All about Hacking

Editor's Notes

• #10: A datagram is a basic transfer unit associated with a packet-switched network in which the delivery, arrival time, and order of arrival are not guaranteed by the network service. Each datagram has two components, a header and a data payload. The header contains all the information sufficient for routing from the originating equipment to the destination without relying on prior exchanges between the equipment and the network. Headers may include source and destination addresses as well as a type field. The payload is the data to be transported. This process of nesting data payloads in a tagged header is called encapsulation.
• #11: 1971 - In early 1971, a former Air Force electronics technician named John Draper (later self-nicknamed Captain Crunch, Crunch, Crunchman, or Mr. Crunchtastic) was informed by his phone phreak friend Joe Engressia that a toy whistle that was, at the time, packaged in boxes of the cereal could be easily modified to emit a tone at precisely 2600 Hertz, the same frequency that was used by AT&T long lines to indicate that a trunk line was ready to route a new call. This would effectively disconnect one end of the trunk, allowing the still-connected side to enter an operator mode. This resulted in, among other things, the ability to place free phone calls to anywhere in the world and operator-like control over the phone system. Experimenting with this whistle inspired Draper to build blue boxes, electronic devices capable of reproducing this 2600 Hz tone and other tones required to control trunk lines. After being featured, under his pseudonym of Captain Crunch, in an article in the October 1971 issue of Esquire Magazine titled "Secrets of the Little Blue Box", he was sentenced in 1972 to five years’ probation for toll fraud. 1988 - A supposedly unintended consequence of the code, however, caused it to be more damaging: a computer could be infected multiple times and each additional process would slow the machine down, eventually to the point of being unusable. 1994 - Vladimir Leonidovitch Levin (Владимир Леонидович Левин) is a Russian-born Jewish individual famed for his involvement in the attempt to fraudulently transfer US$10.7 million via Citibank's computers. 1995 - Kevin David Mitnick (born on August 6, 1963) is an American computer security consultant, author, and hacker. In the late 20th century, he was convicted of various computer and communications-related crimes. At the time of his arrest, he was the most-wanted computer criminal in the United States. Using the Los Angeles bus transfer system to get free rides[6] Evading the FBI[7] Hacking into DEC system(s) to view VMS source code (DEC reportedly spent $160,000 in cleanup costs)[6][7] Gaining full administrator privileges to an IBM minicomputer at the Computer Learning Center in Los Angeles in order to win a bet[6] Hacking Motorola, NEC, Nokia, Sun Microsystems and Fujitsu Siemens systems[7] 2001 – Code Red Code Red was a computer worm observed on the Internet on July 13, 2001. It attacked computers running Microsoft's IIS web server. The worm exploited a vulnerability in the indexing software distributed with IIS, described in Microsoft Security Bulletin MS01-033,[3] for which a patch had been available a month earlier. The worm spread itself using a common type of vulnerability known as a buffer overflow. It did this by using a long string of the repeated character 'N' to overflow a buffer, allowing the worm to execute arbitrary code and infect the machine. Kenneth D. Eichman was the first to discover how to block it, and was invited to the White House for his discovery. Code Red 2 - Code Red II is a computer worm similar to the Code Red worm. Released two weeks after Code Red on August 4, 2001, although similar in behavior to the original, analysis showed it to be a new worm instead of a variant. The worm was designed to exploit a security hole in the indexing software included as part of Microsoft's Internet Information Server (IIS) web server software. Where the original worm tried to infect other computers at random, Code Red II tried to infect machines on the same subnet as the infected machine. Nimda - Nimda is a computer worm, and is also a file infector. It quickly spreads, eclipsing the economic damage caused by past outbreaks such as Code Red. Multiple propagation vectors allowed Nimda to become the Internet’s most widespread virus/worm within 22 minutes. Nimda was so effective partially because it—unlike other infamous malware like the Morris worm or Code Red—uses five different infection vectors: via email via open network shares via browsing of compromised web sites exploitation of various Microsoft IIS 4.0 / 5.0 via back doors left behind by the "Code Red II" 2002 - SQL Slammer is a computer worm that caused a denial of service on some Internet hosts and dramatically slowed down general Internet traffic, starting at 05:30 UTC on January 25, 2003. It spread rapidly, infecting most of its 75,000 victims within ten minutes. Although titled "SQL slammer worm", the program did not use the SQL language; it exploited a buffer overflow bug in Microsoft's flagship SQL Server and Desktop Engine database products
• #12: Divulging = To Make known , to bring out to the public (Private or personal info )
• #20: Original Equipment manufacturer
• #23: NetBus or Netbus is a software program for remotely controlling a Microsoft Windows computer system over a network. It was created in 1998 and has been very controversial for its potential of being used as a backdoor.
• #24: In computer security and programming, a buffer overflow, or buffer overrun, is an anomaly where a program, while writing data to a buffer, overruns the buffer's boundary and overwrites adjacent memory. This is a special case of violation of memory safety. Buffer overflows can be triggered by inputs that are designed to execute code, or alter the way the program operates. This may result in erratic program behavior, including memory access errors, incorrect results, a crash, or a breach of system security. Thus, they are the basis of many software vulnerabilities and can be maliciously exploited.
• #26: a honeypot is a trap set to detect, deflect, or in some manner counteract attempts at unauthorized use of information systems. Generally it consists of a computer, data, or a network site that appears to be part of a network, but is actually isolated and monitored, and which seems to contain information or a resource of value to attackers.