There are more Zope servers than IIS servers!
I scanned Austria
41–50 of 69 posts
Re: I scanned Austria
#42Earlier quoted context omitted.
Here is a pretty good explaination of how it worked. https://www.reddit.com/r/CrackWatch/comments/92uz49/the_ware... I have No idea how it is today but back then it was pretty organised. We would have people funding eg a university apartment and servers and paying for eg 10x100mbit we would Bond or Having direct access to oc connections just so they could get leech.
What it doesnt explain is that this was very hard work to be eg a trader for top sites near impossible to even get access to one. You would work 8-16 hours a day to always be ready for a release and then when a release hit your Heartrate would double as you rushed to transfer files to the sites the allowed it All of Whom had hundreds of rules and Which you had to know by heart as the races on the Best sites were over…
I'm pretty sure that today all trading is automated. And the quality of releases have also gone (relatively) down - for movies good P2P is better than any scene pre.
Re: I scanned Austria
#43Earlier quoted context omitted.
I wouldn't do anything myself, too risky. Printing on somebody's else printer could get me sued. What about a state level authority doing this scans, contacting owners, maybe even fining them? That would be like authorities for food safety, etc. It would put pressure on manufacturers because people don't want to buy things that get their owners fined.
What's the reasoning for fining someone for leaving stuff available? Should self-hosting a site be made illegal? If not, how do you distinguish the two?
Unsecured cameras, internet facing lights, etc. It's not like leaving the home door open, which harms only me. Those devices can be used to harm others. IMHO fines for customers will lead to more secure devices, by design.
Re: I scanned Austria
#44Earlier quoted context omitted.
What's the best way to self scan? I recently bought a wifi camera and digging through the settings I couldn't find a way to block external access. Ultimately I had to block is access via my router, however consumer models are terrible about blocking access to the internet.
Most consumer routers will by default block a connection _from_ the Internet. They use a private address range and apply NAT to outgoing connections, so explicit configuration is needed to do something with an incoming connection.
Say it with me
NAT Is Not A Firewall
Re: I scanned Austria
#45This was a really interesting idea and inspired me to do something similar. I had some Shodan credits from a Humble Bundle, so searched for all servers on port 80 in my city. Then I wrote a very simple Python program to screenshot each of those (using wkhtmltoimage), with 20 concurrent threads.
I didn't stitch the images together and didn't try to login to any of the sites (that would be crossing a line, and simply mapping geographically local, public servers seems harmless). Just flicking through the 7,000-ish screenshots has been pretty fun.
Lots and lots of:
- router admin panels on the WAN interface. Loads of different brands and models
- DVR and NAS units
- HikVision CCTV (like, hundreds of these - I wonder if they're being used at local hospitals or city centre surveillance by the police)
- IIS servers (especially IIS 7)
- 403s (mostly with the IIS default template)
- University department and team websites (there are a few universities in my city so there are lots of these)
Some weird and wonderful personal websites. Lots of one-line jokes just to fill a space on a public server, presumably. A few wikis.
Overall it's been really fun looking at all the servers that are public but just not really indexed, physically surrounding me.
Re: I scanned Austria
#46Earlier quoted context omitted.
What's the reasoning for fining someone for leaving stuff available? Should self-hosting a site be made illegal? If not, how do you distinguish the two?
Unsecured cameras, internet facing lights, etc. It's not like leaving the home door open, which harms only me. Those devices can be used to harm others. IMHO fines for customers will lead to more secure devices, by design.
Ooooo and we can fine them for leaving doors unlocked, and for not being inside after curfew!
Re: I scanned Austria
#47Earlier quoted context omitted.
What it doesnt explain is that this was very hard work to be eg a trader for top sites near impossible to even get access to one. You would work 8-16 hours a day to always be ready for a release and then when a release hit your Heartrate would double as you rushed to transfer files to the sites the allowed it All of Whom had hundreds of rules and Which you had to know by heart as the races on the Best sites were over…
I'm pretty sure that today all trading is automated. And the quality of releases have also gone (relatively) down - for movies good P2P is better than any scene pre.
It would make sense. Taking on good groups was nessasary to build a good rated site but it was up to the groups to hand out the slots and you never knew who you were really dealing with. It could be FBI or some hacker. There was however scriptet ftp clients but even though they were known many places had a ban on them and did a client not obey site rules then too many nukes or banned content would get them kicked off sites.
Re: I scanned Austria
#48I think soon or later we will need some kind of public institution that will do this sort of scans; all those unsecured IoT printers, vacuum cleaners, fridges, abandoned servers, Synology servers, etc. would become a real threat at some point and the costs of dealing with issues caused by them like identity theft, false accusations because on someone's server there is child porn uploaded by a cracker, bot nets will b…
If only the NSA dragnet threw us a bone.
Re: I scanned Austria
#49Re: I scanned Austria
#50Earlier quoted context omitted.
What's the best way to self scan? I recently bought a wifi camera and digging through the settings I couldn't find a way to block external access. Ultimately I had to block is access via my router, however consumer models are terrible about blocking access to the internet.
Most consumer routers will by default block a connection _from_ the Internet. They use a private address range and apply NAT to outgoing connections, so explicit configuration is needed to do something with an incoming connection.
Well. UPnP does end up being supported on many consumer routers.
The big issue for consumer routers is, admittedly, the shoddy quality of the firmware and the fact that even on the occasion where vulnerabilities are fixed, those releases often do not get installed.