11–18 of 18 posts
Curious, as I'm quite the noob: why would an attacker install an IRC bot onto a vulnerable system? Are they able to send the system commands via IRC? Or is it for a less nefarious reason?
Yes to both. IRC is the common method of setting up a command and control system for a network of hijacked systems.
Earlier quoted context omitted.
It's not (directly) related to sex. Honeypot is slang for a sting operation; it's not only security professionals who use the term but also the police.
I'm honestly really surprised that someone on HN would assume HoneyPot was anything but a reference to the "technical" honeypot. Guy deserves a downvote.
It was really entertaining to watch the drunken typist give it his/her best. :)
I see a lot of driving drunk at the shell as well. I can't count how many times that I've seen uname misspelled... I haven't seen bitcoin just yet, but I expect that'll show up eventually.
Shameless plug (sorry), I just did a talk on some of my Kippo honeypot findings. Some here may find it interesting: http://www.irongeek.com/i.php?page=videos/grrcon2014/s06-bri...
Here's another question... do honeypots like this one intentionally leave the password blank? (I'd think that would be a pretty good red flag for the attacker to not stick around... maybe that's what the hit & run guys were doing) It was really entertaining to watch the drunken typist give it his/her best. :)
Really interesting finds you got, thanks so much for sharing. I currently run 6 Kippo honeypots scattered across the USA (one at home on a Pi and the rest on cheap VPS). I see a lot of driving drunk at the shell as well. I can't count how many times that I've seen uname misspelled... I haven't seen bitcoin just yet, but I expect that'll show up eventually. Shameless plug (sorry), I just did a talk on some of my Kippo…
Really interesting finds you got, thanks so much for sharing. I currently run 6 Kippo honeypots scattered across the USA (one at home on a Pi and the rest on cheap VPS). I see a lot of driving drunk at the shell as well. I can't count how many times that I've seen uname misspelled... I haven't seen bitcoin just yet, but I expect that'll show up eventually. Shameless plug (sorry), I just did a talk on some of my Kippo…
Just watched your talk... really cool. (Yes, Raspberry Pi's are awesome!) When you have your Kippo guide done, I'd be interested in setting one up myself. Be sure to include those beefy cpu and meminfo's your buddy sent you.
Earlier quoted context omitted.
Just to be clear to whoever downvoted me, I was being sincere. I was afraid to click this link until I googled "Kippo," and I assume others are as well or this would have more points by now.
honeypot is pretty standard terminology for a intentionally vulnerable system intended to attract hackers. Maybe I'm unique but I wouldn't associate the term with sex.* * I don't know wether the term originated on its own (i.e. Winnie the Pooh getting stuck in his honeypot) but the term "honey trap" was spy terminology during the cold war for a trap that lures the target with sex, but that term is so removed I really…
Maybe I'm completely fucked in the head or something, but since only one or two other people in this comment thread seemed to catch my drift, I'll be explicit: the specific phrasing of "honeypot video gallery" makes me think "collection of videos that some police or 3 letter agency uses as a honeypot to catch criminals" which translates to "either gore/snuff or child pornography." Either something illegal to look at, or an article discussing the topic that could still ruin a sensitive or vulnerable person's day.
And of course such a thing would never reach 50+ upvotes on HN, but when I posted that comment, it was on the front page with 3 points and 0 comments. It was entirely within the realm of possibility then of being something horrible that a troll had used a voting ring to promote. Maybe now at 56 upvotes this concern seems ridiculous, but I hope my apprehension might make some sense within that context.
(also, I think it's ironic that literally the only time I've ever felt that a different submission title would be warranted, it remains unchanged...)