Can Hackers Hack It?

Printable View

May 16th, 2002, 05:15 AM
Dome

Can Hackers Hack It?

I took this article from http://www.informationweek.com/story/IWK20020315S0041

Wouldnt it be nice to get that Ferrari Modena 360??
--------------------

Can Hackers Hack It? March 18, 2002

A couple of high-tech challenges offer big bounties for folks who can do some serious code breaking. Data security software vendor Meganet is offering a new Ferrari Modena 360 to anyone who can break its flagship Virtual Matrix Encryption. Meganet's encryption is based on a 1 million-byte algorithm.

If you prefer cold cash, Bodacion Technologies promises $100,000 to any hacker savvy enough to break the encryption on its Hydra Internet servers.

Bodacion Technologies' code uses chaos theory. "The chaos is derived from functions used to describe cell growth," says chief software architect Eric Uner. "Any patterns which seem to reveal themselves quickly take a left turn."
May 16th, 2002, 07:30 AM
s0nIc

lol wow.. mind blowing.. hehe i would be really cool to meet the people who can crack that baby open.. or atleast watch them do it..
May 16th, 2002, 10:44 AM
gstudios

There was another company who did a contest like that... Wish I could remember the name, think I saw it talked about here, on AO, in fact. Anyhow, someone managed to crack it, but the company never paid up. Claiming that they had done it seconds (hours, days?) after the contest had ended (if i remembered correctly). Therefore the company basically got an answer for free.
May 16th, 2002, 11:06 AM
Negative

Quote:

Originally posted by gstudios
There was another company who did a contest like that... Wish I could remember the name, think I saw it talked about here, on AO, in fact.

That would be Bodacion Technologies' 'Invulnerable Internet' HYDRA-server.

They posted this announcement on 05/01/2002:

Quote:

http://www.bodacion.com/news.html
The Bodacion Challenge has ended as of May 1st. We received over 200,000 attempts, and no one was able to correctly figure out the 1000th Bodacion. Thank you to everyone who attempted. A new challenge has not yet been posted.
May 16th, 2002, 01:39 PM
NetSyn

trust them at ur own risk.... i know i have no chance of cracking that crap but if i could id do it.... even if i didnt get the money i would at least have been known to have done it and that woulda been enough for me... but i would most def ask for my cash and fight them in court if they refused 2 pay

-NetSyN
May 16th, 2002, 02:19 PM
iNViCTuS

This is a legit contest...

But there is one thing I never understood...Why would you intentionally draw that kind of attention to your product. Nothing is unbreakable...so eventually, like every other contest like this, when someone cracks it, nobody will want to buy the product anyway. Security through obscurity still has something to be said.
May 16th, 2002, 02:34 PM
Ratman2

Quote:

Originally posted here by iNViCTuS
This is a legit contest...

But there is one thing I never understood...Why would you intentionally draw that kind of attention to your product. Nothing is unbreakable...so eventually, like every other contest like this, when someone cracks it, nobody will want to buy the product anyway. Security through obscurity still has something to be said.

The answer to this one is fairly simple: Product improvement. What will happen with Hydra now is that the company will correct the product so the same exploit cannot be used again. After this they may repost the contest. This cycle may continue for a while. When it's over they'll have such a secure product that 99% percent of people that try to crack it will give up, moving on to a less defended target.
May 16th, 2002, 02:49 PM
souleman

invictus> Also, you are convincing a crapload of people to beta test your product for you. How much would it cost to get 200,000 people to security test a product for a month? I think 100,000 is pretty damn cheap when you consider it.

And like gstudios pointed out, they didn't pay up last time, because of the timing. I can't remember where I read about that, but they didn't have to pay anything because the person was late turning in the "1000'th bodacian" In other words....screw em...
May 16th, 2002, 04:26 PM
iNViCTuS

The problem is that is is not just the 100,000 that is lost...more importantly it is your reputation. Would you want to be a salesman for a company that had to explain to potential customers "Well, it's secure, but not 100% secure because someone did crack it. But don't worry...it can't happen again!!"
May 16th, 2002, 04:41 PM
Dome

I think most companies understand that there is no such thing as 100% secure... but i would be happy to tell a company that we offered a Ferrari for anyone who could crack it and millions tried and only one secceeded after 2 months of trying, that shows that not any kiddiot could get into your computers and that only those evil genius hackers can.

not only that, but they would of had that exploit fixed wich means that cant even be used anymore..
May 16th, 2002, 04:48 PM
Negative

Reminds me of that Pepsi-stunt some 10 years back: they promised a Concorde - painted in the Pepsi-colours and used in some of their commercials - to anyone who'd bring them 200 million Pepsi-bottle-caps, obviously believing that nobody could pull that off. Too bad for them, but someone actually came up with 200 million caps... What followed was a court-fight pur sang. They had to pay the guy a couple of billion dollars - the Concorde didn't even exist, but was just a scale-model...
May 16th, 2002, 04:53 PM
Dome

Negative: i dont think it was a concorde, atleast not when i saw it.... i think it was a Fighter Jet from the Air Force, and as you know it is illegal to privately own one of those.....

But yeah that was funny i never thought someone could collect that much, but he bprobably went around recyceling bins picking **** up.
May 16th, 2002, 06:32 PM
gstudios

If i remember correctly it was a Harrier Jet.
May 16th, 2002, 09:01 PM
psychosquee

gstudios> It was a Harrier from one of Pepsi's "Pepsi Stuff" promotions.
May 16th, 2002, 09:52 PM
ViRyS

O.K. , So who else (other than myself) would rather open a hole and not tell any one ??
"if they close it, you'd have to do the same sh*t and then some to get back in"
It doesn't make sense to find a breach then tell them so it can be fixed ......
May 17th, 2002, 12:05 AM
8*B@LL

Quote:

Originally posted here by Negative
Reminds me of that Pepsi-stunt some 10 years back: they promised a Concorde - painted in the Pepsi-colours and used in some of their commercials - to anyone who'd bring them 200 million Pepsi-bottle-caps, obviously believing that nobody could pull that off. Too bad for them, but someone actually came up with 200 million caps... What followed was a court-fight pur sang. They had to pay the guy a couple of billion dollars - the Concorde didn't even exist, but was just a scale-model...

as previously stated yes it was a harier jet, and they didnt collect all the caps. they had something like 20 "pepsi points", but you could buy them for like one or two bucks or something. after doing the calculations it turned out that was an incredibly cheap harier. he got some investors and send in his points with a check and a letter stating he wanted his harier. they said no. he took them to court. the court said that 1) it was clearly a joke, and 2) for it to be legal it would have to be "de-militarised" rendering it inoprable. an account may be found here

Quote:

Originally posted here by ViRyS
O.K. , So who else (other than myself) would rather open a hole and not tell any one ??
"if they close it, you'd have to do the same sh*t and then some to get back in"
It doesn't make sense to find a breach then tell them so it can be fixed ......

you, my friend, miss the point. if you give them the hole in their software they give you a car. also, this is not a cracker sight so that doesnt really mix with this croud.