[PHC] BREAKING NEWS [PHC] -by Theo The Rat (mountainclimbingbeginningcwriterdude@openbsd.org) (deraadt!root@cvs.openbsd.org @ efnet - #phrack) It has been brought to the attention of several PHC members that Blue Boar, alias Ryan Russell, has just found a new job with Snosoft Incorporated, an Internet Terrorism group best known for violating the DMCA with their fierce perl -e techniques. PHC is still curious why HP went after Snosoft for their leaked exploit, and not after K2 when he leaked his Tru64 exploits, but that isn't the focus of this article. We're also curious why HP decided to back down and stop the prosecution of these computer criminals, but that also isn't the topic of this article. PHC special request: prosecute k2 for DMCA violations. FRY/FIRE k2. Instead, we return to our original topic. Snosoft founder ADT came into #phrack for an interview. Yes, we did hire Ryan. Snosoft is more than happy to host the vuln-dev mailing list. Yes, Ryan will continue to run vuln-dev. It is now vuln-dev@snosoft.com, instead of vuln-dev@securityfocus.com. We know that Symantec will try to sue us for copyright infrigement. Let them. We went head to head with HP, and we're not afraid to do the same with a company like Symantec. In spite of any lawsuits that may arise from this defiance of copyright law, we hope Symantec will be good sports and setup mail forwarding of vuln-dev@securityfocus.com to its new home at Snosoft so we won't lose the subscription base of wannabe whitehat's that have kept the list alive for so long. We're very grateful to Ryan for giving us proprietary SecurityFocus source code. Now that we know the secrets of our enemy, we can only be triumphant in battle. Or, to paraphrase what Lance Spitzner never shuts up about, "by understanding our enemies tactics, we can boast that we know more than them". The 0day was much appreciated. And no, Ryan's offical position with Snosoft is not related to security in any way. He is not allowed to work on the mailing list during work hours. Instead, we will grant him use of one of our research machines after hours, when he has successfully completed his custodial duties. Only after the toilets have been scrubbed can he work on maintaining the list. y0 i'd like to step in for just a minute and say, I've been owned 500 times, and my private research notes are going to be published very soon, which prove how technically inept I really am. I'm a member of hack.co.za and HWA-Scriptkid Security, and I offer jobs to just about everyone hoping I get lucky and find someone who knows what they're doing to carry the company and help earn us some brownie points to recover from the embarassment of being owned every day. I'm also very passionate about security. One of my boxes is named ghetto, because as many of you already know, I am of african-american ancestry, and I'd like to cling to the idea that I'm still a thug. And no, my mother was not a crackwhore, the things she did to make sure I had a bowl of cornflakes every day are very honorable. Well, at least the fact that she did what she had to do to get Tony the Tiger in my mouth is respectable, right? Yes, very respectable. Might I also add that we intend to send Ryan to rehab for his evident addiction to pornographic websites (ref: home dir leak). OK, I have to go hire that hooker because it's been three weeks since I've gotten off, and the crabs have finally cleared up. l8rz I'd just like to add one last thing. It has not yet been confirmed that Ryan beat his children after being fired from SecurityFocus -- please do not spread such childish rumors until they have been confirmed. Yes, ladies and gentlemen, you've heard the story, and who brought it to you first? McWilliams? Greene? No, it was the Phrack High Council. We're all about bringing you the latest information on the inf0sec world. For those of you who couldn't understand the IRC dialouge, here is what the Snosoft staff members d0tslash and ADT have testified to the High Council: #01# Ryan Russell has been hired by Snosoft. #02# Ryan Russell is Snosoft's assistant janitor. #03# Ryan Russell is migrating the vuln-dev XSS list to snosoft.com. #04# Ryan Russell has leaked proprietary source code of SecurityFocus to Snosoft to spite Symantec executives and his co-workers for not defending him. #05# Snosoft thinks they're above the law and that Symantec doesn't have big enough balls to take them on. #06# d0tslash is black and proud. #07# d0tslash's mother is a prostitute. #08# d0tslash has been owned more times than ADT has had crabs. #09# ADT contracted crabs from d0tslash's mother. #10# ADT's crabs have cleared up. #11# ADT is going back to d0tslash's mother for some sweet lovin'. #12# Ryan Russell's home directory was leaked prior to his employment at Snosoft. #13# Ryan Russell has an addiction to pornography. #14# Ryan Russell probably beats his children. (c) 2002 Phrack High Council