4 ms·

Intruders install security updates (1998)

39 points by tjalfi 6y ago

IntelMiner 6y ago
I did something similar many, many years ago I had moved into a new apartment and the local telco had provisioned the wrong telephone line, delaying me getting internet by several weeks (Thanks Telstra!) As a result I ended up "borrowing" internet service from a neighbour a few units down. Only to discover that his setup was utterly ancient. A Netcomm NB5 modem connected to 1.5/256K ADSL1 service I quietly pulled the credentials out of the HTML page source, logged into his account and upgraded his service. Boosting his speed to 20/1, gaining unlimited downloads AND saving him roughly $40 a month! I know there's "white hat" and "black hat" hacking. Is there such a thing as "chaotic good" hacking? Where you leave systems in a better state than you broke into them
- fao_ 6y ago
  i believe that used to be called grey hat hacking
  - segfaultbuserr 6y ago
    I wanted to suggest the same but I didn't. "Greyhat" is not specific enough for what OP has asked for - it can be chaotic good or chaotic neutral. It's not "you leave systems in a better state than you broke into them" - simply "not making it worse" is sufficient to qualify.
    - ASalazarMX 6y ago
      If falls squarely in grey hat territory, if not black. He tampered with someone else's service for personal gain. His neighbor could be in trouble later when the company improved their security practices.
      - Maursault 6y ago
        I believe the term that thread is searching for is "dissident engineer." [1] [1] https://www.youtube.com/watch?v=dht_3NziwSw https://www.youtube.com/watch?v=dht_3NziwSw
- norenh 6y ago
  Sounds good initially, until you realize the ancient setup was there for a reason (for example a person responsible for quality assurance for a legacy system a few still use). :-) Not saying it is likely, but from working with production systems that could have come from the stone-age I am too well aware of the possible risks of meddling with a setup that looks obviously wrong or too old to be used anymore, only to realize way too late that it was there for a very good reason.
  - marshmallow_12 6y ago
    -Sounds good initially, until you realize the ancient setup was there for a reason The "whoops" moment when you realize your clever hack wasn't so clever. It happens way too much, just pretend you have no idea what happened.
- flemhans 6y ago
  There was a time when routers shipped with a really low dhcp lease max clients settings which would cause issues in coffee shops. I'd change the setting up to eg 50 simultaneous clients, which seemed to solve it.
  - andrewnicolalde 6y ago
    50 available addresses... that's not a whole lot of clients at all! Hopefully those leases had short expiry times!
    - flemhans 6y ago
      That was already the increased value. I think it was set to 10 or 20 in this particular type of router. At one coffee shop their credit card payments were affected because they shared the POS with the guest WiFi. Raising the limit solved their issue with payments, too.
- Jon_Lowtek 6y ago
  There is a german word "Instandbesetzung" which translates to "maintenance squatting" or "restorative occupation". The first part is german "Instand-setzung" and the second "Be-setzung" so "Instand-be-setzung". The basic idea is that a property deteriorates if not occupied, so when these squatters take over an abandoned property they improve it. The reality of german punk culture often did not follow this ideal: in the worst case it was a sham used by junkies to give an aura of legitimacy to their occupation, in the best case chaotic good punks had a different idea of what "maintained" means compared to more orderly people. The concept also exists in informal settlements unrelated to punk culture: to loosly quote a women living in the Venezuelan Tower of David, a precariat slum: "everything we did here was to live like decent people" and yet it still was a shanty town in an unfinished abandoned office tower. The people living there managed basic utilities for their community, which is impressive, but calling the tower maintained would be farfetched. Cyberpunk author William Gibson features this concept quite often in his slum ridden dystopia, but it is most prominent at the end of the short story "Red Star, Winter Orbit" which he wrote together with Bruce Sterling. The german translation uses the above mentioned word, but in the english original they describe themselves as "Squatters, I guess you could say." so i don't think there is an english word for this concept, neither for buildings, nor networks.
- znpy 6y ago
  I head a similar story, regarding people hosting some sort of CCC, on a smaller scale, but not in Germany. Basically they were hosting the whole thing in an abandoned building that they were squatting, had somehow managed to get electric power but no internet connection. So they started scanning for wireless networks and find this network. They manage to get access, and they start configuring some services. Turns out, this person was not really int tech and had mostly default settings. There were some things that were not installed properly and the signal reception was not that good. Some of these people look up the owner credendials from the bills (some internet providers used to have you login to the billing website and the internet connection using the same credentials) and go ring to the address, pretend to be the internet company and start doing maintenance. AFAIK they installed a phone/adsl splitter so that the owner making and receiving phone calls would not drop the line for all the people leeching internet connection and also installed a stronger antenna (for free) which boosted signal for all the people leeching internet connection but also for the owner. Needless to say, they didn't left the new antenna for the internet owner as a present, even though they probably didn't even realize a single thing (also, they closed any security issue and revoked their own access when they left).
michaelcampbell 6y ago
In the physical realm, a buddy of mine went to college at USC and one day went to get his bike to discover it had been stolen. Pretty common, there. A few days later he was walking by the bike rack, noticed his bike had been parked exactly where he normally parked it, and someone had replaced/repaired a broken pedal.
- emayljames 6y ago
  That makes me think someone got so enraged by the broken pedal, they took it home, fixed it then took it back.
  - m463 6y ago
    Somebody keeps borrowing my toothpicks and returning them after putting exactly 400 in the box. :)
- tjalfi 6y ago
  That reminds me of a scene from Tibor Fischer's The Collector Collector; a character's van is stolen, cleaned, and returned to its parking spot.

39 points by tjalfi 6y ago

I did something similar many, many years ago I had moved into a new apartment and the local telco had provisioned the wrong telephone line, delaying me getting internet by several weeks (Thanks Telstra!) As a result I ended up "borrowing" internet service from a neighbour a few units down. Only to discover that his setup was utterly ancient. A Netcomm NB5 modem connected to 1.5/256K ADSL1 service I quietly pulled the credentials out of the HTML page source, logged into his account and upgraded his service. Boosting his speed to 20/1, gaining unlimited downloads AND saving him roughly $40 a month! I know there's "white hat" and "black hat" hacking. Is there such a thing as "chaotic good" hacking? Where you leave systems in a better state than you broke into them

fao_ 6y ago
i believe that used to be called grey hat hacking
- segfaultbuserr 6y ago
  I wanted to suggest the same but I didn't. "Greyhat" is not specific enough for what OP has asked for - it can be chaotic good or chaotic neutral. It's not "you leave systems in a better state than you broke into them" - simply "not making it worse" is sufficient to qualify.
  - ASalazarMX 6y ago
    If falls squarely in grey hat territory, if not black. He tampered with someone else's service for personal gain. His neighbor could be in trouble later when the company improved their security practices.
    - Maursault 6y ago
      I believe the term that thread is searching for is "dissident engineer." [1] [1] https://www.youtube.com/watch?v=dht_3NziwSw https://www.youtube.com/watch?v=dht_3NziwSw
norenh 6y ago
Sounds good initially, until you realize the ancient setup was there for a reason (for example a person responsible for quality assurance for a legacy system a few still use). :-) Not saying it is likely, but from working with production systems that could have come from the stone-age I am too well aware of the possible risks of meddling with a setup that looks obviously wrong or too old to be used anymore, only to realize way too late that it was there for a very good reason.
- marshmallow_12 6y ago
  -Sounds good initially, until you realize the ancient setup was there for a reason The "whoops" moment when you realize your clever hack wasn't so clever. It happens way too much, just pretend you have no idea what happened.
flemhans 6y ago
There was a time when routers shipped with a really low dhcp lease max clients settings which would cause issues in coffee shops. I'd change the setting up to eg 50 simultaneous clients, which seemed to solve it.
- andrewnicolalde 6y ago
  50 available addresses... that's not a whole lot of clients at all! Hopefully those leases had short expiry times!
  - flemhans 6y ago
    That was already the increased value. I think it was set to 10 or 20 in this particular type of router. At one coffee shop their credit card payments were affected because they shared the POS with the guest WiFi. Raising the limit solved their issue with payments, too.
Jon_Lowtek 6y ago
There is a german word "Instandbesetzung" which translates to "maintenance squatting" or "restorative occupation". The first part is german "Instand-setzung" and the second "Be-setzung" so "Instand-be-setzung". The basic idea is that a property deteriorates if not occupied, so when these squatters take over an abandoned property they improve it. The reality of german punk culture often did not follow this ideal: in the worst case it was a sham used by junkies to give an aura of legitimacy to their occupation, in the best case chaotic good punks had a different idea of what "maintained" means compared to more orderly people. The concept also exists in informal settlements unrelated to punk culture: to loosly quote a women living in the Venezuelan Tower of David, a precariat slum: "everything we did here was to live like decent people" and yet it still was a shanty town in an unfinished abandoned office tower. The people living there managed basic utilities for their community, which is impressive, but calling the tower maintained would be farfetched. Cyberpunk author William Gibson features this concept quite often in his slum ridden dystopia, but it is most prominent at the end of the short story "Red Star, Winter Orbit" which he wrote together with Bruce Sterling. The german translation uses the above mentioned word, but in the english original they describe themselves as "Squatters, I guess you could say." so i don't think there is an english word for this concept, neither for buildings, nor networks.
znpy 6y ago
I head a similar story, regarding people hosting some sort of CCC, on a smaller scale, but not in Germany. Basically they were hosting the whole thing in an abandoned building that they were squatting, had somehow managed to get electric power but no internet connection. So they started scanning for wireless networks and find this network. They manage to get access, and they start configuring some services. Turns out, this person was not really int tech and had mostly default settings. There were some things that were not installed properly and the signal reception was not that good. Some of these people look up the owner credendials from the bills (some internet providers used to have you login to the billing website and the internet connection using the same credentials) and go ring to the address, pretend to be the internet company and start doing maintenance. AFAIK they installed a phone/adsl splitter so that the owner making and receiving phone calls would not drop the line for all the people leeching internet connection and also installed a stronger antenna (for free) which boosted signal for all the people leeching internet connection but also for the owner. Needless to say, they didn't left the new antenna for the internet owner as a present, even though they probably didn't even realize a single thing (also, they closed any security issue and revoked their own access when they left).

michaelcampbell 6y ago

In the physical realm, a buddy of mine went to college at USC and one day went to get his bike to discover it had been stolen. Pretty common, there. A few days later he was walking by the bike rack, noticed his bike had been parked exactly where he normally parked it, and someone had replaced/repaired a broken pedal.

emayljames 6y ago
That makes me think someone got so enraged by the broken pedal, they took it home, fixed it then took it back.
- m463 6y ago
  Somebody keeps borrowing my toothpicks and returning them after putting exactly 400 in the box. :)
tjalfi 6y ago
That reminds me of a scene from Tibor Fischer's The Collector Collector; a character's van is stolen, cleaned, and returned to its parking spot.