Copy Link
Add to Bookmark
Report
Phrack Inc. Volume 14 Issue 68 File 02
==Phrack Inc.==
Volume 0x0e, Issue 0x44, Phile #0x02 of 0x13
|=-----------------------------------------------------------------------=|
|=------------------------=[ PHRACK PROPHILE ON ]=-----------------------=|
|=-----------------------------------------------------------------------=|
|=------------------------=[ FX of Phenoelit ]=-----------------------=|
|=-----------------------------------------------------------------------=|
|=---=[ Specifications
Handle: FX
AKA: 41414141
Handle origin: First and last letter of my first name
(I had no idea it had a meaning in movie production)
Produced in: East Germany
Urlz: http://www.phenoelit.de/
Computers: Metric tons of them
Creator of: much crappy and useless code
Member of: Phenoelit, Toolcrypt
Projects: PH-Neutral, Phonoelit
Codez: IRPAS (bunch of tools that somehow still cause havoc)
cd00r.c (later called PortKnocking by the copycats)
works-on-my-machine exploits
Active since: late 80s
Inactive since: unlikely to happen
|=---=[ Favorites
Actors: don't care
Films: Hackers (1995) - imagine it actually would be like that
Authors: Neal Stephenson, Iain M. Banks, Frank & Brian Herbert
Meetings: Bars
Sex: ACK
Books: Computer Security, Time-Life Books (1986), and it began
Novel: too many to list
Music: Progressive House Kitsch
Alcohol: Oh Yes!
Cars: Mercedes-Benz
Girls: SYN
Foods: German
I like: honesty, pragmatism, realism, tolerance, style, empathy
I dislike: fakes, aggression, ignorance, senselessness, deception
|=---=[ Describe your life in 3 sentences
Every work day is packed with challenges, great hacks and awesome people.
Every free day compensates with non-security hobbies and sleep.
This sentence is padding.
|=---=[ First contact with computers
At the age of 6 at the computing department of the university of Sofia,
Bulgaria. Didn't leave much of an impression, as I was only allowed to play
a silly game (in CGA color).
Second contact happened at the age of 9 or 10, a Robotron Z9001. It came
without software but with a typewriter made programming manual for BASIC.
I read it cover to cover.
|=---=[ Passions: What makes you tick
Like-minded people: Conversations give me the greatest boost. Let me
explain something to a person who gets it, and I will have a new idea how
to take it further.
Also, work. That state of a problem where it is no longer fun, but actual
work, to get it where you want it. Not letting go. Stubbornness compensates
for a lot of talent.
|=---=[ Unix or Windows? Juniper or Cisco?
Unix and Windows. I like both, I use both, they both suck in their own
ways. The only thing you will not see me with is anything Apple.
Juniper, Cisco, all networking equipment is broken, Cisco being in the
lead. How can you sell equipment that is in most cases simply forwarding
IPv4 packets from interface 1 to interface 2 since 1987 and still crash on
parsing IPv4 in 2011?
|=---=[ Color of hat?
undef($hat);
|=---=[ Entrance in the underground
First contact must have been around 1990. Shortly after the Berlin wall
came down, I got my first 80286 machine and hung out at a computer club in
a Thaelmann Pionieers' (youth organization of schoolchildren in East
Germany) youth center. In a back room, two older guys downloaded infrared
images from Russian satellites. While the download ran, they cracked PC
games for the kids to pass the time. First time I saw a hex dump.
I had the great honor to meet many people that I consider(ed) part of the
real underground. Some of them still are. But I don't think I was ever part
of that myself.
|=---=[ Which research have you done or which one gave you the most fun?
Anything I did was fun at the time, why doing it otherwise? I generally
like fiddling around with Bits and bytes more than hunting bugs in large
environments. Writing disassemblers, debuggers and the like is a pleasure.
It's also monkey work. But it lets you feel so much about the history and
design of a platform.
I also like network protocols, because you can often see the vulnerability
potential by reading the specifications already. Protocols are interfaces
and interfaces are where the bugs live. Also, logging functions love to use
packet contents and fixed buffers.
|=---=[ Personal general opinion about the underground
Much. Fucking. Respect.
Seriously, what is published is only the tip of an iceberg. Once you talk
to people, it's simply insane how much knowledge there is. Interestingly,
I have the impression that little of this knowledge is ever used.
One aspect often considered essential in the underground I dislike:
Owning people fails to impress me. It's like beating people up, everyone
can do that and none of it makes it an achievement. If you found that
vulnerability yourself and made a custom exploit, that's an achievement.
|=---=[ Personal general opinion about the German underground
Regardless of the definition of underground, the hacking scene in Germany
is very alive and diverse. However, I would love to see more of them
write exploits.
|=---=[ Personal general opinion about the European underground
The U.S. is much more visible, but Old Europe kicks their ass any time.
Just looking at the French scene is scary. If only they would speak
English ;) And don't even get me started on east Europe and Russia.
|=---=[ Memorable experiences/hacks
- Finding my first overflow in Cisco IOS TFTP, resisting the urge to post
it immediately and deciding to write an exploit. Then realizing how much
of a journey lay ahead of me, since I had never written any exploit
before.
- Writing an exploit that needed to be stable, i.e. work in the wild. After
weeks of frustration finally understanding that PoC is only 10% of
exploit development. Halvar saving my ass again with a simple hint.
- Being asked by my employer to take the CISSP exam, being initially
rejected due to my "connections to hackers" as a DEFCON speaker, being
allowed to take the exam and finding a 12 octet MAC address in a
question. Finding out afterwards that (ISC)2 probably has more admin
users on their web servers than paying members.
- Asking someone to look at Cisco IOS exploitation after I spent about
a decade with it and getting my ass kicked in less than a week. True
talent trumps everything.
- Caesar's Challenge over the years: hearing about it, being invited in,
being told by Caesar that he accepts my solution, welcoming Caesar to
PH-Neutral.
- Being invited to train a team of hackers and later finding out that
the whole purpose of the exercise was to cure them from their respect
for me. And it worked.
- The nights in Wuxi (China) with the Wuxi Pwnage Team.
|=---=[ Memorable people you have met
- Halvar Flake
I have to thank this man for a lot of things in my life.
- Sergey Bratus
A great man with a great vision. He changed how I look at academia and
hacking. With people like Sergey, there is hope.
- John Lambert
One of the smartest men I've ever met. Just in case you wonder why
Windows exploitation is so challenging today.
- Dan Kaminsky
Dan and I share a passion for protocols. We first met in 2002, about five
times, at cons all over the planet, and talked IP(v4). Good times.
- ADM, that one summer
|=---=| Memorable places you have been to
- Idaho Falls
|=---=[ Disappointing people you have met
Many manufactured or self-styled experts giving presentations at
conferences. If you didn't write or at least read the code in question,
shut up. The number of charlatans is unfortunately growing steadily.
Some would probably count me in that category as well.
Also, friends that betray they very people that trust them most.
|=---=[ Who came up with the name "Phenoelit" and what does it mean?
Nothing to see here, move on.
|=---=[ Who are you guys?
Just friends.
|=---=[ Who designed those awesome Phenoelit t-shirts?
I always did the designs for Phenoelit and PH-Neutral. I greatly enjoy
doing them. For PH-Neutral, the process was that I had to come up with a
motive and would do all the work, Mumpi watching me, drinking beer and
complaining. It would not have worked any other way.
|=---=[ Phenoelit vs 7350 vs THC?
We met 7350 and THC first time at the 17c3 and became friends with several
of them over time. I sincerely miss 7350, but their time had come.
|=---=[ Things you are proud of
The team I am blessed to work with.
|=---=[ Things you are not proud of
- Writing shitty exploits
- Having a pretty good hand at picking research topics that are not
relevant to the real world
- Being strictly single-tasking
|=---=[ Most impressive hackers
- Dvorak
- Halvar Flake
- Philippe Biondi
- Ilja van Sprundel
- Anonpoet
- Greg
- Last Stage of Delirium
This list is biased by me not knowing many of the really impressive
hackers.
|=---=[ Opinion about security conferences
Security conferences have been essential for my personal development and I
still love to go to them. I have a preference for smaller cons, since it is
more likely to get to talk to people.
Almost any talk has something for me to take away. But more important is
the hallway track and going out with fellow hackers.
The distinction between hacker cons and corporate or product security
conferences used to be clear. It is no longer, which is sad.
|=---=[ Opinion on Phrack Magazine
IMHO one of the most well regarded e-zines in the world, influencing much
research over the time of its existence. Just look at how many academic
publications cite Phrack articles. Keep it up!
|=---=[ What you would like to see published in Phrack?
I think Phrack does just fine. For me, exploitation techniques are at
the heart of Phrack. I also enjoy reading about environments that not
many people have access to: control systems of all kinds, for example.
Maybe you should aim for more timely releases though.
|=---=[ Personal advices for the next generation
That implies that I'm old and expired, right?
The one advice I would give is: Don't care about the opinion of others when
it comes to research. It doesn't matter if they think it's cool, you must
think it's cool. Look for and credit prior art, build on what is there
already and have fun doing so.
And if you really have to use Python, understand that error handling is not
the same thing as stack traces. Catch your exceptions and handle them, or
at least display something useful.
|=---=[ Your opinion about the future of the underground
Predictions are hard, especially when they concern the future.
|=---=[ Shoutouts to specific (group of) peoples
To the hacker and vx groups of the 80s and 90s, who built the foundation
of everything we still concern ourselves with today.
|=---=[ Flames to specific (group of) peoples
To the snake-oil security product vendors, who refuse to innovate and bind
available talent in signature writing sweat jobs, because that model pays
them so well. Your "protections" add vulnerabilities to every aspect of
modern networks, and you know it. The halting problem is UNDECIDABLE!
|=---=[ Quotes
"Does it just look nice or is it correct?"
- zynamics developer about a control flow graph
"Nine out of the ten voices in my head say I'm not schizophrenic. The
other one hums the melody of Tetris."
|=---=[ Anything more you want to say
I would like to thank the Phrack staff for this honor, although I'm still
convinced there are 0x100 people who deserved it more.
|=---=[ A eulogy for PH-Neutral ]=---=|
We created PH-Neutral in 0x7d3 as an attempt to bring together the people
we respected most. We were simply unaware of the other small events that
already existed. The intention was to have an informal meeting with ad-hoc
workshops and a great party. We failed at the party, despite a full-blown
dance floor. However, the people actually worked together and discussed
their projects and exploits. We were sending out the invitations
individually by email and I was surprised about the many positive
reactions. We would not have thought that so many well-known and
interesting people would actually show up.
Over the years, the event grew. Although we kept it invite-only, the
mechanism for invitations had to consider people that were there in the
past as well as fresh blood. Therefore, one way or another, it had a snow
ball effect to it. But in the early years, this was a good thing. There
was an astonishing amount of innovation going on during the first five
years. We never expected to see people actually working together. It was
the time of sharing code and knowledge, of searching for JTAG on a dance
floor and of the Vista ASLR release.
The bigger the event got, the more the focus shifted from hacking to party.
Since that corresponded with our second initial goal, we did encourage it.
We really like to party with our friends, and by party we mean actual
dancing and not just standing around and getting drunk. It was amazing
to see how well the party developed over the years. Despite the growth,
it still had a very intimate feeling.
Initially meant as a joke during setup of the second PH-Neutral, we had
decided to not have it run forever. For one, we didn't want to see it going
down and fading away. When more and more conferences started to show up on
the map, it only encouraged us to conclude the story of PH-Neutral. It had
its time and place.
The last PH-Neutral 0x7db then proved that the decision was right. It was
that little bit of too many people that turns a large group of
international friends into a somewhat anonymous crowd. Although luckily
not many guests noticed, it changed the way we had to run the event
completely. Where in the years before, we could hack and party with our
friends, we had to fire-fight, manage and regulate. That was not the way it
was meant to be for us, so it was a good time to call it quits.
PH-Neutral was made into what it was by the people that participated, more
so than any other event I know. The people decided on the spin of each
year's event by how they filled the frame we gave them. It was their
party and they took it and made it great. Thank you forever!
[ EOF ]
