Moron Headhunter Payback Experiment



  • @topspin said:

     I didn't say otherwise, just that this discussion usually gets started at about 2nd post.

    To be fair, this place is slightly less retarded than Slashdot.


    Slightly.


  • ♿ (Parody)

    @morbiuswilters said:

    @boomzilla said:
    @AndyCanfield said:

    Q: What's the difference between a mercenary soldier and a lawyer?

    A: The lawyer is proud of it only makes you wish you were dead.

    FTFY

    Defamation! Defamation!!

    Defecation! Defication! Vindication! Vindication!



  • @topspin said:

    Isn't this supposed to be the point where someone comes along screaming:

    "But NAT is not security / a firewall !!!!11"

    and starting an endless debate if it does fix the flaws of an unpatched XP box ?!

     

    It isn't explicitly a security system, but you've got to admit that blocking unknown incoming traffic by default is a good security policy.

    Hmm, that reminds me... I should go check whether my current router supports IPv6.  For that matter, I doubt my Motorola SB5120 cable modem does.

     



  • @zelmak said:

    @snoofle said:

    I had an old, unused pc lying around. I securely wiped the hard disk, installed a new copy of Win-7, turned off all security features and removed the admin and login passwords. The machine has an open connection to the internet with absolutely nothing to protect it from anything. I set up a monitor to record (in a text file) anytime something is taken off of that machine, and what that file was.

    On my machine, I set up a mail rule that anytime it detects one of these urgent spam messages, it auto-adds the sender to my contacts list on the unprotected machine (no mail actually goes to that machine, and it is unable to send mail). The connection between the two machines is locked down and one way only.

    <mode nagesh=true auth=false>

    We would be liking you to provide codes.

    </mode>

    In all seriousness, I'd like to know a bit more detail as to how you did this.

    I was somewhat loose with the definition of "I". A friend, who knows how to set up firewalls, port blocking and such did this for me. Yes, I should know how to do these things, and I sort of do, but he knows how to do it right. I'm a bit sketchy on some of  the details and don't want to claim the wrong thing. As for the mail rule, it just ran a VB script that pushed the data to a file, pushed the file across an outbound-only socket, and a script running on the open-machine slowly looped watching for it, then just caused an import-of-contacts.


  • @powerlord said:

    It isn't explicitly a security system, but you've got to admit that blocking unknown incoming traffic by default is a good security policy.

    Sounds like a security system to me. It's not marketed as such, usually, but it functions the same as "dumb" firewall rules.



  • @morbiuswilters said:

    Still, who doesn't have a router nowadays?

    Me. My PC doesn't have a working LAN card, nor does it have WiFi. I use an ADSL2 modem which connects by USB to the PC. That said, if the LAN card in my PC did work, I might consider dragging out the second-hand Belkin router/modem thing I have in a cupboard somewhere, and which I've never used (it was an acquisition, not a purchase).



  • @snoofle said:

    @zelmak said:

    @snoofle said:

    I had an old, unused pc lying around. I securely wiped the hard disk, installed a new copy of Win-7, turned off all security features and removed the admin and login passwords. The machine has an open connection to the internet with absolutely nothing to protect it from anything. I set up a monitor to record (in a text file) anytime something is taken off of that machine, and what that file was.

    On my machine, I set up a mail rule that anytime it detects one of these urgent spam messages, it auto-adds the sender to my contacts list on the unprotected machine (no mail actually goes to that machine, and it is unable to send mail). The connection between the two machines is locked down and one way only.

    <mode nagesh=true auth=false>

    We would be liking you to provide codes.

    </mode>

    In all seriousness, I'd like to know a bit more detail as to how you did this.

    I was somewhat loose with the definition of "I". A friend, who knows how to set up firewalls, port blocking and such did this for me. Yes, I should know how to do these things, and I sort of do, but he knows how to do it right. I'm a bit sketchy on some of  the details and don't want to claim the wrong thing. As for the mail rule, it just ran a VB script that pushed the data to a file, pushed the file across an outbound-only socket, and a script running on the open-machine slowly looped watching for it, then just caused an import-of-contacts.

    How about the monitor? Off the top of my head, did you hook into some Windows event that fires when files are moved or copied? Or perhaps the system log?



  • @morbiuswilters said:

    New Jersey

    idiotic.

    As a former NJ resident, I know that NJ and idiocy are perfect together.

     



  • @operagost said:

    @morbiuswilters said:

    New Jersey

    idiotic.

    As a former NJ resident, I know that NJ and idiocy are perfect together.

    I've always been distrustful of a state that doesn't think I'm competent enough to pump my own gas. Also, the State Police are a corrupt, fascist regime that takes bribes from the mob and harass smart, handsome programmers who just happen to be driving through at slightly above the speed limit. In retribution I never fly through Newark and refuse to spend a dime in that rotten state.



  • @morbiuswilters said:

    @boomzilla said:
    How much head would a headhunter hunt if a headhunter could hunt head?

    This gives me an idea for an HR-themed pornography site.

    HornyResources.com? (No, I didn't check to see if it exists. I'm at work and wouldn't want to get reported to HR... or would I?)



  • @Cad Delworth said:

    @morbiuswilters said:
    Still, who doesn't have a router nowadays?

    Me. My PC doesn't have a working LAN card, nor does it have WiFi. I use an ADSL2 modem which connects by USB to the PC. That said, if the LAN card in my PC did work, I might consider dragging out the second-hand Belkin router/modem thing I have in a cupboard somewhere, and which I've never used (it was an acquisition, not a purchase).
    We had an old computer that we used a USB modem\router, where the modem\router was essentially a USB LAN port that talked straight to the modem. I'm not sure if yours works in the same way as ours did.



  • @zelmak said:

    @snoofle said:

    On my machine, I set up a mail rule that anytime it detects one of these urgent spam messages, it auto-adds the sender to my contacts list on the unprotected machine

    In all seriousness, I'd like to know a bit more detail as to how you did this.

    In the *nix world, procmail to detect and append the sender's address.

    (I had some postfix rules that redirected unsubscribeable spam to abuse@ISP and sales@spamming.organisation.  It soon stopped.)



  • @Douglasac said:

    We had an old computer that we used a USB modem\router, where the modem\router was essentially a USB LAN port that talked straight to the modem. I'm not sure if yours works in the same way as ours did.

    I had one of those Alcatel frogs that functioned as a USB modem; I dropped Smoothwall on a PC and used that as a router.

    I got the impression that ADSL modems are more commonplace than ADSL routers in USA - many people I spoke to stateside referred to their "modem" having been connected via USB to a machine running ICS for the rest of the LAN, or having a single LAN port that hooks into a switch. I've been shown images of a small modem connected into a router via a dedicated port where the router is performing NAT/firewall and the modem is simply an interface to the phone line.

    Most ADSL kit in UK tends to be a ADSL modem, router and 4-port switch (and WiFi AP)[1], which seems a simpler model but unless you add further switches there's nothing physically isolating DMZ kit.

    [1] Netgear DG834G and various other incarnations thereof.



  • @Cassidy said:

    I got the impression that ADSL modems are more commonplace than ADSL routers in USA - many people I spoke to stateside referred to their "modem" having been connected via USB to a machine running ICS for the rest of the LAN, or having a single LAN port that hooks into a switch. I've been shown images of a small modem connected into a router via a dedicated port where the router is performing NAT/firewall and the modem is simply an interface to the phone line.

    Most ADSL kit in UK tends to be a ADSL modem, router and 4-port switch (and WiFi AP)[1], which seems a simpler model but unless you add further switches there's nothing physically isolating DMZ kit.

    [1] Netgear DG834G and various other incarnations thereof.

    Most of the ISP-provided DSL modems I've seen had integrated routers, switches and usually wifi. It's usually not Netgear stuff, but brands like Alcatel.



  • @morbiuswilters said:

    @Cassidy said:

    I got the impression that ADSL modems are more commonplace than ADSL routers in USA - many people I spoke to stateside referred to their "modem" having been connected via USB to a machine running ICS for the rest of the LAN, or having a single LAN port that hooks into a switch. I've been shown images of a small modem connected into a router via a dedicated port where the router is performing NAT/firewall and the modem is simply an interface to the phone line.

    Most ADSL kit in UK tends to be a ADSL modem, router and 4-port switch (and WiFi AP)[1], which seems a simpler model but unless you add further switches there's nothing physically isolating DMZ kit.

    [1] Netgear DG834G and various other incarnations thereof.

    Most of the ISP-provided DSL modems I've seen had integrated routers, switches and usually wifi. It's usually not Netgear stuff, but brands like Alcatel.

    UVerse uses 2Wire "Home Gateways" ...

    Provides 4 RJ-45 Ethernet, 2 RJ-11 phone lines, 1 usb, B/G Wireless, COAX (2, I think, to plug into your existing cable infrastructure), uplink RJ-11 for the DSL link. NAT/Firewall-like router. Sadly, no bridge mode to use your own router, but they do have the DMZ+ mode so that you can set up a router behind it ... anything that hits the DSL address gets forwarded to the router.

    Edit: Oh, and their implementation of DHCP w/DDNS is broken. If  you change the name of your system, it won't believe it and keeps the original name... forever. Or, until you do a factory default reset.



  • @zelmak said:

    UVerse uses 2Wire "Home Gateways" ...

    Provides 4 RJ-45 Ethernet, 2 RJ-11 phone lines, 1 usb, B/G Wireless, COAX (2, I think, to plug into your existing cable infrastructure), uplink RJ-11 for the DSL link. NAT/Firewall-like router. Sadly, no bridge mode to use your own router, but they do have the DMZ+ mode so that you can set up a router behind it ... anything that hits the DSL address gets forwarded to the router.

    Huh, I didn't know UVerse was also DSL; I thought it was just fiber. I used to work for a company that had a small DSL business on the side. They didn't have any real DSL engineers or admins, so I'd sometimes get dragged into troubleshooting stuff because I knew Cisco IOS and DSLAMS, despite the fact that I was supposedly a software engineer.

    Anyway, IIRC, most of the modems we gave out were Westells with integrated router (but no wifi). We got a new shipment of cute little Westell routers that were only about 3" x 3" x 1", so I took one home to use on my company-provided DSL line. It only had one Ethernet out port, so you'd have to provide your own switch. I had a wifi router so I tried to run it in bridging mode, but never could get it to accept the VCI settings, so I finally just set it up to forward all traffic to my wifi router (like the DMZ mode you describe).

    Unfortunately, it was a piece of shit that dropped the signal all the time, so after a few days I traded it in for one of the old modems. I think we just ended up sending the new modems to new customers or people needing replacements. They went out of business a few years ago.



  • @morbiuswilters said:

    @zelmak said:

    UVerse uses 2Wire "Home Gateways" ...

    Provides 4 RJ-45 Ethernet, 2 RJ-11 phone lines, 1 usb, B/G Wireless, COAX (2, I think, to plug into your existing cable infrastructure), uplink RJ-11 for the DSL link. NAT/Firewall-like router. Sadly, no bridge mode to use your own router, but they do have the DMZ+ mode so that you can set up a router behind it ... anything that hits the DSL address gets forwarded to the router.

    Huh, I didn't know UVerse was also DSL; I thought it was just fiber.

    Fiber to a neighborhood box; DSL from there to the house.



  • @zelmak said:

    @morbiuswilters said:

    @zelmak said:

    UVerse uses 2Wire "Home Gateways" ...

    Provides 4 RJ-45 Ethernet, 2 RJ-11 phone lines, 1 usb, B/G Wireless, COAX (2, I think, to plug into your existing cable infrastructure), uplink RJ-11 for the DSL link. NAT/Firewall-like router. Sadly, no bridge mode to use your own router, but they do have the DMZ+ mode so that you can set up a router behind it ... anything that hits the DSL address gets forwarded to the router.

    Huh, I didn't know UVerse was also DSL; I thought it was just fiber.

    Fiber to a neighborhood box; DSL from there to the house.

    They do Fiber-to-the-premises, too, don't they? It's active, though, unlike passive FiOS, which is much cheaper to install.



  • @morbs said:

    @zelmak said:
    @morbiuswilters said:
    I didn't know UVerse was also DSL; I thought it was just fiber.

    Fiber to a neighborhood box; DSL from there to the house.

    They do Fiber-to-the-premises, too, don't they? It's active, though, unlike passive FiOS, which is much cheaper to install.

    I don't know; never researched it. This is the way it is here and they didn't offer to bring fiber to the house.  The wife wanted to try a change from TWC. I like the network quality, but the TV quality is crap IMO -- they over compress -- highly active things like Dancing with the Stars finals (all the glitter, streamers, flashing lights and explosion) look like utter shit.

    Good thing I don't watch any of that crap.

    Okay, I watched it once, but I didn't inhale.



  • @zelmak said:

    @morbs said:

    @zelmak said:
    @morbiuswilters said:
    I didn't know UVerse was also DSL; I thought it was just fiber.

    Fiber to a neighborhood box; DSL from there to the house.

    They do Fiber-to-the-premises, too, don't they? It's active, though, unlike passive FiOS, which is much cheaper to install.

    I don't know; never researched it. This is the way it is here and they didn't offer to bring fiber to the house.  The wife wanted to try a change from TWC. I like the network quality, but the TV quality is crap IMO -- they over compress -- highly active things like Dancing with the Stars finals (all the glitter, streamers, flashing lights and explosion) look like utter shit.

    Good thing I don't watch any of that crap.

    Okay, I watched it once, but I didn't inhale.

    Wow, I'm kind of surprised they try to stream HDTV over DSL. I've had such good experiences with cable, I would never go back to DSL.



  • @morbiuswilters said:

    Wow, I'm kind of surprised they try to stream HDTV over DSL. I've had such good experiences with cable, I would never go back to DSL.

    The DVR option also allows recording of up to four shows simultaneously ... 3 in HD, 1 in SD. Another reason we switched as TWC only allowed recording of two and watching one.

    A DVR would be unnecessary if I could watch the TV shows I wanted to on-demand ... can you imagine? :p


Log in to reply