[Noisebridge-discuss] Don't Click This Email!

[Christopher Abad]

Just kidding.

Sorry for hacking you guys, it was an accident.
See the submitted abridged account of the incident:

15:32 < aempirei> ^ADCC CHAT CHAT 1122445274 19^A
15:32 < aempirei> oops
15:32 < aempirei> sorry
15:32 < ani_> aempirei wtf
15:32 < aempirei> it was an accident didnt mean to do that here
15:33 < aempirei> hahah
15:33 < aempirei> yeah
15:33 < aempirei> it would do that ani
15:33 < aempirei> sorry
15:35 < aempirei> dont connect to tit
15:37 < aempirei> dont connect to it
15:38 < aempirei> i told you dont click it

Furthermore it wasn't a bug of any sort and it wasn't the classic
startkeylogger of olde.
It was simply a DCC CHAT request 'from' a CHARGEN service on some random
computer on the internet (eg: telnet 1122445274 19).
And its most definately not computer-security-y.
I think the primary reason it freaks out Macintoshy is because the aliased
scalable fonts in a
mac text window is relatively expensive (try scrolling ANSI videos and stuff
its clearly mega slow).

As a consolation I offer free math homework assitance or sewing lessons on a
Bernina Activa 145!

again, sorry!

christopher abad

On Wed, Jun 17, 2009 at 1:35 PM, Al Billings <albill at openbuddha.com> wrote:

> The actual bug was a OS X IRC client issue (the IRC client that most
> people on Macs tend to run).
>
> On Jun 17, 2009, at 12:31 PM, Davidfine wrote:
>
> > Oh, wow, DCC SEND still works? That's annoying behavior, but not as
> > evil
> > as I thought we were talking about. So yeah, that is a sign you should
> > update your Norton Antivirus and/or Linksys/Netgear router firmware.
> > http://www.hm2k.com/articles/startkeylogger
> > --D
> >
> > aestetix aestetix wrote:
> >> DCC SEND startkeylogger 000
> >>
> >>
> >>
> >> On 6/17/09, Davidfine <d at vidfine.com> wrote:
> >>
> >>> Allow me toss some more shame on the shame heap:
> >>> Noisebridge is home to many brilliant nerds who specialize in things
> >>> other than computer security. We also welcome complete n00bz who
> >>> want to
> >>> learn. Affiliating with NB is not the same as consenting to 24/7
> >>> war games.
> >>>
> >>> Mark all that apply:
> >>> 1) you want them to dislike you
> >>> 2) you are too lazy to run a test environment
> >>> 3) you are starved for attention (see number 1)
> >>>
> >>> Cheers!
> >>> --D
> >>>
> >>> Jason Dusek wrote:
> >>>
> >>>>  Today I received a private message on IRC from Chris Abad
> >>>>  (`aempirei` in `#noisebridge`). I'd heard a little bit about
> >>>>  him and I thought it was odd that he was PM'ing me; because it
> >>>>  was right before Haskell class I thought he might be asking
> >>>>  about that.
> >>>>
> >>>>  Surprise. His private message was an exploit against my IRC
> >>>>  client. It was the wrong time for me, though, as I was in the
> >>>>  middle of talking over course material on `#haskell`.
> >>>>
> >>>>  I would like to believe this kind of thing is generally
> >>>>  frowned on at Noisebridge; I have no pretensions of being a
> >>>>  security professional and would not have joined if I felt that
> >>>>  were a requirement. However, when I confronted him on
> >>>>  `#noisebridge`, I was surprised to discover that no one else
> >>>>  had anything to say about it.
> >>>>
> >>>>  I don't think open season on other people's time and energy is
> >>>>  a good policy.
> >>>>
> >>>> --
> >>>> Jason Dusek
> >>>>
> >>>> _______________________________________________
> >>>> Noisebridge-discuss mailing list
> >>>> Noisebridge-discuss at lists.noisebridge.net
> >>>> https://www.noisebridge.net/mailman/listinfo/noisebridge-discuss
> >>>>
> >>>>
> >>>>
> >>>>
> >>> _______________________________________________
> >>> Noisebridge-discuss mailing list
> >>> Noisebridge-discuss at lists.noisebridge.net
> >>> https://www.noisebridge.net/mailman/listinfo/noisebridge-discuss
> >>>
> >>>
> >>
> >>
> >
> > _______________________________________________
> > Noisebridge-discuss mailing list
> > Noisebridge-discuss at lists.noisebridge.net
> > https://www.noisebridge.net/mailman/listinfo/noisebridge-discuss
>
> _______________________________________________
> Noisebridge-discuss mailing list
> Noisebridge-discuss at lists.noisebridge.net
> https://www.noisebridge.net/mailman/listinfo/noisebridge-discuss
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://www.noisebridge.net/pipermail/noisebridge-discuss/attachments/20090617/6cd7c7c1/attachment-0002.html>