Ubiquitous Issue 1 File 4: New TCP/IP software identify user on calling system
New TCP/IP software (mainly sendmail) that can identify a user on a calling system. Typed by mE!
(I will write more about this when I find out more!)
W A R N I N G
NEW TCP/IP software developed, is now in use that can not only determine the originating host, but the fucking user as well. This is a scary thought for all hackers. I first came across this in the sendmail program (telnetting to port 25). I typed "HELO" as you do and instead of getting something like: hello <myhost.mydomain.edu.au> pleased to meet you. I recieved something along the lines of:
hello <MYUSERNAME@myhost.mydomain.edu.au>
Fuck me they can identify the actuall user as well as the host. I tried this from a VAX mind you!! NOT as common as unix on the Internet but the remote system still managed identify me!! I am still looking into how they do it, but I assume the called host telnets back and does a user enquiry on your host and finds out who on the system is telnetting out to that host. (When you telnet to a host your user info is NOT SENT so therefore it has to connect back to the host somehow to be able to get this info.)
I will write a bigger file when I find out more about this. Till then, watch what the fuck you do and where you do it from. IE don't go and hack the living shit out of anything around. (If you are using a hacked account then that is a different story, however for fuck's sake put a bit of distance between you and the site (both local and remote sites if possible!!). In other words divert your calls, use outdials, university terminals, other phone lines, blue box, or if possible go though a few x.25 or internet outdials. Basically if you use your common sense you should be cool.
mE!
- End of File -
