BlackChampagne Home

In association with Amazon.comBuy Crap! I get 5%.
Direct donations to cover hosting expenses are also accepted.

Site Information
--What is Black Champagne?
--Cast of Characters & Things
--Your First Time.
--Design Notes
--Quote of the Day Archive
--Phrase of the Moment Archive
--Site Feedback
--Contact/Copyright Info

Blog Archives
--Blogger Archives: June 2005-
--Old Monthly Archives: Jan 2002-May 2005

Reviews Section
Movie Reviews (153)

Ten Most Recent Film Reviews:
--Infernal Affairs -- 5.5
--The Protector/Tom Yum Goong -- 6
--The Limey -- 8
--The Descent -- 6
--Oldboy -- 9.5
--Shaolin Deadly Kicks -- 7
--Mission Impossible III -- 7.5
--V for Vendetta -- 8.5
--Ghost in the Shell 2 -- 8
--Night Watch -- 7.5

Book Reviews (76)
Five Most Recent Book Reviews:
--Cat People -- 4
--Attack Poodles -- 5
--Caught Stealing -- 6
--The Dirt, by Motley Crue -- 7.5
--Harry Potter #6 -- 7

Photos Section
--Flux Photos
--Pet Photos (7 pages)
--Home Decor Photos
--Plant Photos
--Vacation Photos (12 pages)

Articles
See all 234 articles here.

Fiction
Original horror and fantasy short stories.

Mail Bags
Index Page

Features
--Links
--Slang: Internet
--Slang: Dirty
--Slang: Wankisms
--Slang: Sex Acts
--Slang: Fulldeckisms
--Hot or Not?
--Truths in Advertising

Band Name Ratings
(350 Rock Bands Listed)
FAQ -- Feedback
A -- B -- C -- D -- E -- F -- G -- H -- I -- J -- K -- L -- M -- N -- O -- P -- Q -- R -- S -- T -- U -- V -- W -- X -- Y -- Z

Hellgate: London
--The Unofficial HGL Site
--The Hellgate Wiki

Diablo II
--The Unofficial Site
--Flux's Decahedron
--Middle Earth Mod

Locations of visitors to this page

Powered by Blogger.

BlackChampagne -- no longer new; improvement also in question.: Hackers for hire.



Monday, January 23, 2006  

Hackers for hire.


Interesting article about a 20 y/o US hacker who is about to be sentenced to up to 6 years in prison for his Internet crimes. I could care about him personally, but I found the info about his hacking activities pretty informative:
November's 52-page indictment, along with papers filed last week, offer an unusually detailed glimpse into a shadowy world where hackers, often not old enough to vote, brag in online chat groups about their prowess in taking over vast numbers of computers and herding them into large armies of junk mail robots and arsenals that flood Web sites with data until they crash.

Ancheta one-upped his hacking peers by advertising his network of "bots," short for robots, on Internet chat channels.

A Web site Ancheta maintained included a schedule of prices he charged people who wanted to rent out the machines, along with guidelines on how many bots were required to bring down a particular type of Web site.

In July 2004, he told one chat partner he had more than 40,000 machines available, "more than I can handle," according to the indictment. A month later, Ancheta told another person he controlled at least 100,000 bots, and that his network had added another 10,000 machines in a week and a half.

In a three-month span starting in June 2004, Ancheta rented out or sold bots to at least 10 "different nefarious computer users," according to the plea agreement. He pocketed $3,000 in the process by accepting payments through the online PayPal service, prosecutors said.

Starting in August 2004, Ancheta turned to a new, more lucrative method to profit from his botnets, prosecutors said. Working with a juvenile in Boca Raton, Fla., whom prosecutors identified by his Internet nickname "SoBe," Ancheta infected more than 400,000 computers.

Ancheta and SoBe signed up as affiliates in programs maintained by online advertising companies that pay people each time they get a computer user to install software that displays ads and collects information about the sites a user visits.

Prosecutors say Ancheta and SoBe then installed the ad software from the two companies — Gamma Entertainment of Montreal, Quebec, and Loudcash, whose parent company was acquired last year by 180Solutions of Bellevue, Wash. — on the bots they controlled, pocketing more than $58,000 in 13 months.
So basically they find hundreds of thousands of idiots who don't use firewalls or security patches, sneak trojans onto their PCs, and harness then into DOS attacks for the highest bidder. They also install adware on those same machines, and make money for signing up their hapless owners for nonstop malware spam. Good work, considering that you never have to leave the house or do any actual labor to make it happen. I doubt they even have any programming skill; they just get scripts online, tweak them slightly, and send them out. And it's all made possible by your Aunt Rita and grandfather and the loud guy three cubicles down who don't know or care enough to take 5 seconds a day to maintain proper computer security.

This illustrates that, as always, the greatest challenge for computer security experts and tech support people to overcome is... the end user. This sort of thing is why it takes 5 emails to get actual help from your ISP or IT person; they assume you're as dumb as everyone else and that you've broken your computer yourself, or that you simply can't operate it properly, or that you installed an email attachment that had "kournikova" and "exe" in its title. And judging by this sort of article, they're usually correct.
Comments:

At my company the IT folks restricts everyone's access to their desk computers-- no one can install anything, the system preferences are off limits, etc.

I can understand that since most of the people I work with are older and have zero understanding about PCs and technology in general. For instance, one person asked me how to "rewind a DVD." Another person once commented "Why do so many e-mails stop in mid-sentence?" Turns out she wasn't using her scroll bar to read the rest of the message.

Of course this also works out to my advantage as well-- when I ordered an iPod Shuffle for work projects (to use as a flash drive!) they gave me a Nano instead since, to use their words, "They're both pretty much the same."

Anyway. I can see where IT is coming from but I have to admit I was a little bitter when it took them two years to give me full access to my computer. Once they realized I practically grew up with Macs, they were happy to let me customize my desk machine to my specifications.

But you know, I never let anyone else on my machine, not even for a minute. Who knows what havoc they would cause.

faqib


 

I hope for the hackers' sakes that they stashed away more than the $58K that the authorities found. $29K is a shitty return for 6 years in jail (well, maybe only 3 or whatever).

Don't get me wrong...I'd love to see more hax8rs put in jail. Just sayin'.

lxaheay (I hope that's an "l" and not a "1".)


 

What's completely weird is that my new work let you basically do anything you want to your computer. We can even use our own development tools - so long as we have a legal copy. Crazy.

You only have to keep Sophos antivirus running and their Zen desktop thing (seems to be a management program, also sets up some programs to run off the network and such), but beyond that, anything you want.

Compared to my partners work where you're barely allowed to do anything and he has to frequently ring up and beg the Network Nazis (tm) in Wellington to let him do something that is absolutely vital to his work, most of which he has to argue vehemently for several minutes before they reluctantly succeed.

He's actually hacked into their systems before and changed things since they wouldn't do it for him.


 

Post a Comment << Home

Archives

May 2005   June 2005   July 2005   August 2005   September 2005   October 2005   November 2005   December 2005   January 2006   February 2006   March 2006   April 2006   May 2006   June 2006   July 2006   August 2006   September 2006   October 2006   November 2006   December 2006   January 2007   February 2007   March 2007   April 2007   May 2007   June 2007   July 2007   August 2007   September 2007   October 2007   November 2007   December 2007   January 2008   February 2008   March 2008   April 2008   May 2008   June 2008   July 2008   August 2008   September 2008   October 2008   November 2008   December 2008   January 2009   February 2009   March 2009   April 2009   May 2009   June 2009   July 2009   August 2009   September 2009   October 2009   November 2012  

All site content copyright "Flux" (Eric Bruce), 2002-2007.