44 ms·
Phrack Issue 70
- mfrw 5y ago>> Phrack! We're back! It was only five years ago that issue 0x45 was released.
- ArtWomb 5y agoKudos to Phrack on their longevity, even if they get hugged to death this morn ;)
- bronlund 5y ago((hugs))
- amenghra 5y ago(Partial) cached copy: https://web.archive.org/web/20211005123424/http://phrack.org/issues/70/1.html https://web.archive.org/web/20211005123424/http://phrack.org...
- amenghra 5y agoFun to see a bunch of VM/JIT security articles and then a string format thing…
- sgt 5y agoA string format thing in Solaris CDE!
- karmicthreat 5y agoMan this takes me back. I got my start into being interested in programming, tech with Phrack in the late 80s while in middle school.
- WJW 5y agoSame! I remember doing some very basic stuff with BASIC and SuperLogo back in the day and fairly quickly becoming disillusioned with a feeling of "is this all there is?". Then I discovered an early edition of Phrack discussing NOP slides and advanced (to me, at the time) techniques for injecting code into already running binaries. It opened my eyes to how deep the rabbit hole really goes.
- dt3ft 5y agoIt's down. Are they hosting this static site on a calculator?
- HugoDaniel 5y agoit is not static since it is constantly hacking your brains
- gpderetta 5y agoIt is secretly hosted on fb.
- forgotpwd16 5y agoThat's surprising. Last one was like 5 years ago.
- totorovirus 5y agowow I thought they were out of business
- utahsaint365 5y agoThey were never in business…
- ltr_ 5y agonice to see phrack back again. I still remember "Smashing the stack for fun and profit", the article that back in the days made me have an epiphany about C, pointers and memory in general.
- deleted 5y ago[deleted]
- mlang23 5y agoI remember listening to a CCC presentation around 23C3 with a very similar title, which basically did the same for me.
- _0ffh 5y agoYeah, in these circles "for fun and profit" rivals the "considered harmful" of the larger community.
- contingencies 5y agoConcatenating, we get politically correct society: Fun and profit considered harmful.
- wiml 5y agoOr Considering harm for fun and profit?
- eulers_secret 5y agoI re-read that article just a couple weeks ago to help complete a work-related security challenge! I also had to disable ASLR (echo 0|/proc/sys/kernel/randomize_va_space) and the executable was 32-bit. A lot has changed since those days :)
- jmclnx 5y agoI forgot about that, will need to see how that works on OpenBSD :) I expect failure for me.
- platz 5y agoWhat would be the appropriate comparison/relation between 2600 and Phrack?
- CodeGlitch 5y agoI would say 2600 is more counter-culture / anti-authoritarian / political, and Phrack is more just about the technical stuff. To give a recent example, 2600 gave their support for BLM: https://www.2600.com/node/37570 https://www.2600.com/node/37570 Which lost them a bit of support (although perhaps gained some as well?). 2600 is also pretty good at never missing an issue (quarterly), and also runs actual prints.
- Grimm1 5y agoThat said, Phrack is where I learned things like this (not that I have ever or will use the knowledge): http://phrack.org/issues/1/7.html http://phrack.org/issues/1/7.html So it has it's counter culture roots. Edit: Which I actually just noticed is from 2600 so I guess the point stands?
- Raro 5y agoOhhh, that's where this came from! I directed a short film in the late 90s and we used this as an 'event' at a party (minus the floating part). We removed the glass from a light bulb to act as a remote fuse. Acetylene was perfect, as it gives this wonderful 'crack,' much better than the LPG we first tried. It was Tim's idea. Please do not try this!
- alex_anglin 5y ago2600 had paper issues and local meetups all over the place.
- platz 5y agoHad? Im pretty sure I saw my local MicroCenter have issues of 2600 recently (which I also find somewhat amusing)
- _joel 5y agoWow, no there's a blast from the past! Great to see it back
- fidesomnes 5y agorip navs. you were a positive influence for many and I am glad to have gotten to know you while you were here.
- mikecoles 5y agoThank you, phrack. Blacklisted411 was another zine you may be interested in hunting down if you enjoyed the genre.
- dogman144 5y agoI recently found a new-ish zine with similar content and current publication dates, loosely led by a principal sec eng at a FAANG, but can't recall the title. If anyone knows what I'm talking about, would love to know the pub's name. These security zines add so much value. Smashing the stack for fun and profit is taught in CS programs, for instance. I'd love to see this style of security research culture with the personality that it has return/grow outside of Project 0 blogs.
- danceparty 5y agoMaybe you are thinking of PoC||GTFO https://www.sultanik.com/pocorgtfo/ https://www.sultanik.com/pocorgtfo/
- morcheeba 5y agoMighty neighborly of you to share the link!
- nfoxai 5y agoPrincipal sec feels off, but do you perhaps mean "Paged Out!"? The description rings true-ish. https://pagedout.institute/ https://pagedout.institute/
- dogman144 5y agoYes! Thanks a ton. > currently: Google (IT security engineer) but idk his rank there.
- da_big_ghey 5y agoAlso there is https://secret.club/ https://secret.club/
- _e 5y agoThe following two links have a nice collection of old & new zines: https://packetstormsecurity.com/files/tags/magazine https://packetstormsecurity.com/files/tags/magazine http://www.textfiles.com/magazines/ http://www.textfiles.com/magazines/
- punk_ihaq 5y agoContributed last to Issue 67. Wow it's been forever.
- derekzhouzhen 5y agoSeriously, no https in 2021? For a website dedicated to security?
- jazzyjackson 5y agowhat attack vector are you worried about? CIA man-in-the-middling a zine to make the articles less entertaining?
- yodelshady 5y agoFair point, but then, why bother with the PGP key?
- sodality2 5y agoContent isn't private the way email is.
- mindless_solips 5y agoThank you for this. The Love of Complexity is Real in this field. While I encourage and support the goals of anonymity and security everywhere, everything has its design envelope. This is an e-zine of public content. Sure, "SoMeOnE cOuLd InTeRcEpT", but why bother? Even with encrypted sockets, logs would still show your IP going to the site. What information are we trying to protect or malicious activity are we trying to stop by using SSL? ... And is it worth the unfortunate webmasters having to deal with bullshit like LetsEncrypt's root certificate expiration and all the main of keystores and PKI management so random "Very Serious People on the Internet" can say "ah, they follow The Standard on security." Controversial statement in 2021, I'm sure, but I think a use case for simple HTML over HTTP websites still exists. Your personal page with pictures of cats and your resume probably doesn't need to be some bastion of cybersecurity.
- frankjr 5y agoThere are ISPs that will happily inject ads and tracking codes into pages you visit. This obviously doesn't work over HTTPS. https://security.stackexchange.com/questions/157828/my-isp-bsnl-india-is-injecting-ads-using-phozeca-which-spoils-websites-and-mak https://security.stackexchange.com/questions/157828/my-isp-b... https://superuser.com/questions/902635/isp-is-inserting-ads-into-web-pages https://superuser.com/questions/902635/isp-is-inserting-ads-... https://old.reddit.com/r/india/comments/8ry1k4/does_your_isp_inject_malware_ads_in_the_websites/ https://old.reddit.com/r/india/comments/8ry1k4/does_your_isp...
- 0xbadcafebee 5y agoThey wink at the fact that the hacker community has changed, but Phrack is also (afaik?) still run by old fogies who don't necessarily reflect "new" hacker communities. It could be that the "community" already has its own new "Phrack". One found only on live-streamed dark-web sites, or podcast, or whatever passes for a party line these days. The world is more antagonistic to the Black Hat ethos now. Those in the West that have gotten fat off of bug bounties and infosec contracting may not have anything to do with "real hacking" now. They probably assume the hacker community will always be anglo-centric. But I'm sure Russia and China is rife with underground wares, as is probably Brazil and large swaths of Eastern Europe. Many hackers are probably inspired more by religion or nationalistic fervor than a bug bounty, yet they still need to research to perform epic feats and compromise national defenses. Who knows what communities lie outside the domain of a 36 year old text periodical? The net is vast and infinite.
- sgt 5y agoI think someone on HN would then know about it.
- mathverse 5y agoThe community is english centric not anglo-centric.Eastern Europe is already pretty much part of the West unless you mean different kind of Eastern Europe (Belarus,Ukraine..) China,Russia,Brazil think of exploits and exploitation techniques as wares to keep or use as weapons.There is not much sharing or exchange of ideas.
- jrochkind1 5y agoOne definition of "anglo-" as a prefix is literally just a fancy (or shorter) way of saying "English-". The Chinese, Russian, and Brazilian states see exploits mainly as weapons. As does the US state.... The question is whether a hacker culture apart from state control exists, of hackers interested in ideas for their own sake/the challenge/the lulz. Without being in those scenes or even speaking those languages, I couldn't say. (But maybe you have knowledge?) As in above parts of these comments, threads where people wonder if the corresponding cultures in the USA have been entirely "neutered" by state and corporate involvement, the question is not irrelevant to the US or European or English-speaking worlds either.
- wiseleo 5y agoThe band released a new album. :)
- m00dy 5y agoThere is also a guy from Denmark, he has been writing cool stuff at https://secret.club/ https://secret.club/.
- coretx 5y ago"the community is moving away from itself" - Setup a new zine and get one free editor from every intelligence agency in the world. - Organize a conference and have a fed do the keynote speech for you. Oh, wait... But seriously, people are indeed "moving" but for other reasons. The community and culture is dying because it is under attack by several highly advanced actors.
- 0xdeadb00f 5y agoWhat are those dot points a reference to? I'm OOTL. Never followed phrack though I have come across it quite a few times.
- coretx 5y agoIt's reference to general Keith Alexander and secretary of homeland security Alejandro Mayorkas having infiltrated, assimilated and neutered Defcon. The latter did the last keynote speech.
- tptacek 5y agoWhat do you think Defcon was in the 1990s?
- bink 5y agoAs a former Defcon attendee from the 90s, what made Defcon so successful as a business IMHO was that it was run and managed by folks who were only tangentially associated with the wider hacking community. Most of us who considered ourselves "underground" would never have dreamed of commercializing a conference the way DT did. At best you'd sell t-shirts to help pay for the cost of the venue. It was definitely not associated with the military or govt. at the time though. That really came about with the founding of Blackhat and the open wooing of the Feds. I should also say that almost no "hacker" conference, even back then, was primarily attended by hackers. We used to joke back then that Defcon was a "retarded fashion show" (sorry for the offensive terminology). There were always more journalists, narcs, and hangers-on at cons back then than people who were actually hacking anything.
- ChrisArchitect 5y agopretty amazing to see Phrack pop up here and there. Totally cool with them doing an issue every 4-5 years. Always nice to see that proper old skool textfile ascii art mag format. Had copies stored on floppy disks back in the day! Gives me such a early-mid 90s vibe and demoscene vibe also
- bluedino 5y agoInterestingly enough, Fortinet classifies this site as 'Extremist Groups'
- pvarangot 5y agoOh I do wish that was still true...
- cyberpunk 5y agoSighz, 'pr0ud supp0rt3r 0f pr0j3kt m4yh3m' ;)
- Arrath 5y agoIt seems to be a fairly recent addition, a few months ago "Smashing the Stack for Fun and Profit" came up on HN and I was able to read that just fine. Now the corpo-firewall locks me out. Its like they want me to be productive, or something.
- cogburnd02 5y ago'meraki' or whatever my job is using seems to think it fits in the category 'illegal'. Ha!
- protomyth 5y agoCisco is meraki. Go figure.
- stooliepidgin 5y agoWe're puttin' the band back together. https://youtu.be/4yECgXi3Y_8 https://youtu.be/4yECgXi3Y_8
- lolptdr 5y agoWhy does phrack.org domain not use SSL protocol?
- jmclnx 5y agoNo need since it is really plan text files ?
- deleted 5y ago[deleted]
- neilsimp1 5y agoI've never heard of Phrack before, but a plain text-based zine is a prime candidate for Gemini/Gopher if I ever saw one.
- Inhibit 5y agoIf you'd like some good dawn-of-time history about the BBS era Phrack came out of (and the people who started it) The Hacker Crackdown by Bruce Sterling is available free on Archive.org (book 101!). Fun read, probably even more so if you weren't there. https://archive.org/details/thehackercrackdo00101gut https://archive.org/details/thehackercrackdo00101gut
- utahsaint365 5y agoAgreed, Sterlings book is a fine read. Probably lost on anyone after gen x though.
- channel_t 5y agoCall me old-fashioned, but in this modern day internet where almost everything is optimized to be as distracting as possible, it's a real breath of fresh air to still be able to read premium technical content in plain text form.
- jsemrau 5y agoI am with you on this. I truly hope the years of social media exuberance are beyond us and we return to our communities of friends in specialized microcosms.
- deleted 5y ago[deleted]
- kevin_thibedeau 5y agoSomebody's extra paranoid with that key.
- haecceity 5y agoPeople are ego driven but they're also profit driven. Industry and academia are paying attention to security now so that's where hackers are going. Capital eats everything.
- TheCowboy 5y agoI recall a strong strain of activism to get hacking as an interest as socially acceptable, along with opening up compsec to a wider audience, and getting gov/corps to embrace this instead of treating all hackers as criminals. I'm sorry if it disappoints you that people 'sold out' and it might feel like something of the original 'underground' scene has been lost---I genuinely get that. But experts who put in the time deserve to be compensated and making computing more secure is something that benefits society.
- rand846633 5y agoDown for me since over 24h. Anyone got a full mirrored link?