June 2001 - main - earth.li

Re: [Alug] ALUG meeting 17 June
by MJ Ray 05 Jun '01

05 Jun '01

David Freeman <david_freeman(a)rocketmail.com> writes: > I will be bringing my new printer so we can try to configure it? lpr, lprng, pdq, CUPS, ... ? What is it, by the way? -- MJR

2 1

RE: [Alug] A Couple of responses in one :
by Earl Brannigan 05 Jun '01

05 Jun '01

MJR Wrote : > I'd certainly still be interested. It would also be nice to be on the > sending end of one of these attacks for a change...! For a change!?!?!......been on the receiving end then? I have. Recently had to completely rebuild a webserver because it had been rooted, trojaned, backdoored etc. There was no way to undo the mess that had been caused. I beleieve it was hacked via a bind overflow. > I've played with toy exploits (sending bad data to web servers to make them die, etc), > but not buffer overflows. some of the 'toy' exploits can be very useful. Sending 'apparent' junk in the post data for a .jsp for example can yield excellent results on some badly patched setups. But I have to say, buffer overflows are the most phun! (instant gratification....) > > -- > MJR OK, here's the idea, I have some bad builds of programs (anyone remember wu_ftp's vulnerability, I think I've also got some others - DNS Bind for example) so I'm happy to set my machine up as a dodgy ftp / DNS / telnet server and then gain root on it from someone else's machine. I will also install a backdoor or 2 to show how I would be able to get back in later. Also a quick overview of the ways you can gain system info to enable you to plan an attack. People are often suprised when they see how much system info they give away for free to anyone who knows where to look (SNMP walk Anyone ?). Basically I'll set my machine up as a pretty badly secured/patched box with useless services and stuff then show you how to crack it. I will also bring along some good info in pdf/html/text format for further reading for anyone who is interested. This will probably be the starting point for anyone wanting to get their own box from such condition to a hardened setup. Finally (if I have time) a little bit of a Snort overview (thats Intrusion Detection not illegal pastimes). I'm not going to touch DOS attacks or that sort of thing because most home users would never be the victim of one (although if your machine get's hacked you could well end up as an unwitting accomplice / launch pad for a future DDOS......) Cheers all See you soon. PS (Aside) some of you may remember my post from ages ago asking about development IDEs for Linux. Thanks for the responses. Since then I have used RHIDE extensively (I love it. It's a marvellous trip down memory lane as anyone who knew and loved the Borland Turbo C++ 3.x series will attest) For the past 12 weeks though I've been using Anjuta which can be found on this month's Linux Format CD, although the source download from sourceforge is small enough.( http://anjuta.sourceforge.net interestingly enough) I recommend it wholeheartedly to anyone wanting a nice IDE for C/C++ development on Linux - give it a shot......only at version 0.1.5 but it is excellent. Support it! Still buggy...that's where we come in, find them bugs and report em. (oh! ... use it as well....it does work very well afterall) You could be compiling your own buffer overflows within hours! (Just keep em away from my webservers!!)

2 1

Re: [Alug] A Couple of responses in one :
by MJ Ray 05 Jun '01

05 Jun '01

Earl Brannigan <earl.brannigan(a)lindenhouse.co.uk> writes: > For a change!?!?!......been on the receiving end then? [...] Oh yeah. Universities are not nice places to be: no network-level security and fairly fast connections which are attractive launch pads for DDoS attacks. > But I have to say, buffer overflows are the most phun! (instant > gratification....) That reminds me why I program in lisp so much ;-) > [...] (SNMP walk Anyone ?). Yep, that one scared me when I saw how talkative our machines were. Silly Compaq Unix enables no end of crap services by default. > I will also bring along some good info in pdf/html/text format for further > reading for anyone who is interested. We could upload this to the web site on the day, too? -- MJR

1 0

Re: [Alug] AUI v BNC ports
by Andrew.Chandler＠ft.com 05 Jun '01

05 Jun '01

some *very* old cards have a jumper on the board to select the right interface, but as Mister Newman says there will be a utility to change the setting. Try popping over to www.3com.co.uk Andi Neill Newman <neill(a)entora.co.uk> on 05/06/2001 14:38:22 To: Jenny_Hopkins(a)toby-churchill.com cc: alug(a)stu.uea.ac.uk (bcc: Andrew Chandler/PSD/LONDON/FTI) Subject: Re: [Alug] AUI v BNC ports Jenny_Hopkins(a)toby-churchill.com wrote: > > 'Lo all. > Does anyone know how to persuade eth0 to use BNC rather than AUI? (I hope I > have the correct terminology here). > System is debian, card is this bugger of a thing, the 3c509. older cards had a dos utility program to 'switch' which interface they used, nowadays they do it automatically.. I could be wrong here, but there is a rpm on rufus (rpm archive, rufus.w3.org cool place check it out!) called 3c50x which /might/ do what you want... I've never used it myself so I don't claim anything ;).. hth Neill -- Open Source Specialists http://www.entora.co.uk/ Tel: +44 (0)701 0723686 Fax: +44 (0)870 3214368 _______________________________________________ alug, the Anglian Linux User Group list Send list replies to alug(a)stu.uea.ac.uk http://www.anglian.lug.org.uk/ http://rabbit.stu.uea.ac.uk/cgi-bin/listinfo/alug See the website for instructions on digest or unsub! ********************************************************************* * Please visit the web site of the Financial Times at: * * http://www.ft.com * * * * For UK personal finance, please visit http://www.ftyourmoney.com * * * * This E-Mail is intended for the use of the addressee only and may * * contain confidential information. If you are not the intended * * recipient, you are hereby notified that any use or dissemination * * of this communication is strictly prohibited. * * If you receive this transmission in error, please notify us * * immediately then delete this E-Mail. * * * * * postmaster(a)ft.com * *********************************************************************

1 0

Mr simms doesn't like us Re: Cow: was Sheep: was something else
by David Freeman 05 Jun '01

05 Jun '01

As you didn't send this to the list I have cc'd it there. --- Jenny_Hopkins(a)toby-churchill.com wrote: > > BBQ sounds good to me. vote number 4 > I'm a september virgo though. Yes but I think we have a couple of members who will be leaving in septemeber. So August is a better bet. > Any talks sound good to me; ooze knowledge in through my pores by > osmosis > if i bombard it enough ;) Contradicts most of what I have learnt on the learning process :o) Security is an advanced topic but well worth learning. Get the Book "Hacking Exposed" and also read "the cuckoos Egg" which I beleive you now have. > David: Pink Floyd? Yes. > Re.17th June - if I bring a computer is it possible to network using > co-ax? Please, can some one tell me what this coax stuff is? I think it could be possible for me to bring a coaz enabled hub. Remeind me nearer the time tho. Thanks D > Jen. > > __________________________________________________ Do You Yahoo!? Get personalized email addresses from Yahoo! Mail - only $35 a year! http://personal.mail.yahoo.com/

6 6

Re: [Alug] Mr simms doesn't like us Re: Cow: was Sheep: was something else
by MJ Ray 05 Jun '01

05 Jun '01

David Freeman <david_freeman(a)rocketmail.com> writes: > As you didn't send this to the list I have cc'd it there. As a general point, ask permission *before* you do this unless you're *very* sure it was an error. Quoting private correspondence in public is rather rude. (I'll certainly be after you with the chainsaw if you do it to me.) Reply to all if you want the list included, remember. > vote number 4 5. > Security is an advanced topic but well worth learning. Get the Book > "Hacking Exposed" and also read "the cuckoos Egg" which I beleive you > now have. The sequel, "Silicon Snake Oil", is also worth reading, although it's not security-related. If anyone wants a copy, I think I have a surplus one, so make me a reasonable offer off-list ;-) > Please, can some one tell me what this coax stuff is? Not UTP, the other stuff. It's what is usually used at UEA, sadly. -- MJR

1 0

Re: [Alug] A Couple of responses in one :
by Andrew.Chandler＠ft.com 05 Jun '01

05 Jun '01

<AOLTIMEWARNER> Me Too!!! </> I'm in the process of putting together a security team, so I'm sure a discussion allong these lines would be useful. Bing "Ashley T. Howes Ph.D." <ashley(a)turton.com> on 05/06/2001 12:58:31 To: alug(a)stu.uea.ac.uk cc: (bcc: Andrew Chandler/PSD/LONDON/FTI) Subject: Re: [Alug] A Couple of responses in one : I would also be interested in such a demonstration. Ashley Dr Ashley T. Howes Ph.D. ashley(a)turton.com Internet Developer http://www.turton.com Turton Creative Marketing Solutions 23-27 St. Andrews Street, Norwich, Norfolk, NR2 4TP, UK Tel:+44 (0)1603 766888 Fax:+44 (0)1603 767070 >Earl Brannigan <earl.brannigan(a)lindenhouse.co.uk> writes: > >> I was planning to do a little security overview thingy last time but >> unfortunately couldn't make the meet, >> would this still be of value to anyone ? >> I can bring along some goodies (nessus, nmap and the like and show you how >> to use them. I could also demonstrate a buffer overflow and that sort of >> thing...if anyone's interested...) > _______________________________________________ alug, the Anglian Linux User Group list Send list replies to alug(a)stu.uea.ac.uk http://www.anglian.lug.org.uk/ http://rabbit.stu.uea.ac.uk/cgi-bin/listinfo/alug See the website for instructions on digest or unsub! ********************************************************************* * Please visit the web site of the Financial Times at: * * http://www.ft.com * * * * For UK personal finance, please visit http://www.ftyourmoney.com * * * * This E-Mail is intended for the use of the addressee only and may * * contain confidential information. If you are not the intended * * recipient, you are hereby notified that any use or dissemination * * of this communication is strictly prohibited. * * If you receive this transmission in error, please notify us * * immediately then delete this E-Mail. * * * * * postmaster(a)ft.com * *********************************************************************

1 0

Re: [Alug] A Couple of responses in one :
by MJ Ray 05 Jun '01

05 Jun '01

Earl Brannigan <earl.brannigan(a)lindenhouse.co.uk> writes: > I was planning to do a little security overview thingy last time but > unfortunately couldn't make the meet, > would this still be of value to anyone ? > I can bring along some goodies (nessus, nmap and the like and show you how > to use them. I could also demonstrate a buffer overflow and that sort of > thing...if anyone's interested...) I'd certainly still be interested. It would also be nice to be on the sending end of one of these attacks for a change...! I've played with toy exploits (sending bad data to web servers to make them die, etc), but not buffer overflows. -- MJR

2 1

A Couple of responses in one :
by Earl Brannigan 05 Jun '01

05 Jun '01

Hi all, > From: MJ Ray <mjr(a)stats.mth.uea.ac.uk> > Date: 04 Jun 2001 13:26:20 +0100 > Subject: [Alug] ALUG meeting 17 June > > Hi all, > > The Hive has been booked for the afternoon of 17 June. Sadly the 10 > June is taken up by a ball. Is this a reasonable date to aim for? > It's right on the end of term, so I'd like to get publicity out this > week. Anyone volunteering to "do stuff" at this meeting? > > MJR Looks like a pretty good date to me. I was planning to do a little security overview thingy last time but unfortunately couldn't make the meet, would this still be of value to anyone ? I can bring along some goodies (nessus, nmap and the like and show you how to use them. I could also demonstrate a buffer overflow and that sort of thing...if anyone's interested...) > Date: Mon, 4 Jun 2001 15:01:25 -0700 (PDT) > From: David Freeman <david_freeman(a)rocketmail.com> > Reply-To: David_freeman(a)rocketmail.com > To: alug(a)stu.uea.ac.uk > Subject: [Alug] California dreaming > > ok so the subject may confuse you but. > > Before christmas someone mentioned that they had apool and large garden > and were willing to host a ALUG meet. But even if we couldn't use this > venue. How do people feel about the idea of having an ALUG BBQ or > similiar? We could perhaps use the (a) sylham as they have a bar > etc...? > > What do people think? > Now the pool sounds great!, and I think an ALUG BBQ would be a good thing..... > August would seam like a good time (ab normal distribution of birthdays > amoungst ALUG members in this time) > Not mine however ... > Thanks > > D > > PS and if anyone is trying to work out why this subject, its the song I > am listening two as I right > on such a winter's day ? What a way to waste a day..... I was going to entitle this post after what I'm listening to at the moment but " 'scuse me while I kiss the sky" would probably have set people worrying rather than guessing. Perhaps. Cheers Earl

2 1

California dreaming
by David Freeman 05 Jun '01

05 Jun '01

ok so the subject may confuse you but. Before christmas someone mentioned that they had apool and large garden and were willing to host a ALUG meet. But even if we couldn't use this venue. How do people feel about the idea of having an ALUG BBQ or similiar? We could perhaps use the (a) sylham as they have a bar etc...? What do people think? August would seam like a good time (ab normal distribution of birthdays amoungst ALUG members in this time) Thanks D PS and if anyone is trying to work out why this subject, its the song I am listening two as I right __________________________________________________ Do You Yahoo!? Get personalized email addresses from Yahoo! Mail - only $35 a year! http://personal.mail.yahoo.com/

1 0