Stupidity on the SUSE security list

I've been watching the SUSE security list and there is a topic with someone who can't get Telnet to work properly.

First thing he said was "How do I disable the firewall so I can get in with Telnet?..... This isn't the worst part. He gave the ****ing IP out of the machine he was trying to get into (215.176.125.70) (IP not changed to protect the incompetent, **** 'em) and then, making it worse, his E-Mail address he's posting from:


[email protected]


He works for HP and, gives out the IP address of a machine he's trying to telnet into, and wants to shut down the whole ****ing firewall JUST so he can telnet in because he's to stupid to read the Manual?????

For another laugh, look up that IP. Make sure you're sitting down though.


Anyway, BBL, having a little fun.

Quote:

---

OrgName: DoD Network Information Center
OrgID: DNIC
Address: 7990 Science Applications Ct
Address: M/S CV 50
City: Vienna
StateProv: VA
PostalCode: 22183-7000
Country: USA
NetRange: 215.0.0.0 - 215.255.255.255
CIDR: 215.0.0.0/8
NetName: DDN-NIC16
NetHandle: NET-215-0-0-0-1
Parent:
NetType: Direct Allocation
NameServer: AAA-VIENNA.NIPR.MIL
NameServer: AAA-KELLY.NIPR.MIL
NameServer: AAA-WHEELER.NIPR.MIL
NameServer: AAA-VAIHINGEN.NIPR.MIL
Comment: DoD Network Information Center
Comment: 7990 Boeing Court M/S CV-50
Comment: Vienna, VA 22183 US
RegDate: 1998-06-05
Updated: 1998-06-09
TechHandle: MIL-HSTMST-ARIN
TechName: Network DoD
TechPhone: +1-703-676-1051
TechEmail: **********@nic.mil
OrgTechHandle: MIL-HSTMST-ARIN
OrgTechName: Network DoD
OrgTechPhone: +1-703-676-1051
OrgTechEmail: **********@nic.mil
# WHOIS database, last updated 2005-01-11 19:10

---

LMFAO..

Trying to hack teh DoD from work..

You've just got to love the incompettence...

Heh, TheHorse will LOVE this. Did you have to post that though? It's more fun when someone looks for themselves and sees what this idiot is attempting to telnet into. LOL. Ah well. I can't believe this ****.

I don't think he's trying to break in though, from his mail message, he appears to have access to it and just didn't know how to configure the firewall to allow his Telnet session. It appears he has access of his own and is just to ****ing stupid to use it.... And WAY to ****ing stupid to be allowed.

Gore:

Just a thought.... He may not be stupid at all.....

Rule 1 of Security: Be suspicious.... I can think of several "operational" reasons for doing something so "stupid".....

Last night GOD came into my dream and told me i can ask him anything from the future of security industry(weired isnt it?huh!). I asked when will we get rid of a**hole stupid lamerz.
Listening this GOD started crying.(huh!!!). He said "Not in my lifetime son!!"

:(

Let the lamerz die.

All I can realy say is WOW.Im glad I looked it up be I read specialists post. I wouldnt of believed it. What a moron. I wonder what his boss would say.

Very nice, kind of makes you wonder WTF he wanted to do in telnet with that server. O_o

Quote:

---

Originally posted here by gore
I don't think he's trying to break in though, from his mail message, he appears to have access to it and just didn't know how to configure the firewall to allow his Telnet session. It appears he has access of his own and is just to ****ing stupid to use it.... And WAY to ****ing stupid to be allowed.

---

Telnet?! Who the hell uses telnet?! I wouldn't touch telnet outside of my private LAN.

Up until last semester, they still allowed telnet sessions into a *nix box that houses our school web pages and email. My teacher (who was a network admin) always used telnet instead of ssh. Her reason? She didn't like the putty client they put on there. She just liked to open up a command line and type telnet. So... is anyone interested in the current online Cisco Academy Curriculum? ;)

By the way on sort of a side note.... as far as editing or sanitizing the IP adress in the original post normaly I would be very disapointed in you gore. But in this case I dont think even the most 1337 $k1dd13 is going to touch that one with a 10 foot pole

LMFAO
This has got to be a joke, right?

Maybe not. Spoke to one of our IT guys the other day about a computer I was using that kept rebooting, etc. Told him I had this problem with others, and thought they had Sasser. He confirmed it, said they can't seem to get rid of it ( been trying for over two months ). Seems he spends his day going to infected computers and re-ghosting them ( with original images ). That's it, their entire strategy. They can't seem to figure out why it keeps coming back! ( blaming it on something to do with the ISP, but couldn't follow him on that one ).

Niiiiiiiice.

I called up my contact down at the Pentagon and trust me, this will be handled swiftly.

Sometimes I wonder how the hell a missle hasn't been launched through the stupidity of people like this.

Quote:

---

Maybe not. Spoke to one of our IT guys the other day about a computer I was using that kept rebooting, etc. Told him I had this problem with others, and thought they had Sasser. He confirmed it, said they can't seem to get rid of it ( been trying for over two months ). Seems he spends his day going to infected computers and re-ghosting them ( with original images ). That's it, their entire strategy. They can't seem to figure out why it keeps coming back! ( blaming it on something to do with the ISP, but couldn't follow him on that one ).

---

Is it possible the image is infected?!

Quote:

---

Maybe not. Spoke to one of our IT guys the other day about a computer I was using that kept rebooting, etc. Told him I had this problem with others, and thought they had Sasser. He confirmed it, said they can't seem to get rid of it ( been trying for over two months ). Seems he spends his day going to infected computers and re-ghosting them ( with original images ). That's it, their entire strategy. They can't seem to figure out why it keeps coming back! ( blaming it on something to do with the ISP, but couldn't follow him on that one ).

---

/me hands IKnowNot a sledge hammer.... you know what to do.

On a slightly more serious note did you atleast explain to the IT guy why it was happening?

Quote:

---

Niiiiiiiice.

I called up my contact down at the Pentagon and trust me, this will be handled swiftly.

Sometimes I wonder how the hell a missle hasn't been launched through the stupidity of people like this.

---

As of now, the IP fails to resolve for me. Looks like it's been fixed.

Cheers,
cgkanchi

Take a look at this link cgkanchi

http://samspade.org/t/ipwhois?a=215.176.125.70

Quote:

---

As of now, the IP fails to resolve for me. Looks like it's been fixed.

---

Yep. :)

I told ya it would be dealt with quickly.

Quote:

---

I told ya it would be dealt with quickly.

---

Just proves Horsy ain't no nag.

Quote:

---

Is it possible the image is infected?!

---

Could be, but they have several for each different type and model of machine

Quote:

---

... did you atleast explain to the IT guy why it was happening?

---

Tried, but that's when he started to explain it was the ISP's fault.

LOL, the thread has died down now on the SUSE lists, and from what I understand one reason is because he was promoted to head window cleaner..... at the unemployment office ;)

Quote:

---

Originally posted here by phishphreek80


Telnet?! Who the hell uses telnet?! I wouldn't touch telnet outside of my private LAN.

Up until last semester, they still allowed telnet sessions into a *nix box that houses our school web pages and email. My teacher (who was a network admin) always used telnet instead of ssh. Her reason? She didn't like the putty client they put on there. She just liked to open up a command line and type telnet. So... is anyone interested in the current online Cisco Academy Curriculum? ;)

---

I don't even use telnet on my own private lan, hehe...it's the absolute first service to be disabled and the telnet command, both static and dynamically linked binaries, deleted and relinked to "ssh" along with aliasing the commands into the generic profile skeleton. Following that is ftp...

As for your "network admin teacher", that's so like so many typical "end lusers", to dislike something because of the way it looks.

Quote:

---

Originally posted here by thehorse13
Niiiiiiiice.

I called up my contact down at the Pentagon and trust me, this will be handled swiftly.

Sometimes I wonder how the hell a missle hasn't been launched through the stupidity of people like this.

---

We have bunker-buster missiles that couldn't even get through that amount of stupidity, hehe...

User stupidity never amazes me anymore. I've seen some of the biggest idiots on Earth sitting in front of a computer.

Here's one to "warm the cackles of your heart..."

I encountered a lot of resistance from management wanting to deploy SSH and close down telnet and ftp. Why? They (and these are IT managers) believed SSH would prove too difficult to deploy on an enterprise basis and that it would be unlikely that anyone could compromise our systems from telnet. No - I'm serious - they told me that.

So, following official channels, I asked for a sniffer trace test to show the traffic of someone logging into a server with telnet. Then I presented this to the managers again and told them it took about 15 seconds to do that. They approved SSH to be deployed and to shut down telnet immediately.

However - I am asked by other managers to this day why telnet is a problem. Some IT managers I have run into and then over, did not know what telnet or SSH was.

And people wonder why I have broken stress balls from time to time.