An open letter to Senator Rockefeller

Dear Sen. Rockefeller, I am a cyber expert. I invented a key technology known as ”IPS” that is a standard part of network defense. I invented hacking techniques like ”sidejacking” that are a standard part of network offense. I am a coder who has written a million lines of production code. I am a ”pentester” who has performed simulated attacks that confirm your worst nightmares about power-grid blackouts and financial meltdowns. Your letter [*] was na¯ve. There is no such thing as ”best” practice, because there is no such thing as ”adequate” practice. The Fortune 500 has not figured out how to stop Chinese hackers from breaking into web browsers, or how to separate code from data injected into websites, or how to stop an inadvertent connection between a secured and unsecured network. This has allowed me to hack (in tests) into Fortune 500 companies, even those that follow the very best of ”best practice”. ...

20 de septiembre de 2012 · 1 min · 161 palabras · Nacho Cano

Cosmo, the Hacker ’God’ Who Fell to Earth

Cosmo is huge ” 6 foot 7 and 220 pounds the last time he was weighed, at a detention facility in Long Beach, California on June 26. And yet he’s getting bigger, because Cosmo ” also known as Cosmo the God, the social-engineering mastermind who weaseled his way past security systems at Amazon, Apple, AT&T, PayPal, AOL, Netflix, Network Solutions, and Microsoft ” is just 15 years old. He turns 16 next March, and he may very well do so inside a prison cell. Cosmo was arrested along with dozens of others in a recent multi-state FBI sting targeting credit card fraud. It is the day before his court date, but he doesn’t know which task force is investigating him or the name of his public defender. He doesn’t even know what he’s been charged with. It’s tough to narrow it down; he freely admits to participation in a wide array of crimes. ...

16 de septiembre de 2012 · 1 min · 158 palabras · Nacho Cano

I Was a Teenage Hacker

Twenty-four years ago today, I had a very bad day. On August 8, 1988, I was a senior in high school. I was working my after school and weekend job at Safeway as a cashier, when the store manager suddenly walked over and said I better stop ringing up customers and talk to my mother on the store phone right now. Mom told me to come home immediately because, well, there were police at the front door asking for me with some legal papers in hand. ...

10 de agosto de 2012 · 1 min · 91 palabras · Nacho Cano

Crowd Source Audit Platform for Manual PenTest

Helping Companies, and Hackers to get things done. Companies test their servers or Web Apps covered by anonymity and confidentiality, while Hackers get paid for what they love to do most: Hacking Servers » hackaserver.com

4 de agosto de 2012 · 1 min · 35 palabras · Nacho Cano

MySQL, MSSQL and Oracle SQL Injection Compilation

This Knowledge Base was put together and is maintained by Roberto Salgado, Co-Founder of Websec. It is a compilation of books, papers, cheatsheets and testing done by Roberto over the years. » Roberto Salgado | websec.ca

15 de julio de 2012 · 1 min · 36 palabras · Nacho Cano

The Conscience of a Hacker

Another one got caught today, it’s all over the papers. ”Teenager Arrested in Computer Crime Scandal”, ”Hacker Arrested after Bank Tampering”… Damn kids. They’re all alike. But did you, in your three-piece psychology and 1950’s technobrain, ever take a look behind the eyes of the hacker? Did you ever wonder what made him tick, what forces shaped him, what may have molded him? I am a hacker, enter my world… Mine is a world that begins with school… I’m smarter than most of the other kids, this crap they teach us bores me… Damn underachiever. They’re all alike. ...

21 de junio de 2012 · 1 min · 100 palabras · Nacho Cano

Hackstory

La Hackstory es una enciclopedia online que versa sobre la cultura e historia hacker, con especial atención a las iniciativas, grupos, anécdotas y puntos de encuentro hispanos. La estamos creando desde finales del verano de 2008, en nuestro tiempo libre, y ya llevamos entrados unos 200 artículos. Tenemos 18.000 visitas mensuales, 580 al día. En nuestro proyecto, la palabra ”hacker” no es sinónimo de delincuente, sino de persona experta y entusiasta con la tecnología, de alguien muy habilidoso con las herramientas que brindan la informática y las telecomunicaciones. Si quieres saber más, puedes consultar nuestra definición en hackstory.net/index.php/Hacker Nos gusta especialmente cómo describía a los hackers la genial hacktivista St Jude: ”Los hackers son los cuerpos de élite de los diseñadores y programadores informáticos. Les gusta verse a sí mismos como los magos y guerreros de la tecnología. Los hackers tienen su propia cultura, con su propio lenguaje. En su tiempo libre, pueden cambiar su ingenuidad por el combate contra enemigos en las Redes, o el paseo a medianoche por sistemas en los que tú no podrías entrar a menos que fueses tan inteligente como ellos. Los hackers del lado oscuro, llamados crackers, se meten en sistemas para robar y destruir, pero la mayoría de hackers están en esto por virtuosismo”. ...

21 de junio de 2012 · 2 min · 213 palabras · Nacho Cano

Por qué me enamoré de los hackers

Porque son gente lista y genial, de inacabable curiosidad, sentido del humor y vorazmente críticos, capaces de ponerlo todo patas arriba porque se les ocurrió una idea y con una ética colectiva que está cambiando el mundo. ¡Ah, no! ¿Que no es así como pensabas que eran los hackers? ¿Imaginabas unos tipos malvados, delincuentes habituales, sin empacho en asaltar tu ordenador y tu cuenta bancaria? ¿Esos de los que hablan día sí día también los medios y la policía, poniéndoles la etiqueta de ”hacker”? ...

25 de mayo de 2012 · 1 min · 88 palabras · Nacho Cano

Learn to Hack

Attack servers, crack passwords, exploit services, beat encryption - everything you need to protect yourself from evil. There are two rules of computer security: one – don’t buy a computer; and two – if you have to buy a computer, don’t turn it on. If you break these rules then you’ll be opening yourself up to potential problems. No system is 100% safe from hackers, but by following a few simple steps you can make yours much harder for intruders to attack. ...

14 de mayo de 2012 · 1 min · 84 palabras · Nacho Cano