full-disclosure - Hacker suspect says his PC was hijacked

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

From: steve.wray at paradise.net.nz (Steve Wray)
Subject: Hacker suspect says his PC was hijacked

Will "Knowingly allowing a computer under your control 
to remain in an exploitable state" become a crime?
(if it isn't already...)

I am in two minds on whether it should or should not
:(


> [mailto:full-disclosure-admin@...ts.netsys.com] On Behalf Of 
> Paul Tinsley
> 
> http://www.cnn.com/2003/TECH/internet/10/10/hijacked.hacker.re
> ut/index.html
> 
> "Caffrey is accused of triggering the paralyzing data blast 
> on a vital 
> computer server used to coordinate ship movements in the 
> Houston port -- 
> the sixth biggest shipping port in the world"
> 
> Ok, so somebody explain to me why in the world this "vital computer 
> server" is on a public network?
> 
> "He said his machine may have been taken over by another 
> individual or 
> group who then set the digital onslaught in motion. 'My computer was 
> completely and utterly vulnerable to many exploits'"
> 
> If anybody needed more ammo to convince people that patching is 
> important this might be a good one to add to the stack, whether he is 
> lying or not I sure wouldn't want to try and defend that position...