 | | Re: Brad Justus is real —Ben Olmstead
|
| | | (...) Not to spread paranoia, but... offhand, I can think of three different ways to forge the IP in Todd's logs. Supposing someone wanted to pose as Brad Justus: one could a) break into Brad's machine and post from there b) break into Todd's (...) (25 years ago, 13-Dec-99, to lugnet.dear-lego)
|
| | | |
| | | | | Re: Brad Justus is real —Jasper Janssen
|
| | | | (...) Point 1, he uses IE on Windows NT (if we can believe the first message, at least). So no remote breaking in. Which leaves physical access - which is IMHO rather unlikely. (...) Break into a high-security FreeBSD box? Highly unlikely, (...) (25 years ago, 13-Dec-99, to lugnet.dear-lego)
|
| | | | |
| | | | | | Re: Brad Justus is real —Matthew Miller
|
| | | | (...) Why not? BO2K runs on Windows NT and Win2000 boxes. (The new version of Netbus does too, but I'm not sure if that's publicly available yet.) (...) But if you anticipate what packets the remote side will return, you can generate the appropriate (...) (25 years ago, 13-Dec-99, to lugnet.dear-lego)
|
| | | | |
| | | | | | Re: Brad Justus is real —Jasper Janssen
|
| | | | Moving this to .debate, for lack of lugnet.off-topic.comp.risks. (...) BO isn't cracking - it's carelessness on the part of the crackee. Anyone can distribute happy99.exe, but breaking root on an up-to-CERT unix box is something very few can do. (...) (25 years ago, 14-Dec-99, to lugnet.dear-lego, lugnet.off-topic.debate)
|
| | | | |
| | | | | | Re: Brad Justus is real —Matthew Miller
|
| | | | (...) Sure. But the issue isn't how it happened. The end net effect is the same -- it makes it easy to do something that's coming from someone else's box. (...) Again, true but probably not relevant -- such info certainly isn't in news server logs. (...) (25 years ago, 14-Dec-99, to lugnet.off-topic.debate, lugnet.off-topic.geek)
|
| | | | |
