◆ SpookStack

SecurityFocus HOME News: Ly Adventures in WorldCom - Page 1 of 5 MyAccount | AboutUs } Bfedia Kit . 4 SecurityFocus ™ 4 StillSecure® Entire Site Free Analyzer Dowaload NEWS << Printable version >> Report: ~ NEWS Watch Li May 02, Lamo's Adventures in WorldCom RIAA me The helpful hacker strikes again, this time finding a route into the communications company's faces car private Web, then telling its security staff all about it, Who is Adrian Lamo, why does he do this, Apr 30,: and woutd his life be the same if Kinkos kicked him out? A , Rise of tl By Kevin Poulsen, SecurityFocus Dec 5 2001 11:46AM Zombies . Apr 25,2 It's dusk in San Francisco, and at a Kinko's copy shop deep in the financial district Adrian Lamo shrugs off his overstuffed backpack and pulls out a battered Toshiba laptop. With a few DirecTV | keystrokes, the hacker fills the computer's display with a map of the United States, crisscrossed Guilty with hundreds of colored lines, crowded with geometric symbols and tiny text. Apr 24, < On tnspection, the map charts in astonishing detail the physical infrastructure underlying much of the Internet: underground cables, repeaters, satellite earth stations, junctions, terminals, and the §©=———— cable heads where a dozen transoceanic cables come ashore. As a trophy, however, the one- megabyte PDF file's most salient feature is a detail in the tower right hand corner, a warning in FROM T bold red, "RESTRICTED DO NOT REPRODUCE." Another notice reads, "Not to be reproduced in any EarthLint manner or disclosed to unauthorized individuals," and a third warning runs sidewise up the edge = spam E- of the map: "WorldCom RESTRICTED," May 07, WorldCom is the latest target of a clean-cut 20-year-old hacker who's aiready drawn national Ferreting attention discovering, exploiting, and then warning about serious security lapses at AOL, Piracy Excite@Home, Yahoo! and Microsoft. Like those other companies, security staff at the $20 billion May 07, communications giant might be surprised to fearn they were compromised by a lone vagabond Earthlink hacker wito lives out of a weathered L.L. Bean backpack and does most of his work from Kinko's the Buffe ‘laptop stations,‘ using little more than a Web browser and his wits. May 07, ‘All the interestin: thi thath 8 "The downside is, I'm running out of major U.S. corporations," says Compute ings that have Lamo, as he plugs the Toshiba into the copy shop's free Intemet link, hampers happened to me and summons a Netscape window. enacting have been the result Mey 06, of synchronicity and Web applications are an overlooked chink in many organizations’ ‘ organized chaos.’ network security armor, Lamo explains. Sometimes, the weakness is -- Adrian Lamo an improperly configured Access Control List (ACL) that allows anyone on the Internet to visit an application that should be http://www. securityfocus.com/news/296 7/2003 FBI(19-cv-1495)-1045