Article View: cn.comp.hacker
Article #13544����ڿͿ��ġ�������˴�CNN�����ʡ�����¶�������
From: �dz�ǰ
Date: Wed, 12 Oct 2005 05:14
Date: Wed, 12 Oct 2005 05:14
391 lines
28357 bytes
28357 bytes
����ڿͿ��ġ�������˴�CNN�����ʡ�����¶�������
��CNN���������ʱ�����ġ��������������־ͺͺڿͻ����˵Ⱥţ�һ��ëͷС����սȨ���Ĵ�����¡������������˵����
Щ�Ǹ������������Щ�Թ���ʵ������ɲ�̫��ʵ�Ĵ�������ˡ�
��˵��Ϊ�������Լ��ĺ�����������ҵ����ϵͳ��ȡԴ�룬��Щ����ʵ�������������������NORAD����������������˾�����
�������FBI�Ĵ��š�
FBI��1995�������������ˣ�һϵ�е��ٱ�����ʹ�������Ǽ�����ָ�ؽ��������������թ���������5�ꡣ2000��������
�ͷţ������һ�Ҽ����ȫ��˾���ں�CNN����Manav
Tanneeru�ĵ绰�ɷ��У�������˳�̸�ˣ���Ĺ�ȥ���������ڵ���
�簲ȫ״�����������ȥ�������������ζ��ʲô��
CNN�����ġ�������˵Ĵ������·�˽�֪�����ƺ��㱾��ȴ�Դ˲���ΪȻ���㾿��Ϊ����˳����о��嵽��Щ��ʵ�ı����أ�
������ˣ���Щ������FBI�����������Ƶ��龰�����������ǡ�ս����Ϸ�������ǡ���ҹ��С����������ĵ�Ӱ�С�̫���鹹����
������ʵ���¼��������һ�𣬺ñȵ��Ҵ�Ħ��������ŵ������ȡ������룬��������ڿ͵��ҿ�̽Դ����ʱ���Ҹ�����һ����
�ߣ�ʵ��������ȡ��Ϊ
��һ��Ϊ����Щ���ϡ���Щ�ڹ����е�����������ģ���Щ������ʵ�������ǣ�������̫��
��ʵ����������
��Ȼ��ʹ�Լ�������־��صģ���������ŦԼʱ���ı�������������һ������Σ�յĽ�ɫ�������ӿ��˶Դ˰��������?���û��
��Щ���£�����Ϊ������������־��棬��Ҳ��ᱻ���ߣ��������ٲ��ᱻ�����н��һ��֮�ã�ֻ����Ϊ�����ҿ���ͨ��һ������
�绰����� ������
�Դ�������Ϊ������Ϊ�ҵõ��ķ���Ԯ����Ԥ��dz����Ĺ���ί����ʦ�����Ҳ���ָ�ط�ͥ�ϲ�û�г���������������˱�����
������˾����Ǽ���FBI���Ҿ�Ի���˶�����ߡ���������־��أ��Լ���ʼ��ٸ�ߡ�Ȼ������ý��ı����ұ�������Osama
bin Mitnick�������ˣ�ע�������ǵ������� Laden, Osama bin����
CNN�������ǹ����Ժ�һʱ������ڿ͵䷶���ڴӼ����ͷź�Ҫ��֤�������Ժ����������������Ӫ��һ�����簲ȫ��˾��
��ô���ϲ���ĸ�����أ�
������ˣ������Ȥ����Ϊ�ڿ�������һ�ֿ���ͬʱ�����ڷ�����Ϊ���ǺϷ���Ϊ�ϵļ��ܣ���������ǰ���֪ʶ�ĺ����ĺʹ̼�
�������ô��׳أ������ڵ�������Ϊһ��ȫ����Ĺ�������������1/4����ȫ�����������������ǿ��Թ�Ӷ����������
��ϵͳ���������ǵİ�ȫ���⣬�ڱ���Щ��治��ļһ��֮ǰ���ϲ�����
���ԣ�������Ϊ�㻹���ڵ��·�������������ķ�����Ϊ���㲻�����ӵ��£��㲻��Υ�����¡�����һ�ַ�̡�����ֵ���˽�
���ǣ��������ҵ�רҵ�����ͼ���֪ʶ�к�ʵ�ʵĻ�����ᡣ
CNN����ص��������磬�ر������簲ȫ����������ȳɵ���ʵ�����ܻ����һЩ����ȫ�кͲ��ɡ���Ĺ�˾������ǽ����أ�
������ˣ��ڰ�ȫ����������һЩ�˲������ҡ��������ҵľ����ߣ������ǵĴ��·����������ҿ��Կ϶����ǣ����ǹ�˾û�нӵ�
��Ϊ�����ҵĹ�ȥ������ĵ绰���෴���ǣ��в�����ϵ���ǵ��ˣ��������DZ������õ������ϵ���һ���δ�ӵ�һ���绰
˵����ι����Ϊ���¡����£��� �Dz���Ƹ����Ĺ�˾����
�Ҳ��������ռ���ɣ�����ȷʵ�������ڲ��˽���������������ǹ�˾����������ֻ��֪������һ��������ĺڿ͡�
CNN������Ϊһ��Υ���ڿ͵�ʱ��ʱ�Ļ������ڵ�һ̨������ж���أ����ڱȽ�������ȫ�������˶��٣��㻹������ǰ��
��������
������ˣ��������ұ�Ƹ���������ʱ����ʱ��Ȼ����ǰ�����ס���ʵ����ȡ���ڿͻ����?�������������ڽ����е��ºڿ���
Ϊ����ȡ����Ŀ����˭�����ǿ����ѵġ����ڵĻ�����Ψһ����仯���Ǽ����ϵ����⣬������Ṥ��ѧ���棬ȴʼ����һ����
�ԣ��ⶼȡ����ҵ�ߡ�����
��ϵͳ�IJ���Ա�����������ľ����ԣ����������Բ����ڣ������Ƿ������һ����ȫ�������ϣ�
CNN����ô���ڣ���ͨ�û��ж�ô�����ܵ������أ���Ȼ����ȡ�������ǰ�װ�˶��ٰ�ȫ�豸�������������ѵõ�����Ч�İ�ȫ��
�ϣ����ж������أ�
������ˣ�ȥ���Һͽ����������Լ��ھɽ�ɽ����һ�ҹ�˾��������һ���о������ǽ�����һ��ʵ�����磬�������Ų�ͬ����ϵ
ͳ��������������ɡ�Ϊ�˼����Щϵͳ��û���κη����¶ʱ��ᱻ���֣����ǰѸ��������ɽ�ɽ��һ��DSL��·������է
����ǣ�����һ̨���� ���ڽ�������4���Ӻ�ͱ������ˡ�
CNN����֮ǰ�ᵽ��Ṥ��ѧ����һ��������������ζ��ʲô��
������ˣ���Ṥ��ѧ�����á�Ӱ�����ƭһ���˵ķ�����һ����ҵ�п����ε��ڲ���Ա�����һ��Ҫ�����Ҫ��ͨ����й¶
��Ϣ���������ij�ֶ���������������顣���ܹ�ʹ��Ҫ�ڿ��ü���©��������վ�����ӵ����飬������һ���绰�����
CNN����ʱ�ĺڿ����������������Ṥ��ѧ�ģ�
������ˣ��ţ���Paris
HiltonΪ��ɡ��������ֻ�������£���������·�������С�һ������ΪT-Mobile��վ���?��һ������
��ĵ绰������T-Mobile��վ�����������������ͨ����ŵõ���������룬��Ϊ�������ֻ�ֻ�ڻ������С�
���������������ǣ���һ���������������ƭ�ļ������ܹ��ı���绰��������ʾ����ʾ�ĵ绰���롣��ˣ����Ǽٰ�T-Mobile��
����������һ���绰����������ʾ����ʾ����T-Mobile�ͷ����룬�������Ǹ�����˵����������������յ�һ���������������
����������������Ƕ��ŵ����ݣ���
���������ԥ�������ˣ������Ϊʲô��Щ���ܵõ����T-Mobile������Ϣ�������ʼ�������
�����
������һ�����ӣ���˰�ֵĵ���Ա�ð칫�ҵĵ绰��һ�ȫ������100���¼�ڲ��ITҵ�����ߣ���35���˺�����ԥ���ڵ绰
�н��û��������ȫ���г���
���ԣ����Ǻܴ����в��һ�ҹ�˾���Ի���Ǯ�����������ǽ�����ϵͳ�����ܺ�����ȫ�����ϣ��������һ��������߸�˾
�ڲ�ij�������ε���Ա���˸��绰������������������ˣ�Ȼ���߳ɹ����룬��ô���ڼ���������ʽ���ȫ��һ�IJ�ֵ�ˡ�
CNN�����ж������������У��Լ�����ʹ�����ÿ���
������ˣ��������������С���֪��Ϊʲô����Ϊ������������ҵ��ʺţ����ҵ����ÿ������������ʻ�����թ�ҵ�Ǯ������ʧ
����˭�������У������ҡ�
CNN����ô�������أ��������֧���������߹�������ֻ�Ǻ��濭�ġ���������Ƿ����ʻ�������
������ˣ���һ�������˵����ҵ���������ֻ���롣����㡣�ҵ�ϣ��ʮ��ǰ���һ��Ǹ��ӷ�ʱ�����������ҵ���ݡ����Dz�
�пᡣ��ƭ��400��Ԫ�������õ�����ĸ������˹ά��˹�ĵ�ַ����ʱ���Ա����ס�ڼ��ݡ�����ʵ�ܼ���Ϊ��Ҫ����ֻ����
ȡij�˵���ḣ��� �š����ֲ��ǻ�����졣
���ǣ��Һ�����������ʹ�����ÿ����п��ܻᱻ��ȡ�����ǰ�����Ϊ������ԣ��ⲻ̫���ܡ������ߵ�Ŀ������Խϴ������С�����
���Dz��ܵõ��ܶ��û�����������룬��úܶ��ʺŵķ���Ȩ�ޣ����ǽ����õ��ҵġ�����������ʹ�����ÿ�����Macy's�ٻ���
˾��
��ȫ��������Ĺ�Ա���Ժ����õ����ÿ��ţ����DZȽ�һ�ҿ��Եõ������ÿ��ŵľưɡ�����Ѹ�ȫ��
CNN��������Ҳ���������ˣ������DZ���ݵ��ˣ���������Ϊһ��ڿͳ����ڵ��Ӿ�˫��Ů���Alias���С�������ο����Լ���
����ЧӦ�ģ�
������ˣ������˼����Ϊ�Ҿ����˵�����в��Σ������ľ�����Ϊ�ڿͱ����������ڷ���˾����ϵ�д����˸���Ӱ�졣
���ǽ����DZȣ����Ƕ��ҵļ�������Ȥ������ҳ������������������ϸ����Ҳ��ٰ�������Ϊ�ҹ�ȥ����ʲô��������Ϊ��
�ļ����������˽�֪��
CNN���ڴ������������ʧ��
������ˣ�����û�У��Ҳ�����ʧ���Һ�ϲ�����ڵ����Һ��ź���ȥ�ٲ����µ��ҷ��º����Ĵ����Һ������ٴεõ���ᣬ
�������ҵ�������������ᡣ
D.N.N.
A convicted hacker debunks some myths
Friday, October 7, 2005; Posted: 4:33 p.m. EDT (20:33 GMT)
(CNN) -- To many, the name Kevin Mitnick is synonymous with hacking, the
cinematic sort where a snot-nosed kid thumbs his nose at authority. But, Mitnick
says, the characterization is a bit overdone and the legend untrue, if not
libelous.
It is true, he says, that he broke into corporate computer systems and stole
source code to satisfy his curiosity, but he denies the stories that he hacked
into NORAD -- North American Aerospace Defense Command -- or that he wiretapped
the FBI.
After a well-publicized pursuit that made him notorious, the FBI arrested
Mitnick in 1995. He served five years in prison after pleading guilty to charges
of wire and computer fraud. He was released in 2000 and today runs a computer
security firm. In a telephone interview with CNN's Manav Tanneeru, Mitnick talks
about his past, the state of online security today, and how he handles what his
name has come to mean.
CNN: There is a certain myth of Kevin Mitnick, but you seem to disavow a lot of
it. Why exactly did you become so famous and what specifically was reported that
was inaccurate?
MITNICK: [The claims] that I wiretapped the FBI or something like that were
something out of a movie like "War Games" or "Enemy of the State" or something.
There were fictional events that were tied to real events, like when I took code
from Motorola and Nokia when I was a hacker to look at the source code. I took a
copy, which is essentially stealing, to look at the information. That was true,
that was the truth ... in the story, but there were a lot of libelous
statements. ...
I'm the one that got myself into trouble, but because the reporting in the [New
York] Times portrayed me as this very dangerous character, the government
stepped up the prosecution of the case. If that story never went out, I don't
think, at the end of the day, I would have been prosecuted, but I wouldn't have
been held in solitary confinement for a year for the fear that I could launch
nuclear missiles by whispering through a pay phone.
I was powerless because I was represented by a publicly appointed attorney who
had a very limited budget. But a lot of accusations I wasn't charged with. If I
hacked into NORAD or wiretapped the FBI, I certainly would have been charged
with it. I got into trouble largely because of my actions. However, because of
the media reporting, I was treated as "Osama bin Mitnick."
CNN: You were once the most famous and sought after hacker in the country. After
your release from prison you were asked to testify before the Senate, and you
now run a Web security firm, which is a fascinating evolution.
MITNICK: It's kind of interesting, because hacking is a skill that could be used
for criminal purposes or legitimate purposes, and so even though in the past I
was hacking for the curiosity, and the thrill, to get a bite of the forbidden
fruit of knowledge, I'm now working in the security field as a public speaker.
Twenty-five percent of my revenue is actually doing security assessments, so
people actually hire [me] to break into their systems to find their security
failures and patch them before the bad guys find.
So, it's kind of interesting, because what other criminal activity can you
ethically practice? You can't be an ethical robber. You can't be an ethical
murderer. So it's kind of ironic. But it is really rewarding to know that I can
take my background and skills and knowledge and really help the community.
CNN: The fact that you are back in the online world, especially the cyber
security sector, may give many reason for a certain insecurity and paranoia. How
has your firm been received?
MITNICK: There are several in the security field that don't trust me. They're my
competitors, and right there, there is an agenda. But I'm sure that our company
does not receive phone calls because they're concerned about my past, and then
again, there are a lot of people that do make those calls, and they keep the
business pretty going good. I never got a phone call saying, "Hey, we're not
hiring your firm because of x, y and z."
I don't know what the percentage is, but I'm sure there are people that don't
want to use our firm because they really don't know much about the case. They
just know me as a hacker that went to jail.
CNN: Compared to the time you were an illegal hacker, and the contemporary
landscape, how easy is it to hack a computer? Has security improved much? Would
you still be able to do what you did years ago?
MITNICK: I get hired to hack into computers now and sometimes it's actually
easier than it was years ago. It really depends on who the client is -- or if
you're doing ethical hacking, who the target is. It could be a difficult target
or an easy target. The landscape, the only thing that's changed in regards to
vulnerability are technical issues, but with social engineering, it's all
remained the same. So, it depends how vigilant the owners and the operators of
the computer systems and the network are, and it really doesn't go to the
question of are we living in a more secure world?
CNN: Then, how vulnerable is the common user? Sure, it depends on how many
safeguards they've installed, but if they have the most effective of security,
how easy is it?
MITNICK: I did a study USA Today was involved with and another marketing firm in
San Francisco was involved with within the last year, and we set up a hunting
network, which was six different networks running various different operating
systems. We plugged them into a DSL line in San Francisco, and we just watched
them to see how quickly these systems could get broken into without having any
protection. And one of the computers was broken into four minutes after plugging
it into the Internet, which is quite astounding.
CNN: You previously mentioned social engineering. What exactly does that term
mean to you?
MITNICK: Social engineering is using manipulation, influence and deception to
get a person, a trusted insider within an organization, to comply with a
request, and the request is usually to release information or to perform some
sort of action item that benefits that attacker. It could be something as simple
as talking over the telephone to something as complex as getting a target to
visit a Web site, which exploits a technical flaw and allows the hacker to take
over the computer.
CNN: And how do contemporary hackers use social engineering in what they do?
MITNICK: Well, how about Paris Hilton? She was attacked on her cell phone, and
she was attacked two ways. One was because of a T-Mobile's Web site, and the
other guy was able to compromise it by getting her phone number by going on
T-Mobile's Web site, doing a password reset, which SMS-ed her new password
because, presumably, only the owner would have the handset.
And then what they did was, they did a technique called caller ID spoofing,
which allows a person to change the number they're calling from on their calling
phone number display. So, they were posing as T-Mobile customer service, and
they called her phone, and on the caller ID it showed as T-Mobile customer
service, and then they told her, "There are some network difficulties. Have you
been getting any SMS [messages] about a password reset, and what were the
contents of the message?" and she freely gave it out, and that's how these guys
were able to get to her T-Mobile Sidekick, and her e-mail, and whatnot.
In another example, the IRS just did a security audit under the office of the
inspector general and called 100 managers posing as IT people at the IRS, and 35
of those mangers freely gave out their password and user name over the
telephone.
So, it's a significant threat. A company can spend hundreds of thousands of
dollars on firewalls, detection systems and encryption and other security
technologies, but if an attacker can call one trusted person within the company,
and that person complies, and if the attacker gets in, then all that money spent
on technology is essentially wasted. It's essentially meaningless.
CNN: How much do you trust online banking and the usage of credit cards online?
MITNICK: I trust online banking. You know why? Because if somebody hacks into my
account and defrauds me of my credit card and my online bank account, guess who
takes the loss? The bank, not me.
CNN: Then what about other transactions? Do you pay bills online or shop online?
I'm just curious if Kevin Mitnick is worried about ID theft?
MITNICK: Somebody already stole my identity once and used it to apply for a cell
phone account. And it's too bad. I wish they stole my identity 10 years ago when
I was a fugitive -- that would have been cool. It was a $400 bill, and they used
my mom's address in Las Vegas when I was living in California under my name.
That's really easy, because all you need to steal someone's identity is the
Social Security number. It's not really rocket science.
But, I don't have a problem at all using my credit card online. There are
attacks that can be done, but it's unlikely that I'll be targeted as an
individual. It's more likely the attackers will target the bank. So that way
they can get many user names and passwords, and get access to many accounts,
rather than just targeting me. I think it's safer to use a credit card over the
Internet than it is to go to a Macy's and use it where an employee can simply
skim off the card, or go into a bar, or a restaurant where they have your credit
card number.
CNN: You've become something of a star, a cult one, at least, even appearing on
an episode of "Alias" as a hacker. What do you make of your celebrity?
MITNICK: It's kind of interesting, because I went through a horrific, horrendous
experience and became the hacking poster boy, and it had a negative effect on my
trip through the criminal justice system. But now that I've turned over a new
leaf and people are interested in my skill-set, now the notoriety of my name
helps me in my business. Not because of what I did in the past, but because I'm
a known entity with my skill-set.
CNN: Do you miss being on the run?
MITNICK: No, no, I don't miss it all. I like my life now. I made some really
stupid mistakes in the past as a younger man that I regret. I'm lucky that I've
been given a second chance and that I could use these skills to help the
community.
������Դ��CNN.com
__________________
[One can only hope.Take what you can... Give nothing back][Rule number one,don't
fall off the neverland...]
����, 11:21
#2
asap
�м���Ա
�� ��:
ע������: Jul 2004
����: 1,041
�����£�����һ�£� good job��
Keven Mitnick�� ���ڶ���ɿ���.������ˣ� ��ʵMitnick�ķ����͡������ˡ��ܽ�
���ԣ���������˺õ㡣
Keven�Ǹ����˲������� �й���ı����ܶࡣ ����´�Ķ�����
Ϊ��˵����ֵ����������ij��˵�Ӱ�� ��The Hackers�� breakdown��
���Խ�ר����ר���о���Keven����������ijЩ�����ֱ����ţ�����绰ͨѶ��
�dz��������� ����һЩ���֪ʶ����ȴ�ֲ� ������������
�Dz���Ӱ�ܲ��? Keven���´�˵������hacker��
����û���ƻ����˵Ķ����������Ҫ���ҿ��Ժܸ��С������� ��Ҳ�Ǻڿͣ���
��������������ר�ң��ǰ��� ���Ծ��ö��֮��ȥhack�ˡ�
�´���������FTC��֤ʱ������ʾ����ŵ�����ֻ�������̸����
����������汻��Ϊ��finger hacking���� �´�Ҳ������ʥ���Ǹ��еij�����ڿ�ϵͳ��
����ʱ�����ϵͳ��hack�� ��Ȼ����ȫ ΪĿ�ĵģ� �����л����к��š�����������
��Keven�ͷ�ǰ���ڿ����廹��һ����վ����������һ��Ƭ�ӣ������ǽ�ʲôfreedom
lockdownһ��ģ���Ҫ���ͷ� Keven��������
���ԣ��Ҷ�"�ڿ�"����ʶ��dz�����ģ� ���ڲ�����Ϊ����hack�� ˵��crack��script
kidҲ�Ƕ���Щ�˵IJ����� �����Ҷ��� ��"����"���ƺ���Щ�˵ġ�����
��Ȼֻ�����ĵIJ�ͬ���룬 �������ҶԺڿ��ǵľ�����ѣ�
�����һ��ܻ�ֻ���������ˡ���������
__________________
If not us, who? if not now, when?
The truth is out there. You can not handle the truth
To iterate is human, to recurse divine.
--
����Ͷ��,��������
Technical Details
Message-ID:
<43519b9a.3996757@news.yaako.com>Path:
arc1-ca.pugleaf.net!g2news1.google.com!news3.google.com!border1.nntp.dca.giganews.com!border2.nntp.dca.giganews.com!nntp.giganews.com!wn13feed!worldnet.att.net!4.24.21.153!newsfeed3.dallas1.level3.net!newsfeed2.dallas1.level3.net!news.level3.com!bloom-beacon.mit.edu!news.cn99.com!news.yaako.com!not-for-mailShow Full Headers
Complete Article Headers
X-Google-Thread: 1098a9,20a69b1333f4fe3d,start X-Google-Attributes: gid1098a9,public X-Google-Language: Chinese,GB Path: arc1-ca.pugleaf.net!g2news1.google.com!news3.google.com!border1.nntp.dca.giganews.com!border2.nntp.dca.giganews.com!nntp.giganews.com!wn13feed!worldnet.att.net!4.24.21.153!newsfeed3.dallas1.level3.net!newsfeed2.dallas1.level3.net!news.level3.com!bloom-beacon.mit.edu!news.cn99.com!news.yaako.com!not-for-mail From: �dz�ǰ <DuChaoQian@News.YaaKo.Com> Newsgroups: cn.comp.hacker Subject: ����ڿͿ��ġ�������˴�CNN�����ʡ�����¶������� Date: Wed, 12 Oct 2005 13:14:22 +0800 Organization: �dz�ǰ Lines: 391 Message-ID: <43519b9a.3996757@news.yaako.com> Reply-To: DuChaoQian@News.YaaKo.Com NNTP-Posting-Host: 222.88.152.17 Mime-Version: 1.0 Content-Type: text/plain; charset=GB2312 Content-Transfer-Encoding: 8bit X-Trace: news.yaako.com 1129093944 20403 222.88.152.17 (12 Oct 2005 05:12:24 GMT) X-Complaints-To: usenet@news.yaako.com NNTP-Posting-Date: Wed, 12 Oct 2005 05:12:24 +0000 (UTC) Summary: this is a message from cn.* newsgroups X-Newsreader: Forte Agent 1.8/32.548