Forum Home
Press F1
 
Thread ID: 32783 2003-04-28 05:37:00 That password stealing logger Susan B (19) Press F1
Post ID Timestamp Content User
139529 2003-04-29 00:06:00 Although discussing this sort of thing may be deemed bad,
the basis remains - Without a disease you don't find the cure.
Only when you understand the disease will a cure be found.

That is rampant self-justification cyberchuck, so quit while you are still not too far behind. I didn't know anything about password stealing until you guys got going, now I know more than I want to. Difference is, I won't try it or spread the word.

If you don't spread the disease, we won't need the cure.

Billy 8-{(

[pre][b]Just musing here, but I wonder if posting recipes for
fertiliser bombs and other anarchic devices on the net really
helps limit terrorism. ?:| Somehow I just don't see the logic.
Billy T (70)
139530 2003-04-29 00:08:00 Me thinks the moral of the story is:
Have a damn good look at what page you are logging into

.Clueless
Clueless (181)
139531 2003-04-29 00:26:00 This technique has been around ever since there have been computers and passwords. It is not new. Just have to be careful out there... Dolby Digital (160)
139532 2003-04-29 01:33:00 Let's chill this out before it goes nuclear .

For the record, Tim was banned not because he displayed an interest in such things but because he had the password grabber on his site and then came here asking people to view the site without letting them know it was there . I tend to believe it was a comparatively innocent exercise - I don't think Tim has yet realised you can't treat an open, public site as your own private playground especially when what you do there breaches the terms of service of your ISP . But I warned him when he came back from his first banning so he suffers the consequences .

But I don't think that means disscussion on these subjects should be banned, because most of you are discussing it from the point of view of highlighting the dangers, not promoting the activity . Such explanations - which give out practical knowledge on how security breaches are done - is fairly common even within the pages of PC World . If such things weren't discussed then the black hats out there are free to exploit the knowledge vacumm among users .

It's all in the point of the converstaion and that's how I'll treat it . Obviously, I don't see a need for anyone to post URLs to sites that provided scripts and hacks the script kiddies might use and would frown apon that, but dicussion of how these exploits are done in general terms seems fine if it is within the context of arming people with knowledge they can use to better defend themselves .

So, keep it friendly people . No need to go insulting each other over this kind of thing .
Biggles (121)
139533 2003-04-29 02:33:00 A judgement worthy of Solomon, Bruce. Chris Randal (521)
139534 2003-04-29 03:40:00 > Me thinks the moral of the story is:
> Have a damn good look at what page you are
> logging into
>
> .Clueless

My point exactly!
Chilling_Silently (228)
139535 2003-04-29 04:34:00 Flip...I didn't know that there was so much animosity between PF1 users...but I guess when you feel strongly about something... promethius (1998)
139536 2003-04-29 05:04:00 My suggestion was that it is tricky to do it "properly". Any scriptkiddy can make you go to a fake page with an obviously fake link. If you just click on a link, without looking at it. B-)

I don't think any of you (or I) can make anyone who uses the actual CNN address (http://www.cnn.com) be diverted to a faked page. Same with a bookmarked address of a bank or other "sensitive" host. It takes serious "manipulation" of the DNS system. The US Govt doesn't have to do that. Other criminals might have the resources to. ]:)

Everyone's usernames and passwords, and transactions are routinely intercepted, monitored, and possibly stored. We have a large expensive branch of the Echelon system at Waihopai, which ensures that any telecommunications you use can be monitored. Feel protected? :_|

But we can try to be friendly ... discussions of differences of opinion on technicalities aren't illuminated by personal abuse. We don't need lynch mobs.
Graham L (2)
139537 2003-04-29 06:31:00 > If you don't spread the disease, we won't need the cure.
How can you contain something you can't control? Look what happened with SARS.
"Well, Dimitri. Every search for a hero must begin with something
that every hero requires, a villain. Therefore, in our search for
a hero, Belairiform, we created the monster, Chimera"
The purpose of that quote - only by creating the monster, Chimera, could a vaccine be created against it.

> Just musing here, but I wonder if posting recipes for
> fertiliser bombs and other anarchic devices on the net really
> helps limit terrorism. ?:| Somehow I just don't see the logic
Hmm.. I also assume that means you support Microsoft when it said that terrorists were using open source software? Just because it's easily available doesn't associate it with terrorist activities...
cyberchuck (173)
139538 2003-04-29 06:42:00 > For a "friendly" community forum, these illegal acts should not have
> been explained in enough detail that anyone could attempt it. It'd be
> better if letting them know of the possibility
Considering I've answered 3 threads in the past week that have regarded a HOSTS file, are you saying that those threads too involve "illegal acts" - one was an Intranet that didn't want clients to have internet access - A simple method for blocking websites is the hosts file (although not for blocking the entire internet). So are you saying that if I was to put a hosts file on my PC's so that their default webpages loaded from my server - this would be illegal? No - it is common sense and easy to do.
Letting people know of the possibility never works. How many articles have you read that contain stuff involving security risks, choosing safe passwords, and never using the same password for anything. Why do you think those articles are still popular? - Because no one cares about the possibility. It's natural to think "Next door might get burgled But I wont!" Whereas if people are shown how easy it is to break into their house, then that will stay with them for life.
cyberchuck (173)
1 2 3 4