Stop Microsoft

Operating Systems => Linux and UNIX => Topic started by: cyrax on 1 June 2002, 21:51

Title: getting things straight...
Post by: cyrax on 1 June 2002, 21:51
Goats are sexy

[ June 06, 2002: Message edited by: X11 / BOB ]

Title: getting things straight...
Post by: cyrax on 1 June 2002, 10:13
could someone tell me why on IRC there are chat rooms with hundreds to thousands of people trading hacked linux box accounts? i dont see people trading hacked windows boxes

  :D
Title: getting things straight...
Post by: cyrax on 1 June 2002, 10:24
Hey,

I found this on http://www.jimmo.com/Linux-NT_Debate/Security.html (http://www.jimmo.com/Linux-NT_Debate/Security.html)

Yes, there are holes in UNIX and Linux. In order to exploit them, you need to either be a UNIX guru or an expert programmer (or both). Anyone can easily exploit the holes in NT.

How come i have seen people root a Linux box by running a single exploit with one command and then type "dir" and that guy says you have to be an expert programmer?!? my my my
Title: getting things straight...
Post by: Heru on 1 June 2002, 11:24
Your first two posts make a sort of messed up half sense, I think I'll just ignore those...

You saw someone root a Linux box?  Well if this is true they probably had a somewhat(or perhaps quite) advanced program that they either downloaded or made themselves(meaning they would be an advanced programmer), and chose an insecure target.

I've tried to hack into my Linux box, I just cant do it!  No luck.  While later I tried to hack into my windows box, it was quite easy.  Now keep in mind that they are both connected to the same cable modem and both are protected by software firewall.
Title: getting things straight...
Post by: voidmain on 1 June 2002, 11:42
I guess he's never heard of Code Red.  Hell, you only need to hack one Windows box and then they hack themselves from there... All I can say is, I'm sure glad I didn't have any IIS boxes. I would have made a special trip to Redmond to take a nice healthy shit on the lawn.
Title: getting things straight...
Post by: cyrax on 1 June 2002, 18:10
Linux exploits.. there everywhere, their also traded for hacked boxes on IRC. i have tested one on my own box , i got it from some guy who had a shell account on my redhat box. i cant remember the filename but it was like s10 or something
all i typed was ./s10 and i was instantly dropped to root. i could even change the pass without knowing it originally!
Title: getting things straight...
Post by: cyrax on 1 June 2002, 18:13
If i had a dollar for every linux exploit on this page i would be pretty happy  (http://smile.gif)

http://www.insecure.org/sploits_linux.html (http://www.insecure.org/sploits_linux.html)
Title: getting things straight...
Post by: cyrax on 1 June 2002, 18:15
Voidman, I dont run IIS so i dont have a problem. if i wanna run an ftp i just download bulletproof ftp server. simple
Title: getting things straight...
Post by: cyrax on 1 June 2002, 18:18
ahhh voidman havn't you heard of the worm that took down NASA years ago? they were all sun and linux servers + workstations. the IIS boxes dont hack themselves its worm code that just eats its way through the network
Title: getting things straight...
Post by: cyrax on 1 June 2002, 18:22
read read

http://www.networkmagazine.com/article/NMG20010518S0001 (http://www.networkmagazine.com/article/NMG20010518S0001)
Title: getting things straight...
Post by: hoojchoons on 1 June 2002, 18:37
Are you trying to compare the exploits written for IIS machines to those written for Linux machines? If so, you're sentenced to fail. I don't believe that anyone in here ever claimed that *nix and Linux boxes are "bulletproof". Of course there are vulnerabilities and security holes in every OS but try comparing the time it takes for the latter to be patched in Linux to the time it takes for M$ to patch Windoze holes!
Title: getting things straight...
Post by: cloudstrife on 1 June 2002, 18:38
quote:
Originally posted by cyrax-:
If i had a dollar for every linux exploit on this page i would be pretty happy   (http://smile.gif)  

http://www.insecure.org/sploits_linux.html (http://www.insecure.org/sploits_linux.html)



For almost every exploit on this page, you must have some programming knowledge.  Also, most of these exploit deal with versions of linux from around '98.
Title: getting things straight...
Post by: Master of Reality on 1 June 2002, 20:31
this is a pretty stupid thread... its just cyrax trying to fill a gaping hole of insecurity about linux within hinself.
Title: getting things straight...
Post by: voidmain on 1 June 2002, 20:57
All I can say is, none of my Linux servers have ever been hacked, and I have many of them exposed.  *All* of the Windows machines have been hit with viruses and worms more than one time. Linux and BSD are the only machines I expose to the internet and one is up to 479 days of uptime. Let's see, how many Win servers do you have with that sort of record?
Title: getting things straight...
Post by: dwar on 1 June 2002, 22:12
quote:
could someone tell me why on IRC there are chat rooms with hundreds to thousands of people trading hacked linux box accounts? i dont see people trading hacked windows boxes


You are right, but most of those aren't from core exploits. People run extra programs that have vulnerabilities of their own. Now, compare hundreds to thousands to the thousands to hundered of thousands of hacked windows machines. Unlike UNIX on winblows you gain access to the whole system instead of just the user it was running on. Don't act like winblows doesn't ever get hacked. I've seen multiple irc channels with over 5000-10000 hacked winblows clients. So don't start getting all cocky about things you don't even know what you are talking about.

Winblows is a paradise for worms, virii, and trojans. Think about it, if you were a virus would you want to live in Hawaii, or in a working systemized enviorment such as a big city, where you can't really do what you want.

[ June 01, 2002: Message edited by: dwar ]

Title: getting things straight...
Post by: Heru on 2 June 2002, 00:13
A typical security hole in Linux gets fixed in a week or two after it is discovered.

A typical security hole in Windows is fixed in a week or two after MS announces that it exists.  It is a fact that MS finds out about these things months before they fix them.

As has been stated earlier Linux and BSD is more secure.  No one said it is bulletproof.  Anything can be hacked, if you know how.  It's just that I can hack a windows computer but not a Linux one; and I have next to no programming knowledge.
Title: getting things straight...
Post by: cyrax on 2 June 2002, 15:56
Has anyone ever been on #xdcc on irc.criten.net ? it has over a thousand HACKED linux boxes hosting terabytes of warez. and thats only one of the channels on that server. mind you the server is hacked too... type /list and look at all the channels, go into one and look at all the root-kit jobs of linux boxes. To believe that someone can use a root kit on your box, open up a backdoor port replace SSH with a hacked version, kill logs, replace every program that can reveal who did it is unbelievable. And its all so easy too. btw i dont see any hacked windows boxes hosting warez on mirc  ;)
Title: getting things straight...
Post by: cyrax on 2 June 2002, 15:59
all of that is true, windows boxes are full of vulnerabilies except there is no use with a hacked win box. who would want to hack my box down? they cant host warez off me or anything, theres no point. But is great for remote access and use.. u can run eggdrops, bouncers, irc servers, crontabs if you hack a box and you dont have to pay money for it... It annoys me to see shell hosting companys exploiting free linux to make money of it by charging access to it.. tsk tsk
Title: getting things straight...
Post by: cyrax on 2 June 2002, 16:01
all those hacked servers hosting warez on mirc are all definately large companys, those boxes have hundreds of gigabytes of storage on them, huge bandwidth, im talking 5000kb\s upload. Either the company admin is a dipstick, but i dont think there would be thousands of admin dipsticks around.. or there are serious problems in linux.
Title: getting things straight...
Post by: cyrax on 2 June 2002, 16:04
Voidman whats the point of that uptime? the uptime counter resets after 490 days thanks to linux you will have no proof after that.. heehee  :D
Title: getting things straight...
Post by: voidmain on 2 June 2002, 17:35
What's the point of all that uptime???????  You dumbass, do you think I care about the actual number of days *because* of the number of days?  NO! I care about the uptime because I don't want to disrupt service to my users.  Geez... You're starting to sound like that Windows XP Luser #-0001234

[ June 02, 2002: Message edited by: VoidMain ]

Title: getting things straight...
Post by: Calum on 2 June 2002, 22:37
this is just the new cyrax moronic wankoff thread, since i closed his other thread due to the fact that he was talking a load of shit.

There is an alarming similarity between the ludicrousness of his arguments there, and here so, predicatably, this thread is now closed also, thanks for your custom.