{"id":32,"date":"2008-02-14T15:42:40","date_gmt":"2008-02-14T22:42:40","guid":{"rendered":"https:\/\/virtualsoul.org\/blog\/2008\/02\/14\/a-familiar-hacker-visits-my-home-network\/"},"modified":"2013-05-02T17:53:50","modified_gmt":"2013-05-03T00:53:50","slug":"a-familiar-hacker-visits-my-home-network","status":"publish","type":"post","link":"https:\/\/virtualsoul.org\/blog\/2008\/02\/14\/a-familiar-hacker-visits-my-home-network\/","title":{"rendered":"A familiar hacker visits my home network"},"content":{"rendered":"<p>My oldest son is away at college. He&#8217;s finishing his senior year and deciding what to do next. I&#8217;m very proud of him, but sometimes I can&#8217;t help compare his life to mine. To earn money for living expenses during college, I had jobs washing dishes, changing oil, stocking shelves and eventually moving all the way up to cashier at Smith&#8217;s Food King. Good times. My son has had summer jobs programming for Berkeley Data Systems (<a href=\"http:\/\/mozy.com\/\">Mozy<\/a>) and this little Internet startup named <a href=\"http:\/\/www.google.com\/\">Google<\/a>. During the school year, he works on Linux boxes for the astronomy department at his school. His jobs sound like a huge amount of fun to me, and I think he has enjoyed them, but he takes things so seriously sometimes. Sigh. At that age, I did too.<\/p>\n<p>I keep expecting to get traditional letters (or at least emails) from him asking for money, but instead I received this email last week:<\/p>\n<pre style=\"margin-left: 40px;\">so, sorry i haven't called recently, as i miss talking to you.\r\n\r\nnevertheless, i thought it would be a good idea to let you know that\r\nyour server machines are all completely rootable\r\n\r\non bub, the code \/home\/jtolds\/vmsplice-exploit will give you root on\r\nnearly every 2.6 kernel machine\r\n\/home\/jtolds\/disable-vmsplice-if-exploitable will disable the vmsplice\r\ncode in memory by overwriting the first line of the vmsplice function\r\ncalls with the RET assembly command\r\nI ran that on bub since it's network accessible\r\n\r\nyou may want to install new kernels or recompile or something.\r\n\r\nif you don't and do reboot bub, you should run the exploit disabler again\r\n\r\nlove you! talk to you soon\r\n-jt<\/pre>\n<p>I would have used the phrase &#8220;RET assembly instruction&#8221; instead of &#8220;RET assembly command&#8221;. Assembly ain&#8217;t no scripting language. I&#8217;m not sure what they are teaching kids in school these days.<\/p>\n<p>I have, of course, upgraded my Linux kernels on the machines in question.<\/p>\n","protected":false},"excerpt":{"rendered":"<p>My oldest son is away at college. He&#8217;s finishing his senior year and deciding what to do next. I&#8217;m very proud of him, but sometimes I can&#8217;t help compare his life to mine. To earn money for living expenses during college, I had jobs washing dishes, changing oil, stocking shelves and eventually moving all the [&hellip;]<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[2,6],"tags":[],"class_list":["post-32","post","type-post","status-publish","format-standard","hentry","category-fluff","category-linux"],"_links":{"self":[{"href":"https:\/\/virtualsoul.org\/blog\/wp-json\/wp\/v2\/posts\/32","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/virtualsoul.org\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/virtualsoul.org\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/virtualsoul.org\/blog\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/virtualsoul.org\/blog\/wp-json\/wp\/v2\/comments?post=32"}],"version-history":[{"count":1,"href":"https:\/\/virtualsoul.org\/blog\/wp-json\/wp\/v2\/posts\/32\/revisions"}],"predecessor-version":[{"id":280,"href":"https:\/\/virtualsoul.org\/blog\/wp-json\/wp\/v2\/posts\/32\/revisions\/280"}],"wp:attachment":[{"href":"https:\/\/virtualsoul.org\/blog\/wp-json\/wp\/v2\/media?parent=32"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/virtualsoul.org\/blog\/wp-json\/wp\/v2\/categories?post=32"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/virtualsoul.org\/blog\/wp-json\/wp\/v2\/tags?post=32"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}