<?xml version="1.0" encoding="UTF-8"?><rss version="2.0"
	xmlns:content="http://purl.org/rss/1.0/modules/content/"
	xmlns:dc="http://purl.org/dc/elements/1.1/"
	xmlns:atom="http://www.w3.org/2005/Atom"
	>
<channel>
	<title>Comments on: Pentagon Hacked by Chinese Miltary</title>
	<atom:link href="http://www.darknet.org.uk/2007/09/pentagon-hacked-by-chinese-miltary/feed/" rel="self" type="application/rss+xml" />
	<link>http://www.darknet.org.uk/2007/09/pentagon-hacked-by-chinese-miltary/</link>
	<description>Ethical Hacking, Penetration Testing &#38; Computer Security</description>
	<pubDate>Thu, 04 Dec 2008 21:32:39 +0000</pubDate>
	<generator>http://wordpress.org/?v=2.6.5</generator>
		<item>
		<title>By: zupakomputer</title>
		<link>http://www.darknet.org.uk/2007/09/pentagon-hacked-by-chinese-miltary/#comment-124218</link>
		<dc:creator>zupakomputer</dc:creator>
		<pubDate>Wed, 30 Jul 2008 14:38:39 +0000</pubDate>
		<guid isPermaLink="false">http://www.darknet.org.uk/2007/09/pentagon-hacked-by-chinese-miltary/#comment-124218</guid>
		<description>In the Pentagons case it's more: of course you'll get in, but unless you're behind the Great Wall yourself they'll probably find out where/who you are.

Or just go to DC and leave chopsticks cryptically lying around the Pentalawn 2000, in "shapes that could be code", as if you were Jung throwing a yarrow stick consult from beneath a Bodhi tree.

Or just astrally-project into the War Room and act like you worked there all along.</description>
		<content:encoded><![CDATA[<p>In the Pentagons case it&#8217;s more: of course you&#8217;ll get in, but unless you&#8217;re behind the Great Wall yourself they&#8217;ll probably find out where/who you are.</p>
<p>Or just go to DC and leave chopsticks cryptically lying around the Pentalawn 2000, in &#8220;shapes that could be code&#8221;, as if you were Jung throwing a yarrow stick consult from beneath a Bodhi tree.</p>
<p>Or just astrally-project into the War Room and act like you worked there all along.</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: kill</title>
		<link>http://www.darknet.org.uk/2007/09/pentagon-hacked-by-chinese-miltary/#comment-124215</link>
		<dc:creator>kill</dc:creator>
		<pubDate>Wed, 30 Jul 2008 10:34:12 +0000</pubDate>
		<guid isPermaLink="false">http://www.darknet.org.uk/2007/09/pentagon-hacked-by-chinese-miltary/#comment-124215</guid>
		<description>never fight with a same enemy for long time then he will know all ur skills</description>
		<content:encoded><![CDATA[<p>never fight with a same enemy for long time then he will know all ur skills</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: Zinho</title>
		<link>http://www.darknet.org.uk/2007/09/pentagon-hacked-by-chinese-miltary/#comment-64032</link>
		<dc:creator>Zinho</dc:creator>
		<pubDate>Sat, 08 Sep 2007 22:31:09 +0000</pubDate>
		<guid isPermaLink="false">http://www.darknet.org.uk/2007/09/pentagon-hacked-by-chinese-miltary/#comment-64032</guid>
		<description>Hi Bogwitch, 
I appreciate your words. 
I wanted to clarify another aspect of our Kit. Our customers will be able to receive all the new updates of the kit for FREE.
As an example we are investing a lot of time and money in order to hire our friends researchers (people who spoke at black hat that I'm going to name later) to produce valuable contents only for the kit customers. This is an added value to be included in the next kit edition expected within few weeks.
Rootkit development, new advanced and unexplored attacking techniques to web application (xst,csrf, ajax hacking...) and penetration testing are the topics we are working on.

At now you find papers written mainly by our researcher Doz, who took the time to write and explain in a very easy way each topic covered in the areas. That is you find 2-3 papers for each area written by us.  

The size and nature of the kit (only available for download at now) forced us to make a selection of only the most intersting and educational tools and papers (you may find even 10 tools/papers) for area. You're right it scracthes the surface, but it scratches it very well ;)

I will be discussing with doz if making 1 paper freely available online as a "trial" and I will let you know.</description>
		<content:encoded><![CDATA[<p>Hi Bogwitch,<br />
I appreciate your words.<br />
I wanted to clarify another aspect of our Kit. Our customers will be able to receive all the new updates of the kit for FREE.<br />
As an example we are investing a lot of time and money in order to hire our friends researchers (people who spoke at black hat that I&#8217;m going to name later) to produce valuable contents only for the kit customers. This is an added value to be included in the next kit edition expected within few weeks.<br />
Rootkit development, new advanced and unexplored attacking techniques to web application (xst,csrf, ajax hacking&#8230;) and penetration testing are the topics we are working on.</p>
<p>At now you find papers written mainly by our researcher Doz, who took the time to write and explain in a very easy way each topic covered in the areas. That is you find 2-3 papers for each area written by us.  </p>
<p>The size and nature of the kit (only available for download at now) forced us to make a selection of only the most intersting and educational tools and papers (you may find even 10 tools/papers) for area. You&#8217;re right it scracthes the surface, but it scratches it very well <img src='http://www.darknet.org.uk/wp-includes/images/smilies/icon_wink.gif' alt=';)' class='wp-smiley' /> </p>
<p>I will be discussing with doz if making 1 paper freely available online as a &#8220;trial&#8221; and I will let you know.</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: Bogwitch</title>
		<link>http://www.darknet.org.uk/2007/09/pentagon-hacked-by-chinese-miltary/#comment-64014</link>
		<dc:creator>Bogwitch</dc:creator>
		<pubDate>Sat, 08 Sep 2007 12:58:00 +0000</pubDate>
		<guid isPermaLink="false">http://www.darknet.org.uk/2007/09/pentagon-hacked-by-chinese-miltary/#comment-64014</guid>
		<description>Hi again,

After reviewing your site in much more detail, it is clear that there is a good amount of useful information for beginners. That's what I get for knee-jerk reactions and posting in the wee small hours. ;)
To quote from an older network, "Open mouth, insert foot, echo internationally."

That said, I would still like to see a sample of the premium content from your Hackers Kit and some idea of how much is premium content vs. open source content.</description>
		<content:encoded><![CDATA[<p>Hi again,</p>
<p>After reviewing your site in much more detail, it is clear that there is a good amount of useful information for beginners. That&#8217;s what I get for knee-jerk reactions and posting in the wee small hours. <img src='http://www.darknet.org.uk/wp-includes/images/smilies/icon_wink.gif' alt=';)' class='wp-smiley' /><br />
To quote from an older network, &#8220;Open mouth, insert foot, echo internationally.&#8221;</p>
<p>That said, I would still like to see a sample of the premium content from your Hackers Kit and some idea of how much is premium content vs. open source content.</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: Bogwitch</title>
		<link>http://www.darknet.org.uk/2007/09/pentagon-hacked-by-chinese-miltary/#comment-64002</link>
		<dc:creator>Bogwitch</dc:creator>
		<pubDate>Sat, 08 Sep 2007 10:21:00 +0000</pubDate>
		<guid isPermaLink="false">http://www.darknet.org.uk/2007/09/pentagon-hacked-by-chinese-miltary/#comment-64002</guid>
		<description>Zinho: I understand about responsible disclosure. What I have a problem with is, IMO, unethical vulnerability testing against systems that you do not have the owners permission to scan.
WRT your advisories being vague; It is a fine line to tread, I'll admit. With something like XSS you can describe what validation fails &lt;B&gt;OR&lt;/B&gt; what input type is vulnerable without opening the vulnerability to a whole slew of skiddies, but suggesting that the vulnerability is open by sending UBE or even spear phishing, with malicious URLs does not neccessarily describe a vulnerability in the site
On assembly; your pack is aimed at beginners but if you are going to talk about buffer overflows, you must talk about assembly, otherwise you're not talking about buffer overflows. Are you suggesting that beginners would not understand assembly?
I agree to be a good ethical hacker you must 'learn the ways of the dark side' :) But that does not mean you have to practice unethically. Run up a lab, get virtualisation, hack yourself. That's the best way to learn. Don't try to hack live sites without permission.

Ethics IS a grey area. One persons ethical is anothers unethical.

Like I said before, if the paid-for content of your Hackers Kit is merely the unpublished copyright content, then I would suggest that providing a sample of said content on your site might be a good idea so that people &lt;B&gt;know&lt;/B&gt; what they are paying for.
I will be interested to learn what software you bundle. I would also be interested to learn what percentage of content is your own copyright content.

I apologise if I came across as aggresive in my previous post (or this one) I am trying to ascertain if this would be a product I would recommend to the people I have asking me about the best way to learn about IT security.</description>
		<content:encoded><![CDATA[<p>Zinho: I understand about responsible disclosure. What I have a problem with is, IMO, unethical vulnerability testing against systems that you do not have the owners permission to scan.<br />
WRT your advisories being vague; It is a fine line to tread, I&#8217;ll admit. With something like XSS you can describe what validation fails <b>OR</b> what input type is vulnerable without opening the vulnerability to a whole slew of skiddies, but suggesting that the vulnerability is open by sending UBE or even spear phishing, with malicious URLs does not neccessarily describe a vulnerability in the site<br />
On assembly; your pack is aimed at beginners but if you are going to talk about buffer overflows, you must talk about assembly, otherwise you&#8217;re not talking about buffer overflows. Are you suggesting that beginners would not understand assembly?<br />
I agree to be a good ethical hacker you must &#8216;learn the ways of the dark side&#8217; <img src='http://www.darknet.org.uk/wp-includes/images/smilies/icon_smile.gif' alt=':)' class='wp-smiley' /> But that does not mean you have to practice unethically. Run up a lab, get virtualisation, hack yourself. That&#8217;s the best way to learn. Don&#8217;t try to hack live sites without permission.</p>
<p>Ethics IS a grey area. One persons ethical is anothers unethical.</p>
<p>Like I said before, if the paid-for content of your Hackers Kit is merely the unpublished copyright content, then I would suggest that providing a sample of said content on your site might be a good idea so that people <b>know</b> what they are paying for.<br />
I will be interested to learn what software you bundle. I would also be interested to learn what percentage of content is your own copyright content.</p>
<p>I apologise if I came across as aggresive in my previous post (or this one) I am trying to ascertain if this would be a product I would recommend to the people I have asking me about the best way to learn about IT security.</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: Zinho</title>
		<link>http://www.darknet.org.uk/2007/09/pentagon-hacked-by-chinese-miltary/#comment-63993</link>
		<dc:creator>Zinho</dc:creator>
		<pubDate>Sat, 08 Sep 2007 07:40:11 +0000</pubDate>
		<guid isPermaLink="false">http://www.darknet.org.uk/2007/09/pentagon-hacked-by-chinese-miltary/#comment-63993</guid>
		<description>Dear Bogwitch,
you're the first one to say that my site doesn't provide any real information. We have thousands of papers and tools. And we have a research group. Anyway I have no problem if you don't like it. Just don't bookmark it.

First of all, I can send you the reconaissance letters for responsible disclosure by Microsoft, Amazon and so on. So this is called *responsible disclosure* that is something very ethical in my opinion.

And if you say our advisories are vague, then my friend, you talk about being ethical but you should know what you can say in an advisory and what not. We have never shown unpatched exploits. Once again *responsible disclosure*.


Here you demonstrate you're confused:
"a serious hacker working with buffer overflows MUST know assembly"
but later:
"As you say, your pack is for beginners and I’m sure that there is much useful information and many useful applications to assist a beginner who wants to learn about hacking"

Yes, Our kit is for beginners and average hackers as you can read from the very home page of the kit itself. No need to complain about assembly to be missing, since you understood yourself it is for beginners.

And I'm very disappointed that in the security professionals field there still a misconception of the word ethical. 

Ethical is &lt;strong&gt;the way&lt;/strong&gt; you use your information not the information itself. 
But in order to be a good ethical hacker you need to have to learn black hat techinques and master black hat tools, in my opinion.

The IT Security field suffers from such misconception. This is the main cause why ethical hackers fail to do their job properly and black hat are still there to waste ethical hackers efforts.
I think both should learn the same things, but behave differently.


For what concerns the tools, they are free, no warez in it, a couple of them maybe trial. You're paying for our unpublished content and our work to put them in 1 pack.

I hope I was clear enough, this is not a fight TheRealDonQuixote, but I have to defend and explain years of hard work on my site from random people saying it has no information. Ridiculous

Forgot to say that of course most of the tools are gnu software. (the best port scanners, sniffers, packet manipulators, and so on).

Once again we are not charging any money from them, we charge money for our unpublished and copyrighted contents and our work on creating an educational path to speed up the learning process. 

I currently don't have the full listing of the files, I will try to publish one asap.</description>
		<content:encoded><![CDATA[<p>Dear Bogwitch,<br />
you&#8217;re the first one to say that my site doesn&#8217;t provide any real information. We have thousands of papers and tools. And we have a research group. Anyway I have no problem if you don&#8217;t like it. Just don&#8217;t bookmark it.</p>
<p>First of all, I can send you the reconaissance letters for responsible disclosure by Microsoft, Amazon and so on. So this is called *responsible disclosure* that is something very ethical in my opinion.</p>
<p>And if you say our advisories are vague, then my friend, you talk about being ethical but you should know what you can say in an advisory and what not. We have never shown unpatched exploits. Once again *responsible disclosure*.</p>
<p>Here you demonstrate you&#8217;re confused:<br />
&#8220;a serious hacker working with buffer overflows MUST know assembly&#8221;<br />
but later:<br />
&#8220;As you say, your pack is for beginners and I’m sure that there is much useful information and many useful applications to assist a beginner who wants to learn about hacking&#8221;</p>
<p>Yes, Our kit is for beginners and average hackers as you can read from the very home page of the kit itself. No need to complain about assembly to be missing, since you understood yourself it is for beginners.</p>
<p>And I&#8217;m very disappointed that in the security professionals field there still a misconception of the word ethical. </p>
<p>Ethical is <strong>the way</strong> you use your information not the information itself.<br />
But in order to be a good ethical hacker you need to have to learn black hat techinques and master black hat tools, in my opinion.</p>
<p>The IT Security field suffers from such misconception. This is the main cause why ethical hackers fail to do their job properly and black hat are still there to waste ethical hackers efforts.<br />
I think both should learn the same things, but behave differently.</p>
<p>For what concerns the tools, they are free, no warez in it, a couple of them maybe trial. You&#8217;re paying for our unpublished content and our work to put them in 1 pack.</p>
<p>I hope I was clear enough, this is not a fight TheRealDonQuixote, but I have to defend and explain years of hard work on my site from random people saying it has no information. Ridiculous</p>
<p>Forgot to say that of course most of the tools are gnu software. (the best port scanners, sniffers, packet manipulators, and so on).</p>
<p>Once again we are not charging any money from them, we charge money for our unpublished and copyrighted contents and our work on creating an educational path to speed up the learning process. </p>
<p>I currently don&#8217;t have the full listing of the files, I will try to publish one asap.</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: TheRealDonQuixote</title>
		<link>http://www.darknet.org.uk/2007/09/pentagon-hacked-by-chinese-miltary/#comment-63985</link>
		<dc:creator>TheRealDonQuixote</dc:creator>
		<pubDate>Sat, 08 Sep 2007 05:24:31 +0000</pubDate>
		<guid isPermaLink="false">http://www.darknet.org.uk/2007/09/pentagon-hacked-by-chinese-miltary/#comment-63985</guid>
		<description>"You can't fight in here!  This is the war room!"
- &lt;i&gt;Dr. Strangelove&lt;/i&gt;

I just thought that little quote might help put everything into perspective.  Including the China hax the Pentagon article.</description>
		<content:encoded><![CDATA[<p>&#8220;You can&#8217;t fight in here!  This is the war room!&#8221;<br />
- <i>Dr. Strangelove</i></p>
<p>I just thought that little quote might help put everything into perspective.  Including the China hax the Pentagon article.</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: Bogwitch</title>
		<link>http://www.darknet.org.uk/2007/09/pentagon-hacked-by-chinese-miltary/#comment-63965</link>
		<dc:creator>Bogwitch</dc:creator>
		<pubDate>Sat, 08 Sep 2007 00:49:26 +0000</pubDate>
		<guid isPermaLink="false">http://www.darknet.org.uk/2007/09/pentagon-hacked-by-chinese-miltary/#comment-63965</guid>
		<description>Zinho: Your post raises interesting questions. First, you are offering an &lt;B&gt;ethical&lt;/B&gt; hackers pack, yet you cite holes found in Microsoft, Ebay and Amazon (and Yahoo and Paypal, on your site) I seriously doubt you had a contract to perform the testing. Ethical? Not by any definition I know of.
Your site lists NO software that is loaded into your ethical hacker kit. 1 gig of data barely scratches the surface of the software available and it still leaves the question of GNU licensing violation. As I said before, without knowing what software is in your pack, it is not possible to know for sure but any DECENT hacking toolkit will contain many GNU licensed pieces of software and would be deficient without them.
Your site, at first viewing, does not contain any REAL  information. Your advisories are vague: for example http://hackerscenter.com/archive/view.asp?id=26829 mentions XSS yet talks about delivering URLs via email.
OK, there is a little useful information in the "HSC Ethical Hacker" section on the right of your page but again, very vague. For example, under "Coding and Buffer Overflows" only a passing mention is made to assembly, yet a serious hacker working with buffer overflows MUST know assembly - it would be difficult creating a NOP sled without it!

I appreciate that you are in the business of making money but it would be easier to take you seriously, and may increase your sales, if you included some sample whitepapers from HSC.

As you say, your pack is for beginners and I'm sure that there is much useful information and many useful applications to assist a beginner who wants to learn about hacking. The issue I have is wether your pack will teach &lt;B&gt;ethical&lt;/B&gt; hacking.

It's not for me, but, and this might be seen as big-headed of me, I do not consider myself to be a beginner.</description>
		<content:encoded><![CDATA[<p>Zinho: Your post raises interesting questions. First, you are offering an <b>ethical</b> hackers pack, yet you cite holes found in Microsoft, Ebay and Amazon (and Yahoo and Paypal, on your site) I seriously doubt you had a contract to perform the testing. Ethical? Not by any definition I know of.<br />
Your site lists NO software that is loaded into your ethical hacker kit. 1 gig of data barely scratches the surface of the software available and it still leaves the question of GNU licensing violation. As I said before, without knowing what software is in your pack, it is not possible to know for sure but any DECENT hacking toolkit will contain many GNU licensed pieces of software and would be deficient without them.<br />
Your site, at first viewing, does not contain any REAL  information. Your advisories are vague: for example <a href="http://hackerscenter.com/archive/view.asp?id=26829" rel="nofollow">http://hackerscenter.com/archive/view.asp?id=26829</a> mentions XSS yet talks about delivering URLs via email.<br />
OK, there is a little useful information in the &#8220;HSC Ethical Hacker&#8221; section on the right of your page but again, very vague. For example, under &#8220;Coding and Buffer Overflows&#8221; only a passing mention is made to assembly, yet a serious hacker working with buffer overflows MUST know assembly - it would be difficult creating a NOP sled without it!</p>
<p>I appreciate that you are in the business of making money but it would be easier to take you seriously, and may increase your sales, if you included some sample whitepapers from HSC.</p>
<p>As you say, your pack is for beginners and I&#8217;m sure that there is much useful information and many useful applications to assist a beginner who wants to learn about hacking. The issue I have is wether your pack will teach <b>ethical</b> hacking.</p>
<p>It&#8217;s not for me, but, and this might be seen as big-headed of me, I do not consider myself to be a beginner.</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: Zinho</title>
		<link>http://www.darknet.org.uk/2007/09/pentagon-hacked-by-chinese-miltary/#comment-63962</link>
		<dc:creator>Zinho</dc:creator>
		<pubDate>Fri, 07 Sep 2007 22:22:59 +0000</pubDate>
		<guid isPermaLink="false">http://www.darknet.org.uk/2007/09/pentagon-hacked-by-chinese-miltary/#comment-63962</guid>
		<description>Hi
I'm the admin of hackerscenter.com, powering the &lt;a href="http://kit.hackerscenter.com" rel="nofollow"&gt;ethical hacker kit&lt;/a&gt;.

Let me clarify your doubts.

Our kit is meant to speed up your learning process (if you want/need to learn it of course) of ethical hacking. It contains a lot of *unpublished* papers along with a selection of the best tools. 

The contents are divided into &lt;a href="http://kit.hackerscenter.com/contents.html" rel="nofollow"&gt;main areas &lt;/a&gt;

For each areas you have the best selected papers + unpublished papers written by HSC Security group. If you don't know us just make a search on google. We found holes into Microsoft, eBay, Amazon and so on. 

Along with the papers you have tools and source codes for that area. So, learn the theory and do practice.

Of course you can browse the web and get random tools or papers but the kit saves you a lot of time, gives you access to unpublished contents and makes your learning process more efficient and faster because it is built from an educational point of view.

The kit is 1Gb and downloadable into 4 parts for your convenience.

At first we created this kit, as a gift for the attendants of our hacking courses and &lt;a href="http://www.hackerscenter.com/hacktrix" rel="nofollow"&gt; conferences&lt;/a&gt;. Its success and demand invited us to make it public.

Darknet will post an unbiased review on the kit soon, he has access to a free copy of the kit just for this purpose :)
And if he decided to include it among the prizes I'm sure he liked it.</description>
		<content:encoded><![CDATA[<p>Hi<br />
I&#8217;m the admin of hackerscenter.com, powering the <a href="http://kit.hackerscenter.com" rel="nofollow">ethical hacker kit</a>.</p>
<p>Let me clarify your doubts.</p>
<p>Our kit is meant to speed up your learning process (if you want/need to learn it of course) of ethical hacking. It contains a lot of *unpublished* papers along with a selection of the best tools. </p>
<p>The contents are divided into <a href="http://kit.hackerscenter.com/contents.html" rel="nofollow">main areas </a></p>
<p>For each areas you have the best selected papers + unpublished papers written by HSC Security group. If you don&#8217;t know us just make a search on google. We found holes into Microsoft, eBay, Amazon and so on. </p>
<p>Along with the papers you have tools and source codes for that area. So, learn the theory and do practice.</p>
<p>Of course you can browse the web and get random tools or papers but the kit saves you a lot of time, gives you access to unpublished contents and makes your learning process more efficient and faster because it is built from an educational point of view.</p>
<p>The kit is 1Gb and downloadable into 4 parts for your convenience.</p>
<p>At first we created this kit, as a gift for the attendants of our hacking courses and <a href="http://www.hackerscenter.com/hacktrix" rel="nofollow"> conferences</a>. Its success and demand invited us to make it public.</p>
<p>Darknet will post an unbiased review on the kit soon, he has access to a free copy of the kit just for this purpose <img src='http://www.darknet.org.uk/wp-includes/images/smilies/icon_smile.gif' alt=':)' class='wp-smiley' /><br />
And if he decided to include it among the prizes I&#8217;m sure he liked it.</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: Bogwitch</title>
		<link>http://www.darknet.org.uk/2007/09/pentagon-hacked-by-chinese-miltary/#comment-63950</link>
		<dc:creator>Bogwitch</dc:creator>
		<pubDate>Fri, 07 Sep 2007 18:58:10 +0000</pubDate>
		<guid isPermaLink="false">http://www.darknet.org.uk/2007/09/pentagon-hacked-by-chinese-miltary/#comment-63950</guid>
		<description>It is interesting to note that the blurb on the Ethical Hacker Kit contains no real information about tools included. I suspect that the tools are simply freely available along with the docs. Now, IANAL but would that not fall foul of the GNU license?
This is all speculation of course, I don't know what the contents are!</description>
		<content:encoded><![CDATA[<p>It is interesting to note that the blurb on the Ethical Hacker Kit contains no real information about tools included. I suspect that the tools are simply freely available along with the docs. Now, IANAL but would that not fall foul of the GNU license?<br />
This is all speculation of course, I don&#8217;t know what the contents are!</p>
]]></content:encoded>
	</item>
</channel>
</rss>
