4 ms·

Then it's just as well you didn't scroll down to the comments section of tfa that links to a blog page called "Dangerous I.P. addresses that you should never ev

by Pick-A-Hill2019 6y ago

Then it's just as well you didn't scroll down to the comments section of tfa that links to a blog page called "Dangerous I.P. addresses that you should never ever scan" (https://dangerousip.blogspot.com/ https://dangerousip.blogspot.com/)

wrkronmiller 6y ago
> 207.60.36.176 - 207.60.36.183 Chris Pet Store Peculiar on many levels...
- Pick-A-Hill2019 6y ago
  " All the below are FBI controlled Linux servers & IPs/IP-Ranges 207.60.0.0 - 207.60.255.0 " I have no idea how they verified it* (or perhaps inserted as a prank?) but almost certainly it's no longer current (the list is from 2016) but uhmm yeah - It makes all those 80's movies that had the surveilance teams in grey vans marked 'Joes 24 Hour Plumbers' or 'Billy-Bobs Flowers' kinda funny. * IIRC one of the US Three Letter Agencies set up a load of dummy websites but used the same html code snippet in all of them. Once the first one was discovered and exposed as being a front it was game over. (meta comment - I think I might have read it as a post here on HN)
  - secfirstmd 6y ago
    You might be talking about the way the CIA reused code to communicate with sources in Iran in its China operations? Then got a ton of people killed by being stupid/lazy - despite internal whistleblowers going to Congress to warn them it was dangerous? https://www.telegraph.co.uk/technology/2018/11/03/dozens-us-spies-killed-iran-china-uncovered-cia-messaging-service/ https://www.telegraph.co.uk/technology/2018/11/03/dozens-us-... Something similar happened in Lebanon IIRC. Lazy reuse of tradecraft - a pizzeria and some mobiles I think it was.
    - DakharsBuzumCIA 6y ago
      I was going to comment on 'a dozen killed.' 12 * 80 kg is just 960 kg , so, I guess it's either a baker's dozen, 13, which makes it 1040, or those people were fat as fuck. Learn to weigh 80 kg, or, I mean; don't join the CIA. Either or. Fat bastards! L O L
AnimalMuppet 6y ago
In a previous life, I worked for a security company that made a "hacker in a box" - a security auditing tool that would scan a machine, or a range of addresses, to see what doors were open, and how they could be exploited, and if the exploits opened any new doors, and how they could be exploited, and so on until it ran out of things to try. Since this was a security auditing tool rather than an attack tool, it left some very big, obvious, deliberate footprints in the scanned machine's logs. One day someone at our company decided that it would be a good idea to scan whitehouse.gov. We got told to never do that again...
secfirstmd 6y ago
I'm curious what services like Shodan deal with the legal aspects of things. For example they obviously scan the Irish governments sites but I would be afraid to do that even though I do legitimate research. Is there any actual guidance out there about how to balance these things?

wrkronmiller 6y ago

> 207.60.36.176 - 207.60.36.183 Chris Pet Store Peculiar on many levels...

Pick-A-Hill2019 6y ago
" All the below are FBI controlled Linux servers & IPs/IP-Ranges 207.60.0.0 - 207.60.255.0 " I have no idea how they verified it* (or perhaps inserted as a prank?) but almost certainly it's no longer current (the list is from 2016) but uhmm yeah - It makes all those 80's movies that had the surveilance teams in grey vans marked 'Joes 24 Hour Plumbers' or 'Billy-Bobs Flowers' kinda funny. * IIRC one of the US Three Letter Agencies set up a load of dummy websites but used the same html code snippet in all of them. Once the first one was discovered and exposed as being a front it was game over. (meta comment - I think I might have read it as a post here on HN)
- secfirstmd 6y ago
  You might be talking about the way the CIA reused code to communicate with sources in Iran in its China operations? Then got a ton of people killed by being stupid/lazy - despite internal whistleblowers going to Congress to warn them it was dangerous? https://www.telegraph.co.uk/technology/2018/11/03/dozens-us-spies-killed-iran-china-uncovered-cia-messaging-service/ https://www.telegraph.co.uk/technology/2018/11/03/dozens-us-... Something similar happened in Lebanon IIRC. Lazy reuse of tradecraft - a pizzeria and some mobiles I think it was.
  - DakharsBuzumCIA 6y ago
    I was going to comment on 'a dozen killed.' 12 * 80 kg is just 960 kg , so, I guess it's either a baker's dozen, 13, which makes it 1040, or those people were fat as fuck. Learn to weigh 80 kg, or, I mean; don't join the CIA. Either or. Fat bastards! L O L

AnimalMuppet 6y ago

In a previous life, I worked for a security company that made a "hacker in a box" - a security auditing tool that would scan a machine, or a range of addresses, to see what doors were open, and how they could be exploited, and if the exploits opened any new doors, and how they could be exploited, and so on until it ran out of things to try. Since this was a security auditing tool rather than an attack tool, it left some very big, obvious, deliberate footprints in the scanned machine's logs. One day someone at our company decided that it would be a good idea to scan whitehouse.gov. We got told to never do that again...

secfirstmd 6y ago

I'm curious what services like Shodan deal with the legal aspects of things. For example they obviously scan the Irish governments sites but I would be afraid to do that even though I do legitimate research. Is there any actual guidance out there about how to balance these things?