jaeger

A honeypot is basically a computer made to look like a sweet, yummy bit of morsel that a hacker might find yummy mcyummersons. This is the story of one of the earliest on the Internet.

Clifford Stoll has been a lot of things. He was a teacher and a ham operator and appears on shows. And an engineer at a radio station. And he was an astronomer. But he’s probably best known for being an accidental systems administrator at Lawrence Berkeley National Laboratory who setup a honeypot in 1986 and used that to catch a KGB hacker.

It sounds like it could be a movie. And it was - on public television. Called “The KGB, the Computer, and Me.” And a book.

Clifford Stoll was an astronomer who stayed on as a systems administrator when a grant he was working on as an astronomer ran out. Many in IT came to the industry accidentally. Especially in the 80s and 90s.

Now accountants are meticulous. The monthly accounting report at the lab had never had any discrepancies. So when the lab had a 75 cent accounting error, his manager Dave Cleveland had Stoll go digging into the system to figure out what happened. And yet what he found was far more than the missing 75 cents.

This was an error of time sharing systems. And the lab leased out compute time at $300 per hour. Everyone who had accessed the system had an account number to bill time to. Well, everyone except a user named hunter. They disabled the user and then got an email that one of their computers tried to break into a computer elsewhere.

This is just a couple years after the movie War Games had been released. So of course this was something fun to dig your teeth into. Stoll combed through the logs and found the account that attempted to break into the computers in Maryland was a local professor named Joe Sventek, now at the University of Oregon. One who it was doubtful made the attempt because he was out town at the time.

So Stoll set his computer to beep when someone logged in so he could set a trap for the person using the professors account. Every time someone connected a teletype session, or tty, Stoll checked the machine. Until Sventek connected and with that, he went to see the networking team who confirmed the connection wasn’t a local terminal but had come in through one of the 50 modems through a dial-up session.

There wasn’t much in the form of caller ID. So Stoll had to connect a printer to each of the modems - that gave him the ability to print every command the user ran. A system had been compromised and this user was able to sudo, or elevate their privileges. UNIX System V had been released 3 years earlier and suddenly labs around the world were all running similar operating systems on their mainframes. Someone with a working knowledge of Unix internals could figure out how to do all kinds of things. Like add a program to routine housecleaning items that elevated their privileges.

They could also get into the passwd file that at the time housed all the passwords and delete those that were encrypted, thus granting access without a password. And they even went so far as to come up with dictionary brute force attacks similar to a modern rainbow table to figure out passwords so they wouldn’t get locked out when the user whose password was deleted called in to reset it again.

Being root allowed someone to delete the shell history and given that all the labs and universities were charging time, remove any record they’d been there from the call accounting systems. So Stoll wired a pager into the system so he could run up to the lab any time the hacker connected. Turns out the hacker was using the network to move laterally into other systems, including going from what was ARPANET at the time to military systems on Milnet. The hacker used default credentials for systems and leave accounts behind so he could get back in later.

Jaeger means hunter in German and those were both accounts used. So maybe they were looking for a German. Tymenet and Pacbell got involved and once they got a warrant they were able to get the phone number of the person connecting to the system. Only problem is the warrant was just for California.

Stoll scanned the packet delays and determined the hacker was coming in from overseas. The hacker had come in through Mitre Corporation. After Mitre disabled the connection the hacker slipped up and came in through International Telephone and Telegraph. Now they knew he was not in the US. In fact, he was in West Germany. At the time, Germany was still divided by the Berlin Wall and was a pretty mature spot for espionage. They confirmed the accounts were indicating they were dealing with a German.

Once they had the call traced to Germany they needed to keep the hacker online for an hour to trace the actual phone number because the facilities there still used mechanical switching mechanisms to connect calls. So that’s where the honeypot comes into play. Stoll’s girlfriend came up with the idea to make up a bunch of fake government data and host it on the system. Boom. It worked, the hacker stayed on for over an hour and they traced the number.

Along the way, this hippy-esque Cliff Stoll had worked with “the Man.” Looking through the logs, the hacker was accessing information about missile systems, military secrets, members of the CIA. There was so much on these systems. So Stoll called some of the people at the CIA. The FBI and NSA were also involved and before long, German authorities arrested the hacker.

Markus Hess, whose handle was Urmel, was a German hacker who we now think broke into over 400 military computers in the 80s. It wasn’t just one person though. Dirk-Otto Brezinski, or DOB, Hans Hübner, or Pengo, and Karl Koch, or Pengo were also involved. And not only had they stolen secrets, but they’d sold them to The KGB using Peter Carl as a handler.

Back in 1985, Koch was part of a small group of hackers who founded the Computer-Stammtisch in Hanover. That later became the Hanover chapter of the Chaos Computer Club. Hübner and Koch confessed, which gave them espionage amnesty - important in a place with so much of that going around in the 70s and 80s. He would be found burned by gasoline to death and while it was reported a suicide, that has very much been disputed - especially given that it happened shortly before the trials.

DOB and Urmel received a couple years of probation for their part in the espionage, likely less of a sentence given that the investigations took time and the Berlin Wall came down the year they were sentenced.

Hübner’s story and interrogation is covered in a book called Cyberpunk - which tells the same story from the side of the hackers. This includes passing into East Germany with magnetic tapes, working with handlers, sex, drugs, and hacker-esque rock and roll. I think I initially read the books a decade apart but would strongly recommend reading Part II of it either immediately before or after The Cukoo’s Egg.

It’s interesting how a bunch of kids just having fun can become something far more. Similar stories were happening all over the world - another book called The Hacker Crackdown tells of many, many of these stories. Real cyberpunk stories told by one of the great cyberpunk authors. And it continues through to the modern era, except with much larger stakes than ever.

Gorbachev may have worked to dismantle some of the more dangerous aspects of these security apparatuses, but Putin has certainly worked hard to build them up. Russian-sponsored and other state-sponsored rings of hackers continue to probe the Internet, delving into every little possible hole they can find. China hacks Google in 2009, Iran hits casinos, the US hits Iranian systems to disable centrifuges, and the list goes on. You see, these kids were stealing secrets - but after the Morris Worm brought the Internet to its knees in 1988, we started to realize how powerful the networks were becoming.

But it all started with 75 cents. Because when it comes to security, there’s no amount or event too small to look into.

MARKS & SPENCER: Weathering the storm

Britain’s ubiquitous Marks & Spencer (M&S) with over a 1,000 shops and 78000 workers began as a market stall in the Yorkshire city of Leeds in 1884. Like other familiar high street names it’s had a difficult time but new financial figures are encouraging. 
John Swinfield has known the company for decades. He recalls his friendship with the once-chairman Marcus Sieff and interviewed the current boss, Archie Norman, who at one time ran ITV and the supermarket chain ASDA, selling the latter to the US giant Walmart. As part of M&S’s attempts to rev up its poorly performing clothing sales it’s taken a 25 per cent stake in the eco-online fashion label Nobody’s Child. It’s been working with the brand for a year and has strengthened its involvement by taking a share in it. M&S.com has a close relationship with many well known suppliers including Clarks shoes and dresses by Ghost. Other brands it’s snapped up include the high-end Jaeger. 
Archie Norman’s right hand man is the skilful chief executive, Steve Rowe. He’s an M&S lifer who started out as a 15-year-old Saturday boy; City rumours suggest Rowe may step down in a year or two. If M&S is finally on an upward trajectory, much of it is down to Rowe as well as Norman. Supermarket buy ups are in fashion. More Square Mile and Wall Street gossip has it that the US equity company, Apollo Global Management, has had M&S in its sights as a possible takeover target.   

Jamie author of Software Telemetry book discusses Software Telemetry, why telemetry data is so important and the discipline of tracing, logging, and monitoring infrastructure.

Key Links:

• https://unreasonablegroup.com/companies/hala-systems/
• https://bit.ly/2OAuc2g
• https://www.wired.com/story/syria-civil-war-hala-sentry/

The Syrian Civil War has claimed the lives of over 500,000 innocent civilians since 2011. Now, AI company Hala Systems has developed technology to sound air raid sirens and alert civil defense ahead of a bombing or conflict to protect the innocent in a warzone.

• 00:30 What is Hala Systems? What are you solving?
• 10:00 The conflict and civilian protection industry
• 15:00 The politics of protecting innocent people
• 20:00 Saving lives success metrics
• 24:00 How it works
• 32:00 Adding magic to AI to protect a lot of people
• 43:00 Global Goal 16: Peace, Justice and Strong Institutions

In this episode, hear how Hala Systems founder John Jaeger became an "accidental diplomat" to grow funding and interest in this technology, and learn more about using AI to address Global Goal 16: Peace, Justice, and Strong Institutions.

-----

Produced by Simpler Media

Andrew (@frigimonfanatic) talks about a bunch of anime he's seen recently and/or has completed recently, from fall 2018 shows that he finished up to High Score Girl and Sirius the Jaeger that netflix dropped right before christmas. Before all that, he talks some holiday stuff he did, seeing Spiderman Into the Spiderverse, him finally starting Overlord Season 1 and what's coming up in podcastland. Enjoy!

Time Stamps:
[0h00m00s] Intro
[0h24m02s] Main Topic Part - Anime Year End Catch Up 
[0h55m10s] Outro and Info

*Don't forget to check out the Anime Radicals Network*

You can follow the hosts on Twitter/Instagram:
Andrew: @frigimonfanatic / @frigimonfanatic

You can find more info on the show at
Website: http://roaajcast.com 
E-mail: roaajcast@gmail.com 
Twitter: @roaajcast 
Instagram:@roaajcast
Facebook: http://www.facebook.com/goattcast 

Anime Radicals Network Information:
Website: www.animeradicals.com
E-mail: animeradicalsnetwork@gmail.com
Twitter: @animeradicals 
Facebook: www.facebook.com/animeradicals/

We are also on iTunes/GooglePlay/Spotify/TuneIn/Stitcher, just type Recovery of An Anime Junkie Podcast or Geeking Out At The Tower Podcast or Anime Radicals in the search bar.

Silke Jaeger ist als Mitglied der Geschäftsleitung bei der Closemo AG für den Bereich Marketing und Verkauf zuständig. Ihre Begeisterung für den Job und auch das hervorragende Produkt kommt in diesem Interview perfekt zur Geltung. Hier erfährst du wie man mit Leidenschaft und Freude an der Arbeit sehr erfolgreich sein kann.

Dieser Berufspodcast richtet sich vor allem an Fach-und Führungskräfte und nicht nur, wenn sie auf Jobsuche sind. Wenn du an Karrierechancen interessiert bist, dann erhältst du für deine Stellensuche viele wertvolle Tipps von erfahrenen Experten. In Interviews kommen erfolgreiche Menschen mit Topjobs zu Wort. Was begeistert sie besonders bei ihrer Aufgabe? Wie haben sie ihre Führungsposition gefunden? Welche Aus- und Weiterbildungen waren für sie relevant? Erfahrene HR Profis informieren dich hier über die sich verändernden Anforderungen im Arbeitsmarkt. Damit bist du immer einen Schritt voraus und der Gestalter deiner erfolgreichen Karriere. CEO’s und Geschäftsführer schildern ihren Weg an die Spitze, damit du von den Besten lernen kannst. Sie geben dir viele wertvolle Tipps für deine berufliche Karriere. Weiters sind immer wieder interessante und auch bekannte Redner, Coaches und Trainer dabei. Lass dich auch von ihnen inspirieren und gestalte deine Karriere möglichst erfolgreich. Mein Name ist Christoph Stelzhammer, Inhaber der C. Stelzhammer GmbH veredelt vermitteln und des Berufszentrum.ch. Mitarbeitende zu Höchstleistungen zu bringen, und in die richtigen Teams zu integrieren gehört zu meinen Leidenschaften. Menschen erfolgreich machen und sie dabei zu unterstützen, auf ihrem beruflichen Lebensweg sich selbst sein zu können. Nimm dein Leben in die eigene Hand, folge deiner Bestimmung und lebe deine Talente. Als Fach-und Führungskraft stets authentisch aufzutreten und sich und andere erfolgreich machen. Dafür brenne ich und dieser Podcast ist auch Ausdruck meines persönlichen Lebenszwecks.