United States Underground 028

eZine lover (@eZine)

Published in 

United States Underground

 · 5 years ago

  

uSu - united States underground                 Written By:Lurch 

WARNING TO PCB SYSOPS!  BACKDOOR IN VIG's ProVote! 
                                                         [uSu] 
O.K.,this is a very short and informative text. It will help 2 kinds of people: 

1 - smart sysops who read warnings to prevent their system from being hacked 
2 - hackers/feds to trash the stupid boards who don't listen 

Anyway, about reason number 2...well, yeah, the feds can get this file, and, 
no matter how you try, unless a SysOp is protected against this, a fed can get 
full access on a PCBoard board through Vigilante's ProVote.  So, I suggest you 
tell this to all friendly SysOps, or, give them this file to read. 

Disclaimer:  O.K., welp, there shouldn't be much said, there is no illegal  
activity described in this TXT, so, just, fuck you if you don't like my 
language, and, go fuck your mom if you're a fed, since, I can assure you that 
you will not be able to use this on any good board. 

----------------------------------------------------------------------------- 
O.K., to start off, this only concerns PCBoard BBS running Vigilante's ProVote. 
There is a back door. I do not believe it was planned, but, it might have been. 
Or, maybe it was just Vig's mistake.  Anyway, 2 things I want to mention 
before beginning...Number 1, I love ALL that VIG writes, I feel he is the 
greatest PPE writer of this time.  Every PPE that he wrote works great, and, so 
far, I guess this is the only back door.  Number 2, I thought for a long time 
before releasing this text...This is a very useful way to hack into a board, 
and, many times get NR for a LONG time(usually hours, but, sometimes more).  I 
have tried it, and, I am kinda sad to release this info, 'cuz, after this, I 
can't use it anymore...  Or, at least I presume I can't use it. 

Anyway, to get to the fucking point of the text and stop talking about  
bullshit. 

In Vigilante's ProVote(or at least the copy that I and everybody else I know 
has) there is a file called CARPET.RED, it has a very good idea to it,  
basically it lets those who are the SysOps friends, or those who need to be 
able to get on the system easily and quickly by the SysOp's wish, get the 
landslide vote access.  It's a great idea, however, there is no password.  Vig, 
you should have thought of this...  Vigilante's name appears in that list in 
the distributed package...  I doubt many SysOps take it out, because, they are 
all grateful that they have Vig's PPE's, and, would gladly let him on the  
board, or simply, because they don't know about the damn file.  Anyway, if a 
person logs on as one of those people specified in the file, they get automatic 
access, the level that is given to people who pass the voting by a landslide. 
This is usually an N/R or a very low ratio access, with lots of time.  If a  
person logs on to the board, enters the nup, in most cases, and, enters their 
name to be VIGILANTE, they will not even have to fill out 1 infoform...They 
will be displayed the file called CARPETED.PCB, and proceed to the bbs with  
full access.  Even if Vig's name was taken out of the list, a hacker can find 
out the SysOp's friends, and, attempt logging on with those handles.  The only 
way I know that this can be detected is through the caller's log, and through 
a caller ID...  But both of these mean that the user has gotten the access.   
Pretty neat, huh?  Well, there are 3 ways to strip your BBS of this little  
backdoor, bug, or, whatever you want to call it. 
1) 
What to do: Get rid of all names, or at least Vig's in the CARPET.RED 
Disadvantage: You rid yourself of a wonderful feature of PV. 
2) 
What to do: Put a @HANGUP @ in to the end of CARPETED.PCB, and, insert a nice 
little message in the file itself, something like "Fuck you hacker/fed!" 
Disadvantage: Then if Vig logs on he will get the message and be logged off 
just like a hacker, I don't think he'll appreciate that. 
3) 
What to do: Let's all ask Vig to add some kind of password system.  It's not 
easy, because, many times the users placed into CARPET.RED are asked or invited 
by the SysOps to call over the nets.  So, something VERY innovative, (maybe  
PGP) has to be used here...I dunno, but, it's something to think about Vig. 
Disadvantage: none 
My choice...welp, I'd be honored if Vig logged on to my board.  So, I wouldn't 
choose number 2, if you think your board is too lame or too fucking small for 
him to call, then, maybe you can do it.  I would recommend doing number 1  
until Vig finishes number 3, if he ever does... 

To finish up this text, I'd like you to all distribute it.  uSu also currently  
needs more kickass writers, so, please apply.  We specialize in HPAVT texts, 
so, we are not particularly looking for coders, but, coders who can write on 
the topics of Virii and Trojans are welcome. 

Two more thing before I go...  I hope this doesn't upset Vig, I am still a  
great fan of his, and, am looking forward to seeing and using many PPE's by  
him.  And, I would like you all to consider the shit Microsoft and IBM are 
planning for us... UNiX is a very difficult system, so, I doubt everyone will 
use it, OS/2 is just another Windows or Mac, so, there is not much difference. 
MS-DOS and PC-DOS are said to stop production when CHICAGO is officially  
released.  Please keep a copy of DOS on your drive.  Or, at least somewhere on 
disk, I can not imagine a world full of genius people all using the damn point 
and click interface. 

That's it, live long, have phun, drink Coke 'cuz Pepsi sucks. 

                      LurcH 
                      [uSu] 
V”Åä Ÿ”R D”S, SH’œœ ­Å œ­Vä Ÿ”RäVîR, ’¤D PR”SPäR!