Copy Link
Add to Bookmark
Report
Phrack Inc. Volume 11 Issue 61 File 05
phrack.org:~# cat .bash_history
==Phrack Inc.==
Volume 0x0b, Issue 0x3d, Phile #0x04 of 0x0f
|=---------------=[ P R O P H I L E O N D I G I T ]=-----------------=|
|=-----------------------------------------------------------------------=|
|=------------------------=[ Phrack Staff ]=-----------------------------=|
|=---=[ Specification
Handle: DiGiT
AKA: digit, eskimo, icemonkey
Handle origin: its not a funny story
catch him: digit@security.is
Age of your body: 22
Produced in Reykjavik, Iceland
Height & Weight: 192cm, 80kg
Urlz: none
Computers: 2 laptops, 3 intel machines, indigo II, and a
sparc station
Member of: smapika international
Projects: Mostly just stuff for my work and school related
things.
|=---=[ Favorite things
Women: brunettes, blondes, and I prefer they have charisma,
ambition, independence, intelligence, sense of humor
Cars: German of course ;>
Foods: Italian, asian
Alcohol: beer, vodka/coke
Music: trance/techno, rock, classical
Movies: Pianist, godfather, Dune, LOTR, Bad boy bubby, Happiness
Books & Authors:
Urls:
I like: Achiving my goals, honesty, integrity, wachyness
I dislike: Waking up very early in the morning, constant rain, stuck
in an office all day, fake people
|=---=[ Life in 3 sentences
No fear. Never give up. Never surrender.
|=---=[ Passions | What makes you tick
I like to set myself some sort of goal and try to achieve that within
a certain amount of time. Being able to be my own boss is probably my
greatest passion. I don't like to take orders and I value my independence
greatly and the ability to do whatever I want is pretty important to me.
In the past I basically quit everything to do almost nothing but
computers/inet/hacking. I did that since I was around 16 until I was 20. I
audited code around the clock, hacking, wrote exploits, and chatted with my
friends on irc from dusk till dawn basically.
The biggest experience for me was probably meeting the people that I
did and the influence they had on me to improve myself. I probably have
meeting antilove/RawPower and crazy-b at the top of my list with regards to
that and they both really influenced me a lot and they probably provided me
with my greatest experience with regards to hacking.
|=---=[ Which research have you done or which one gave you the most fun?
None much more than any other. Whenever I found some bug or something
that I knew was unknown and the satisfaction of exploiting it was a lot of
fun.
--=[ Memorable Experiences
I will never forget getting run over by a bus when I was 14 and having
to stay in a hospital for 3 months and the frequent trips for another year
afterwards pretty much is something I will never forget. Also the fact that
the longest strike of Icelandic highschool teachers in icelandic history
was happening at the exact same time I was stuck in a bed in a hospital.
Installing my first Linux system(back in '94 i think) and thinking that
the installation floppy shell prompt from the slackware distro was
basically a full installation of slackware ;> I had hardly any previous
experience with Linux at the time.
Spending an absurd amount of time at my computer doing crazy stuff for
no other reason other than to get the get the best rush imaginable.
Meeting crazy-b for the first time on the same system we were both
hacking and then deciding to meet on irc and becoming friends in the
process.
When crazy-b had to go into the norwegian army he wrote a small program
that was a rudimentary irc client that piped input from an irc channel to a
script that sent an sms to his phone with the input and also him being able
to send an email to his address that piped the content of the mail to the
irc channel. This way he could still irc from his mobile phone despite
being in the army ;>
Meeting the great antilove back in '97 and getting some private samba
warez ;>
Having antilove visit Iceland twice and doing lots of cool stuff with
him like rollerblading, hunting for smapika, acting stupid, him teaching me
how to lockpick, finding new bugs, writing exploits, teaching me how to
bluebox, etc.
Totally destroying my car when me and antilove were driving to a kfc in
2001 because some girl ran a red light at about 80km/h in the morning and
then laughing about it the entire day for some reason.
All the security.is weekends with the exploits we wrote and the bugs
that we found together and with the trademark security.is hamburgers as
made by portal.
Having lots of fun with mikasoft and ga when they visited Iceland for
new years a few years ago and especially when mikasoft was teaching yoga at
a new years eve dinner my family was throwing. Also the duck liver pat was
disgusting.
Going to France with Icelandic friends and meeting a lot of hackers in
Paris and having like 10 guys sleeping in the smallest room you could
imagine. Then taking a cool train trip from Paris to montpellier and
meeting a lot of other hackers and just totally invading montpellier and
taking over an internet cafe for a week ;> Also hanging out at the beech
with the amazingly cool french guys and starting a fire and drinking beer
and listening to good music.
Going to the club La Dune on our FIRST night in montpellier with all
the french hackers/etc and buying a lot of champagne for everyone and
antilove and nitro buying a ton of vodka for a group of like 20 people and
just partying the entire night and watching all the non french people make
total asses of themselves.
Same night at La dune I will never forget witnessing Candypimp going
beserk after drinking way too much and trying to jump into the ocean and
then disapeering. we called the police to search for an 'insane' drunk
Icelandic person that couldn't speak english anymore and who thought he was
in his home city of Akureyri and not 50km away from montpellier and
probably even didn't know where we were staying!
JimJones was really drunk that night too and he passed out on some tree
before waking up again and deciding to take a piss. He went into some ditch
and somehow he managed to piss all over himself! If I remember correctly
me, nitro, and antilove had to remove his clothes that night because he was
too drunk to do it himself. He was then called pissman for the duration of
the trip ;>
Going to Las vegas with Starcon for blackhat and defcon and actually
PAYING for blackhat but I only went to 1 speech(halvars) because my brother
took the time to come down from Seattle to visit me.
Going to defcon and seeing how amazingly commercial and fake it really
is. Just look at the shit being sold there and all those stupid t-shirt
stands.
The coolest thing about defcon was the K2 party where a lot of people
were hanging out and it was a very memorable night and I had nice talks
with a lot of cool people.
A recent jimjones visit to Iceland where we really didn't do anything
except relax and drink beer and eat some BBQ. We also enjoyed a very nice
viewing of bad boy bubby which I recommend to anyone that wants a good
laugh and some insight into the world of jimjones(based on his lifes story).
|=---=[ Open Interview
[can give as much detailed answers here as you like]
Q: When did you start to play with computers?
A: I was probably around 12 years old when I got my first real computer.
Q: When did you had your first contact to the 'scene'?
A: Boy... I guess it is probably sometime in 1995 and I got involved with
some "hackers" doing some questionable things ;> I think I started off
by joining #hack on IRCnet and also #shells on efnet(ehrm! ;>)
Q: When did you for your first time connect to the internet?
A: Was at my school when I was probably around 13 years old and we had a
2400 baud modem and some old dial up program called kermit, i think,
that we used to call some line at the Icelandic university. It was
basically just a direct connection to a hp-ux box and someone tought me
how to use ircii and so basically my first experience with the Internet
was also my first time with irc.
Q: What other hobbies do you have?
A: I like to do stuff with my friends,go see movies, fish, read, go out for
drinks, and just anything that comes up.
Q: ...and how long did it take until you joined irc? Do you remember
the first channel you joined?
A: Again this was not very far between since I started irc pretty much the
same time. I believe the first channel I joined was #iceland.
Q: What's your architecture / OS of choice?
A: Im so used to intel so I really can't pick anything else and Linux is
still my preferred OS although i have netbsd here somewhere.
Q: What do you think about anti.security.is and non-disclosure?
A: anti security was a good idea but ultimately it was a failure. The
reason it failed was that the people that supported none-disclosure and
took part in antisec discussions were constantly arguing amongst
themselves about a lot of stuff some of which was for good reasons but
also stuff that was totally out there and eventually it lead to antisec
dying.
I personally believe that none-disclosure is the way to go and I have
believed that for some time now. I don't judge people that disclose
because I remember disclosing bugs/exploits at one point and so I am not
really in a position to flame people that continue to do so.
I mean antisec also had some stupid information in some areas
specifcally about the true reasons behind antisec were not to create
some greater security in the world or something like that which was
mentioned in the FAQ and we took a lot of crap for. It was to keep
security research where it belongs, with those that actually did it and
at most a small tight knit group. That basically meant that people that
found bugs, wrote exploits, and hacked wanted to keep their
exploits/research private so that they had some nice private warez for
some time ;>
Full disclosure is for equally selfish reasons because it really boils
down to two things: fame and money. People think, rightly so, that by
releasing bugs or exploits that they become recognized among their peers
and that might eventually lead to a job in security or something like
that. People that say they release bugs/exploits for the good of the
world or something like that are full of shit.
Q: What do you think about the right of other 'research' groups to forbid
other organizations the use of their exploits ("Copyright on exploits")?
A: Seriously who would care about a copyright header on some exploit?
People would use it anyways.
Q: What do you thing about full-disclosure. Is it important or dangerous?
A: I know I don't like it and there are a lot of good reasons why it sucks.
It ruins bugs! ;> And there are some negative "world issues" because
every hacker that wants to make a name for himself will try to write an
exploit for it and subsequently release it. Maybe he doesn't release
directly to BUGTRAQ but he gives it to lots of "friends" which leak it
of course and soon enough its everywhere.
What happens next is that every script kiddie and some more advanced
script kiddies will use the exploit and deface sites, ruin stuff, and
then soon a worm will appear. I do not personally have anything against
those things per se but I'm sure a lot of people do. If the
vulnerability is unknown or kept private such things would not happen.
Full disclosure can definetly be really dangerous and we all know that
the people that discover bugs in software aren't on some quest to secure
software for the good of the world. They do it for themselves. Also why
should hackers do the job for software companies and even if they
publish they risk getting sued or something? I also hate all those full
disclosure policies that say you need to give a vendor a month or
something before publishing and all the other stupid rules.
My advice: don't disclose - avoid the hassle.
I do however agree to some of the arguments about the necessity of full
disclosure. I can't remember any right now so forget that but ultimately
full disclosure of any vulnerability is the fuel the drives the
information security companies that don't care about anything except
their bottom line.
Q: If you see or hear about various protection meassures against hackers
such as grsecurity, PaX, Owl or strong encryption (SSH, SSL or IPSec)
do you think hacking will still be possible in the future? What kind of
vulnerabilities will people focus on in the future?
A: If we assume that all these programs are successful in stopping most
buffer overflow attacks and it has become 'impossible' to evade these
programs then just new types of vulnerabilities will be discovered.
Logic bugs in programs are just as dangerous as buffer overflows and so
hacking will of course be possible in the future the only thing that
will change are the vulnerabilities and the methods.
Q: How do you feel when yet another XSS vulnerability hits the media?
(Do you have a regex covering XSS postings in your spam filter?)
A: blah
Q: What will hacking in the future look like? More complicated or easier?
A: no idea.
Q: You have been in the scene for quite a while. If you look back, what
was the worst thing that happened to the scene? What was the best
that happened?
A: This "scene" always comes up. I never followed any specific scene or
anything. I was just chatting with my friends and hacking with them and
that was about it. Although I guess the commericialization of everything
in the scene was probably the worst thing that happened. Didn't bugtraq
get sold for millions of dollars? A mailing list! And companies buying
exploits how low can u get?
Q: If you could turn the clock backwards, what would you do different
in your young life ?
A: My young life? Portal calls me grandpa. I guess I would go back a few
years into the past and avoid losing contact with my old friends.
=---=[ One word comments
[give a 1-word comment to each of the words on the left]
Digital Millennium Copyright Act (DMCA): blabla
security.is : sleeping
Georges. W. BUSH : war
Companies buying exploits from hackers : silly
IRC : burp
Hacker meetings : colorful
Full Disclosure Policy : pseudo
anti.security.is : dead
Whitehats : dingdong
|=---=[ Any suggestions/comments/flames to the scene and/or specific people?
Do what you want to do and don't let anyone control you.
|=---=[ The future of the computer underground
What is the computer underground anyways? People talk about it as if it
were some very formal and controlled thing or something. The computer
underground as I understand it basically just consists of various groups
and places people hang out at and talk and do stuff together in small
seperate groups. I have no idea where it is gona go in the future.
|=---=[ Shoutouts & Greetings
I wana send a big hello to:
security.is, antilove(miss u bro), crazy-b(beware of hermaphrodites),
cleb(rest in peace man), old ADM pals, JimJones, old #hax guys! stealth,
sk8(freesk8.org), mikasoft, ga, ace24, ig-88, ghettodxm, scut, horizon,
duke, cheez, starcon, lkm, nitro, bawd, wtf, kewl, joey,
Synner/m0nty/Kod/Jackal(crazy greeks) and everyone of my other old friends
that I haven't talked to in years.
|=[ EOF ]=---------------------------------------------------------------=|
