Using tor, I am currently nmap'ing gov.bc.ca

[ppcock]

I was going to use a key logger but infared sounds rad... and cool!

[ebbomega]

keylogger requires physical access to the computer as well as admin rights, so good luck with that one.

[ppcock]

My friend has a usb logger, you put it into a usb port, it logs every key stroke, throws it in a pile of shit on notepad and you just decypher the info for username and password.

[ebbomega]

Okay. How's it run on *NIX?

Also: requires physical access

[ppcock]

only been tested on windows from what i've seen.

[anewlife]

I love this thread. Thanks guys.

[Gusto]

jenai you're too old to get excited about this basic shit.

[ebbomega]

Hey guys I guessed the admin password once in junior high. Can I join your hacker club?

[wishbone]

sage do you still whistle into pay phones to get free calling time?

[ppcock]

Sage = Acid Burn
Dave = Zero Cool / Crash Override
Jeff = The Plague
Marty = Joey
Ryan = Razor
Rawb = Blade
Anew = Serial Killer
Bold = Penn
Phren = Phantom Freak
Chris = Lord Nikon

MMORPG REAL LIFE BITCHES!

[ebbomega]

I HOPE YOU DON'T SCREW LIKE YOU TYPEl

[ppcock]

All right he's in the personal ads. Disappointed white male. Cross dresser looking for discreet friend to bring dreams to realiy. Leather, lace and water sports. Transvestites welcome.

[ppcock]

Norman, This is Mr. Eddie Vedder from accounts, i just had a power surge here at home that wiped out a file i was working on listen im in big trobule, u know anything about computers?

umm...ahh...gee

right well, my BLT drive on my computer just went AWOL, and, I got this big project due tomorrow for Mr. Kawasaci, if i dont get it in he's gonna ask me to commit harry carey, could you read me the number on the modem?...it's a little boxy thing.


From what I remembered.. listening to that speech for the first time made me shit my pants.

[neoh]

hahahaha

[wishbone]

i like that marty pinned me as a grayhat.

[Goat]

Originally Posted by jenai

network security geeks being paid civil servant wages [$15-35 an hour or a yearly salary) are tomorrow's cybercops.

nothing escapes their scrutiny, though it'd violate their hacker code to implement NSA-like surveillance on their networks.

however, the regular cops are worse cos they are mistaken in believing that the Leftist activists are "domestic terrorists" when common street criminals are almost as bad as terrorists.

As someone who works for the province of bc, im telling you right now, you a) give our government way too much credit in their security measures and b) there's nothing currently relevant(nor will there ever) to the social/economic/political on the bc.gov.ca website.

truth is, letting at-risk children stay in risky family situations is the potential seed of tomorrow's domestic terrorism, and the State is aiding and abetting this travesty. yes, right-wing politics is the root of the mother of terrorism, not social activism!!

port scanning is not a crime!

[/quote]
Canada's social programs exceed 70% of the worlds population. Lay off the glue.

[lildonkey]

nerd fighttttttt

[Gusto]

hay guys i grepped something today. :O

[jenai]

recent development:

After boasting here, I checked how I was nmapping gov.bc.ca -- sans torify.

Today I am torifying my nmap wrapper which is scanning the linux boxes under a certain dotted quad of youtube.

The scan to get the IP addresses and resultant OS guesses took over 4 hours to complete, to scan a total of 1024 addresses. tonight it's one address and a /28, which is at least 4 but not more than 16 addresses -- given that the quad starts at x.x.x.140, that results from addresses from x.x.x.140 to x.x.x.143!

so at the least, five addresses at minimum to portscan, which shouldn't take four hours to complete.

instead it should be more like 3 hrs to 12 hours.

[ebbomega]

God what an idiot.

What you're doing isn't new, isn't helpful and to be honest is just alerting everybody to your presence. And you're acting like it's turning you into an 'l33t hax0r. Seriously man, it's not that impressive. Nmap comes standard with my OS and I've been using it as a networking/security tool for about 7 years. It's about as hacker-ish as using ping, except that it pisses more people off.

While port scanning itself isn't illegal, it will tip off anybody who happens to be paying attention to that sort of thing to your activities and start building a case against you should you actually get arrested for anything bad (regardless as to whether you've done it or not). Or, should you start to actually try illegal things, it's more likely that someone is listening to what you're doing.

It's really only advisable that you use this program on INTERNAL networks or servers that you are the particular administrator for. If a real rogue hacker owning one of these servers you're scanning got wind of what you were doing there's a good likelihood that they might then want to pwn your system just because you're pissing them off.

I know "Keep It Tidy" is normally reserved for ravers, but really it should apply to anybody attempting legal gray-area stuff. Why attract the attention?

[jenai]

a typical output (with IP addresses massaged out):

xxx.xxx.xxx.139 / xxx.sjl.youtube.com(online)

address

• xxx.xxx.xxx.139 (ipv4)

hostnames

• xxx.sjl.youtube.com (PTR)

ports

The 1694 ports scanned but not shown below are in state: filtered

Port State Service Product Version Extra info
22 tcp open ssh protocol 2.0
80 tcp closed http
443 tcp closed https

remote operating system guess

• used port 22/tcp (open)
• used port 80/tcp (closed)
• used port 35654/udp (closed)
• os match: Linux 2.6.9-42.(x86, SMP)
• accuracy: 94%
• reference fingerprint line number: 2559
• os match: Linux 2.6.18-em64t (x86-64)
• accuracy: 93%
• reference fingerprint line number: 2379
• os match: Linux 2.6.13 - 2.6.18
• accuracy: 91%
• reference fingerprint line number: 1938
• os match: Linux 2.4.33
• accuracy: 91%
• reference fingerprint line number: 1839
• os match: Linux 2.6.9 - 2.6.12 (x86)
• accuracy: 90%
• reference fingerprint line number: 2484
• os match: Siemens Gigaset SE515dsl wireless broadband router
• accuracy: 89%
• reference fingerprint line number: 3535
• os match: Linux 2.4.31 w/grsec (x86)
• accuracy: 89%
• reference fingerprint line number: 1805
• os match: Linux 2.6.11 - 2.6.15 (Ubuntu or Debian)
• accuracy: 89%
• reference fingerprint line number: 1900
• os match: Linux 2.6.15.4
• accuracy: 89%
• reference fingerprint line number: 2046

network distance

• distance: 11 hops

tcpsequence

• index: 0
• class: trivial time dependency
• difficulty: Trivial joke
• values: 721CF9,721D5F,721DC5,721E2B,721E91,721EF 7

ipidsequence

• class: All zeros
• values: 0,0,0,0,0,0

tcptssequence

• class: unknown class
• values: 3E240C03,3E240C21,3E240C3E,3E240C5B,3E24 0C78,3E240C94
---
SMP server using Intel-64 CPU, possibly Dual or Quad core, maybe a Xeon

Conclusion: youtube is guaranteed to be more Open Source than your local government is. It may be assumed that most commercial server hosts are also the same. Indirect proof Microsloth sleeps in bed with your government from the feds down.

[ebbomega]