5 ms·

freakattack.com is an IP owned and managed by the University of Michigan. I could not visit the site due to them being in my firewall's ban list caused by unaut

by diltonm 12y ago

freakattack.com is an IP owned and managed by the University of Michigan. I could not visit the site due to them being in my firewall's ban list caused by unauthorized vulnerability testing against my home network. As an aside I wonder why our tax dollars are being used to support unauthorized vulnerability attempts and for hosting a .com commercial site? Is it legal for the person/people operating freakattack.com to use US Tax Income to fund their own commercial efforts using University resources? I didn't graduate college, maybe it's legal for them to do this?

LeafStorm 12y ago
> support unauthorized vulnerability attempts That was probably just a random student who learned some fun stuff in Security class and slept through the Ethics lesson. I can't speak for UMich, but security research at my university (NC State) has a very strict "don't attack civilians" policy. > hosting a .com commercial site First off, .com sites are not necessarily commercial. Second, this isn't a commercial site, it's an informational page about a recently discovered TLS vulnerability.
- diltonm 12y ago
  In the first case I read you as saying it's OK to commit a crime against a civilian in the United States as long as [the person didn't mean to] and in the second case that since not all .COM domains are used for commercial purposes and since this one seems to be information only at the moment; that our tax dollars which helps Universities across the United States to run can be used to fund whatever .COM sites students feel so inclined to register and for whatever reason they feel is justified.
  - exo762 12y ago
    I heard that rhetoric when ones you are calling for help prosecuted Aaron Schwartz. All in times when NSA was hacking all the systems they could get their hands on both around the world and in USA. You may be overreacting and unwillingly supporting erosion of civil rights.
geofft 12y ago
What is your evidence that the vulnerability testing was done by someone supported by your tax dollars, instead of by a computer that was part of a botnet controlled by your government's cyberenemies?
- diltonm 12y ago
  Here is a check for the IP for freakattack.com: http://www.tcpiputils.com/browse/ip-address/141.212.122.194 http://www.tcpiputils.com/browse/ip-address/141.212.122.194 Edit: They have been on that list for a while, so either the staff at the University is incompetent or they don't care; what was your point again?
  - dadrian 12y ago
    This is why reverse DNS exists. http://researchscan450.eecs.umich.edu/ http://researchscan450.eecs.umich.edu/
  - diminoten 12y ago
    He asked about why UMichigan is inaccessible from your network. How do you know it was a supported student activity and not either a malicious student, or a machine on the UMichigan network that's been compromised? Have you reported the activity against your home network to UMichigan?
  - moyix 12y ago
    You are actually correct that you were scanned by an official, funded project at the University of Michigan. The research team specializes in "internet-wide measurement", meaning they scan for vulnerabilities on a regular basis in order to get a sort of "Internet health report". Nonetheless, if this bothers you, visiting the IP that scanned you gives you instructions for opting out: http://141.212.122.194 http://141.212.122.194
- nuxi7 12y ago
  Its probably just scans from zmap. Complaining about zmap scans is about on the level of complaining about ssllabs.com scanning your box. https://zmap.io/ https://zmap.io/ It could be a student in the dorms who discovered metasploit though. Or someone in the computer lab who has a tool that doesn't need root. (or who rooted the lab computer)

by diltonm 12y ago

LeafStorm 12y ago

> support unauthorized vulnerability attempts That was probably just a random student who learned some fun stuff in Security class and slept through the Ethics lesson. I can't speak for UMich, but security research at my university (NC State) has a very strict "don't attack civilians" policy. > hosting a .com commercial site First off, .com sites are not necessarily commercial. Second, this isn't a commercial site, it's an informational page about a recently discovered TLS vulnerability.

diltonm 12y ago
In the first case I read you as saying it's OK to commit a crime against a civilian in the United States as long as [the person didn't mean to] and in the second case that since not all .COM domains are used for commercial purposes and since this one seems to be information only at the moment; that our tax dollars which helps Universities across the United States to run can be used to fund whatever .COM sites students feel so inclined to register and for whatever reason they feel is justified.
- exo762 12y ago
  I heard that rhetoric when ones you are calling for help prosecuted Aaron Schwartz. All in times when NSA was hacking all the systems they could get their hands on both around the world and in USA. You may be overreacting and unwillingly supporting erosion of civil rights.

geofft 12y ago

What is your evidence that the vulnerability testing was done by someone supported by your tax dollars, instead of by a computer that was part of a botnet controlled by your government's cyberenemies?

diltonm 12y ago
Here is a check for the IP for freakattack.com: http://www.tcpiputils.com/browse/ip-address/141.212.122.194 http://www.tcpiputils.com/browse/ip-address/141.212.122.194 Edit: They have been on that list for a while, so either the staff at the University is incompetent or they don't care; what was your point again?
- dadrian 12y ago
  This is why reverse DNS exists. http://researchscan450.eecs.umich.edu/ http://researchscan450.eecs.umich.edu/
- diminoten 12y ago
  He asked about why UMichigan is inaccessible from your network. How do you know it was a supported student activity and not either a malicious student, or a machine on the UMichigan network that's been compromised? Have you reported the activity against your home network to UMichigan?
- moyix 12y ago
  You are actually correct that you were scanned by an official, funded project at the University of Michigan. The research team specializes in "internet-wide measurement", meaning they scan for vulnerabilities on a regular basis in order to get a sort of "Internet health report". Nonetheless, if this bothers you, visiting the IP that scanned you gives you instructions for opting out: http://141.212.122.194 http://141.212.122.194
nuxi7 12y ago
Its probably just scans from zmap. Complaining about zmap scans is about on the level of complaining about ssllabs.com scanning your box. https://zmap.io/ https://zmap.io/ It could be a student in the dorms who discovered metasploit though. Or someone in the computer lab who has a tool that doesn't need root. (or who rooted the lab computer)