Bugtraq mailing list archives

Re: Vulnerabilites in new laws on computer hacking


From: Casper.Dik () Sun COM
Date: Wed, 22 Feb 2006 10:12:16 +0100


Perhaps this is beating a dead horse, but could someone explain to me why 
the addition of a $50 computer found at a garage sale, a $10 NIC, and a 
$20 switch or hub to any would-be-infosec's arsenal wouldn't suffice for 
this purpose?  We're not trying to brute force 4 kilobit pgpkeys, we're 
trying to present a host to attack.  FreeBSD, NetBSD, OpenBSD, Linux... 
all free operating systems.  Isn't there an x86 version of solaris that's 
free?  $500 computers aren't needed for this testing.  I suggest that the 
necessity for more expensive hardware is the exception, and not the rule. 
Bochs may not be speedy, but it works.

Shameless plug: All versions of Solaris 10 are free now, both SPARC and x86.

I would also suggest that anyone who finds that money is an obstacle is 
looking for excuses.  I have often found ways to make outdated hardware 
useful in a variety of situations.

Including hardware left on the curbside.

And bear in mind that while people may still be hiring hackers,
being employed as a security guard with any type of criminal record
is next to impossible as it should be.

It is only a matter of time before the computer industry follows
suit.

Casper


Current thread: