Copy Link
Add to Bookmark
Report
Phrack Inc. Volume 04 Issue 44 File 04
==Phrack Magazine==
Volume Four, Issue Forty-Four, File 4 of 27
// // /\ // ====
// // //\\ // ====
==== // // \\/ ====
/\ // // \\ // /=== ====
//\\ // // // // \=\ ====
// \\/ \\ // // ===/ ====
PART II
******************************************************************************
<Retyped From an Actual SWBT Handout>
SOUTHWESTERN BELL TELEPHONE
Computer
Security
Guidelines
Computer Security is YOUR Responsibility.
These guidelines are designed to help you know and meet your corporate
obligation.
Prepared by: Information Systems
Computer Security Administration
One Bell Center 22-H-8
St. Louis, MO 63101
For Users
---------
Keep your logon and password information private.
Do not write down passwords, but if you must, keep them in a locked place.
Do not store your password in the computer.
Make sure no on sees you enter your passwords.
Pick non-obvious, non-guessable passwords.
Do not share your logons or passwords.
Change passwords periodically, at least every thirty days.
Open new computer logons for computer resources only when you have a
real need.
Close computer logons you no longer need.
Make sure you have proper protection settings on sensitive computer files.
Do not send confidential information through electronic mail or computer
news systems.
If you suspect security violations, tell management immediately.
Be sure that use of computing resources is for company approved purposes
only.
Do not access any information that your management has not authorized you
to have. When in doubt, ask!
Logoff when you leave your terminal.
If you dialed in, disconnect when you are finished working.
For Managers of Computing Facilities
------------------------------------
Provide procedures to control access to computing resources.
Provide facilities to let users protect proprietary information from
disclosure to unauthorized persons.
Be sure that connection of a computer to any network does not diminish
the control a user has over programs and data.
Provide appropriate security facilities and procedures to protect
computing hardware against damage.
Provide facilities to protect user's data and programs from undesired
changes or destruction.
Ensure that computing resource use has been authorized by a member of
supervision.
Make sure that computing resource use can be tracked to individuals.
Report to managers regularly on the extent of computing resource use.
Provide appropriate backup facilities for data and programs.
Provide audit trails which identify violations and security breaches
and examine them regularly.
For assistance in coordinating computer security activities, contact the
Computer Security Administrator.
For Managers
------------
Make sure you authorize all use of computing resources and that you require
separate logons for each individual.
Make sure that the user of computer resources understands responsibilities
with respect to proper use and security consciousness.
Review computing resource usage reports and the security practices of the
users for which you are responsible.
When a user's employment or need for access ends or changes, make sure
access to computer resources is promptly changed by notifying your
System Administrator.
Report security violations to the General Security Manager and to the
Computer Security Administration Group.
For Information
---------------
The Information Systems Organization provides security and disaster recovery
services to establish, monitor, and audit computer security standards.
If you have any comments or questions regarding computer security, please
contact the Computer Security Administration.
*******************************************************************************
RBOC ORGANIZATIONAL ARCHITECTURE
Compiled By
Phrack Magazine
In an effort to assist the hacking world in their understanding of the
organizational mess created by our fabulous friends at the RBOCs, we have
compiled a list of the various organizations, what their functions are,
which centers they are made up of, and which computer systems they use.
-----------------------------------------------------------------------------
Planning and Engineering
Defines network resources available for assignment
Functions:
Long range and current planning for outside plant, wire centers,
interoffice network, special services, interexchange access
services, and message trunks
Exchange network design
Coordination of activities connected with installation and/or modification
of exchange network components
Centers:
DSPC
SCPC
WCFPC
CAC
IFFPC
IFCPC
TEC
MEC
DSDC
EEC
CSEC
Systems:
LEIS
NPS
FEPS
LSRP
INPLANS
INFORMS
DFDS
SSFS
PICS
LATIS
CAMIS
CUCRIT
-----------------------------------------------------------------------------
Service Provisioning
Allocates assignable existing network resources
Functions:
Circuit design and routing
Verification and assignment of network elements
Controlling and tracking orders during assignment process
Centers:
CPC - Circuit Provisioning Center
LAC - Loop Assignment Center
Systems:
TIRKS
SOAC
SWITCH
COSMOS
WM
LFACS
LOMS
-----------------------------------------------------------------------------
Network Operations
Controls installation, maintenance and testing of circuits
Functions:
Coordination and performance of the activities required to provide service
Surveillance and control of network equipment and facilities
Analysis, sectionalization, and repair of switching and transmission
facilities
Status reporting on service order and/or service restoration activities
Centers:
CRSAB
ICC
MC
NAC
RCMAC
SEAC
SSC
FMAC
STC
DNCC
FCC
SCC
Systems:
McTE
GDS
LMOS
EADAS
TAN
RSA
CRAS
CIMAP
NDS
SEAS
MAS
MIZAR
SARTS
TCAS
CAROT
NMA
NMPS
SCCS
-----------------------------------------------------------------------------
Customer Services
Direct company contact with customers
Functions:
Service negotiation with customers
Creating and routing associated service orders
Creating and maintaining customer records
Reporting the provisioning status to customers
Initiating billing and collection processes
Handling billing and general service inquiries
Centers:
RSC - Residence Service Center
BSC - Business Service Center
ICSC - Interexchange Carrier Service Center
Systems:
BOFADS - Business Office Force Administration Data System
PREMIS - Premises Information System
SOP - Service Order Processor
CABS - Carrier Access Billing System
BOSS - Billing and Order Support System
CRIS - Customer Records Information System
BRIS - Business Revenue Information System
CLAIMS
-----------------------------------------------------------------------------
Quick Breakdown
Process Center System
-----------------------------------------------------------------------------
Planning & Engineering
IOF IFCPC IFFPC IOF/EDC FEPS NPS-F
Switch SCPC WCPC EEC LSD&F LSRP NDS
TNDS/EQ NPS-W
Distribution DSPC DSDC LATIS LEIS NPS-D
Service Provisioning
IOF CAC TIRKS
Switch LAC COSMOS
Distribution LAC LFACS
Network Operations
IOF FMAC CAROT CIMAP TCAS
TNDS/TK
Switch NAC RCMAC SCC EADAS NDS MAS MIZAR
TASC CIMAP NMA NMPS
SCCS
Distribution ICC MC GDS CRAS LMOS/MLT
PREDICTOR TAN
*******************************************************************************
-IS- Blue Boxing Dead?
Australia Direct 800-682-2878
Austria Direct 800-624-0043
Belgium Direct 800-472-0032
Belize Direct 800-235-1154
Bermuda Direct 800-232-2067
Brazil Direct 800-344-1055
British VI Direct 800-248-6585
Cayman Direct 800-852-3653
Chile Direct 800-552-0056
China Direct 800-532-4462
Costa Rica Direct 800-252-5114
Denmark Direct 800-762-0045
El Salvador Direct 800-422-2425
Finland Direct 800-232-0358
France Direct 800-537-2623
Germany Direct 800-292-0049
Greece Direct 800-443-5527
Guam Direct 800-367-4826
HK Direct 800-992-2323
Hungary Direct 800-352-9469
Indonesia Direct 800-242-4757
Ireland Direct 800-562-6262
Italy Direct 800-543-7662
Japan Direct 800-543-0051
Korea Direct 800-822-8256
Macau Direct 800-622-2821
Malasia Direct 800-772-7369
Netherlands Direct 800-432-0031
Norway Direct 800-292-0047
New Zealand Direct 800-248-0064
Portugal Direct 800-822-2776
Panama Direct 800-872-6106
Philippines Direct 800-336-7445
Singapore Direct 800-822-6588
Spain Direct 800-247-7246
Sweden Direct 800-345-0046
Taiwan Direct 800-626-0979
Thailand Direct 800-342-0066
Turkey Direct 800-828-2646
UK Direct 800-445-5667
Uruguay Direct 800-245-8411
Yugoslavia Direct 800-367-9841 / 9842
This file brought to you by The Phone Company
*******************************************************************************
*****************************************
* Step-by-step Programming Instructions *
* For the EO Cellular Module *
*****************************************
1. Unbox and attach the EO Cellular Module to the EO Personal
Communicator 440/880.
2. Once the EO Cellular Module is attached turn on the EO Personal
Communicator 440/880.
3. Open EO Phone.
4. Tap "Options."
5. Tap "Authorized Dealer."
6. Write Dealer Code in space provided. Dealer code is *12345678#. To edit
mistakes, draw a small circle around 2 or 3 of the numbers entered.
This will bring up an edit box and allow easier entry of the number.
Once you have made your corrections, tap "OK."
7. Tap "OK" on the "Authorized Dealer Code" pop-up.
8. Wait approx. 30 seconds and programming screen will appear (The "busy
clock" will appear on screen).
9. If invalid code entry screen appears, the programming screen will be
blank and the "Apply" and "Apply and Close" buttons at the bottom
will be greyed out. Close the programming screen by tapping on the
upper left blacked out corner of the screen. Re-do steps 4 through 7
(refer to the TIP below for a guaranteed method of accurate entry).
A common problem is to enter an "l" instead of a "1" because they appear
to be very similar. To make sure that you have entered a one, check to
see that the character is the same height as the other numbers. The
letter "l" will be slightly taller.
TIP: To insure that you have entered the correct digits (one versus letter
"l" problem above) you can use the accessories keyboard. To use the
keyboard for the Dealer Code entry do the following (replaces steps
4, 5, and 6 above):
a. Tap Accessories in the lower bookshelf.
b. Tap Keyboard. This will bring up the pop-up keyboard.
c. Tap Options at the top of the EO Phone window.
d. Tap Authorized Dealer. This will bring up the Dealer Code pop-up.
e. Tap on the line in the Dealer Code box. A dot (or character) will
appear and now entry from the keyboard will appear in the Dealer
Code box.
f. Now use the keyboard to delete the dot (or character). The Delete
key is the upper right most key on the keyboard.
g. Now use the keyboard to enter the dealer code - *12345678#
(the * and the # keys can be found by tapping the shift
(up arrow) keys.)
h. GO TO STEP 7 and continue.
NOTE: When programming the following entries always use the circle gesture
to change the entry. In other words, circle the existing entry
to bring up the edit combs. Then correct each digit by writing over
the existing digit. This will insure that the number of digits for
each entry is correct. If an entry has an incorrect length then
none of the programed entries will be accepted.
10. Enter the assigned telephone number in the first field. Use the
circle gesture to bring up the edit combs to edit the existing
telephone number. Change each digit by writing over it in the edit
combs. When complete tap "OK."
11. Use the same procedure in step 10 to enter the appropriate SID
in the second field.
12. Use the same procedure in step 10 to enter the corresponding IPCH
(0333 for the non-Wireline or A side provider; 0334 for the Wireline
or B side provider) in the third field.
13. Leave the remaining fields intact as already programed from the
factory unless instructed to change them by the cellular service
provider. Use the circle/edit method to change any necessary
entries. The factory defaults are:
Field Title Default Value
----------- -------------
ACCOLC 00
Group ID 15
Lock Code 1234
SCM 1010
Security Code 123456
Emergency Code 911
14. Tap the "Apply" button on the bottom of the screen. The programming
information you have entered is now being saved in the EO Cellular
Module. This will take approximately 20 seconds.
15. Close the programming screen by tapping the blackened area in the upper
left hand corner of the programming screen.
16. Now set the approximate Roaming Option.
17. Tap Options.
18. Tap Roaming.
19. Enter Security Code. Default is 123456.
20. Tap "OK."
21. Tap next to appropriate roaming option. A check mark will appear.
22. Tap "Apply" button.
23. Close window.
24. Check status line in EO Phone for appropriate indications.
25. Tap "Keypad" tab on right side of EO Phone window. This will bring
up a keypad display which can be used to place a voice call.
26. Make sure that the Cellular Icon is boxed (as opposed to the Phone
Icon in the lower left hand of EO Phone.)
27. Tap the keypad buttons to enter the number to be dialed. The digits will
appear in the dial box at the middle bottom of the EO Phone window.
28. Pick up the handset and tap "DIAL" button in the lower right hand
corner of the screen. This button is just like hitting SEND button
on a cellular phone. This will place a voice call using the number
in the dial box.
29. When call is complete tap "Hang-up" (the DIAL button to "Hang-up" after
the call is connected to the network.) This is just like pressing END
on a cellular phone.
30. Close EO Phone.
31. Programming and testing is now complete.
Helpful Information
The EO Cellular Module contains an OKI 910 cellular phone housed in
specially designed, plated plastics with custom connections into the
proprietary port on the phone.
All programming of this module is done via the EO Personal Communicator
440 or 880. All programming/configuration information for the phone is
stored in the EO Cellular Module and not in the Personal Communicator.
This means that once the EO Cellular Module is programed it can be removed
from the EO Personal Communicator and reattached to any other EO Personal
Communicator without re-programming.
The ESN for the EO Cellular Module can be derived from the Serial number
in the window on the bottom of the module. The cellular module ESN is 129
followed by the last eight digits of the serial number in the window. These
eight digits will usually begin with 013. This eleven digit number should
be provided to the people that will actually assign the telephone number
and activate the EO Cellular Module on the cellular network.
*******************************************************************************
THE HACKER CHRONICLES CD-ROM
Well, he said he was going to do it, and he did.
Scan Man put out a CD-ROM of info collected from the
underground. I had kind of forgotten he was going to
do it, but once I heard rumors of such a thing, I knew he
had.
At HoHo Con last year, Bootleg was very excited about
compiling data from the community for the project he
and Scan Man were working on. As things progressed
however, Bootleg would soon find out that Scan Man
had no intention of working with him, and cut him out of
the project.
This is how it was explained to me. I hope that it is
not true, since Bootleg is back in jail and wouldn't
have the ability to fly out to West Virginia and throttle
Scan Man about the head and neck.
[Description from the Jewel Box]
WARNING!
This material is controversial in nature and may be offensive
to some viewers. Not that the information in and of itself is
not illegal. Quite often the usage of certain information is
illegal. The Hacker Chronicles is for informative and educational
purposes only. All documents and programs in this compilation were
legally available to the public prior to his publication. None of
these criminal acts described on this disc are in any way
condoned or should be attempted.
Over 12 YEARS in the making - this software package contains stories
of how they did it, actual break-ins, arrests, and prosecutions. Most
of the articles were written by the actual people who committed these
acts. Access articles and software with an easy-to-use menu system.
Areas of information include: PHONE PHREAKING (so called hobbyists
who are into telephone technology of all types, well known for their
ability to bypass telephone billing system), COMPUTER HACKERS
(sometimes referred to as cyberpunks, interested in access to any on
line computer system they can find), SATELLITE COMMUNICATIONS
(hobbyists who sometimes employed test software designed for dealers
to defeat scrambling systems), "UNDERGROUND" GENERAL INFORMATION (many
subjects all very technical in nature and explained in detail, such as
ATM's, credit cards, voice mail, hypnotism, bugging, skip tracing,
phone taps, cellular phones, lock picking, social engineering,
virus's, chemical substances, explosives, editorials, legal issues,
alarm systems, spies, hardware, signal interception, private
investigations, security, computer ethics, underground BBS's, TV cable
piracy, boxing and much more!
-----
Uh, that kinda says it all, don't it? CYBERPUNKS, VIRII, WAREZ & STUFF!
Uh, yeah.
Seriously, the disk itself has a shitload of files. This
is rather cool, since now EVERY bbs in the world can put
OVER 650 MEGS OF G-FILES! Heh.
The file on the disc that struck me the most was the
intro written by Scan Man. He went talked about
a lot of things he's done in the past with the scene,
telephone companies, etc. I know Scan Man from WAY back.
Pirate-80 was one of the first real Hacker BBSes I was
ever on. (Remember when it was only up certain hours of the day?)
Reading that file was pretty informing for me. It also
made me smile to see that he's still pissed off at Craig
for tearing him apart in a Phrack some years ago.
Remember, this is by no means a complete collection.
Thankfully, the CD does not have any issues of Phrack
magazine past issue 41 (or else, I would be enjoying
a piece of the revenue :) ). It also, oddly enough,
does not have any LOD-TJ other than 4. It DOES however
have a large collection of CUD, NIA & CDC. Go figure.
The files do represent a neat history of our community
and for the curious neophyte, the nostalgic old-timer, or
anyone with 39 bucks, it might be something worth picking
up just to say you have it. I mean, you never know when
you will need to find issue 12 of LOL, or plans for a
urine box. It will save you the trouble of downloading.
The Hacker Chronicles - A Tour of the Computer Underground
should be available from any outlet that carries CD-ROMS.
Or hell, call P-80. I'm sure Scan Man will sell you a copy:
304-744-7322.
*******************************************************************************
Packet Switched Data Networks
An Introduction and Overview
By: Cosmos
The abundance of networks both private and public has given the hacker
an almost infinite playground. A popular type of network is the
packet switched network like SprintNet (TELENET) that allows local
users to access non-local machines. These WAN's usually serve as
the backbone for many large corporations. Understanding the way
in which they operate can aid many aspects of the hacker's knowledge.
Packet switching is a data networking technology in which user data is
segmented into small units (packets) and transmitted from the sending
user to the receiving user over shared communications channels. Each
individual packet also holds additional information that allows the
network to correctly route the packet to the correct destination. The
size of the packet is limited to a maximum number of characters set by
the individual sender. Packets are measured in octets, which are 8-bit
bytes. User data that exceeds this amount is divided into multiple
packets.
The difference between packet switching and circuit switching
(regular telephone lines) lies in the use of virtual circuits.
These circuits are given the term "virtual" because:
1) they are made up of bandwidth allocated on demand from
a pool of shared circuits
2) no direct physical connection is made on a packet network
3) the connection is a logical one
Due to these facts, packet networks are commonly denoted as connectionless
networks. There are three types of packet networks: public, private, and
hybrid (a combo of the two previous ones).
A packet switched data network (PSDN) has five major components:
1) local access components (LAC)
2) packet assemblers/disassemblers (PAD)
3) packet switching nodes (PN)
4) network links (NL)
5) a network managment system (NMS)
LOCAL ACCESS COMPONENTS
To transmit data through a PSDN, the data must first move from the
end-user to a packet assembler/dissasembler (PAD) or to a packet
switching node with a built-in PAD function. In order to achieve
this, three local access components are required. First is the
end-user data terminal, or more plainly, your computer. Secondly,
an end-user transmission device such as a modem. Thirdly, a
local access facility or physical line (Telephone Line). There are
three types of physical lines: switched analog lines (dial up), leased
analog channels (private lines), and leased digital channels (DDS circuits).
PACKET ASSEMBLERS/DISASSEMBLERS
All data travelling through the PSDN must be routed through a
Packet Assembler/Disassembler (PAD). The PAD's primary function
is to translate user data into network packet format and conversely to
convert network packets into user data. Basically, a PAD serves
as the network translator between the user and the PSDN. Other functions
performed by the PAD include: physical line concentration, call setup
and clearing functions, protocol conversion, code conversion, protocol
emulation, local switching functions, and local call billing functions.
PACKET SWITCHING NODES
The primary component of a packet switching network is the packet
switching node (PN). The packet switching node ensures that each
packet is routed properly through the network. Commonly, PN
configurations are installed in a redundant configuration. This
provides for a convenient backup for network traffic. Other functions
include: call billing, internal network diagnostics, support of
direct host computer access., and inter-network gateway connections.
NETWORK LINKS
Network links are the physical components that connect packet switching
nodes together. Several transmission technologies can be employed
in network linking, including: analog circuits, digital circuits,
microwave systems, and satellite systems. The most common network
link technologies used are Digital Dataphone and other similar
interexchange carrier services, and point to point analog private
lines. Speeds on network links range from 9.6 Kbps to 56/64 Kbps.
Network links are commonly denoted as the "backbone layer" or
the backbone packet network. The local PAD's are termed the
"access layer" or access network.
NETWORK MANAGEMENT SYSTEM
Basically, the network management system (NMS) controls and monitors
the PSDN. It primarily stores and performs maintenance on the
network database. This database is the master copy of all the software
and configurations in each network node. If a node fails or is
not functioning properly, the NMS can download backup information through
the various network links to solve the problem. Thus, a unattended
network is formed.
This is all one needs to understand for a general knowledge of
a packet switched data network. Additional topics can be
pursued further for increased knowledge but are not essential.
You might want to research some info on the standard X.25 protocol,
and other OSI stuff. Anyways, I hope this brief intro article can
be of use in the general knowledge of computer networking.
Cosmos
*******************************************************************************
Stacker Security.
How to Hack a Stacker disk that is password protected!
The 'Stacker' Software increases the space on your hard disk by using
on the fly compression on the data on the disk. It does this by creating
a file called Stacvol.dsk on the hard drive. All of the information that
is put on the disk is compressed and stored in the stacvol.dsk file.
When Stacker is installed on a hard drive, say C: all of the data on
the disk is compressed and stored in the stacvol.dsk file, which is
assigned as a virtual disk C:, the 'real' drive is then assigned D:.
The swapping taking place a boot time.
The Stacvol.dsk file is therefore stored on the D: drive and usually
takes up most of the drive. (ie: a 40M C: drive contains the stacvol.dsk
file of size around 5-39M the disks are swapped at boot time and
the C: drive that the user 'sees' is really the contents of the stacvol.dsk
file on the D drive assigned to C:, everything on the C drive (stacvol.dsk)
is compressed, thus obtaining an increased disk space.)
The point is this, at boot time the owner of the machine can set passwords
to allow the user to have no access, read/write or read-only access to
the C drive/stacvol.dsk file, if a wrong password is entered the stacvol
file is not mounted as the C drive and all a DIR will get you is a directory
of C:\ which will have a few files such as command.com etc, nothing
of any real interest.
So now for the interesting bit, how to get in without a password,
or getting read/write privs when you've only got read-only.
First, boot the computer and go through the password routine.
Get it wrong (you may as well try something like password though just in
case.)
The Stacvol.dsk file is hidden so change its file attributes so you
can edit it. (You'll need a floppy now with a utility such as Norton
diskedit on it)
Load in the diskeditor and get it so that you are editing the stackvol
file in a HEX mode. The first bit of Hex just contains the usual sort of
boot record type rubbish, not too interesting.
The interesting bit is the bit which starts at offset 74
Now the information starting at 00040 is the interesting bit,
on a disk with a password set it will look like this....
00040 20 20 20 20 20 20 20 20 | 20 20 2D 2A 2D 0A 0A 1A
00050 72 AA 91 9C 0F 66 9A ED | AB 18 6E 6D E2 C3 2B 8B
00060 5E CD EF A9 37 1B 53 E2 | C6 F0 E8 9C A4 49 F6 9D
00070 4C F0 AB 32 21 47 FC 91 | 7E 8C 58 D8 D9 D7 DB D3
(All figures obviously in hex.)
The data from 0004B to 0004E is a flag to the device driver to tell
it that a password is required.
From 0004f to 0005F are the encrypted passwords.
(the rest just being data)
NOW, for an unpassworded file this looks like
00040 20 20 20 20 20 20 20 20 | 20 20 20 20 20 0D 0A 1A
00050 49 F6 9D 4E EC B1 26 3D | 0F 6B B2 24 41 07 7B 92
00060 XX XX XX XX XX XX XX XX | XX XX XX XX XX XX XX XX
00070 XX XX XX XX XX XX XX XX | XX XX XX XX XX XX XX XX
Now all you have to do is take a copy of the data in this section
on the stacvol.dsk file you are hacking so that you can return it back to
its original state!
Patch the code above into the corresponding positions into the
file you are hacking, leaving the code denoted by XX alone, this is version
code and depends on the machine so leave it alone!
Save the changes and reboot the machine, it will no longer ask for a
password and you now have full access.
Afterwards re-patch the original code that you noted and if you've used
your common sense then the owner will never know you were there.
(By common sense I mean don't forget to restore time/date stamps etc.)
D2A [D
*******************************************************************************
UNAUTHORIZED ACCESS ONLY
Computers are becoming an integral part of our everyday existence. They are
used to store a multitude of information, from credit reports and bank
withdrawals to personal letters and highly sensitive military documents.
So how secure are our computer systems?
The computer hacker is an expert at infiltrating secured systems, such as
those at AT&T, TRW, NASA and the DMV. Most computer systems that have a
telephone connection have been under seige at one time or another, many
without their owner's knowledge. The really good hackers can re-route the
telephone system, obtain highly sensitive coporate and government documents,
download individuals credit reports, make free phone calls globally, read
private electronic mail and corporate bulletins and get away without ever
leaving a trace.
So who are these hackers? Just exactly WHAT do they DO, and WHY do they do
it? Are they really a threat? What do they do with the information
they obtain? Are hackers simply playing an intellectual game of chess or
are hackers using technology to effectively take control of corporate and
government systems that have previously appeared omnipotent?
Our group is in the course of filming "Unauthorized Access", a documentary
that will demistify the hype and propoganda surrounding the computer hacker.
We will expose the truths of this sub-culture focusing on the hackers
themselves. This will be a view from inside the global underground.
We intend to shoot in the United States, Holland and Germany.
This documentary will be of the highest broadcast quality and is
intended for international television, festival and theatrical distribution.
We are currently looking for additional financial backers interested in this
project. For more information about "Unauthorized Access" or if
you are intrested in providing any information or support, please contact
annaliza@netcom.com.
*******************************************************************************
Mitnick's Soliloquy
Intruder, or not Intruder: that is the question:
Whether 'tis more likely the system suffers
The misuses and malfeasances of outrageous crackers
Or that some user behaves anomalously
And, by so doing, causes false alarms. To alert, to audit;
No more; and by an audit to say we find the attack,
And the thousand failed login attempts
That are seen on the network, 'tis a consummation
Devoutly to be decrypted. To alert, to audit.
To audit, perchance to detect, ay, there's the rub.
For in that detection of attack what false alarms may come;
When we have dumped a million packets
Must give us pause, the analysis
That makes use of long CPU hours and many gigabytes
For who would bear the whips and scorns of time
The analysis by hand, the tired SSOs eyes sore,
The pangs of innocent users, the law's delay,
The insolence of phreaks, and the spurns
That patient merit of unworthy takes
When he himself might his quietus make
By a disconnected ethernet? who would fardles bear
To grunt and sweat under C2 standards
But that the dread of worm after worm
The undiscovered bug from whose bourn
No Vandal turns, puzzles the testers,
And makes us rather ebar those ills we have
That crash the system and erase the hard drive?
Thus intrusion detection makes abusers of us all,
And thus the native hue of normal use
Is sicklied over with the red light of intruder,
and jobs of great size and duration
With this regard their patterns out of normal parameters,
and lose the name of legal system policy.
After Hamlet's Soliloquy,
By JJ
*******************************************************************************
