Copy Link
Add to Bookmark
Report
Phrack Inc. Volume 11 Issue 60 File 05
phrack.org:~# cat .bash_history
==Phrack Inc.==
Volume 0x0b, Issue 0x3c, Phile #0x05 of 0x10
|=--------------=[ P R O P H I L E O N H O R I Z O N ]=--------------=|
|=-----------------------------------------------------------------------=|
|=------------------------=[ Phrack Staff ]=-----------------------------=|
|=---=[ Specification
Handle: horizon
AKA: humble, john
Handle origin: It sounded neat.
catch him: I'm very easy to find.
Age of your body: mid 20s
Produced in: USA
Height & Weight: 5'11" ~165 lbs.
Urlz: Nope
Computers: A couple of decent x86 boxes and a lot of
older stuff..
Member of: CostCo
Projects: Currently, stuff for work, and a few personal
things that really aren't that interesting.
|=---=[ Favorite things
Women: Creativity, intelligence, a sense of style.
Cars: German
Foods: Indian, Thai, Korean, Greek, Japanese, Lean Pockets
Alcohol: Helles, Redbull & Vodka
Music: Screeching Weasel, Fugazi, Stretch Armstrong,
Bad Religion, some electronic
Movies: Big Lebowski, Office Space, Austin Powers, Memento, Pi
Books & Authors: Sigh.. I wish I read more these days.
Urls: Can't think of any...
I like: Engaging conversation. Sincerity and conviction.
Solving difficult problems. Mr. Show. Gummi Bears.
I dislike: Unwarranted arrogance. Unwarranted Gummi Bears.
|=---=[ Life in 3 sentences
I've never been normal. I've always felt a sense of purpose. I've tried
to be generous.
|=---=[ Hacker Life
PHRACKSTAFF: You have found quite a lot of bugs in the past and developed
exploit code for them. Some vulnerabilities required new
creative exploitation concepts which were not known at that
time. What drives you into Challenging the exploitation of
complicated bugs and what methods do you use?
Well, my motivations have definitely changed over time. I can come
up with several ancillary reasons that have driven me at different times
during my life, and they include both the selfish and the altruistic. But,
I think it really comes down to a compulsion to figure all this stuff
out.
As far as methods, I try to be somewhat systematic in my approach. I
budget a good portion of time for just reading through the program,
trying to get a feel for its architecture and the mindset and techniques
of its authors. This also seems to help prime my subconscious.
I like to start at the lower layers of a program or system and look for
any kind of potential unexpected behavior that could percolate upwards. I
will document each function and brainstorm any potential problems I see
with it. I will occasionally take a break from documentation, and do the
considerably more fun work of tracing back some of my theories to see if
they pan out.
As far as writing exploits, I generally just try to reduce or eliminate
the number of things that need to be guessed.
|=---=[ Passions | What makes you tick
I'm definitely obsessed with computers. One of my original goals in
learning to program as a kid was to develop games, so I've always been
kind of passively interested in that. I'm also interested in artificial
intelligence.
I've been doing Wing Chun kung fu for about two years now, and I find
that to be really rewarding.
I spend a decent bit of my time thinking. I like to read lay-person
oriented overviews of various academic disciplines. I'd really like to
learn more about biology and neuroscience.
|=---=[ Which research have you done or which one gave you the most fun?
I think I've had the most fun when collaborating with others.
|=---=[ Memorable Experiences
Hanging out with sygma, saad, wordsmith, shegget, and all my old irc
friends. Getting into trouble with colonwq. Long, not entirely coherent,
chats with rc.local. :>
The weekend drinking/hacking/coding sessions at neon's place.
boilermakers. Romania. Coding with xaphan. Almost getting fired from my
university job for hacking Microsoft, and then getting let off the hook
when one of their security officers called my boss. Helping joey__ write
his first exploit, and then not understanding how it worked when he had
finished. Working on various stuff with JoC, cham, module, so1o, zorkeres,
binf, and the rest of the r9 guys.
Hanging out with Vacuum and RFP before leaving the US.
The time I spent living in Germany. Working with plaguez and Thomas, two
absurdly brilliant guys. Living with Howard and Sondee.. eating at the
Citta. CCC Camp - Meeting TESO, THC, and many others. linux deathmatch.
Watching people like duke and scut (and many others) get really good, and
hoping that I somehow helped.
Accidentally crashing gatekeeper.
Hanging out in the adm channel. The always interesting discussions with
str and anti. Racing with K2 to write exploits as Sun advisories came
out.
The Firewall-1 speech with Dug and Thomas.
Finally getting my degree.
My european tour with dice. HAL. Meeting silvio. Getting smashed in the
basement of a bar in Poland with the LSD guys. Chilling with Scrippie and
Dvorvak and the members of a Dutch death metal band.
Going to a rave in Miami with JJ and ending up in the keys the day before
a hurricane.
Watching my little brothers grow up.
Tag team coding/auditing with dice.
Working for cool people - Mike, Jim, Pat.
German/reversing lessons from Halvar.
sms's from srpnsrt.
Defcon - meeting digit, cheez, charise, zip, gobbles, i1l, cain, arakis,
caddis, ryan, riley, and so many others.
The fun times I've had in Chicago. Greg's couch. OFP with Paul and
Sergey. The bachelor party with monti and MJ. Meeting the esteemed Sarlo.
|=---=[ What's your architecture of choice? OS of choice?
I tend to use what I'm comfortable with or whatever seems appropriate at
the moment. The three machines that I use most of the time are currently
running XP, Linux, and OpenBSD.
|=---=[ Quotes
"Jesus Christ John McDonald!"
"odd"
"So, basically, what you are saying is that we should try to find the
reactors."
"Hey, I just work here..."
|=---=[ Open Interview
Q: When did you start playing with computers?
I got a c64 when I was 6.
Q: When did you had your first contact to the 'scene'?
1997 or so.
Q: When did you for your first time connect to the Internet?
1993. I had a part time job in high school programming for a satellite
research center that had Internet access. From what I recall, I mainly
played around on usenet and ftp sites.
Q: Let's talk a little bit about free research and Copyright. What's your
opinion about "Copyright on exploits"?
Well, I'm not a lawyer, and I haven't really looked into it. I think that
people should be entitled to do what they want with their work, and that
legal protections are there for a reason. However, I've got no idea what
copyrighting an exploit will actually afford you legally.
Q: If you could turn the clock backward, what would you do different
in your young life ?
That's a tough one. The Internet has suffered a fair bit for the sake of
my ego. I think I would have handled certain things with more discretion
if I'd had a little more perspective.
|=---=[ One word comments
Give a one word comment to the following topics:
Digital Millennium Copyright Act (DMCA): oceanliner
KIMBLE (the wannabe-hacker) : hoogedlyboogedly
ADM : fun
NAI : work
THE SCENE : which?
Companies buying exploits from hackers : dunno
IRC : idle
CERT : maligned
Full Disclosure Policy : careful
|=---=[ Would you work for the government/military? Why or why not?
As much as it suprises me to say it, I don't really have an ideological
opposition to working for my government. I think the combination of
getting a little bit older, spending some time living abroad, and the
recent events in my country has made me more appreciative of certain
things. I think it is safe to say I would do it if I believed I was doing
something positive and I thought it was necessary. Otherwise, I'd avoid
it because it would just make life more complicated.
|=---=[ Please tell our audience a worst case scenario into what the scene
might turn into.
I guess I could prognosticate about it becoming factionalized, petty,
cruel, insecure, and paranoid, but who would I be kidding?
|=---=[ And if everything works out fine? What's the best case scenario
you can imagine?
As long as there is a place for new people who show promise, I think things
will be cool.
|=---=[ Any suggestions/comments/flames to the scene and/or specific people?
Think for yourself.
|=---=[ Shoutouts & Greetings
Hi everyone :>
|=[ EOF ]=---------------------------------------------------------------=|
