11–20 of 31 posts
Earlier quoted context omitted.
while their opponents were a bunch of overpaid nobodies who hated their jobs and overall really didn't care Every sysadmin I've met cares a lot. But they get to rely on products from disparate vendors that are full of zero day exploits and helpful users who are easily socially engineered.
I've known many admins that truly don't give a shit. I've met many incompetent admins as well. Like anyone, they come in many flavors.
Earlier quoted context omitted.
while their opponents were a bunch of overpaid nobodies who hated their jobs and overall really didn't care Every sysadmin I've met cares a lot. But they get to rely on products from disparate vendors that are full of zero day exploits and helpful users who are easily socially engineered.
I've known many admins that truly don't give a shit. I've met many incompetent admins as well. Like anyone, they come in many flavors.
I wonder if any of them have heard of VNC Roulette.
The most interesting thing to me was the evidence posted that other hackers had already penetrated these systems, which I guess goes without saying when you have little to no security in place. Many many years ago when I was younger and playing with buffer overflows and learning shellcode, I'm not saying that I'm proud of this either, but in my journeys I had breached a couple of online retailers, had full access to…
Okay, we need proof that we were here... Okay, garbage, give me garbage.
> "The worst part is that this is barely a fraction of what I could get my hands on," the hacker said.
So why didn't GhostShell release everything he could get his hands on?
The most interesting thing to me was the evidence posted that other hackers had already penetrated these systems, which I guess goes without saying when you have little to no security in place. Many many years ago when I was younger and playing with buffer overflows and learning shellcode, I'm not saying that I'm proud of this either, but in my journeys I had breached a couple of online retailers, had full access to…
>I'm reminded of something I read posted by l0pht, way back when, and they just said how much better they were than everyone else because they had jobs at burger king and were dedicated to spending all of their time penetrating networks while their opponents were a bunch of overpaid nobodies who hated their jobs and overall really didn't care, and that they would always win. >I think that still holds true today. This…
>There's no lack of opportunities for those with talent.
I read it more like "We choose to lead a meager lifestyle -- even with our tremendous abilities -- because working for someone would direct our efforts towards their goals rather than allowing us to pursue our own novel research which is fueled purely by passion for the subject."
> The size of the downloadable cache alone puts it at one of the largest breaches this year -- but it could have been far larger, given time and resources. > "The worst part is that this is barely a fraction of what I could get my hands on," the hacker said. So why didn't GhostShell release everything he could get his hands on?
Wouldn't a better "protest" have been to delete all the databases. That would harm the people responsible for the problem in the first place.
> The size of the downloadable cache alone puts it at one of the largest breaches this year -- but it could have been far larger, given time and resources. > "The worst part is that this is barely a fraction of what I could get my hands on," the hacker said. So why didn't GhostShell release everything he could get his hands on?
MongoDB
Back in the good old days one would have secured the systems instead of harming the victims again.
GhostShell, please stay away from IoT or connected medical devices, I'm afraid you'll kill people just to make a point every security professional already understands.