Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

I pwned half of America's fast food chains simultaneously

mrbruh.com

Post reply on HN
Print view View original

241–250 of 513 posts

Re: I pwned half of America's fast food chains simultaneously

#241

Post by Geisterde »

zharknado wrote: post #155

From Eva’s post: > we didnt know much about firebase at the time so we simply tried to find a tool to see if it was vulnerable to something obvious and we found firepwn, which seemed nice for a GUI tool, so we simply entered the details of chattr's firebase Genuinely curious (I’ve no infosec experience), wouldn’t there be a risk that a tool like this could phone home and log everything you find while doing research?

That would be referred to as a honeypot. Sometimes administrators will set up their own honeypots to see the type of threats they are facing.

Re: I pwned half of America's fast food chains simultaneously

#242

Post by zilti »

Topfi wrote: post #231
8organicbits wrote: post #210

I would have stopped once I confirmed the leaked keys were valid. Looking at what types of data you had access to wasn't required. Downloading plaintext passwords of other people is probably too far. Impacted users may need to be notified about a breach. If needed, create an account of your own and target only that. If there was a pentester agreement, safe harbor, or other protection that's different. Be careful out…

> Looking at what types of data you had access to wasn't required. Downloading plaintext passwords of other people is probably too far. Impacted users may need to be notified about a breach. If needed, create an account of your own and target only that. I'd argue that it was absolutely necessary to gauge the severity of this misconfiguration and furthermore, that Chattr.ai must contact every affected user, not MrBruh…

That is not just negligence, that is stupidity on an order of magnitude that the responsible people should never again be allowed to work on a software project.

Re: I pwned half of America's fast food chains simultaneously

#243

Post by InCityDreams »

tempestn wrote: post #198
kelnos wrote: post #153

Earlier quoted context omitted.

I guess three clues: * They were just trolling Firebase accounts for anything left open, and the first hit was a company that works with a bunch of American fast food chains. That doesn't require OP to live in the US. * They specified "America's fast food chains"; someone living in the US probably wouldn't qualify it with "America's". * They used a $DAY/$MONTH date format, which is uncommon in the US.

* If they are in America, they're a time traveller.

"[T]hey are", and "they're", in the same sentence. I don't know...I don't know....

Re: I pwned half of America's fast food chains simultaneously

#244

Post by sunbum »

Geisterde wrote: post #241
zharknado wrote: post #155

From Eva’s post: > we didnt know much about firebase at the time so we simply tried to find a tool to see if it was vulnerable to something obvious and we found firepwn, which seemed nice for a GUI tool, so we simply entered the details of chattr's firebase Genuinely curious (I’ve no infosec experience), wouldn’t there be a risk that a tool like this could phone home and log everything you find while doing research?

That would be referred to as a honeypot. Sometimes administrators will set up their own honeypots to see the type of threats they are facing.

No, a honeypot is intentionally insecure infrastructure setup to see who and how it gets attacked. A backdoored pentesting tool is a backdoored pentesting tool.

Re: I pwned half of America's fast food chains simultaneously

#245

Post by bikamonki »

You are a good human. Seems they had not tweaked the database rules correctly, maybe even left the default setup! That means you could have executed this:

Firebase.database().ref('/').set('All your data is gone').

Better yet, download the whole DB and then:

Firebase.database().ref('/').set('I have all your data, pay me to get it back').

Re: I pwned half of America's fast food chains simultaneously

#246

Post by johndough »

lulznews wrote: post #235

>With an upbeat pling my console alerted me that my script had finished running Forget the pwn how do I do this Also, HN used to think this was cool now there are 20 posts blaming the hacker…

On Kubuntu, you can use paplay to play short audio files. Change the path to an audio file of your choosing.

    sudo apt install pulseaudio-utils
    ./some_script ; paplay /usr/share/sounds/freedesktop/stereo/complete.oga

Re: I pwned half of America's fast food chains simultaneously

#248

Post by orpheansodality »

lulznews wrote: post #235

>With an upbeat pling my console alerted me that my script had finished running Forget the pwn how do I do this Also, HN used to think this was cool now there are 20 posts blaming the hacker…

I've appended `; tput bel` to the end of long-running scripts to get the same effect.

Fun fact: the `bell` control character is part of the ascii standard (and before that the baudot telegraph encoding!) and was originally there to ring a literal bell on a recipient's telegraph or teletype machine, presumably to get their attention that they had an incoming message.

To keep backwards compatibility today's terminal emulators trigger the system alert sound instead.

Re: I pwned half of America's fast food chains simultaneously

#250

Post by noir_lord »

lulznews wrote: post #235

>With an upbeat pling my console alerted me that my script had finished running Forget the pwn how do I do this Also, HN used to think this was cool now there are 20 posts blaming the hacker…

    #!/usr/bin/env zsh

    (mpg123 /path/to/processing3.mp3 > /dev/null 2>&1)
processing3.mp3 is the "task completed" sound from star trek,

then it's just `./foobar.sh && boc` or `./foobar.sh; boc` as appropriate.

Post reply on HN