Where the term "Zero Day" comes from

I love the fact that this is no news to me. It brings back fun memories of my warez trading by mail and later BBS.

I wouldn't call the current usage a non-sequitur. Zero-day exploits being those in use before the vendor and general public have been made aware of them. Presumably, a 1 day exploit would be one published on the day the vulnerability was announced. It seems like a fairly natural application of what was, at the time, a pretty well understood terminology.

Yeah I miss those times - especially the fact that hacking/phreaking was seen as just a little 'naughty' and not worthy of hard time in a federal prison. I edited and re-edited this short post to take out stuff because I ended up going on a very serious reminiscing tangent. I'll post some of my thoughts here just to get them out of my system. Tag this as #ramblingsAfterMidnight

Mostly I was active in the early to mid 90's as a phone phreak and low level hacker. One of my favorite exploits to get access to /etc/shadow was symlinking it to .forward in a ordinary user's home directory. Then getting sendmail which executed as root to dump it to port 25. Then I'd send it to a friend of a friend who allegedly had rooted a cray somewhere - Don't know if that was true but he would run crackerjack on the file on a very fast machine and I'd get back a ton of passwords.

Friends and I around the world would sometimes phone phreak into a 'bridge' used for teleconferencing and talk to each other using that. Then someone would three-way a pizza delivery place in New York into the conference and we'd try to get pizza delivered to Scotland. I remember a friend 'maelstrom' who's real first name was Ewan (I never knew his full name) was unfortunately arrested by Scotland yard because someone posted a bunch of valid credit card numbers and phone cards to his BBS. I heard it was Scotland Yard's first hacking related arrest - don't now if that's true. I've googled him a lot to try and find out what happened to him but no luck.

Another friend 'aphex' in South Africa was raided for hosting warez on his BBS. Apparently three people walked into his house - a guy from the phone company, a guy from interpol and a guy from the south african police. They took all his equipment but didn't arrest him when they realized he was 16 at the time.

These arrests were the beginning of the criminalization of hacking. The real watershed was Kevin Mitnick's arrest in 1995 which really spelled the end of the 'wargames' period of hacking - when everyone saw hackers as Matthew Broderick cute.

This is a video of another friend. Later on around 1996 he got a major interview with the South African equivalent (back in the day) of 60 minutes. It was a very popular TV show and this was a big deal for him. Only the first few seconds are in Afrikaans in case you don't speak that. You can see the attitudes changing in this video - he narrowly escaped getting prosecuted by Olivetti and the University of South Africa. https://www.youtube.com/watch?v=RzKHa3BYemI

So after my two friends got arrested, I got a warning letter from the phone company and stopped what I was doing - which wasn't anything malicious, just exploring.

Here are some screenshots of Bluebeep. I think it's a later version, we were using 0.9 or something: https://lh4.googleusercontent.com/-C6KLCsKy9_w/TpsOtXwPQhI/A... http://www.nerdnetworks.org/sarts/bluebeep.jpg

To make free international calls I would call a home country direct which is a toll free number locally in South Africa or another country and connects you directly with an AT&T or MCI or whatever operator in the USA. Then send a combination of 2600hz and 2400hz through the mouthpiece to put the trunk on the USA side into a kind of command mode. Then use the CCITT5 signaling system (which is basically DTMF but with different tones) to tell it to route a call for me. One of the tones - I think it was KP1 or KP2 could be used to tell the trunk to route the call via satellite or undersea cable (cable being the better quality because of no propagation delay).

Seizing trunks like this was similar to the cap'n crunch whistle which emmitted a 2600hz tone in the USA and in the 70's you could use that to seize a trunk in the USA. International trunks were different so we'd need a 2600/2400 tone. But the phone companies would put filters on the line, so you could do things like adding an additional frequency to the mix, or using 2600/2400 and sloooowly increasing the volume until you hear that wonderful 'KERCHUNK' sound and silence. Of course you're doing this as the phone's ringing and then an AT&T operator answers and is hearing giggling and these weird tones until his line just goes dead and we're routing the call.

I once routed a call through a few countries back into South Africa to my best friends house. The delay on the line was epic - like 10 seconds.

Recently I decided I miss the good old days of it being very hard to get international bandwidth, so I went out and got myself a ham license. (callsign WT1J) So now whenever I feel the need for it to be really hard to send data internationally, I jump on the HF bands and play around with digital modes, sending data to someone in australia using JT65 (designed for moonbounce) and only 5 watts on 14 megahertz. Makes bluebeep and CCITT5 seem like a breeze.

Quick book search on google gives lots of examples of "zero day" going back to the 19th century

If they didn't use *70, they deserved it.