Re: FW: SHODAN Higher Ed Access

[John Bambenek <bambenek.infosec () GMAIL COM>]

Is the "free" access to search our own campuses, or to search anything?

On 4/25/13 9:51 AM, David Treble wrote:
> FYI – I'm sure some of you are familiar with SHODAN.  You may not be
> aware that they are offering free access to Universities and Colleges. 
>
> The request is through an email to John  (jmath () surtri com
> <mailto:jmath () surtri com>).
>
> 1. Set up Shodanhq account.
> 2. Contact John as your universities representative, and ask him how you
> can take advantage of the offer for Universities to obtain full access.
> 3. He will ask which account belongs to your university, tell him the
> account you've set up.
>
> http://www.shodanhq.com/
>
> It looks like he might be handling these requests on his own so a
> sudden surge might take a bit to process.
>
> Thanks to my colleague at Western who passed along the tip to our
> Canadian Universities security list.
>
> For those who don't know, Shodan its a 'hackers' search engine.  Here
> are some presentations with more detail:
>
> http://www.youtube.com/watch?v=5Cg34w8b_m4
> http://www.youtube.com/watch?v=Pyi1mwowPUo
> http://www.youtube.com/watch?v=8vEtcWuFoiA 
>
> DT
>
> -- 
> /+++++++++++++++++++++++++++++++/
> /David Treble    IT Security Coordinator/
> /E3-640 EITC     University of Manitoba/
> /David_Treble () umanitoba ca <mailto:David_Treble () umanitoba ca> -
> 204.474.8340/
> /
> /
> /     Follow @uminfosec on Twitter/
> /Ask me about the Infosec Mailing List!/
> /http://blogs.cc.umanitoba.ca/ist-alerts//
> /+++++++++++++++++++++++++++++++/
>
> From: John <jmath () surtri com <mailto:jmath () surtri com>>
> Date: Thursday, 25 April, 2013 2:13 AM
> To: David Treble <David.Treble () umanitoba ca
> <mailto:David.Treble () umanitoba ca>>
> Subject: Re: SHODAN University Access - University of Manitoba
>
>     David,
>
>     Yes! I'm offering free access to universities both through the
>     website as well as the developer API.
>
>     And yes, I used to work at University of California San Diego so I
>     have first-hand experience of how things work and a reason I make
>     access available for free :) And feel free to advertise the offer
>     wherever you think it would be useful. Also thank you for letting
>     me know where all of this sudden interest came from, I was
>     wondering what had happened :)
>
>     Anyways, I upgraded your account so you have all available add-ons
>     for Shodan as well as the educational API plan, which gives you up
>     to 10,000 API requests a month (i.e. up to 1 million results/
>     month). You can find some documentation on how to use the API at:
>
>     http://docs.shodanhq.com <http://docs.shodanhq.com/>
>
>     And you can find your API key as well as your usage stats on the
>     Developer Center in Shodan:
>
>     http://www.shodanhq.com/api_doc
>
>     Oh, and if you're not sure what services Shodan covers or the type
>     of data I'm indexing here's a list of all the ports I search for:
>
>     http://www.shodanhq.com/help/filters#port
>
>     I hope you'll find Shodan useful and let me know if there's
>     anything else I can help you with!
>
>     Best regards,
>
>     -John
>
>     On Wed, Apr 24, 2013 at 7:13 AM, David
>     Treble <David.Treble () ad umanitoba ca
>     <mailto:David.Treble () ad umanitoba ca>> wrote:
>
>         Hi John,
>
>         A message to the Canadian University Security Professionals
>         list this morning said you were offering complete access to
>         Universities.
>
>         I admire this move and hope that many will take advantage.  As
>         you are probably aware many Universities run a fairly open
>         environment.  I've used your site several times in the past
>         and look forward to a bit more access if possible.
>
>         My account is:  
>
>
> <snipped>
>
>         Can I advertise this on the Educause Security Professionals
>         mailing list?
>
>         Regards,
>         David
>
>
>     -- 
>     Shodan - http://www.shodanhq.com <http://www.shodanhq.com/>
>
>     Follow me on Twitter
>     http://twitter.com/achillean
>
> -- 
> /+++++++++++++++++++++++++++++++/
> /David Treble    IT Security Coordinator/
> /E3-640 EITC     University of Manitoba/
> /David_Treble () umanitoba ca - 204.474.8340/
> /
> /
> /     Follow @uminfosec on Twitter/
> /Ask me about the Infosec Mailing List!/
> /http://blogs.cc.umanitoba.ca/ist-alerts//
> /+++++++++++++++++++++++++++++++/