Re: [PHP] wide open

2001-02-12 Thread Rick Hodger


Dan Harrington [EMAIL PROTECTED] wrote in message
[EMAIL PROTECTED]">news:[EMAIL PROTECTED]...

  Furthermore, Jonathan stated that he didn't "break into" your
  system - you left phpMyAdmin *wide* open, which is frankly
  asking for trouble. Imagine how much fun you'd have had if
  someone with *malicious* intent had found it.

 --in the physical world, if a door is left unlocked, even ajar a couple
 inches, the physical act of pushing the door open so that one can enter
 the door is defined as "breaking and entering".

 "Harmlessly" pushing an unlocked door open, and walking in and writing on
 a whiteboard "Gangstaboy was here" is just as much of a crime as
 unauthorizedly logging into a machine, no matter how "wide open" it is,
 even if "harm" is not done.

I will freely admit I have seen and peeked into "wide open" websites in the
past, either through server misconfiguration or faulty scripts. But I have
never gone much further than maybe figuring out what was wrong and sending
an email to the owner. Most people are pretty receptive if you just send
them a kindly worded email.

--
Rick Hodger



-- 
PHP General Mailing List (http://www.php.net/)
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]
To contact the list administrators, e-mail: [EMAIL PROTECTED]




Re: [PHP] wide open

2001-02-12 Thread Carsten Gehling

From: "Jason Murray" [EMAIL PROTECTED]
Sent: Monday, February 12, 2001 3:44 AM


 My *point* was that he should be glad that all he did was add an entry
 to the database instead of deleting every damn table in there, hence
 the bit about "someone with *malicious* intent".

I disagree. If Codeboy had sent him an email describing what was wrong,
instead of this "Killroy was here" stuff, rswfire *maybe* should be glad.

An intruder leaving small traces shoving that he's been inside your system,
is IMHO not something to be glad about or grateful for. I know that is the
general consensus, a sort of "pride between hackers": Show that you were
there but do no other harm. But it's bull. They're not heros, they're every
bit as criminal as the rest.

Sorry for the harsh tone but this subject is really one that upsets me.

- Carsten




-- 
PHP General Mailing List (http://www.php.net/)
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]
To contact the list administrators, e-mail: [EMAIL PROTECTED]




[PHP] wide open

2001-02-11 Thread Dan Harrington


 Furthermore, Jonathan stated that he didn't "break into" your
 system - you left phpMyAdmin *wide* open, which is frankly
 asking for trouble. Imagine how much fun you'd have had if
 someone with *malicious* intent had found it.

--in the physical world, if a door is left unlocked, even ajar a couple
inches, the physical act of pushing the door open so that one can enter
the door is defined as "breaking and entering".

"Harmlessly" pushing an unlocked door open, and walking in and writing on
a whiteboard "Gangstaboy was here" is just as much of a crime as
unauthorizedly logging into a machine, no matter how "wide open" it is,
even if "harm" is not done.

I don't do this to point fingers, I speak this on the part of someone
whose good friend got nabbed by police for "harmless" activity on the
internet -- and as a result spent time in the slammer.

take note

Dan



-- 
PHP General Mailing List (http://www.php.net/)
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]
To contact the list administrators, e-mail: [EMAIL PROTECTED]




RE: [PHP] wide open

2001-02-11 Thread Jason Murray

  Furthermore, Jonathan stated that he didn't "break into" your
  system - you left phpMyAdmin *wide* open, which is frankly
  asking for trouble. Imagine how much fun you'd have had if
  someone with *malicious* intent had found it.
 
 --in the physical world, if a door is left unlocked, even ajar a couple
 inches, the physical act of pushing the door open so that one can enter
 the door is defined as "breaking and entering".

--in the physical world, in the US, perhaps.

Note to everyone else: I have no idea or interest in regional differences 
of this definition now, either :)

My *point* was that he should be glad that all he did was add an entry
to the database instead of deleting every damn table in there, hence
the bit about "someone with *malicious* intent".

Still, can we please leave this alone for now on the list? It's already
gone on for far too long.

Jason

-- 
Jason Murray
[EMAIL PROTECTED]
Web Design Team, Melbourne IT
Fetch the comfy chair!

-- 
PHP General Mailing List (http://www.php.net/)
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]
To contact the list administrators, e-mail: [EMAIL PROTECTED]




Re: [PHP] wide open

2001-02-11 Thread Josh G

Actually IIRC pushing open a door that's ajar is not breaking and
entering, but trespass :)

Gfunk -  http://www.gfunk007.com/

I sense much beer in you. Beer leads to intoxication, intoxication to
hangovers, and hangovers to... suffering.


- Original Message -
From: "Jason Murray" [EMAIL PROTECTED]
To: "'Dan Harrington'" [EMAIL PROTECTED]; [EMAIL PROTECTED]
Sent: Monday, February 12, 2001 1:44 PM
Subject: RE: [PHP] "wide open"


   Furthermore, Jonathan stated that he didn't "break into" your
   system - you left phpMyAdmin *wide* open, which is frankly
   asking for trouble. Imagine how much fun you'd have had if
   someone with *malicious* intent had found it.
 
  --in the physical world, if a door is left unlocked, even ajar a couple
  inches, the physical act of pushing the door open so that one can enter
  the door is defined as "breaking and entering".

 --in the physical world, in the US, perhaps.

 Note to everyone else: I have no idea or interest in regional differences
 of this definition now, either :)

 My *point* was that he should be glad that all he did was add an entry
 to the database instead of deleting every damn table in there, hence
 the bit about "someone with *malicious* intent".

 Still, can we please leave this alone for now on the list? It's already
 gone on for far too long.

 Jason

 --
 Jason Murray
 [EMAIL PROTECTED]
 Web Design Team, Melbourne IT
 Fetch the comfy chair!

 --
 PHP General Mailing List (http://www.php.net/)
 To unsubscribe, e-mail: [EMAIL PROTECTED]
 For additional commands, e-mail: [EMAIL PROTECTED]
 To contact the list administrators, e-mail: [EMAIL PROTECTED]



-- 
PHP General Mailing List (http://www.php.net/)
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]
To contact the list administrators, e-mail: [EMAIL PROTECTED]