DFWCUG Announcement regarding DEFCON 9
John Wisniewski
recent DEFCON 9 Convention:
July 12-14th 2001, a team of DFWCUG members took an Alphastation
running OpenVMS
7.2-1h1 with a standard installation and OpenVMS Hobbyist PAKs, Apache,
and TCP/IP
services for OpenVMS 5.0a to the DEFCON 9 Hackers Convention in Las
Vegas NV.
The Alphastation was placed in competition during the Capture the Flag
Hacking Game that was
held on the floor of DEFCON 9during the convention as a member
server of the GREEN team.
The Alphaserver provided WEBservices and inbound telnet.
The Community was invited to telnet
to a public account that automatically created non-prived accounts
and webservice for any of the
Hackers on the floor. An additional public account hosted terminal
based games such as VAXtrek,
Moria 4.81, Hack, Rogue, Battlestar, ZK and Doomsday 2000 (for those
who got bored just trying
to hack;-).
The Green Team took 3rd place in the competition for Capture the Flag.
After three long days on the floor
of Defcon 9 the Alphatation was deemed virtually unhackable by the
Defcon judges. During the Awards
on Sunday July 14th the winning Team acknowledge the prowess of the
green team's servers and systems managers
and the CTF Judge declared the "VAX" Cool for it's content and it's
continuous service during the worst that 4300
hackers could throw at it over the three day contest.
Congratulations and a sincere "Thank You" to the DFWCUG team for their
success and reminding all of us just
how secure and functional OpenVMS really is, even in the most security
hostile environment on the planet.
The DFWCUG Steering Committee 7/23/01
--
The DFWCUG is proud of member's accomplishments in the face of such
Hacking adversity and look forward
to the security white paper that will be presented at CETS2001 in September
once all the logs and data recorded
by the Alphastation during the various attacks have been analyzed.
In the meantime we invite you to read more about our
Member's activity at DEFCON 9
in our current QUADWORDS newsletter available in PDF
format on our WEBpage.
DFWCUG HOMEPAGE
http://www.dfwcug.org/
DFWCUG QUADWORDS NEWSLETTER FOR JULY
http://www.montagar.com/dfwcug/DFWCUG_newsletters/200107.pdf
DEFCON HOMEPAGE
http://www.defcon.org/
CETS 2001 CONVENTION IN September
http://www.cets2001.com
DECUS/Encompass WEBpage
http://www.decus.org/
John Wisniewski
> The Dallas Ft Worth Compaq User Group (The DFWCUG) has an announcement
> regarding the
> recent DEFCON 9 Convention:
>
> July 12-14th 2001, a team of DFWCUG members took an Alphastation
> running OpenVMS
> 7.2-1h1 with a standard installation and OpenVMS Hobbyist PAKs,
> Apache, and TCP/IP
> services for OpenVMS 5.0a to the DEFCON 9 Hackers Convention in Las
> Vegas NV.
This was posted Monday...
No snide comments...
No Jabs....
No cries for free VMS...
No complaints about OpenVMS being the reason your site is moving to
SUN...
No moans about marketing...
No one telling me that it's already in the FAQ...
Either comp.os.vms is slipping or you folks really are getting
apathetic... Or maybe it's just July doldrums...
Or maybe you're busy porting VMS apps to Itanium;-)
This was a good thing.. Just taking a VMS box to DEFCON and Surviving
would have been a good thing...
The DFWCUG did much better then that...
See you at CETS in September...
John Wisniewski
wisni...@vmsone.com
PS: Please tell me if I missed any of the reoccuring posts;-)
Terry C. Shannon
"John Wisniewski" <wisni...@vmsone.com> wrote in message
news:3B5E84DE...@vmsone.com...
>
>
>
>
> > The Dallas Ft Worth Compaq User Group (The DFWCUG) has an announcement
> > regarding the
> > recent DEFCON 9 Convention:
> >
> > July 12-14th 2001, a team of DFWCUG members took an Alphastation
> > running OpenVMS
> > 7.2-1h1 with a standard installation and OpenVMS Hobbyist PAKs,
> > Apache, and TCP/IP
> > services for OpenVMS 5.0a to the DEFCON 9 Hackers Convention in Las
> > Vegas NV.
>
> This was posted Monday...
>
> No snide comments...
>
> No Jabs....
>
> No cries for free VMS...
>
> No complaints about OpenVMS being the reason your site is moving to
> SUN...
>
> No moans about marketing...
>
> No one telling me that it's already in the FAQ...
>
> Either comp.os.vms is slipping or you folks really are getting
> apathetic... Or maybe it's just July doldrums...
> Or maybe you're busy porting VMS apps to Itanium;-)
>
> This was a good thing.. Just taking a VMS box to DEFCON and Surviving
> would have been a good thing...
> The DFWCUG did much better then that...
>
Any OS that can survive repeated intrusive attempts from Notorious Belgian
Hacker Cedric Zool is OK in my book!
Umm, did you see Zool in Lost Wages? Rumour has it he was among those
present...
Martin Vorlaender
> > The Dallas Ft Worth Compaq User Group (The DFWCUG) has an announcement
> > regarding the recent DEFCON 9 Convention:
> This was posted Monday...
> No snide comments...
> No Jabs....
> No cries for free VMS...
> No complaints about OpenVMS being the reason your site is moving to SUN...
> No moans about marketing...
> No one telling me that it's already in the FAQ...
>
> Either comp.os.vms is slipping or you folks really are getting
> apathetic... Or maybe it's just July doldrums...
> Or maybe you're busy porting VMS apps to Itanium;-)
>
> This was a good thing.. Just taking a VMS box to DEFCON and Surviving
> would have been a good thing...
> The DFWCUG did much better then that...
It sure sounded like fun :-)
I followed all of your posts, read the DFWCUG newsletter article, and
forwarded it to local contacts (within PDV and Compaq). What more was
I to do? I mean, other than being deeply impressed. Oh, I forgot (sorry):
Congratulations to everyone in the Green team!
You made VMS shine. Thank you.
cu,
Martin
--
So long, and thanks | Martin Vorlaender | VMS & WNT programmer
for all the books... | work: m...@pdv-systeme.de
In Memoriam Douglas Adams | http://www.pdv-systeme.de/users/martinv/
1952-2001 | home: mar...@radiogaga.harz.de
Robert Deininger
<wisni...@vmsone.com> wrote:
> > The Dallas Ft Worth Compaq User Group (The DFWCUG) has an announcement
> > regarding the
> > recent DEFCON 9 Convention:
> >
> > July 12-14th 2001, a team of DFWCUG members took an Alphastation
> > running OpenVMS
> > 7.2-1h1 with a standard installation and OpenVMS Hobbyist PAKs,
> > Apache, and TCP/IP
> > services for OpenVMS 5.0a to the DEFCON 9 Hackers Convention in Las
> > Vegas NV.
>
> This was posted Monday...
Have you e-mailed Sue Skonetski ( Susan.S...@compaq.com ) about
this? She's the person in Compaq most likely to get some milage out of
this story. But it didn't seem like my place to relay 3rd- or 4th-hand
news.
She might have seen your post, but most folks have better things to do
than read everything here, so she could easily have missed it.
I enjoyed the narrative when it was posted, but didn't feel I had anything
to add except "told you so".
--
Robert Deininger
rdein...@mindspring.com
bad bob
Lydick when we need him!
David J. Dachtera
We all know and love VMS - we would have expected nothing less than what
was found to be true.
"Free" VMS? We'll settle for affordable Alphas, affordable commercial
VMS licenses, affordable commercial layered product licenses and
affordable software library distributions (for end-users, not CSAs or
ISVs - they're already covered).
Now that the dot-com world has gone bust, small business is left alone
to survive where the giants succumbed. To bad we *STILL* can't afford
our beloved platform of choice, and instead must run inferior hardware
and operating software, layered products and applications.
More money that goes to the G-man, or others, instead of to the "Q"...
--
David J. Dachtera
dba DJE Systems
http://www.djesys.com/
Unofficial Affordable OpenVMS Home Page and Message Board:
http://www.djesys.com/vms/soho/
This *IS* an OpenVMS-related newsgroup. So, a certain bias in postings
is to be expected.
Feel free to exercise your rights of free speech and expression.
However, attacks against individual posters, or groups of posters, are
strongly discouraged.
bad bob
"Free VMS" - sorta like free the hostages, let the product sell,
let the product be advertised, let the world know about VMS....
oh well, just twisted on this end I guess..
bad bob
mulp
time as this was happening, Windows was in the news everywhere, including
reports about the White House web site. Everyone knows that Windows is used
everywhere because its reported constantly. Did anyone mention VMS in the
White House? Only a small number of DEC people knew that VMS was there,
and, gack!, it was
all-in-1
of all things.
When VMS was being hacked 18-20 years ago, virtually no one knew about
computer networks.
The obvious solution is to build in security holes into VMS and Tandem
software so that hackers will illegally transfer trillions of dollars
around. Then, and only then, will these neglected systems get the respect
that they deserve.
"John Wisniewski" <wisni...@vmsone.com> wrote in message
news:3B5C979D...@vmsone.com...
eccm
"Terry C. Shannon" wrote:
>
>
> Any OS that can survive repeated intrusive attempts from Notorious Belgian
> Hacker Cedric Zool is OK in my book!
>
> Umm, did you see Zool in Lost Wages? Rumour has it he was among those
> present...
I ran into Zool, he was in line in front of me. He tried to pay the
$50 registration in Belgian Francs! It was quite a scene, he taunted
them in a mixture of Flemish and Flanders when they disparaged his
cash, which was hilarious because they had no idea what he said, but
one of them was something like "you are from dirty cow toungue lick
you???" I guess my Belgian is real bad, Belgian is a combination of
Dutch and French, and some things just don't translate anyway. I was
laughing my ass off. He started staring at me because I was laughing
so hard, and it looked like the registration clerk was about to ask
what was so funny, so I threw down a $50 and he gave up about $45
worth of BFr. He was hacking for the green team, real arrogant old
geezer, but he did break machine after machine, he was very good at
getting into linux and microsoft machines. What convinced me how good
he was, he made minimal use of common tools, only to scan and find his
targets, and then he had his own code to run at the targets, and
modified it a few times too. He had one team's BSD server
flood-pinging it's own hackers' pc's for about 5 minutes till they
figured it out. I'd hate to piss him off anyway.