a pain and an
inconvenience to deal with attempts such as this.
I consider this a very serious matter, not because of damage or inconvenience
to me, but because individuals who engage in this behavior often do so on
a large scale. This person who attempted to connect to my system is likely
making hundreds or even thousands of attacks against remote systems every
day, in hopes of finding a system infected with Back Orifice. Of these
hundreds or thousands of systems, it is highly likely that he/she will be
able to gain unauthorized access to one or more of them, violating any
number of computer security laws and personal privacy laws, as well as
potentially doing severe damage both to the data of the attacked computer,
and to the personal privacy of the system's owner. Most likely the
compromised computers will belong to innocent Internet users who knows little
or nothing about Trojan Horse programs or computer viruses, how to recognize
them, how to detect them, and how to remove them. A person's own computer
could be rendered entirely useless to them, their productivity and valuable
data destroyed.
Of the hundreds and thousands of computer that may be attacked by this
individual on your network, a very, very, very tiny number will be running
security software that monitors incoming connections, such as (name of security software),
the security software I use. Thus, most will be completely unaware of the attack against their systems. I felt it was my duty to report this abuse
on behalf of the potentially thousands of internet users who won't be able
to detect or report it on their own. I hope that you will take this issue
seriously and investiage it. I believe that most 31337 h4x0r d00dz who
engage in this type of illicit behavior do so because they will never
be detected or caught. Many do not even know that port monitoring software
exists. Even a warning would probably be enough to send the message to
this individual that his activities CAN be detected and DO have consequences.
Thank you for your time and attention. Below I have included the relevant
portion of my system log file. Please contact me if you have any further
questions regarding this. Again, thank you for your time.
Regards,
(your name)
(your e-mail)
Active System Attack Alerts
=-=-=-=-=-=-=-=-=-=-=-=-=-=
(your log file here)
--
(your signature here)
Netscape is pretty horrible. It crashes on a regular basis. Of course, when it goes down, only Netscape goes down.
I've had Gnome do wierd things and even had it take out my X Windows sever. That mean all X apps go bye-bye. Of course, the OS was still intact... respawned the server and invited me to log back in.
By far the worse I've had is trying to launch Quake once and it seemed to crash, leaving me with a mangled terminal. The OS was still intact. I could log into it remotely. Of course... I couldn't get to another virtual terminal or back to my X Windows session. I'm sure there was a way to fix this (someone please clue me in if you know). I had to reboot to clear it. Of course... having said that... the OS was actually still running along (a moot point since I couldn't do much with it - probably due to my ignorance).
So there's my worse experiences. What's yours?
As a side note - I use linux as a desktop OS for home and work. Very nicely. The odd thing is, I have also been known to use NT as a desktop OS too. "Linux" and "WinNT" don't always mean "server". 'Course... "Win9x" does usually mean "game machine". ;)
Get over your own self, you small-minded little twit.
I said their vocabularies are small because they cannot seem to express themselves without a stream of expletives. In my book, that's indicative of a small vocabulary.
By the way, you wankers didn't seem too concerned with the cDc's bad spelling ... seems alittle hypocritical to yell at me just because you disagree with my opinion.
You guys are the perfect examples.
This guy is such a brilliant example, I can't help but reply.
More proof of I was saying, the only thing that kids care about these days is getting their MCSE and working a shit job in a cubicle all day until they get some IPO money. The fact that you believe you can learn everything by getting a 4 year degree exemplifies your ignorance - I've interviewed more people with college degrees in CS who couldn't logically analyze a problem if their life depended on it than I can remember, and more bright hackers who grew up on cDc who were genuine wizards than I can forget. If you think real world experience, the ability to seek out and discover things and share information is useless, well, go back to your cube. Maybe the company will throw you a bone at the end of your 50 years of service, and you can pretend you did something you enjoyed for all that time. At least cDc has a legacy to look back on. And no, you aren't part of it.
And incidentally, how many of you Slashdot people had even heard of cDc before BackOrifice? Don't all shout at once... Once again, displaying the recent heritage and lack of culture of the Slashdot domain. It's kind of sad, really...
When the cDc do achieve world domination, which is their stated purpose, and are in charge of everything, what sort of changes can we look forward to? Will it be a benevolent dictatorship or will we be slaves? Free hamburgers, perhaps? Will Bill Gates' wealth be redistributed. Will he be allowed to live? If not, will he be given a choice in the manner in which he is decapitated, and for how long his head shall be placed upon a wall for people to throw things at it? ;)
You know, in some arenas, "selling out" is considered synonymous with losing your integrity, not with success. I find it sickening that we all hold our breath and wait for IPOs so that we, too, can be part of some corporate conglomerate...
The American Way? I'll go back to the underground where we did it, we were free, we did it *for* free, and LIKED it that way.
I thought digital underground was a hip-hop group in the 80's. . .
Im trying to findout if Sir Dystic was on the interview, or if he changed his name. Any idea?
My dogma ran over your Karma....My Karma's a Greyhound: ugly, but strong. -You may think you know what, but I know who
I quote from the article above:
:)
:)
To quote from cDc #300:
THE POINT
by Bryan O'Sullivan
you could spend an hour counting the petals in a flower
it might take you a year to count the veins in each petal
if you spent ten lifetimes, maybe you could count its cells
but you'd have completely missed the point
you fuckhead
I put this on my cubicle wall. I may put a copy of it up next to my mirror. I've always felt that a good kick in the ass is better than a cup of coffee in the morning.
After reading all the flamebait and crap people posted, this is particularly relevant.
cDc, enjoy yourselves. (Not that my approval/disapproval would matter to you)
And should our paths ever cross in our respective bids for world domination, may the best man win.
>>>>>>>>>> Kvort (now where did I put that flame-retardant clothing?)
-Don't mind me, I'm personality-deficient and mentally-impaired.
Ya know what? The Linux kernel is a clever program, but its not creative -- Its destructive to companies trying to sell competing software OS's. Its insecure as its not supported by a trustworthy company. And look at the people who wrote it, distribute it, and proclaim long and loud about what a great "Operating System" it is should be treated like the scheming anarchists they are. After all, the user is dumb, they shouldn't need or even WANT to know how their program works. They shouldn't be called revolutionaries or treated like hero's. It doesn't help the situation at all.
Or how about RMS? Hell, how about Windows?
Windows is a clever program , but it's not creative -- it's destructive. And the people who wrote it, distribute it, and proclaim long and loud what a great "Operating system it is" should be treated like the scheming anarchists they are. They shouldn't be called revolutionaries or treated like heroes. It doesn't help the situation at all.
Or how about the bill of rights..
Its a clever set of laws, but its not creative -- Its destructive. And the people who wrote it, spread the idea, and proclaimed how good and free the laws were should be treated like the scheming anarchists they are. After all, what right does the stupid public have to question the monarchy or nobility? They shouldn't be called revolutionaries or treated like hero's. They should be treated like the criminals they are. It doesn't help the situation at all.
My point is that ANY new idea that people don't like, are unconfortable with can be advocated against in the same way. This SAME argument for something being bad and subversive can be said to apply to Windows, the bill of rights, the weakening of the church centuries ago, the growth of freedom, the growth of the internet, the growth of widespread literacy, cryptography, censorship.
Its also an argument frequently used by organizations in power to `get rid of' subversive material or ideas.
Just of complete curiosity, why couldn't I make the same argument for censorship of the internet? Look at how destructive the internet has been already and how destructive it will be in the future? It has no use, it does nothing fundamentally new that couldn't be done over the telephone, just as the telephone does nothing fundamentally new that couldn't be done under postal mail. Its subversive and destructive. Its a tool that lets people perform evil deeds.
Its information, information or software isn't dangerous or evil on its own, its how it's used.
See my friend, it's like this... Microsoft has decided that the common mass of chickenheads that use their software, should not have to be burdened by trivial things like passwords, or user id's. And Therefore they have gone to great lengths to "protect" said chickenheads from this burden. The Scenario: Let's say that Mr. Stew Pitt is doing some online banking, and Internet Explorer caches his userid (SSN) and password, so that Stew won't have to take the trouble to type it in again... Stew thinks "Hey Great! Less to remember! You gotta love that Microsoft..." -Meanwhile- An evil malicious script puppy known as Phil Mypockets is about to send Stew a Trojan that can decrypt the cache file where IE has just saved the login and password for Stew's online banking account. Stew hears the familiar "You've Got Mail!" and sees that there is a "software update" from a helpful "AOL Support Rep". Stew quickly clicks on the attachment... seconds later Phil Mypockets activates the Trojan that has just been unwittingly installed by Stew. -yata yata yata- Phil Mypockets clicks the "enumerate passwords" button on the "trojan-control-panel", unloads Stew Pitt's bank account, and retires in Bora Bora... The Problem: Stew is fucked... he doesn't suspect for a second, the true reality of what has happened... Neither the Bank nor Microsoft are interested in investigating (or publicizing) the possibility that Stew has been "hacked"... therefore, the problem continues... Phil Mypockets tells all his pals how "They Too Can Retire In Bora Bora" and more people get fucked... The Solution: cDc releases BO... they aren't quiet about it... in fact, it's a media circus. Mass hysteria quickly ensues. It's on the cover of every tech rag, it's on the news... Sam fucking Donaldson is doing a special on the Monday evening news entitled "Is the Internet Safe?"... Microsoft gets dogged... they have to respond... yata yata yata... things get done... slowly, things change. "Evolution Morpheus, evolution." The Difference: What most people don't seem to understand is that this shit is out there, happening, everyday. The cDc just publicizes it... that's what makes them the good guys. If they wanted to, they could sit there and code these tools, and then quietly use them to fuck people over. But they don't, and that's the difference. -kill-9
You are either retarted or you want flame, because you post anon while making a dumb statement and yet you claim to know the other OS's and languages. .....and......"you could spend an hour counting the petals in a flower it might take you a year to count the veins in each petal if you spent ten lifetimes, maybe you could count its cells but you'd have completely missed the point you fuckhead"....By the way, why dont you tell us who wrote MACos?
My dogma ran over your Karma....My Karma's a Greyhound: ugly, but strong. -You may think you know what, but I know who
I think it was Aegis Paint to DigiPaint that she used to push, but those brain cells have long since passed away...
cDc responded to the allegations that BO(2K) is destructive rather than an admin tool because it has a stealth mode with a challenge to Microsoft to recall all its copies of SMS because of its stealth mode.
I do hope that happens since some of my friends who are plugged into the network of a different college fell victim to their networkadmin's questionable usage of "admin software."
You think hackers under 18 should be protected from bad language??? Society should be protected from _them_!!
Yes they've written some interesting software. So have alot of other people.
One of the cDc guys even said something to the effect of "no matter how good you are, there is always someone better out there". Maybe they should listen to themselves and drop the attitude.
What about the claim that BO2K shows how "wide-open" your machine really is? Give me a break. That's like saying "Hey - your Linux machine is wide open because I can install a daemon on it if I am root".
Whatever.
These guys get way too much attention turned their way just because they can spout a few bad words and act like they are l33t. I tend to be more impressed with people who contribute software without caring who notices.
SEAL
Comment removed based on user account deletion
Comment removed based on user account deletion
'Twit' and 'wanker' are hardly different from fucker, asshole, bastard etc.. The main difference is that they more properly emphasis our vehement hartred for you. They also server to demonstrate we are not up-tight little mommy's boys(/god's children/slaves) like you apparently are.
And what the hell is wrong with wanking, cocksucker?
Ratte' started editing the t-files from Lubbock, Texas, a town known for its je ne sais quoi, as Texans say. In reality, it's a pretty boring place.
To a group that meets every so often at hacker conventions and otherwise talks on the net, why should it matter where they live? Why should it matter where anyone lives, so long as they can connect to the net?
If they wanted to use their real names, they would. But their real names are pretty ephemeral and useless, especially if they choose not to use them.
J.
damned vulpine http://sb.drtwister.com/
I believe that the patch became available after the cd was put on sale. This bothers me greatly at the point that it came out I could only patch 98 by buying a cd even though it would have been easier to download the patch from microsoft directally.
I installed IE 4.0 on one of our NT servers and then I couldn't use some of the web based admin tools anymore. NT directed me to a page to download the update for IE 4.0. I went to the page and couldn't find anything to download. Microsoft did direct me to the page where I could order a cd with the patch for $19.95 or I could wait for the patch to become available on the web.
This is infuriating. If they have the data to put out a bugfix cd why not make it free unless they just want to make a few bucks.
(ps. I removed IE4 replaced it with IE3 and installed Netscape 4 and everyting worked fine)
In the battle of the "lesser of two evils", always pick the third option.
That's why you go to Powells and browse through their catalog of new, used and out of print books. If you've ever had the joy of visiting their Technical Bookstore in Portland Oregon, you would know True Geek Love.
*not a stockholder, just a fan*
No, while his claim is overly broad ("can't be hacked"), it does have a basis in fact. By default, MacOS does not turn on lots and lots of network services, the way that Unix and Linux and NT do. It's rather hard to exploit flaws in server programs that aren't running.
I think we should introduce some more terms to clearify the situation.
1) Crackercracker: A person who uses so called 'crackertools' to 'crack' a computer.
2) Hackercracker: A person who uses his great skill in using computers to crack a computer.
3) Crackerhacker: A person who uses crackertools to skillfully use a computer.
4) Hackerhacker: A person who uses his supergreat skills in using computers
Well....
Sendy
GNU guru and mainframe hacker
Hoo-aah....
That's hitting the Nail on the Hammer!!!!!
Nicely played!
some karma... and kinda lukewarm about it.
his point does stand. but the mac os (unfortunately) sucks for everything but user interface (where i use it exclusively). serving on a mac is just stupid because of the instability and *lack* of proper remote administration on the mac os. I use macs (running macos) and PCs running various flavours of unix, and i've come to this conclusion over and over again. also, your arrogance *does* make it look like you want to be flamed back to the pit from whence you came. http://www.vhemt.org comes to mind. later.
Such garbage. Why does anyone here care about a bunch of kiddies that have no direction and do nothing for anybody but themselves?
/. , I mean come on, THIS is news that matters?
It seems these guys, l0pht and no doubt other are finding it hard to grow out of their childish past-times and somehow still try to gain some respect. That is respect from people other than the 13 yr olds they want to act like.
No one really cares about these people, and I sure didn't until I see this stuff showing up on
I think someone is trying to be some kind of cutting edge news reporter, the only problem is cDc, l0pht etc ad nauseum sure isn't cutting edge news at slashdot, perhaps MTV but not here. Tired, beating the same dead horse, certainly not new or interesting.
I'd much rather read an interview from one of the many good linux security sites out there, not these wannabe chumps.
What API calls? Look bud, you have to have to have something like that if you want a workable GUI. Answer me this: If some idiot installed something like BO as root, could it not do all what BO does and more? What do you think Microsoft should do, remove the routines from it's OS? All BO does is manipulate disks, maipulate windows, and poll the status of various things. I'm sorry but these are NECESSARY for a GUI OS. If a program doesn't have the right to access the disk then how the hell is anything supposed to get done? If I can't poll the position of the mouse how is it supposed to know how to respond to user input? Look bud, Linux and all the other OSes are just as venurable as Windows to something like this. If I wrote a small application that, when installed as root, would give me permenant, hidden shell access to your computer can you imagine how much trouble I could cause? All that would be doing nothing more than using the features in the OS.
shit guys. thx for the news.. ive been waiting for the new version of Microsoft Back Office.. Back Office 2000!! im gonna install it in our corporate server.. and im excited for tommorow :) yipeee! sill system administraitor
Hell yeah, I think that was the first bbs I ever used. That or the Windmill.
Weird world to know you went to the highschool where cDc was begun.
Oh, and that meat packing plant burned down a few years ago. Just some twisted steel out of concrete now.
The American Way? I'll go back to the underground where we did it, we were free, we did it *for* free, and LIKED it that way.
We did it *for* free because we were living in our *parents'* garage!
laughing my ass off at the phrase "back-engineered" I looked at thsi dude's other posts, hoping for more quality entertainment. I clicked 4 random posts.
He's best friends with the cdc, a pro-jazz musician, and the designer of satellites for a shadowy military-microsoft joint conspiracy. The 4th post was much less amusing.
Slashdot user-type #44: Clueless self-important namedropper
Yet another quality flame brought to you by the CIA, and crack cocaine.
... is whats fundamentally fucked up about our hype-saturated, abstract, image oriented, mass marketed, focus-group obsessive, bottom-line worshipping corporate culture.
Ok, so we should dress up the red-headed step child and make him LOOK respectable and cuddly? What a total waste of time. Any corporation that is incapable of judging something like linux on its own merits simply doesn't deserve it.
Screw it. Don't demean linux or any other good technology with a pretty box with shiny bits just to impress PHBs. I'm sick of pandering to their power-point presentation dulled pea-sized minds.
Eventually, companies like Microsoft will rip off any good idea anybody has (ok, well, maybe 20 years later), claim they invented it, and do all the icky marketing lies^H^H^H^Hwork for you (badly). The aforementioned PHB will buy it because the glossies and paperclip/wizard thingies give him the warm fuzzies. But you will have the last laugh every time you hear him have to reboot his machine. That is, assuming he actually uses it for something other than checking his yahoo email...
Shit. On second thought, you're right. We are all screwed.
BRING IN THE FOCUS GROUPS! THIS PRODUCT NEEDS A CONCEPT! A NICHE TO FILL! A PARADIGM TO SHIFT! A NEAT, 4 NOTE JINGLE (bum bee bum bim)! PENGUINS IN REFLECTIVE BLUE JUMPSUITS! A SUPERBOWL TIE IN!
...it's definitely not my choice to make for someone else...
You say that you wouldn't make that choice for others, but for a second imagine that you had to choose between the system with locks and keys and the one without for ALL systems in the world. Which would you choose???
As much as we would like to live in a world where security is unesasary we don't. We live in a world where information is power. We must choose wisely who and what can access that information. Since computers are going to be used for storing sensitive information for a long time yet I would prefer that anything that could be done to secure the system would be done.
The cDc didn't choose to break the security model for win9x, trojans existed for a long time before BO. BO just showed how bad a trojan could be. NetBus is comparable in some respects to BO and was not written by the cDc.
If the cDc had not released BO would there be no threat to win9x users, or would the threat still be there just not as well documented? BO was designed (IMHO) to infuriate the users of win9x, and get them to complain to Microsoft about finding a way to circumvent attacks.
Microsoft does have a product that allows remote admin of a windows machine. It can hide itself so that there is no visible sign of it running from the console. I believe that is it called SMS. The cDc used this as a rebuttal to anti virus vendors putting bo2k in their databases. I would get you an URL but www.cultdeadcow.com seems to be suffering from the /. effect right now.
You could also consider VNC or Norton's PC Anywhere to be hacking tools because they allow remote access to a computer. Since VNC is GPLed anyone can remove the icon that appears on the system tray to make it effetivley invisible to the user.
If you think that compiling is a chore, you must not be doing any real work. Lets say you want to run Apache with PHP3, mod_perl, OpenSSL, shared memory patches, etc. There are RPM's (or other binary packages)for specific configs - but if you want it all you have to configure it yourself and compile it. It's not hard. You just need to turn on your brain and read a few README files. This is not rocket science. In reality a binary dis. that is dynamically linked is only guaranteed to someone on a system with identical libs to the builder of the binary. Also, with RPM's you have no real first hand idea where everything goes on your drives. I am responsible for 18 machines and I have compiled every binary on every server, OS(OK they are all BSD so this is a no brainer, via make buildworld/make installworld), Kernel, daemons. It's not a big deal. Install a base OS, install the necessary daemons, test, harden, test again, good to go. I know where everything is on every machine... A little more time upfront and minimal time later when I need to scale or upgrade. Compiling is not 'scary', BINARY distributions are scary. adam
We get these occasionally at my ISP, and we just delete 'em. I know a lot of people at the other "big" local ISP's (non-national) in my town, and they do the same thing. Unless we get a whole slew of them at once, or some customer trys to crack our main server with exploits from 5 years ago, nobody really does anything. You can keep sending these though, it probably gives one a good white-person feeling in the middle chest.
Hello,
Was looking forward to reading stuff from the cDc web site after briefly browsing it from work, but from home my isp's DNS server returns unknown host for www.cultdeadcow.com. I asked a friend to look up the ip address for me, and his isp also returned unknown host.
2 possibilities? First the site is down. Second, some ISP's delete cDc from their DNS tables? Had no trouble finding the site from work even through their firewall (.mil) but I didn't write down the ip addy (stupid me).
Any help would be appreciated. Before I left the site I saw lots of interesting stuff I wanted to spend some time reading (Thanks cDc)
Apologies if this is too far off topic.
Funny, when I was a kid, most kids I knew had less free time than most adults with paying jobs I know now... and they still managed to do lots with it without demanding the sell-out they were 'entitled' to...
=)
Powells does kick butt. It is one-of-a-kind. I found all sorts of things there.
k&a