Printable View
hello_world();
As a relative new comer to the security world I have found a staggering amount of people who answer in the negative to the following prompt.
"To me hacking is... "
My question to you AO is how would you respond. */ Drunken rambling rants are ok; all I ask is honesty. */
edit ***************************
as always thank you very much in advance for any feedback.
edit ***************************
end
Can't speak for everybody, but to myself, hacking is reading Eric Raymond's digest on Hackers && The Jargon File (which is mostly worthless jargon!).
Hackers are notorious for not getting along with each other, some instantly proclaim "script-kiddie!" when they've spent the majority of there own time hanging around on site's stealing other peoples scripts. Majority of the time the hacking articles being published are done so by spotty 17 year olds sitting in there bedroom.
To me hacking is, avoiding flame war's, reading material published by so called experts whilst bearing in mind that most of these self proclaimed experts seem to forget that X is an unknown quantity and a spurt is a drip under pressure.
To me Hacking is, knowing when your тσσ ∂яυик тσ нαยขк! :drink:
So you've gone this far, but where are you going and what do you do next?
To me Hacking is, re-reading articles of phrack cover to cover and remembering that nothing is secure... ;)
They only have the intellect to read tabloid newspapers and watch ignorant TV programmes.;)Quote:
I have found a staggering amount of people who answer in the negative to the following prompt.
"To me hacking is... "
Hacking, is having the ability to understand systems and to make them perform outside of their specifications or instruction manual. It is the ability to devise workarounds, and resolve novel problem situations. It is being a professional who really understands what they are dealing with, and knows what to do..........or try.
The gutter press and scum television are responsible for the current perception of "hackers", when the creatures they refer to could never aspire to the title whilst they have a hole in their rectums.
The turdpress can generally be detected by failure to identify skiddiewinks, and thinking that gaining illegal access is "hacking", when the cognoscenti know that is "cracking"
Errr...............you don't "hack" safes or codes..............you "crack" them;)
There is no such things as a refined cracker (hacker). Always keep that in mind.
Thats abot the best definition possible. The term "Hacking" doesn't really have anything to do with computes. It was originally a group of avid toy train enthusiasts that came up with the term. It just means to come up with a non-standard solution to resolve a problem.Quote:
Hacking, is having the ability to understand systems and to make them perform outside of their specifications or instruction manual. It is the ability to devise workarounds, and resolve novel problem situations
Using a "script kiddie" program isn't hacking, because your using the software the way it was intended to be used. But fixing a muffler on your car with a coat hanger is just as much hacking as finding a way around the security protocols used in SIPERNET. Although any more, a coat hanger muffler is rather common, so you wouldn't be elite unless you found a way to McGiver it.
The first hackers I read about were the track designers of the MIT model railroad society.
A good history is Steven Levy's Hackers: Heroes of the Computer Revolution
It even documents the Hacker's Code of Ethics
I like the expression "That was an elegant hack". It could refer to a software fix or something done to get my car to the service center.
Cheers,
-D
i agree media in general doesn't take the time to get the full story on this subject they present hacking in a way that sells papers and gets viewers to tune in it basically boils down to media using fear to get people to tune in there main objective is to sell advertising place in case of visual and audio media and advertising and papers in the case of papers and magazines it all boils down to we have a society that doesn't think for itself and doesn't want to take the time and research things of interest themselvesQuote:
Originally Posted by nihil
i used to use my old guitar strings for hanging mufflers and made money selling the plain ones to tattoo artists for tattoo needles lolQuote:
Originally Posted by souleman
Hacking is when you get a speck of dust in your throat and you cough really violently and for a long time, often spewing mucus and saliva across the room.
lol re:Here's Webster's online (http://www.websters-online-dictionar...nition/hacking) definition...Quote:
spewing mucus and saliva
Quote:
Origin of the term at MIT
The term originally developed at MIT long before computers became common; a "hack" meant a simple, but often inelegant, solution. The term hack came to refer to any clever prank perpetrated by MIT students; the perpetrator is a hacker. To this day the terms hack and hacker are used in that way at MIT, without necessarily referring to computers. When MIT students surreptiously put a police car atop the dome on MIT's Building 10, that was a hack, and the students involved were therefore hackers.
Computer culture at MIT developed when members of the Tech Model Railroad Club started working with a Digital Equipment Corporation PDP-1 computer and applied local model railroad slang to computers. In modern computer culture, the label "hacker" is a compliment, indicating a skilled and clever programmer. In the media, however, it has negative connotations and has become synonymous with "software cracker".
The term hacker is used in five senses in common use:
Someone who knows a (sometimes specified) set of programming interfaces well enough to write novel and useful software without conscious thought on a good day.
Someone who (usually illegally) attempts to break into or otherwise subvert the security of a program, system or network, often with malicious intent. This usage was annoying to many in the developer community who grew up with the primary meaning in sense (1), and preferred to keep it that way; they preferred the media used the term cracker. However this wound up causing even more problems as simply creating a new word did nothing to dispel misconceptions. "Black hat hacker" is a phrase that wound up with the same problems as the word "cracker".
Someone who attempts to break into systems or networks in order to help the owners of the system by making them aware of security flaws in it. This is referred to by some as a "white hat hacker" or sneaker. Many of these people are employed by computer security companies, and are doing something completely legal; and many were formerly hackers within sense 2.
Someone who, through either knowledge or trial and error, makes a modification to an existing piece of software, made available to the hacker community, such that it provides a change of functionality. Such change is normally a benefit. Rather than a competition, the exchange of improvements is most often experienced as a cooperative learning effort.
A Reality Hacker or Urban Spelunker (origin: MIT); someone who enjoys exploring air ducts, rooftops, shafts and other hidden aspects of urban life, sometimes including pulling elaborate pranks for the enjoyment and entertainment of the community.
"Script kiddie" is reserved for a computer user of little or no skill who simply follows directions or uses a cook-book approach without fully understanding the meaning of the steps they are performing.
"h4x0r" (pronounced Hacks-Or) is a script kiddie in the context of a computer game (i.e. someone who uses a program to modify a game giving them special and unfair advantages). "h4x0r" is often used jokingly or as a term of endearment between gamers.
Note that while the term hacker denotes competence, the noun hack often means kludge and thus has a negative connotation while the verb hack generally shares the same competent connotations.
See also jargon file.
The hacker community (the set of people who would describe themselves as hackers, or who would be described by others as hackers) falls into at least three partially overlapping categories. The word hacker probably derives from the somewhat derogatory hack, used in the newspaper industry typically to refer to a Journalist who types his stories without checking his facts first.
Hacker -- Brilliant Programmer
One who knows a (sometimes specified) set of programming interfaces well enough to write novel and useful software without conscious thought on a good day. This type of hacker is respected within the development community for the freedom they represent, although the term still carries some of the meaning of Hack, developing programs without adequate planning. This zugzwang sets freedom and the ability to be creative against methodical careful progress. Corporate programming environments typically favor only either the good hackers or the careful computer scientist.
At their best, Hackers can be surprisingly productive. Industry standard rates of development are in the range of 6-10 lines of code (debugged, and documented) per hour. A Hacker in stride can produce a few hundred lines of code an hour as thought translates itself directly into code. As a result a Hacker may be able to sketch out the full shape of a program to a level of quality that can be used for demonstrating ideas in less than a week. Thus it isn't hard to see what some companies find useful in Hacker talent.
The down side of Hacker productivity is generally agreed to be in maintainability, documentation, and completion. Very talented hackers may become bored with a project once they have figured out all of the hard parts, and be unwilling to finish off the details. This attitude can cause friction in shops where other programmers are expected to pick up the half finished work, decipher the structures and ideas, and bullet-proof the code. In other cases, where a Hacker is willing to maintain their own code, a company may be unable to find anyone else who is capable or willing to dig through code to maintain the program if the original programmer moves on to a new job.
Hacker -- Computer Criminal
The popular press has been known to use the terms "hacker" and occasionally "cracker" for someone who attempts to break into or otherwise subvert the security of a system or network. Both usages are annoying to many in the developer community who grew up with the primary meaning of "hacker" in the Guru sense, and who don't see the problem solved by the invention of new and nebulous words like "cracker" or "black hat". Instead, there has been a move to define terms when describing these people. What makes someone a "hacker", a "computer criminal", or just a regular computer user? Once these details are known, the proper word (or combination) can be accurately applied.
While it will always be possible to use one's "hacker" skills in a destructive way, this tends to go against the loosely defined hacker ethic. One can certainly use hacking skills to commit a crime. However, this means that this particular hacker is now a criminal, vandal, malicious user, etc., existing words that do a much better job of describing the person's actions than the nebulous "cracker". If a locksmith used his skills to break into a building, few would debate that he had crossed into the criminal world and there would be no need to invent a word to define criminal or malicious locksmiths. The reason hackers face these kinds of problems is because the mass media tends to believe anyone who says they are a hacker - and people say they are hackers because of the mass media's sensationalist portrayals. This deceptive cycle will probably only come to an end with the education of reporters and the general public on what constitutes a hacker and what does not. A group known as the "Hacker Antidefamation League" has this goal.
Software cracking is the process of removing any sort of software enforced protection scheme from a piece of software.
There are several recurring tools of the trade used by hackers to gain unauthorized access to computers:
Trojan horse -- These are applications that seem to do useful work, but set up a back door so that the hacker can later return and enter the system. These include programs which mimic login screens. Viruses that fool a user into downloading and/or executing them by pretending to be useful applications are also sometimes called trojan horses.
Snooper -- Applications that capture password and other data while it is in transit either within the computer, or over the network
virus -- An application that propagates itself opportunistically by waiting in the background until the user offers it a new medium to infect. The term came into usage by comparison with biological viruses, which reproduce by infecting a cell and taking advantage of its life functions. Similarly, computer viruses, unlike worms, embed themselves within files on the host system. When "infected" executables run, or sometimes when infected binary data files are read, the virus is able to spread to other binary format files on the local system, floppy disks or over the network. Viruses are often confused with worms.
worm -- An application that actively probes for known weaknesses across the network, then propagates itself through an exploitation of those weaknesses. The original Usenet post describing the MorrisWorm described the distinction between viruses and worms thus: worms do not attach themselves to code. Popular usage appears to favour worms being more active than viruses. However, the Jargon File, as of version 4.4.1, maintains the original sense of the term. A Worm in this original sense is any independent program which reproduces itself over a network (a program reproducing itself on the local machine only repeatedly until the machine crashes is known as a wabbit). After the comparison between computer viruses and biological viruses, the obvious comparison here is to a bacterium.
Vulnerability Scanner -- A tool used to quickly check computers on a network for known weaknesses. Hackers also use Port Scanners. These check to see which ports on a specified computer are "open" or available to acess the computer through.
Exploit (computer science) -- A prepared application that takes advantage of a known weakness
Social engineering -- Asking someone for the password or account (possibly over a beer.) Also includes looking over someone's shoulder while they enter their password, or posing as someone else in order to get sensitive information.
Root kit -- A toolkit for hiding the fact that a computer's security has been compromised. Root kits may include replacements for system binaries so that it becomes impossible to see applications being run by the intruder in the active process tables.
Leet -- An English pidgin that helps to obscure hacker discussions and web sites, and paradoxically it simplifies the location of resources in public search engines for those who know the language.
Hacker -- Grey Hat
1) A black-hat hacker turned white-hat. See below.
2) A white-hat hacker who uses black-hat techniques to satisfy their employers, for whom they act as white-hat.
Hacker -- White Hat
White hat hackers often overlap with black hat depending on your perspective. The primary difference is that a white hat hacker observes the hacker ethic, a sort of golden rule of computing similar to: Do unto others as you would have them do unto you. Like black hats, white hats are often intimately familiar with the internal details of security systems, and can delve into obscure machine code when needed to find a solution to a tricky problem without requiring support from a system manufacturer.
An example of a hack: Microsoft Windows ships with the ability to use cryptographic libraries built into the operating system. When shipped overseas this feature becomes nearly useless as the operating system will refuse to load cryptographic libraries that haven't been signed by Microsoft, and Microsoft will not sign a library unless the US Government authorizes it for export. This allows the US Government to maintain some perceived level of control over the use of strong cryptography beyond its borders.
While hunting through the symbol table of a beta release of Windows, a couple of overseas hackers managed to find a second signing key in the Microsoft binaries. That is without disabling the libraries that are included with Windows (even overseas) these individuals learned of a way to trick the operating system into loading a library that hadn't been signed by Microsoft, thus enabling the functionality which had been lost to non-US users.
Whether this is good (white hat) or bad (black hat) may depend on whether you are the US Government or not, but is generally considered by the computing community to be a white hat type of activity.
How Some Hackers Define Themselves
The following is the definition given by the jargon file (a dictionary of hacker jargon) accepted by some (but not all) in the hacker community:
hacker n.
[originally, someone who makes furniture with an axe]
A person who enjoys exploring the details of programmable systems and how to stretch their capabilities, as opposed to most users, who prefer to learn only the minimum necessary.
One who programs enthusiastically (even obsessively) or who enjoys programming rather than just theorizing about programming.
A person capable of appreciating hack value.
A person who is good at programming quickly.
An expert at a particular program, or one who frequently does work using it or on it; as in `a Unix hacker'. (Definitions 1 through 5 are correlated, and people who fit them congregate.)
An expert or enthusiast of any kind. One might be an astronomy hacker, for example.
One who enjoys the intellectual challenge of creatively overcoming or circumventing limitations.
[deprecated] A malicious meddler who tries to discover sensitive information by poking around. Hence `password hacker', `network hacker'. The correct term for this sense is cracker.
The term `hacker' also tends to connote membership in the global community defined by the net (see the network and Internet address). For discussion of some of the basics of this culture, see the How To Become A Hacker FAQ. It also implies that the person described is seen to subscribe to some version of the hacker ethic.
It is better to be described as a hacker by others than to describe oneself that way. Hackers consider themselves something of an elite (a meritocracy based on ability), though one to which new members are gladly welcome. There is thus a certain ego satisfaction to be had in identifying yourself as a hacker (but if you claim to be one and are not, you'll quickly be labeled bogus). See also geek, wannabee.
This term seems to have been first adopted as a badge in the 1960s by the hacker culture surrounding TMRC and the MIT AI Lab. We have a report that it was used in a sense close to this entry's by teenage radio hams and electronics tinkerers in the mid-1950s.
Notable Hackers
Richard Stallman -- A hacker of the old school, Stallman walked in off the street and got a job at MIT's Artificial Intelligence Lab in 1971. Stallman is a legendary hacker, the founder of the free software movement, a MacArthur "genius grant" recipient and a programmer capable of prodigious exploits.
Ken Thompson and Dennis Ritchie -- The driving creative force behind Bell Labs' legendary computer science operating group, Ritchie and Thompson created UNIX in 1969.
Steve Wozniak -- The co-founder of Apple Computer got his start making devices for phone phreaking.
Linus Torvalds -- Torvalds was a computer science student at the University of Helsinki when he wrote the Linux kernel in 1991.
Larry Wall -- The creator of the Perl programming language.
Johan Helsingius -- Operated the world's most popular anonymous remailer, the Penet remailer (called penet.fi), until he closed up shop in September 1996.
Tsutomu Shimomura -- Shimomura outhacked and outsmarted Kevin Mitnick, the United States's most infamous hacker, in early 1994.
Notable Crackers
Here are a few of the more famous crackers (many of whom have since turned to positive hacking):
Eric Corley (a.k.a Emmanuel Goldstein) -- Long standing publisher of 2600 the Hacker Quarterly. He has been part of the hacker community since the late 70's.
John Draper (a.k.a. Captain Crunch) -- Figured out how to make free phone calls using a plastic prize whistle he found in a cereal box. (See phreaking.)
Mark Abene (a.k.a. Phiber Optik) -- Inspired thousands of teenagers around the country to "study" the internal workings of the United States's phone system. One of the founders of Masters of Deception.
Robert T. Morris -- This Cornell University graduate student accidentally unleashed the first major Internet worm in 1988.
Kevin Mitnick -- The first hacker to have his face immortalized on an FBI "Most Wanted" poster.
Kevin Poulsen -- In 1990 Poulsen took over all telephone lines going into Los Angeles area radio station KIIS-FM to win a call-in contest.
Vladimir Levin -- This mathematician allegedly masterminded the Russian hacker gang that tricked Citibank's computers into spitting out $10 million.
External Links
The MIT Gallery of Hacks