[NTLUG:Discuss] crackers

[Daniel Shipman]

MadHat,

> What if I offered a page that would check the IP that you are coming
> from.  Look for common holes and display them on the screen?  You go 
> to the site and it reports right there about the requesting host.  No
> email, no taking ip or domains.
> 
> hmmmmmm.....
> 

No - most young hackers first attempt is made at their own service
provider - I don't want that - I say it's an email request from the
owner of the box - followed by a phone call from the tester - once the
tester is on the phone with the person he can know for sure that the
person is legit by making him jump through a bunch of hurdles: like
Telnet to 000.000.000.000 (The tester's machine) If the person can
telnet from the system and we have a legit phone number - his headers
off his email - and a good feeling - then why not?????

I can't imagine a hacker getting into a system then arranging to wait at
a pay phone untill the tester calls - only to have the tester tell him
what he already knows - the system weaknesses!



-- 
Daniel Shipman, VP Internet Services
SRJ Marketing Communications
Phone * 214-528-5775
Fax   * 214-599-0775