might as well :)
Which OS are You?
Uncategorized
.mil hacking ?
I came across this piece yesteday and today skjaidev gave me this link http://www.nic.mil/cgi-bin/domain Thats right. Its the NIC website for the .mil domains. You can add/modify/delete any .mil website. Cool aint it ? Well. think again. Port scan on nic.mil given some suspicious info. It is running Trinoo server ( pre-historic ddos tool), IRC server , and lot other services. Amazingly its running some conflicting services. Its running X11, tftp, finger, sunrpc etc – signs of a Unix box ( nmap tells me its Solaris ) However its also running netbios, ms-sql, NetBus etc – things usually found on…
more on the ms-sql worm – cricinfo was not accessible ( manu pointed this out ) – 5 out of the 13 DNS root servers went down – 95% ( thats right , no typo ) packet loss across UUnet / Worldcom. – upto 210MB/sec traffic seen on some routers. – if you plug an infected machine into a port on an HP4000 switch it would freeze. anyway the traffic seems to be going down slowly.. and hopefully I can get some sleep tonight. many people have asked me how to filter it out on their linux box. So here…
damn damn.. damn MS.. I am late for the concert thanks to them. <update> I managed to get to the rockarama concert. Kryptos sucked real bad. Motherjane and Molotov Cocktail were really good. I should have bought their cd there .. ( was kinda broke ). In other news.. mrinal‘s car was broken into and his car audio system got stolen. and most of all they took away the only copy of the cryptic’s new cd. </update>
next generation nimda virus ?
Whoever is reading this…. please block UDP port 1434 (MS SQL server ) right away. Its practically taking the whole net down.. my servers are getting hammered with this [update] UDP traffic, sourced from 2038, destined for 1434, single-packet flows. The worm seems to be using this MS exploit From the advisory : When an SQL Server receives a single byte packet, 0x0A, on UDP port 1434 it will reply to the sender with 0x0A. A problem arises as SQL Server will respond, sending a ‘ping’ response to the source IP address and source port. This ‘ping’ is a single…
Cops and Computers
I had to go to the police station today before I came into work. I had to get my address verification done for my new passport and I had to follow up with this guy. So the guy at the desk makes me run around couple of times and I finally meet up the guy who is responsible for this. So after couple of questions he starts filling in some forms and then he asks me Cop : So where do you work ? me : I work in a computer company cop : which one ? me : Yahoo…
APC hoax ?
achitnis pointed this out last night After the recent article on slashdot about APC recalling 2.1 million UPS units ,there was a page put up to find out if your UPS was defective. The info is here Now notice the “Made in XXXXX” part. ( right above the bar code ) Interesting ? .. well whats even more interesting is the fact that there is no APC factory in Bangalore.