Copy Link
Add to Bookmark
Report
nasty_002
*=*=*=*=*=*=*=*=*=*=*=*=*=*
+ +
* NASTY JOURNAL #2 *
+ +
*=*=*=*=*=*=*=*=*=*=*=*=*=*
During the past few months NASTY has taken a small vaction. During that time
MOD has bragged about 'crushing NASTY with my thumb'. Well it just got to
unbearable. It's time for us to show the little shits for what they really
are.
Oh by the way MOD:
An individual wishing to remain anonymous wishes to say
'Corrupt, the angry man wishes to say MOD fucks dogs.'
Well, let me start of by recapping the situation. MOD claims to be so dam
untouchable. They also claim WINGNET and their UNIX are so dam secure.
hehe what a joke. During the time NASTY has been 'crushed', we have been
monitoring WINGNET! All of the mail, files, password files, messages,
and lovers quarrels have been intercepted. YES we OWN MOD! This file
is only the first of several! By the way, the angry man says that the
telenet database is pretty impresive even for a bunch of losers! EVERYTHING,
I mean EVERYTHING is going to be made public. Including but not limited to
MOD's 'PRIVATE' database! During the course of several weeks we at NASTY
will be studying MOD in depth! Now the public can know everything that MOD
knows. (Isn't that great? woopy!)
============================================================================
From NEW USER ACCOUNT CREATOR Thu Aug 24 00:29:01 1995
LOGIN NAME: avatar
USER ID: 2004
GROUP ID: 100
GECOS: THE AVATAR
HOME: /pub/avatar
SHELL: /bin/notvalidated
PHONE #: 785-4544
From uucp Tue Jul 30 03:07 EDT 1991
>From uunet!eff.org!knight Tue Jul 30 03:07:06 1991 remote from cosi
Received: by modnet.UUCP (smail2.5)
id AA06323; 30 Jul 91 03:07:06 EDT (Tue)
Received: by cosi.UUCP (smail2.3)
id AA00467; 29 Jul 91 23:51:16 EDT (Mon)
Received: from eff.org by relay2.UU.NET with SMTP
(5.61/UUNET-internet-primary) id AA26798; Mon, 29 Jul 91 23:44:02 -0400
Received: by eff.org (5.61+++/Spike-2.0)
id AA20540; Mon, 29 Jul 91 23:43:42 -0400
Date: Mon, 29 Jul 91 23:43:42 -0400
From: uunet!eff.org!knight (Craig Neidorf)
Message-Id: <9107300343.AA20540@eff.org>
To: modnet!root
Subject: Cancelled
It was cancelled because of the economic summit. Who in MOD is this?
kl
From wing Mon Jul 1 07:14 EDT 1991
>From root Mon Jul 1 07:13:23 1991
Received: by modnet.UUCP (smail2.5)
id AA05489; 1 Jul 91 07:13:23 EDT (Mon)
Message-Id: <9107010713.AA05489@modnet.UUCP>
Date: 1 Jul 91 07:13:23 EDT (Mon)
From: root@modnet.UUCP (Rewt)
To: corrupt@modnet.UUCP
Got root on that 11266 thing. Didn't backdoor it yet so be carefull. Root
shell is: /usr/lib/mailx/xmail
Gotta go to work, talk to you after 4:30pm.
From wing Mon Jul 1 23:33 EDT 1991
>From root Mon Jul 1 23:33:26 1991
Received: by modnet.UUCP (smail2.5)
id AA07933; 1 Jul 91 23:33:26 EDT (Mon)
Message-Id: <9107012333.AA07933@modnet.UUCP>
Date: 1 Jul 91 23:33:26 EDT (Mon)
From: root@modnet.UUCP (Rewt)
To: outlaw@modnet.UUCP, corrupt@modnet.UUCP
_______________________________________________________________________________
From: The Wing
To: outlaw corrupt
Subject: username
_______________________________________________________________________________
I got a username if you don't have this one. "mcreese" p/w "blue moon"
on tymnet. Also got "tnixmdhit01" p/w "ufonetran" (jumps into some sort of
xmodem shit). Welp, I'm outta here...
_______________________________________________________________________________
The Wing [215-295-2684 ext. 100 or wait for carrier]
of M.O.D. {beyonet,olwejo,cosi}!modnet!wing
_______________________________________________________________________________
From wing Thu Jul 11 16:17 EDT 1991
>From root Thu Jul 11 16:16:57 1991
Received: by modnet.UUCP (smail2.5)
id AA12650; 11 Jul 91 16:16:57 EDT (Thu)
Message-Id: <9107111616.AA12650@modnet.UUCP>
Date: 11 Jul 91 16:16:57 EDT (Thu)
From: root@modnet.UUCP (Rewt)
To: comments@modnet.UUCP
test.
From wing Sun Jul 14 12:15 EDT 1991
>From root Sun Jul 14 12:14:48 1991
Received: by modnet.UUCP (smail2.5)
id AA04992; 14 Jul 91 12:14:48 EDT (Sun)
Message-Id: <9107141214.AA04992@modnet.UUCP>
Date: 14 Jul 91 12:14:48 EDT (Sun)
From: root@modnet.UUCP (Rewt)
To: MOD@modnet.UUCP
This message is going out to everyone with root... One of you asses deleted
half my fucking device drivers. WATCH WHAT YOU FUCKING DELETE!!!
From wing Fri Jul 19 06:23 EDT 1991
>From root Fri Jul 19 06:19:09 1991
Received: by modnet.UUCP (smail2.5)
id AA23829; 19 Jul 91 06:19:09 EDT (Fri)
Message-Id: <9107190619.AA23829@modnet.UUCP>
Date: 19 Jul 91 06:19:09 EDT (Fri)
From: root@modnet.UUCP (Rewt)
To: corrupt@modnet.UUCP
boo. what's new? Got root on that 3020... with a little bit of werk. They
are now the proud owners of a new login too, it's a Sun 4.1.1 a root shell is
in /usr/tmp file: .Ex0371 weird kind of system, that thing has one hell of a
fast connection!!! I can't even tell, no lag at all! anyway, new telnet for
them very soon, I was too tired to get telnet done last night. I'm getting
the password file for att.att.com within a week also. Welp, gotta get ready
for work (friday, yea!) so I'll catch you later!
From wing Fri Jul 19 06:25 EDT 1991
>From root Fri Jul 19 06:24:37 1991
Received: by modnet.UUCP (smail2.5)
id AA23959; 19 Jul 91 06:24:37 EDT (Fri)
Message-Id: <9107190624.AA23959@modnet.UUCP>
Date: 19 Jul 91 06:24:37 EDT (Fri)
From: root@modnet.UUCP (Rewt)
To: outlaw@modnet.UUCP, corrupt@modnet.UUCP
Also, I figured out a way to run shell when su'ing to people who don't have
a standard shell set. (mmm say such as sync) heh, pretty neatoh.
Latroh.
From wing Sat Jul 20 10:41 EDT 1991
>From root Sat Jul 20 10:40:01 1991
Received: by modnet.UUCP (smail2.5)
id AA28337; 20 Jul 91 10:40:01 EDT (Sat)
Message-Id: <9107201040.AA28337@modnet.UUCP>
Date: 20 Jul 91 10:40:01 EDT (Sat)
From: root@modnet.UUCP (Rewt)
To: outlaw@modnet.UUCP, corrupt@modnet.UUCP
osi now has a new version of telnet /usr/lib/adb/.^A is the mystical place.
there is: log.handler there too. ugh, oh, the bkdr p/w for any account:
igg13 don't use root with it though unless it's an emergency. It also
knocks you out of utmp so use guest, igg13 anyway. gotta go to a b-day
party be back l8r 2nite.
l8r.
From wing Sat Jul 20 10:42 EDT 1991
>From root Sat Jul 20 10:41:51 1991
Received: by modnet.UUCP (smail2.5)
id AA28340; 20 Jul 91 10:41:51 EDT (Sat)
Message-Id: <9107201041.AA28340@modnet.UUCP>
Date: 20 Jul 91 10:41:51 EDT (Sat)
From: root@modnet.UUCP (Rewt)
To: outlaw@modnet.UUCP, corrupt@modnet.UUCP
Please do not read the next message over any networks that could log.
Example: tymnet
l8R
From corrupt Sun Jul 21 14:42 EDT 1991
>From root Sun Jul 21 14:41:44 1991
Received: by modnet.UUCP (smail2.5)
id AA08224; 21 Jul 91 14:41:44 EDT (Sun)
Message-Id: <9107211441.AA08224@modnet.UUCP>
Date: 21 Jul 91 14:41:44 EDT (Sun)
From: root@modnet.UUCP (Rewt)
To: comments@modnet.UUCP
Local mail Test
no Need To Respond (if you do your lame)
From corrupt Sun Jul 21 14:42 EDT 1991
>From root Sun Jul 21 14:42:22 1991
Received: by modnet.UUCP (smail2.5)
id AA08227; 21 Jul 91 14:42:22 EDT (Sun)
Message-Id: <9107211442.AA08227@modnet.UUCP>
Date: 21 Jul 91 14:42:22 EDT (Sun)
From: root@modnet.UUCP (Rewt)
To: MOD@modnet.UUCP
Local Mail Test
how about an alias for all the pub accounts?
From ori Wed Jul 24 14:45 EDT 1991
>From ori Wed Jul 24 14:44:43 1991
Received: by modnet.UUCP (smail2.5)
id AA10761; 24 Jul 91 14:44:43 EDT (Wed)
Message-Id: <9107241444.AA10761@modnet.UUCP>
Date: 24 Jul 91 14:44:43 EDT (Wed)
From: ori@modnet.UUCP (ORI)
To: corrupt@modnet.UUCP
Hey dewd, haven heard from ya in ages..anyway i'll be seeing ya at the meeting...
wait..i dont know if i might make it to the meet next time around cuz, I'll be going to Canada for carnival..it's the (Caribana Carnival) it's great...
see if ya can go!
well, tlk to ya soon.
From wing Wed Jul 24 20:45 EDT 1991
>From zircon.gtetele.com!joe Wed Jul 24 20:45:53 1991 remote from wells
Received: by modnet.UUCP (smail2.5)
id AA11055; 24 Jul 91 20:45:53 EDT (Wed)
Path: modnet!beyonet!wells!dsinc!spool.mu.edu!mips!pacbell.com!lll-winken!telecom-request
From: joe@zircon.gtetele.com (Joe Kelsey)
Newsgroups: comp.dcom.telecom
Subject: GTE Switches
Message-ID: <telecom11.564.1@eecs.nwu.edu>
Date: 23 Jul 91 17:38:00 GMT
Sender: Telecom@eecs.nwu.edu
Organization: TELECOM Digest
Lines: 78
Approved: Telecom@eecs.nwu.edu
X-Submissions-To: telecom@eecs.nwu.edu
X-Administrivia-To: telecom-request@eecs.nwu.edu
X-Telecom-Digest: Volume 11, Issue 564, Message 1 of 10
David Barts (davidb@polari.uucp) and Joe Stein (jose@techbook.com)
have recently talked about GTE switches, especially in GTENW. Since I
work for GTE I guess I'll see if I can actually shed some light on the
actual situation here vis-a-vis switches types, etc. I do not work
directly for GTE Telops -- GTE Telecom is an unregulated subsidiary of
GTE and so we have to pay for our phone service just the same as
everyone else. However, many employees here used to work for Telops,
specifically in GTENW, so I can get some inside information. I myself
have never worked for *any* regulated phone company, so I can only
pass along information from others here.
The information I have is just GTE *before* the Contel merger. I
don't have information about Contel switches, etc. Overall, 50.9% of
GTE switches are SPC (stored program control) and 49.1% are still
mechanical. In GTENW for area code 206, there are only three
mechanical offices left: Stevens Pass, Mount Vernon and Stanwood. I
don't have the breakdown for any of the other area codes (503, 509, etc.)
Here is a percentage breakdown of all of the SPC switches in GTE. The
areas are the pre-Contel areas. With the Contel merger, the area
names and boundaries change, but since I don't have information about
Contel switches, this is the best I can do. South West is the
Texas/Oklahoma/NewMexico area, North is the midwest states, South is
the Florida area and West is the west coast states. The column
percentages may not total 100% due to rounding error. Also the
notation .% means less than .5% (I round .5% up to 1%.) The last line
is the percentage of SPC switches in each area, the remainder being
various mechanical switches (cross-bar, step-by-step).
South Overall
Switch West North South West Total
GTD-5 62% 71% 58% 62% 64%
#2 EAX 5% 11% 11% 8% 9%
DMS-10 6% 8% 14% 5% 8%
DCO 24% 2% 6% 0% 6%
DMS-100/200 2% 3% 9% 6% 5%
Vidar 0% 3% 0% 6% 2%
#5ESS 1% 0% 2% 4% 2%
GTD-3 0% 2% 0% 2% 1%
#1AESS 0% 0% 0% 3% 1%
#4ESS 0% 0% 1% 2% 1%
GTD-4600 1% 0% 0% 1% .%
EWSD 0% 0% 1% 0% .%
ITT-1210 0% 0% 0% .% .%
Total SPC 44% 39% 66% 76% 51%
You can see that GTE West has the largest percentage of SPC switches.
At one point (maybe ten years ago, or so the story goes), someone at
GTE estimated that it would take 50-100 *years* to convert all of the
cross-bar and steppers to electronic switches. Five years later, the
estimate was down to ten years (mainly due to the economics of lower
head counts)!
In GTENW for area code 206, there are six #5ESS COs, in addition to
the tandem #5ESS in Everett (Everett (Casino), Bothell and Redmond COs
are #5ESS in the Puget Sound area). Almost all of the rest of the
switches (especially in the 206 area) are GTD-5's (sixteen total).
There is one Vidar, four EAX2's (early SPC switch), three CXP5's (#5
cross-bar) and four SXS (step-by-step!). According to my list, GTENW
(Washington, Oregon, Idaho) has 73% of the #5ESS in all of GTE!
Steve Forrette <forrette@cory.berkeley.edu> asked about 206-338 in
Mill Creek, which is served by the GTD-5 at the Everett (Alpine) CO.
I just moved from Seattle/US West service area (#5ESS) into northern
King County/GTENW service (Richmond Beach CO, GTD-5), and the
difference is quite noticable. One thing I fail to understand is why
GTE has to play around with the various Call Waiting, Three-way
calling, etc. features. Here I am, used to using *70 to disable call
waiting on the old #5ESS, and now I have to retrain myself to use 70#
instead! They also use timeouts to detect feature dialing on rotary
phones instead of ``11'' (on 5ESS you can dial 1170 instead of *70.)
Here is one vote for standardizing feature access codes! Sigh...
Joe
From wing Wed Jul 24 20:46 EDT 1991
>From umcvmb.bitnet!C483307 Wed Jul 24 20:46:25 1991 remote from wells
Received: by modnet.UUCP (smail2.5)
id AA11060; 24 Jul 91 20:46:25 EDT (Wed)
Path: modnet!beyonet!wells!dsinc!telecom-request
From: C483307@umcvmb.bitnet (Craig Neidorf)
Newsgroups: comp.dcom.telecom
Subject: Comsec Data SecurIt_on Good Morning America (
Message-ID: <telecom11.562.12@eecs.nwu.edu>
Date: 23 Jul 91 01:40:35 GMT
Sender: Telecom@eecs.nwu.edu
Organization: TELECOM Digest
Lines: 17
Approved: Telecom@eecs.nwu.edu
X-Submissions-To: telecom@eecs.nwu.edu
X-Administrivia-To: telecom-request@eecs.nwu.edu
X-Telecom-Digest: Volume 11, Issue 562, Message 12 of 12
Set your VCRs ...
Comsec Data Security (Erik Bloodaxe/Chris Goggans, Doc Holiday/ Scott
Chasin, Malefactor/Ken Shulman, and Robert Cupps) is the topic on Good
Morning America -- July 25, 1991.
Two members of Comsec will appear on the show, but which two is
currently unknown.
Tune in and see what they have to say.
Craig Neidorf (knight@eff.org)
The above message is a personal interest message. I have no
affiliation with Comsec Data Security.
root:NONE:0:root,wing
other:NONE:1:daemon,lp,wing
bin:NONE:2:root,bin,daemon,wing
sys:NONE:3:root,bin,sys,adm,wing
adm:NONE:4:root,adm,daemon,wing
games:NONE:5:root,games,wing
mail:NONE:6:root,uucp,nuucp,uucpadm,wing
c:NONE:7:root,setup,wing
bbs:NONE:8:root,setup,wing
news:NONE:9:root,news,wing
MOD:NONE:10:wing
users:NONE:100:setup,wing
pascal:NONE:101:root,setup,wing
xlisp:NONE:102:root,setup,wing
modnet$ cat /etc/passwd
root:CI8NSm45CWiyU:0:0:Rewt:/:/bin/sh
wing:arPRswf2eAtfU,MM:0:10:The Wing:/usr/accts/wing:/bin/ksh
scorpion:htTE9wIYDsnno:0:10:Scorpion:/usr/accts/scorpion:/bin/sh
outlaw:Suvvk6cK6KrIM:0:10:Outlaw:/usr/accts/outlaw:/bin/sh
hac:wuhcNIA6SOUO6:0:10:HAC:/usr/accts/hac:/bin/sh
phred:TvrFYGxKahsAY:0:10:Phred:/usr/accts/phred:/bin/ksh
ap:2wlJ33JV2Hnrs:0:10:Acid Phreak:/usr/accts/ap:/bin/sh
zod:bwpojY4v2cEcw:0:10:ZOD:/usr/accts/zod:/bin/sh
seeker:3xzxED0PZ2RE2:0:10:The Seeker:/usr/accts/seeker:/bin/sh
corrupt:ixqjtE03z6ao6:0:10:Corrupt:/usr/accts/corrupt:/bin/sh
lmicro:D8qzKQWM.eJzk:0:10:Lord Micro:/usr/accts/lmicro:/bin/ksh
RKnight:dyuKacSnpaEsE:0:10:Red Knight:/usr/accts/RKnight:/bin/sh
master:BzHeKXbr3K2bM:0:10:The Master:/usr/accts/master:/bin/ksh
shfaxx:hzhI1.0v4fH4Q:0:10:Shadow Faxx:/usr/accts/shfaxx:/bin/ksh
beyo:7.sQrNO3aDFcc:0:10:Beyo:/usr/accts/beyo:/bin/ksh
daemon:x:1:1:Admin:/:NOUSE
bin:x:2:2:Admin:/bin:NOUSE
sys:x:3:3:Admin:/:NOUSE
adm:x:4:4:Admin:/usr/adm:NOUSE
lp:x:71:1:Lp Administrator:/bin:NOUSE
news:x:9:9:Usenet:/usr/lib/news:/bin/sh
games:x:6:5:Games:/usr/games:NOUSE
uucp:x:5:6:uucp:/usr/spool/uucppublic:/usr/lib/uucp/uucico
nuucp:x:5:6:uucp:/usr/spool/uucppublic:/usr/lib/uucp/uucico
uucpadm:x:5:6:Uucp Administration:/usr/lib/uucp:/bin/sh
Uolwejo:2rzKewhLQQz3m:5:6:olwejo:/usr/spool/uucppublic:/usr/lib/uucp/uucico
Ubeyonet:p0tsgIkcAHa5s:5:6:beyonet:/usr/spool/uucppublic:/bin/notvalidated
Ucosi:EiOsa1d3deWdz:5:6:cosi:/usr/spool/uucppublic:/usr/lib/uucp/uucico
new:g1F8T3mSgP5Ac:7:100:New User:/pub/.new:/pub/.new/makeacct
newuser:g1F8T3mSgP5Ac:7:100:New User:/pub/.new:/pub/.new/makeacct
bbs:x:8:8:GBBS:/usr/bbs:/bin/date
zbbs:x:8:8:ZOD's Serpticious Messaging Network:/usr/bbs:/usr/bbs/bbs
kate:x:10:2:WORD PROCESSING:/u/kate:/bin/ksh
setup:x:0:2:Admin Login:/u/setup:/bin/sh
cia:x:0:0:Computer Integrated Associates VMS:/usr/lib/voice/ciamm/admin:/bin/sh
joeuser:z0qKRr7JRnzi.:2000:100:TEST USER:/pub/joeuser:/bin/sh
links:x:2001:100:NAJAM HUSSAIN:/pub/links:/bin/ksh
vmem:x:2002:100:Virtual Memory:/pub/vmem:/bin/sh
datawiz:x:2005:100:DATAWIZ:/pub/datawiz:/bin/sh
burntkid:x:2007:100:JOHN MYERS:/pub/burntkid:/bin/ksh
pook:x:2011:100:THE POOK:/pub/pook:/bin/sh
bluadept:Df9jKEhy.YuIO:2012:100:BLUE ADEPT:/pub/bluadept:/bin/notvalidated
goose:x:2013:100:KASHYAP SHAH:/pub/goose:/bin/ksh
Fritz:x:2014:100:FRITZ:/pub/Fritz:/bin/notvalidated
CoH:x:2015:100:CODE OF HONOR:/pub/CoH:/bin/ksh
smasher:x:2016:100:SMASHER:/pub/smasher:/bin/notvalidated
sigint:x:2017:100:SIGNAL INTERRUPT:/pub/sigint:/bin/notvalidated
ori:x:2018:100:ORI:/pub/ori:/bin/ksh
acetic:x:2019:100:ACETIC DEATH:/pub/acetic:/bin/ksh
skreemer:x:2003:100:SKREEMER:/pub/skreemer:/bin/ksh
avatar:x:2004:100:THE AVATAR:/pub/avatar:/bin/sh
