Underground: Hacking, madness and obsession on the electronic frontierDreyfus, Suelette
Science
Underground: Hacking, madness and obsession on the electronic frontier
Dreyfus, Suelette
Computer crimes -- Australia; Computer hackers -- Australia -- Biography; Computer security -- Australia
After a few exasperating hours struggling to make the CHFN bug work,
Phoenix gave up and turned to another security flaw suggested by
Electron: the FTP bug. Phoenix ran through the bug in his mind.
Normally, someone used FTP, or file transfer protocol, to transfer
files over a network, such as the Internet, from one computer to
another. FTPing to another machine was a bit like telnetting, but the
user didn't need a password to login and the commands he could execute
once in the other computer were usually very limited.
If it worked, the FTP bug would allow Phoenix to slip in an extra
command during the FTP login process. That command would force Spaf's
machine to allow Phoenix to login as anyone he wanted--and what he
wanted was to login as someone who had root privileges. The `root'
account might be a little obvious
if anyone was watching, and it didn't always have remote
access anyway. So he chose `daemon', another commonly root-privileged
account, instead.
It was a shot in the dark. Phoenix was fairly sure Spaf would have
secured his machine against such an obvious attack, but Electron urged
him to give it a try anyway. The FTP bug had been announced throughout
the computer security community long ago, appearing in an early issue
of Zardoz. Phoenix hesitated, but he had run out of ideas, and time.
Phoenix typed:
FTP -i uther.purdue.edu
quote user anonymous
quote cd ~daemon
quote pass anything
The few seconds it took for his commands to course from his suburban
home in Melbourne and race deep into the Midwest felt like a lifetime.
He wanted Spaf's machine, wanted Deszip, and wanted this attack to
work. If he could just get Deszip, he felt the Australians would be
unstoppable.
Spaf's machine opened its door as politely as a doorman at the Ritz
Carlton. Phoenix smiled at his computer. He was in.
It was like being in Aladdin's cave. Phoenix just sat there, stunned
at the bounty which lay before him. It was his, all his. Spaf had
megabytes of security files in his directories. Source code for the
RTM Internet worm. Source code for the WANK worm. Everything. Phoenix
wanted to plunge his hands in each treasure chest and scoop out greedy
handfuls, but he resisted the urge. He had a more important--a more
strategic--mission to accomplish first.
He prowled through the directories, hunting everywhere for Deszip.
Like a burglar scouring the house for the family silver, he pawed
through directory after directory. Surely, Spaf had to have Deszip. If
anyone besides Matthew Bishop was going to have a copy, he would. And
finally, there it was. Deszip. Just waiting for Phoenix.
Public-domain text, read in full here on John Shaqi.
Reviews
Reviews
No reviews yet
Be the first to share your thoughts on this work.
Elsewhere in the archive
Join the Discussion
Join the discussion
Sign in to leave a comment or review.
Sign InorCreate an account