[iwar] Historical posting
From: Fred Cohen
From: fc@all.net
To: iwar@onelist.com
Mon, Jan 1, 1999
fc Mon Jan 1, 1999
Received: (from fc@localhost) by all.net (8.9.3/8.7.3) id FAA15269 for iwar@onelist.com; Tue, 18 Apr 2000 05:21:43 -0700
To: iwar@onelist.com
MIME-Version: 1.0
Mailing-List: list iwar@egroups.com; contact iwar-owner@egroups.com
Delivered-To: mailing list iwar@egroups.com
Precedence: bulk
List-Unsubscribe:
Date: Mon, Jan 1, 1999
From: Fred Cohen
Reply-To: iwar@egroups.com
Subject: [iwar] Historical posting
He has the same thing to gain that anyone else of his stripe does...15
minutes of fame (at the very least). Sometimes a little publicity is all
they're after. I have no idea whether he hacked them or not...I have seen
neither the "before" nor the "after".
If you hypothesise for a moment that EFF put out a "sacrificial" webserver
specifically to draw the attention of those disposed to hacking (and thus
draw attention AWAY from the truly valuable asset), and that this was the
type of device he attacked, "Wolf's" hacking accomplished only a publicity
stunt, and no actual damage worth mentioning. We may never know for sure.
Those given to self-aggrandisement are in the long-run their own worst
enemies. The news often carries stories about criminals who get caught
because they exposed themselves through some casual or intentional comment
about how "clever" they were in putting it over on their would-be captors.
This kind of individual self-destructs.
Besides, it's not the "Wolfs" of the world that concern me. It is the ones
who go about their business quietly and professionally. In my mind it is
the ones we don't hear about that may be doing the real damage. I think
that all those former KGB, Stazi, and other furloughed State Police officers
and spies had to find some form of gainful employment (and not just the ones
formerly of the Eastern variety).
I do not subscribe to conspiracy theory, but I do believe that Chaos theory
is at work. Economic espionage has been actively done for decades, and is
on the rise. So is InfoWar activity. We are seeing more of both, and more
is coming.
From: Grant Bayley gbayley@a...
This was reported on the Attrition.org mailing list on New Years Eve:
http://www.attrition.org/mirror/attrition/1999/12/31/www.eff.org/
Sure doesn't look like a "Wolf" page defacement to me. Then again, I'm
not sure what a Russian guy would have to gain in claiming just such a
defacement...
Grant
-------------------------------------------------------
Grant Bayley gbayley@a...
-IT Manager @ Batey Kazoo (www.kazoo.com.au)
-Admin @ AusMac Archive, Wiretapped.net, 2600 Australia
www.ausmac.net www.wiretapped.net www.2600.org.au
-------------------------------------------------------
On Mon, 3 Jan 2000, Spernow,William wrote:
> Date: Mon, 3 Jan 2000 09:51:49 -0500
> From: "Spernow,William" william.spernow@g...
> Reply-To: iwar@onelist.com
> To: iwar@onelist.com
> Subject: [iwar] News: EFF gets hacked!!!
>
> From: "Spernow,William" william.spernow@g...
>
> This is the best hack claim event I have seen all weekend...
>
> Russian hacker "Wolf" claims to have defaced several
> sites over the holiday weekend. One of these was the
> Electronic Frontier Foundation (www.eff.org). He has a
> list of the hacked sites on his Web page at:
> http://www.hackzone.ru/hacked/hacked.html
>
> Bill Spernow
> 978-897-7163
>
> -----Original Message-----
> From: Fred Cohen [mailto:fc@a...]
> Sent: Saturday, January 01, 2000 3:55 AM
> To: iwar@onelist.com
> Subject: [iwar] News
>
>
> From: Fred Cohen fc@a...
>
> [Happy New Year. Looks like things went pretty well, but we'll see. -
> FC]
>
> Defacements on other side of midnight
> Australia and New Zealand see minor date-stamping
> problems, plus 'spray painting' of some Web sites
> in a so-far-quiet launch to the new millennium.
> Some minor hacking. Australian Webmasters are also
> reporting a rash of harmless, but annoying, Web
> site spray-paint attacks. Typically, these attacks,
> like the one on the investment site Technology
> Investments, leave the home page without any links
> to the rest of the site and the message: "I hacked
> this site simply to say ... welcome to the Y2K!
> ... by siko!"
> http://www.zdnet.com/zdnn/stories/news/0,4586,2415792,00.html
>
> No signs yet of Y2K cyber-chaos
> A world remade by technology began the rollover to
> the year 2000 today with no early signs of cyber-chaos,
> after years of preparation and billions of dollars
> spent to fix a simple but widespread computer bug.
> http://www.sjmercury.com/svtech/news/breaking/ap/docs/43725l.htm
>
> DOD's IT shop find no Y2K glitches, hackers
> One hour after midnight Zulu -- Greenwich Mean Time,
> which the majority of military communications systems
> use -- the Defense Information Systems Agency-Pacific
> could determine that the 120,000 circuits it relies on
> to provide connectivity for U.S. forces survived the
> key New Year time change without a bump. DISA-Pacific
> also had not detected any increase in hacker attacks
> or probes, Harvey said, "which really surprised us
> because this is a period of heightened vulnerability.
> I have three analysts engaged in threat detection and
> analysis, and though they're busy [monitoring the
> networks], they're not seeing anything."
> http://www.fcw.com/pubs/fcw/1999/1227/web-disazulu-12-31-99.html
>
> Domain hack hits wireless modem company
> Metricom's Ricochet.net domain name was allegedly
> commandeered by hackers Tuesday, causing emails sent
> to users of the company's wireless modems to bounce
> back to their senders for about 48 hours, the company
> confirmed. Visitors to the Ricochet.net Web site also
> were redirected to a pornographic site for nearly two
> days and some incoming emails continued to bounce back
> until early yesterday, according to Metricom executives.
> Service returned to normal by yesterday afternoon,
> executives said.
>
> http://news.cnet.com/news/0-1004-200-1510319.html
> Hackers break into rail network's Web page
> Hackers broke into an official Web site and issued a
> false warning that train service in Britain had been
> canceled Friday due to millennium bug problems. The
> warning, which read ``No trains today,'' was discovered
> on Railtrack's Internet site at about 9 a.m., officials
> said. The hoax message also sent greetings to all
> Railtrack directors and ``all the sheep in Wales.''
> http://www.sjmercury.com/svtech/news/breaking/merc/docs/068585.htm
>
> FC
>
> ------------------
> http://all.net/
>
> > ------------------
> http://all.net/
>
------------------
http://all.net/