Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]

Groups > alt.comp.freeware > #250678 > unrolled thread

Exploit Logs You Into Linux Systems After Hitting Backspace 28 Times

Started byAnonymous <anonymous@hoi-polloi.org>
First post2015-12-20 21:28 +0100
Last post2015-12-21 19:33 +0100
Articles 7 on this page of 27 — 15 participants

Back to article view | Back to alt.comp.freeware

Contents

  Exploit Logs You Into Linux Systems After Hitting Backspace 28 Times Anonymous <anonymous@hoi-polloi.org> - 2015-12-20 21:28 +0100
    Re: Exploit Logs You Into Linux Systems After Hitting Backspace 28 Times Shadow <Sh@dow.br> - 2015-12-20 18:58 -0200
      Re: Exploit Logs You Into Linux Systems After Hitting Backspace 28 Times Mark Warner <mhwarner.inhibitions@gmail.com> - 2015-12-20 16:48 -0500
      Re: Exploit Logs You Into Linux Systems After Hitting Backspace 28 Times gheston@hiwaay.net (Gary Heston) - 2015-12-21 19:03 -0600
        Re: Exploit Logs You Into Linux Systems After Hitting Backspace 28 Times Big Bad Bob <BigBadBob-at-mrp3-dot-com@testing.local> - 2015-12-22 12:27 -0800
          Re: Exploit Logs You Into Linux Systems After Hitting Backspace 28 Times "Anonymous Remailer (austria)" <mixmaster@remailer.privacy.at> - 2015-12-23 05:53 +0100
    Re: Exploit Logs You Into Linux Systems After Hitting Backspace 28 Times Chris Ahlstrom <OFeem1987@teleworm.us> - 2015-12-20 19:38 -0500
      Re: Exploit Logs You Into Linux Systems After Hitting Backspace 28 Times Big Bad Bob <BigBadBob-at-mrp3-dot-com@testing.local> - 2015-12-21 09:06 -0800
        Re: Exploit Logs You Into Linux Systems After Hitting Backspace 28 Times edevils <use_replyto_address@devils.com> - 2015-12-21 18:32 +0100
          Re: Exploit Logs You Into Linux Systems After Hitting Backspace 28 Times Peter Köhlmann <peter-koehlmann@t-online.de> - 2015-12-21 19:01 +0100
            Re: Exploit Logs You Into Linux Systems After Hitting Backspace 28 Times edevils <use_replyto_address@devils.com> - 2015-12-21 19:21 +0100
              Re: Exploit Logs You Into Linux Systems After Hitting Backspace 28 Times ray carter <ray@zianet.com> - 2015-12-21 21:28 +0000
                Re: Exploit Logs You Into Linux Systems After Hitting Backspace 28 Times edevils <use_replyto_address@devils.com> - 2015-12-22 11:55 +0100
                  Re: Exploit Logs You Into Linux Systems After Hitting Backspace 28 Times Anonymous <nobody@remailer.paranoici.org> - 2015-12-23 04:22 +0000
              Re: Exploit Logs You Into Linux Systems After Hitting Backspace 28 Times Peter Köhlmann <peter-koehlmann@t-online.de> - 2015-12-22 01:18 +0100
                Re: Exploit Logs You Into Linux Systems After Hitting Backspace 28 Times edevils <use_replyto_address@devils.com> - 2015-12-22 11:49 +0100
              Re: Exploit Logs You Into Linux Systems After Hitting Backspace 28 Times Big Bad Bob <BigBadBob-at-mrp3-dot-com@testing.local> - 2015-12-22 13:01 -0800
                Re: Exploit Logs You Into Linux Systems After Hitting Backspace 28 Times edevils <use_replyto_address@devils.com> - 2015-12-25 14:34 +0100
                  Re: Exploit Logs You Into Linux Systems After Hitting Backspace 28 Times Jack Ryan <noreply@remailer.cpunk.us> - 2015-12-25 19:13 -0500
            Re: Exploit Logs You Into Linux Systems After Hitting Backspace 28 Times "Anonymous Remailer (austria)" <mixmaster@remailer.privacy.at> - 2015-12-22 08:17 +0100
            Re: Exploit Logs You Into Linux Systems After Hitting Backspace 28 Times Fritz Wuehler <fritz@spamexpire-201512.rodent.frell.theremailer.net> - 2015-12-22 12:07 +0100
            Re: Exploit Logs You Into Linux Systems After Hitting Backspace 28 Times Big Bad Bob <BigBadBob-at-mrp3-dot-com@testing.local> - 2015-12-22 12:29 -0800
              Re: Exploit Logs You Into Linux Systems After Hitting Backspace 28 Times edevils <use_replyto_address@devils.com> - 2015-12-25 14:35 +0100
        Re: Exploit Logs You Into Linux Systems After Hitting Backspace 28 Times "Anonymous Remailer (austria)" <mixmaster@remailer.privacy.at> - 2015-12-23 04:03 +0100
          Re: Exploit Logs You Into Linux Systems After Hitting Backspace 28  Times Euclides Zoto <euclides_zoto@optimum.net> - 2015-12-28 20:48 -0800
      Re: Exploit Logs You Into Linux Systems After Hitting Backspace 28 Times Yrrah <Yrrah-acf@acf.invalid> - 2015-12-21 19:32 +0100
      Re: Exploit Logs You Into Linux Systems After Hitting Backspace 28 Times Yrrah <Yrrah-acf@acf.invalid> - 2015-12-21 19:33 +0100

Page 2 of 2 — ← Prev page 1 [2]

#250770

FromFritz Wuehler <fritz@spamexpire-201512.rodent.frell.theremailer.net>
Date2015-12-22 12:07 +0100
Message-ID<c8e170c8fbd2e6649bca84921618f098@msgid.frell.theremailer.net>
In reply to#250740
In article <n59elc$p3l$1@dont-email.me>
Peter =?UTF-8?B?S8O2aGxtYW5u?= <peter-koehlmann@t-online.de> 
wrote:
>
> edevils wrote:
>
> > On 21/12/2015 18:06, Big Bad Bob wrote:
> >> On 12/20/15 16:38, Chris Ahlstrom so wittily quipped:
> >>> Anonymous wrote this copyrighted missive and expects royalties:
> >>>
> >>>> Though most of you likely don't run Linux—specifically, one
> >>>> using the Grub2 bootloader—you'll surely appreciate the
> >>>> unintended humor of a brand-new exploit that was recently found
> >>>> for said bootloader.
> >>>>
> >>>> http://www.pcmag.com/article2/0,2817,2496870,00.asp
> >>>
> >>> What took you so long to post this?  It's been bandied about
> >>> for many days now.
> >>>
> >>> Already fixed, by the way.
> >>>
> >>> Pretty stupid bug, though.  Should never have happened.
> >>>
> >>
> >> with physical access to the machine, there's nothing stopping anyone
> >> from removing the hard drive, plugging in a USB hard drive adaptor
> >> thingy, and then reading it directly with another computer.
> >>
> >> so the bug is funnier than it is dangerous.
> >
> > Unless data is encrypted. If you remove the hard drive and plug it
> > somewhere, you are still left with ciphered data.
> >
> > On the contrary, if you read Hector Marco and Ismael Ripoll's original
> > article, you'll find out how they used the GRUB2 vulnerability to access
> > the GRUB rescue shell and deploy a malware from there.
> >
> > "Since the data is ciphered, the strategy we will use is to infect the
> > system and wait until the user decrypts the data (by login into the
> > system) and then access to the information in plain."
> >
> > http://hmarco.org/bugs/CVE-2015-8370-Grub2-authentication-bypass.html
>
> With physical access to the machine they could just as well install the
> logging software the standard way. No need for a Grub exploit
>
> Physical access means all bounds are off. You can not secure such a system
> in any meaningful way, encrypted or not

Bottom line, someone would have to have be present with access 
to the equipment to accomplish this correct?

That would narrow down the scope of possible suspects 
considerably.

[toc] | [prev] | [next] | [standalone]

#250802

FromBig Bad Bob <BigBadBob-at-mrp3-dot-com@testing.local>
Date2015-12-22 12:29 -0800
Message-ID<BrCdnVBaBsEaL-TLnZ2dnUU7-LudnZ2d@earthlink.com>
In reply to#250740
On 12/21/15 10:01, Peter Köhlmann so wittily quipped:
> edevils wrote:
> 
>> On 21/12/2015 18:06, Big Bad Bob wrote:
>>> On 12/20/15 16:38, Chris Ahlstrom so wittily quipped:
>>>> Anonymous wrote this copyrighted missive and expects royalties:
>>>>
>>>>> Though most of you likely don't run Linux—specifically, one
>>>>> using the Grub2 bootloader—you'll surely appreciate the
>>>>> unintended humor of a brand-new exploit that was recently found
>>>>> for said bootloader.
>>>>>
>>>>> http://www.pcmag.com/article2/0,2817,2496870,00.asp
>>>>
>>>> What took you so long to post this?  It's been bandied about
>>>> for many days now.
>>>>
>>>> Already fixed, by the way.
>>>>
>>>> Pretty stupid bug, though.  Should never have happened.
>>>>
>>>
>>> with physical access to the machine, there's nothing stopping anyone
>>> from removing the hard drive, plugging in a USB hard drive adaptor
>>> thingy, and then reading it directly with another computer.
>>>
>>> so the bug is funnier than it is dangerous.
>>
>> Unless data is encrypted. If you remove the hard drive and plug it
>> somewhere, you are still left with ciphered data.
>>
>> On the contrary, if you read Hector Marco and Ismael Ripoll's original
>> article, you'll find out how they used the GRUB2 vulnerability to access
>> the GRUB rescue shell and deploy a malware from there.
>>
>> "Since the data is ciphered, the strategy we will use is to infect the
>> system and wait until the user decrypts the data (by login into the
>> system) and then access to the information in plain."
>>
>> http://hmarco.org/bugs/CVE-2015-8370-Grub2-authentication-bypass.html
> 
> With physical access to the machine they could just as well install the 
> logging software the standard way. No need for a Grub exploit
>  
> Physical access means all bounds are off. You can not secure such a system 
> in any meaningful way, encrypted or not
> 

right, that's kinda where I was going, too.  thanks for stating it THAT way.

so yeah, 'physical access required' takes a LOT of the 'threat' out of
it.  still needs patching.  devs need to self-slap for letting it happen.

[toc] | [prev] | [next] | [standalone]

#251052

Fromedevils <use_replyto_address@devils.com>
Date2015-12-25 14:35 +0100
Message-ID<n5jgiq$vg5$2@dont-email.me>
In reply to#250802
On 22/12/2015 21:29, Big Bad Bob wrote:
...
> so yeah, 'physical access required' takes a LOT of the 'threat' out of
> it.  still needs patching.  devs need to self-slap for letting it happen.


Maybe they wrote "physical access required", but they just used keyboard 
access. They did not need to tamper with hardware.

[toc] | [prev] | [next] | [standalone]

#250822

From"Anonymous Remailer (austria)" <mixmaster@remailer.privacy.at>
Date2015-12-23 04:03 +0100
Message-ID<17773024268c57275af5c919b062ed4c@remailer.privacy.at>
In reply to#250737
In article <zPCdnXb6dIo9J-TLnZ2dnUU7-fOdnZ2d@earthlink.com>
Big Bad Bob <BigBadBob-at-mrp3-dot-com@testing.local> wrote:
>
> On 12/21/15 14:05, Shadow so wittily quipped:
> > On Mon, 21 Dec 2015 09:06:22 -0800, Big Bad Bob
> > <BigBadBob-at-mrp3-dot-com@testing.local> wrote:
> >
> >> On 12/20/15 16:38, Chris Ahlstrom so wittily quipped:
> >>> Anonymous wrote this copyrighted missive and expects royalties:
> >>>
> >>>> Though most of you likely don't run Linux?specifically, one
> >>>> using the Grub2 bootloader?you'll surely appreciate the
> >>>> unintended humor of a brand-new exploit that was recently found
> >>>> for said bootloader.
> >>>>
> >>>> http://www.pcmag.com/article2/0,2817,2496870,00.asp
> >>>
> >>> What took you so long to post this?  It's been bandied about
> >>> for many days now.
> >>>
> >>> Already fixed, by the way.
> >>>
> >>> Pretty stupid bug, though.  Should never have happened.
> >>>
> >>
> >> with physical access to the machine, there's nothing stopping anyone
> >>from removing the hard drive, plugging in a USB hard drive adaptor
> >> thingy, and then reading it directly with another computer.
> >
> > 	And you remove the hard drive because  .... ?
> > 	[]'s
> >
>
> it's easier to read it with a different machine, possibly.  or you could
> boot your OWN image with a different hard drive if passwords lock out
> USB bootup.  etc.
>
> it's back to "if you have physical access you can ultimately bypass ANY
> security"
>
> if a crook wanted your data he'd just steal the device and work on it
> elsewhere.

Like to see them do that with fibre channel or NAS.

[toc] | [prev] | [next] | [standalone]

#251276 — Re: Exploit Logs You Into Linux Systems After Hitting Backspace 28 Times

FromEuclides Zoto <euclides_zoto@optimum.net>
Date2015-12-28 20:48 -0800
SubjectRe: Exploit Logs You Into Linux Systems After Hitting Backspace 28 Times
Message-ID<568210B7.D8794696@optimum.net>
In reply to#250822

Anonymous Remailer (austria) wrote:

> In article <zPCdnXb6dIo9J-TLnZ2dnUU7-fOdnZ2d@earthlink.com>
> Big Bad Bob <BigBadBob-at-mrp3-dot-com@testing.local> wrote:
> >
> > On 12/21/15 14:05, Shadow so wittily quipped:
> > > On Mon, 21 Dec 2015 09:06:22 -0800, Big Bad Bob
> > > <BigBadBob-at-mrp3-dot-com@testing.local> wrote:
> > >
> > >> On 12/20/15 16:38, Chris Ahlstrom so wittily quipped:
> > >>> Anonymous wrote this copyrighted missive and expects royalties:
> > >>>
> > >>>> Though most of you likely don't run Linux?specifically, one
> > >>>> using the Grub2 bootloader?you'll surely appreciate the
> > >>>> unintended humor of a brand-new exploit that was recently found
> > >>>> for said bootloader.
> > >>>>
> > >>>> http://www.pcmag.com/article2/0,2817,2496870,00.asp
> > >>>
> > >>> What took you so long to post this?  It's been bandied about
> > >>> for many days now.
> > >>>
> > >>> Already fixed, by the way.
> > >>>
> > >>> Pretty stupid bug, though.  Should never have happened.
> > >>>
> > >>
> > >> with physical access to the machine, there's nothing stopping anyone
> > >>from removing the hard drive, plugging in a USB hard drive adaptor
> > >> thingy, and then reading it directly with another computer.
> > >
> > >     And you remove the hard drive because  .... ?
> > >     []'s
> > >
> >
> > it's easier to read it with a different machine, possibly.  or you could
> > boot your OWN image with a different hard drive if passwords lock out
> > USB bootup.  etc.
> >
> > it's back to "if you have physical access you can ultimately bypass ANY
> > security"
> >
> > if a crook wanted your data he'd just steal the device and work on it
> > elsewhere.
>
> Like to see them do that with fibre channel or NAS.

What difference would that make if they just want the device?

EZoto

[toc] | [prev] | [next] | [standalone]

#250747

FromYrrah <Yrrah-acf@acf.invalid>
Date2015-12-21 19:32 +0100
Message-ID<71hg7bpjlahrt2gvuoa3nfbd5r3lgtjb2d@net.com>
In reply to#250688
Chris Ahlstrom <OFeem1987@teleworm.us>:

> What took you so long to post this?  It's been bandied about
> for many days now.
> 
> Already fixed, by the way.

Don't feed the (win)trolls. Besides, most M$ Windows users don't
understand the concept of vulnerability management, so you are
probably wasting your time anyway.

Yrrah

[toc] | [prev] | [next] | [standalone]

#250748

FromYrrah <Yrrah-acf@acf.invalid>
Date2015-12-21 19:33 +0100
Message-ID<hfhg7bl66unkvlh665u67vtg5rl5dsddk2@net.com>
In reply to#250688
Chris Ahlstrom <OFeem1987@teleworm.us>:

> What took you so long to post this?  It's been bandied about
> for many days now.
> 
> Already fixed, by the way.

Don't feed the (win)trolls. Besides, most M$ Windows users don't
understand the concept of vulnerability management, so you are
probably wasting your time anyway.

Yrrah

[toc] | [prev] | [standalone]

Page 2 of 2 — ← Prev page 1 [2]

Back to top | Article view | alt.comp.freeware

csiph-web