RE: Hacking/security in main-stream media

["Levenglick, Jeff" <JLevenglick () fhlbatl com>]

"fictional attack tool to bust open ssh using a buffer overflow or similar."

nmap is a real program and so is/was the exploit. She did not bust ssh. She used
the exploit in ssh to change the root password and gain access to the host. A real hack that can be
used today if someone did not patch ssh. 

-----Original Message-----
From: Andrew van der Stock [mailto:vanderaj () greebo net]
Sent: Tuesday, October 05, 2004 11:56 PM
To: stijn () securityworld be
Cc: Mike Andrews; webappsec () securityfocus com
Subject: Re: Hacking/security in main-stream media


> Mike Andrews wrote:
> > Jurassic Park - insider threat (the programmer gets the system to bypass
> > security while he steals the DNA/embryos)
> >
> > Any other suggestions?  I'm only wanting short (5min) sections, but I'm
> > willing to edit bit's out if needed.

The Matrix 2 has a reasonably accurate if short section on using a
fictional attack tool to bust open ssh using a buffer overflow or similar.
Unlike "The Net", they actually use reasonable IP addresses in the screen
shots and real program names and Unix is Unix.

Then there's always Swordfish. It's a comedy. My favorite bit is when Hugh
Jackman is required to crack 128 bit encryption in 30 seconds and he's
typing furiously on two screens, with a gun held to his head and something
else is occuring as well.

I also get a nice warm feeling watching the scene in Charlies Angel's
where they put a bug in the mainframe, which itself is a variation on a
theme from Mission Impossible. I particularly like the bit where they get
around the biometrics. In fact, that bit is roughly accurate.

Lastly, Three Colors Red goes into social and privacy issues. It's also in
French, sad yet joyful, and one of the best films ever made. Absolutely
beautiful and haunting to watch.

thanks,
Andrew

-----------------------------------------
This e-mail message is private and may contain confidential or privileged information.