A convicted hacker debunks some myths (sourced from http://www.cnn.com)

Thursday, October 13, 2005; Posted: 3:11 p.m. EDT (19:11 GMT)

(CNN) -- To many, the name Kevin Mitnick is synonymous with hacking, the cinematic sort where a snot-nosed kid thumbs his nose at authority. But, Mitnick says, the characterization is a bit overdone and the legend untrue, if not libelous.

It is true, he says, that he broke into corporate computer systems and stole source code to satisfy his curiosity, but he denies the stories that he hacked into NORAD -- North American Aerospace Defense Command -- or that he wiretapped the FBI.

After a well-publicized pursuit that made him notorious, the FBI arrested Mitnick in 1995. He served five years in prison after pleading guilty to charges of wire and computer fraud. He was released in 2000 and today runs a computer security firm. In a telephone interview with CNN's Manav Tanneeru, Mitnick talks about his past, the state of online security today, and how he handles what his name has come to mean.

CNN: There is a certain myth of Kevin Mitnick, but you seem to disavow a lot of it. Why exactly did you become so famous and what specifically was reported that was inaccurate?

MITNICK: [The claims] that I wiretapped the FBI or something like that were something out of a movie like "War Games" or "Enemy of the State" or something. There were fictional events that were tied to real events, like when I took code from Motorola and Nokia when I was a hacker to look at the source code. I took a copy, which is essentially stealing, to look at the information. That was true, that was the truth ... in the story, but there were a lot of libelous statements. ...

I'm the one that got myself into trouble, but because the reporting in the [New York] Times portrayed me as this very dangerous character, the government stepped up the prosecution of the case.

At the end of the day, I would have been prosecuted, but I wouldn't have been held in solitary confinement for a year for the fear that I could launch nuclear missiles by whistling through a pay phone.

I was powerless because I was represented by a publicly appointed attorney who had a very limited budget. But a lot of accusations I wasn't charged with. If I hacked into NORAD or wiretapped the FBI, I certainly would have been charged with it. I got into trouble largely because of my actions. However, because of the media reporting, I was treated as "Osama bin Mitnick."

CNN: You were once the most famous and sought after hacker in the country. After your release from prison you were asked to testify before the Senate, and you now run a Web security firm, which is a fascinating evolution.

MITNICK: It's kind of interesting, because hacking is a skill that could be used for criminal purposes or legitimate purposes, and so even though in the past I was hacking for the curiosity, and the thrill, to get a bite of the forbidden fruit of knowledge, I'm now working in the security field as a public speaker. Twenty-five percent of my revenue is actually doing security assessments, so people actually hire [me] to break into their systems to find their security failures and patch them before the bad guys find them.

So, it's kind of interesting, because what other criminal activity can you ethically practice? You can't be an ethical robber. You can't be an ethical murderer. So it's kind of ironic. But it is really rewarding to know that I can take my background and skills and knowledge and really help the community.

CNN: The fact that you are back in the online world, especially the cyber security sector, may give many reason for a certain insecurity and paranoia. How has your firm been received?

MITNICK: There are several in the security field that don't trust me. They're my competitors, and right there, there is an agenda. But I'm sure that our company does not receive phone calls because they're concerned about my past, and then again, there are a lot of people that do make those calls, and they keep the business going pretty good. I never got a phone call saying, "Hey, we're not hiring your firm because of x, y and z."

I don't know what the percentage is, but I'm sure there are people that don't want to use our firm because they really don't know much about the case. They just know me as a hacker that went to jail.

CNN: Compared to the time you were an illegal hacker, and the contemporary landscape, how easy is it to hack a computer? Has security improved much? Would you still be able to do what you did years ago?

MITNICK: I get hired to hack into computers now and sometimes it's actually easier than it was years ago. It really depends on who the client is -- or if you're doing ethical hacking, who the target is. It could be a difficult target or an easy target. The security landscape, the only thing that's changed in regards to vulnerability are technical issues, but with social engineering, it's all remained the same. So, it depends how vigilant the owners and the operators of the computer systems and the network are, and it really doesn't go to the question of are we living in a more secure world?

CNN: Then, how vulnerable is the common user? Sure, it depends on how many safeguards they've installed, but if they have the most effective of security, how easy is it?

MITNICK: I did a study USA Today was involved with and another marketing firm in San Francisco was involved with within the last year, and we set up a honeypot network, which was six different networks running various different operating systems. We plugged them into a DSL line in San Francisco, and we just watched them to see how quickly these systems could get broken into without having any protection. And one of the computers was broken into four minutes after plugging it into the Internet, which is quite astounding.

CNN: You previously mentioned social engineering. What exactly does that term mean to you?

MITNICK: Social engineering is using manipulation, influence and deception to get a person, a trusted insider within an organization, to comply with a request, and the request is usually to release information or to perform some sort of action item that benefits that attacker. It could be something as simple as talking over the telephone to something as complex as getting a target to visit a Web site, which exploits a technical flaw and allows the hacker to take over the computer.

CNN: And how do contemporary hackers use social engineering in what they do?

MITNICK: Well, how about Paris Hilton? She was attacked on her cell phone, and she was attacked two ways. One was because of a T-Mobile's Web site, and the other guy was able to compromise it by getting her phone number by going on T-Mobile's Web site, doing a password reset, which SMS-ed her new password because, presumably, only the owner would have the handset.

And then what they did was, they did a technique called caller ID spoofing, which allows a person to change the number they're calling from on their calling phone number display. So, they were posing as T-Mobile customer service, and they called her phone, and on the caller ID it showed as T-Mobile customer service, and then they told her, "There are some network difficulties. Have you been getting any SMS [messages] about a password reset, and what were the contents of the message?" and she freely gave it out, and that's how these guys were able to get to her T-Mobile Sidekick, and her e-mail, and whatnot.

In another example, the IRS just did a security audit under the office of the inspector general and called 100 managers posing as IT people at the IRS, and 35 of those mangers freely gave out their password and user name over the telephone.

So, it's a significant threat. A company can spend hundreds of thousands of dollars on firewalls, intrusion detection systems and encryption and other security technologies, but if an attacker can call one trusted person within the company, and that person complies, and if the attacker gets in, then all that money spent on technology is essentially wasted. It's essentially meaningless.

CNN: How much do you trust online banking and the usage of credit cards online?

MITNICK: I trust online banking. You know why? Because if somebody hacks into my account and defrauds my credit card company, or my online bank account, guess who takes the loss? The bank, not me.

CNN: Then what about other transactions? Do you pay bills online or shop online? I'm just curious if Kevin Mitnick is worried about ID theft?

MITNICK: Somebody already stole my identity once and used it to apply for a cell phone account. And it's too bad. I wish they stole my identity 10 years ago when I was a fugitive -- that would have been cool. It was a $400 bill, and they used my mom's address in Las Vegas when I was living in California under my name. That's really easy, because all you need to steal someone's identity is the Social Security number. It's not really rocket science.

But, I don't have a problem at all using my credit card online. There are attacks that can be done, but it's unlikely that I'll be targeted as an individual. It's more likely the attackers will target the bank. So that way they can get many user names and passwords, and get access to many accounts, rather than just targeting me. I think it's safer to use a credit card over the Internet than it is to go to a Macy's and use it where an employee can simply skim off the card, or go into a bar, or a restaurant where they have your credit card number.

CNN: You've become something of a star, a cult one, at least, even appearing on an episode of "Alias" as a hacker. What do you make of your celebrity?

MITNICK: It's kind of interesting, because I went through a horrific, horrendous experience and became the hacker poster boy, and it had a negative effect on my trip through the criminal justice system. But now that I've turned over a new leaf and people are interested in my skill-set, now the notoriety of my name helps me in my business. Not because of what I did in the past, but because I'm a known entity with my skill-set.

CNN: Do you miss being on the run?

MITNICK: No, no, I don't miss it all. I like my life now. I made some really stupid mistakes in the past as a younger man that I regret. I'm lucky that I've been given a second chance and that I could use these skills to help the community.

Junk Food:An analysis

               Junk Food: An analysis


By Sanket D. Kambli

Any food that is perceived to be unhealthy and has low or poor nutritional value can be termed as junk food. Similarly anything attractive but negligible in value can too be slotted here. Different groups over the years including opponents of fast food industries and environmentalists have used the term. And here, fast food is food prepared and served quickly at a fast-food restaurant or shop at low cost, noting that, fast food may or may not be junk. Junk foods are made up of empty calories. Empty calorie describes a calorie with little or no marked nutritional value, typically from simple carbohydrates and/or fats. An "empty calorie" has the same energy content of any other calorie but lacks accompanying nutrients such as vitamins, minerals or amino acids. For the same reasons, a diet rich in junk food is not favorable for maintaining a "balanced diet", as suggested by various government and non-profit health organizations. A diet high in junk food is widely considered by the medical community to substantially increase the risks of health problems such as obesity, osteoporosis and heart disease. A diet composed entirely of junk food may lead to malnutrition, vitamin deficiencies and other serious health problems. Junk food nevertheless remains popular because it is relatively cheap to manufacture and/or buy, is convenient to consume, and has a lot of flavor because of its typically high fat, sodium, or sugar content. Some junk foods, such as potato chips, contain a combination of nutritious calories (from the potatoes) and empty calories (from the fried fats).Common sources of empty calories include sugar, white flour, and fat. Junk food also may contain numerous food additives, which are used to enhance flavor, adjust texture, alter color, and prevent spoilage. For this reason many junk foods are also convenient in that they stay good for long periods of time. Due to its inherent attractiveness, junk food has evolved into a huge, world-wide industry. Standard industrial manufacturing and marketing techniques have been successful in increasing consumption of "unbalanced" junk food diets to the extent that many consider it to be a serious health problem in some countries. It is heavily advertised to young people, who often favor taste over nutritional value. But we can see all these changes as examples of economic adaptability. Where yesteryear's field hand hungered for roti and vegies to keep him going from dawn until dusk, today's techie is looking for brain food. Here it not about something that boosts your I.Q., instead it means something that will supply an uninterrupted power source for your system, so you can get as much processing done before your body goes into lethargy mode. So the active ingredients hungered for today are sugar and caffeine. Starch is also valued for its staying power, and salt also serves as a sort of accelerator. So this technological boom has been a dream come true for the junk food barons.
Technological advances have greatly extended the average life span. So a person who lives on junk food may not live as long as his or her peers, but chances are they will live longer than the average person from a generation or two earlier. It's the rare person who doesn't crave something sweet, salty, fatty, or doughy once in a while. Even the most health conscious among us so-called "health freaks" are apt to depart from our whole foods regimen occasionally. Junk food is also the only source of food for many lying somewhere near the poverty line. The decision regarding what to eat or what not should be left to one’s own intellect. We all are aware of its harms and goods. Therefore it should be left for one to judge what is right. It is commonly said by nutritionists that there is no such thing as a bad food, just a bad diet. What they mean is that any food can be incorporated into a diet as long as it is in the right proportion. "We really hate to say there's a good food or bad food. There are just better choices to make," says Tammy Newport, an Indianapolis dietitian. "I think the term junk food is something we need to get away from. I think it sets up failure for some people."








  

Sorry to dissapoint you all

Sorry to disappoint you all.
I hadn't updated since a long time since I was damn busy.
I was so busy that I have lost tab of the many good/bad/interesting things that have happened to me.
So I made you miss out on a lot of action.
Anyway, it is important to start from somewhere, I will start up by describing the week gone by.
Give me some time, by monday, this blog must have been updated. Bye, take care, be here ny monday, to find new stuff. ADIOS!!!

The hurl at the rock show

By Sanket ‘rock music in my veins’ Kambli

Though the title has analogy with a blink-182 track, this is not a punk music write up.
It isn’t even a gig review. It is more like a stupid attempt to fill up space. Let us begin the filling process. Last week at a rock show called Mosh Mania, there occurred an incident which successfully managed to ruin, a not so good image of rock music. This is what happened. Mosh-crazy rockers had assembled to dive into head banging frenzy. The band line-up was impressive with Helga’s Funk Castle, Zero, Them Clones, Pentagram (big names in Indian Rock Scene). Problem started when, a few among the crowd were bored by the lack of heavy music, and they decided to show their displeasure by throwing bottles at the stage, at that time pentagram had taken stage. This stupid act ticked off Pentagram front-man; he lost his temper, and started spitting expletives at the crowd on a whole. And the extent, to which he lost his temper, can be judged by the fact he managed to hurl the mike-stand at the crowd, and hurt an innocent bloke who was there to, just enjoy some live music. Here we should note that the blame is not only on the group which started the fiasco but also on Penta…. lead vox, who instead of trying to diffuse the situation diplomatically, showed a bloated rock star attitude. These people have maligned the not so good image of rock music, though everyone would say that the show must go on. And rock music cannot be killed by such stupid incidents by some dim-wited people. But the question remains unanswered, have people learnt something from this incident, if something of this sort happens again somewhere else, we will easily know it didn’t have the desired effect. So what can be done? Everything, but preaching, because we have a bad habit of not taking advice, anyway, we all know that, Rock and Roll will never die, period.

Stealth Movie Review:

By Sanket ‘frequent flier’ Kambli

Stealth is about a pilot-less futuristic fighter jet which goes rogue, and this rogue jet or EDI=Extreme Deep Invader(spelled as Eddy) makes the movie smarter and more ambitious than it first appears. Amid the dogfight sequences (including a truly magnificent slow-motion crash and a scary pilot-eject at 35,000 feet) and requisite gratuitous shots of Jessica Biel in a bikini, screenwriter W.D. Richter ("Big Trouble in Little China") sneaks in the dangers of win-at-all-costs counter-terrorism and a solid search-and-rescue third act that has little to do with the crazy runaway plane. Biel ("Blade: Trinity"), Josh Lucas ("Sweet Home Alabama") and Jamie Foxx (contracted to a supporting role before "Ray" put him on Hollywood's A-list) play Navy pilots who make up an elite emergency strike force in ultra-high-tech jets that fly in to blow up terrorists and stolen nuclear warheads on a moment's notice. The specifics of these incidents are often logically ridiculous, and they get even more so after the team is forced to accept the computerized plane into their ranks as an experiment. When a lightning strike turns its circuits into bunk ("EDI is war plane. EDI must have targets," it declares in an intimidating monotone), the fight is on to bring the thing down. Director Rob Cohen sets the stage with satellite shots showing worldwide locations, then zooms in and in and in to catch up with realistic (though CGI-generated) canyon-charging flight sequences jazzed up further with creative editing. He hires great actors like Sam Shepard and Joe Morton for supporting roles as the pilots' clashing commanders, one of whom knew the dangers of the rogue plane and let it fly anyway. The script even allows for a little honest (if overly simplistic) philosophical debate about the civilian casualties and the dehumanizing effects of turning warfare into a video game...before turning hypocritical when the pilots violate two foreign countries' airspaces, then shoot down their quite justified defenders.

"Stealth" is far more concerned with being cool than with being smart, so contrivances, plot holes and conspicuous overproduction are constantly pecking away at the movie's defendable assets. With the SPFX being so good the dog-fights and city attacks are just beautiful works of visual-art candy. There's this insane floating gas-station that of course gets "dismantled" and it was pretty nice, as improbable as it was. Even the impossible aerobatics look good. At one point EDI turns around at super sonic speed and shoots down a plane as it flies by him. EDI was also good. He's smart and evolving but they just take it as far as they could have. But the story lags so much, there's nowhere to go with it. I wish they had done some SERIOUS damage in a big city, but movies rarely go there. They have to save the day by cutting the blue wire one second before everything goes boom. The movie sucks in many ways. But for some reason I had fun anyway. Because I love jets, I love stories about AI, especially tough AI’s with emotions, because I love well-accomplished SPFX and the score rocked and rocked HARD.

A rickety-crickety analysis

By Sanket ‘trying to gain his form back’ Kambli

Our cricket team will embark on a new tour, which is just like other tours. And as usual they are carrying a huge baggage of ambitions on their shoulders. The tour to Lanka was disappointing to be modest, and it is hoped that we are able to, at least beat Zimbabweans convincingly.

But both the tours have a point in common, a point which is the most ignored one.

That common point between both the series is that, in the preceding tour, the lankans and windies had played a test series, similarly here the Kiwis and Zimbabweans have played a test series.

And like in the last one-day series, India is again directly playing a limited over series without playing a test series.

And those who think that it is enough for our team to play some practice matches with some local/amateur sides, then all of you may still remember their performances in the matches that followed some practice matches in the last tour.

So here we can clearly see the importance of playing a test series.

Being on the pitch for hours at end for 3-4 consecutive days, playing for a victory for which you have to wait for a few days. The grind of the tests helps a cricketer, to bolster his mental/physical prowess, so after a test series, where he has been able to find out what is wrong/right with him, he is able to perform more to his ability and this rubbish about form is debunked.

Whether he is on the losing/winning side, a test series is always helpful, as it triggers introspection at a personal level, whose effects are clearly seen when these cricketers take to field in a 50-over match.

These tests are much better than practice matches against reserve sides, and we can draw analogy from the concept of holding preliminary exams.

But this is driving us towards another thing called form. And this is where all the rubbish starts.

It is hard to find out; from where, this lame excuse to hide the player’s inability to perform at the highest level has come.

But it also shows how lucky our cricketers are, because if we go down at a student’s level, we as students cannot score low, and during an interview for a job, say that we were out of form.

But that is something we cannot change, so it gets added to my list of ‘things I cannot change’.

And if anyone found my write up, really dim-witted, then I would say I am just out of form.

Mumbai For Sale:?

By Sanket ‘not a salesman’ Kambli

The Maharashtra government has no plans to sell open spaces in Mumbai, as suggested by Environment Minister Ganesh Naik, Chief Minister Vilasrao Deshmukh said.

"It was his personal opinion. Everybody has the freedom to put forth his views," Deshmukh told reporters in Mumbai.

NCP leader Naik had suggested that the state government could pay off its debt of over Rs 1.10 lakh crore from the proceeds of the sale of government lands in Mumbai.

Deputy Chief Minister R R Patil, also belonging to the NCP, said there was no question of selling off the lands.

"The reservation on land as laid out under the Town Planning Act should continue," he added

Our CM has washed away any chance for me to write, something about our environment ministers remark.

But since my creative skills are limited, I couldn't get any better topic to write on.

If the politicians level of thinking falls to my level, and they implement the revolutionary idea given by Mr. Ganesh Naik, then there are many things that would change.

Since all these places, would become private, giving its owner crazy rights, so that would spell doom, for free sight-seeing lovers like me.

We will need to pay money, to just access places like gardens, and they would say quality life comes at a price.

But then, these places may also become very clean, and well maintained, as these spaces are something they own.

And we have a tendency to take care of only those things which are our own.

It won't be public property, whose maintenance blames are shifted from citizen's to government and vice versa.

Then if some monuments or landmarks are also sold, tourist guides will tell the tourists, something along these lines.

This landmark was build by ... in... And is owned by......

In this way the government will earn a lot of money, which it says it will use to pay off its debts.

Like the say the color of money has a lot of evil powers.

It will affect the vulnerable minds of our helpless politicians, and in a fit of trance make them pocket some of the booty.

This fresh inflow of cash, will make our state rich, it would mean more development, and many more things.

Our lives will change, whether in a good way or bad is controversial.

But sweeping changes or experimentation or not our forte, so let us just stick to traditions, and just go on with life, and even I am going, after draining out your intellectual capabilities in trying to find sense in this mash up of words.

Is Mumbai Safe For Women???

Everyone loves sight seeing, you must be thinking, what has sight seeing got to do with an editorial.

When the sight seeing is accompanied by some really disturbing scenes, we know that the picture isn't perfect.

Let us stop this play with words.

The uncertainty, over the motive, behind the lethal attack on two Indian women visiting Mumbai still exists. This incident has raised multiple questions into everyone's mind.

One of them that have received maximum print space has been of women's safety in this city.

An issue, which at one moment, was seen moving out of the focus, is back, and refuses to die.

Countless women will still consider Mumbai a safe city, even at night.

But here we have to bear one thing in mind that, these remarks are still comparative. Which simply means, it is safe but not that safe?

Even though women do feel safe here, they still prefer to venture alone only when they don't have any other option.

But this nagging fear was mostly limited to post-dusk time or some deserted corners of this city.

But not any more, this brutal incident which occurred in broad daylight, in front of a sizeable crowd, has instilled more than just fear of the dark.

Which brings us to another topic, care?

This isn't even remotely related to the NGO by the same name.

How much should people or mumbaikars care about their fellow mumbaikers?

This attitude of ignoring anything that doesn't directly affect them, is spreading rapidly among many people, this thing has managed to infect everyone, irrespective of their class, creed, age, etc.

Which is a matter worth thinking about, especially in the context of our religious attitude?

Now though religion isn't something that is directly related to this write up, it is enough to prove my point.

We are proud of how religious we are, and almost all religious books, never forget to tell one thing. Compassion

There has to be compassion.

And if the meaning of compassion is not known, it is time it is found out.

Irrespective of many man-made differences, whether the hardships faced by them are directly or indirectly are going to affect you.

As long as this piece is missing from our collective minds, the foundations of not only this city, but also this country will remain shaky. So till then enjoy your shaky life, and hope/pray for a miracle brainwash.

I am in love

I haven't put up stuff since a long time, as I am a bit lazy.
But the details of the last week are, as usual, fuzzy.
But I have a special reason.
I am in love!
The only thing that I remember, other than Pooja, is the fact that on 15th august(our independence day), we had a lecture (system software) taken in the canteen(!!!).
On 17th august, I confessed to Pooja, and since then, I have been 'on cloud number nine' .
Total credit to my friend rashma, for not only introducing, but also for helping me. Thanks a lot.
It was a week ago, that I was introduced to her, and now I am in love, we are crazy about each other.
That is all I have for now,bye.
Could talk more about Pooja, but got to go, have lecture tomorrow,
bye.

Reservations in the private sector

By Sanket ‘a bit reserved’ Kambli

Asked about the opposition to reservations in private sector, Manmohan Singh said: “Nobody can avoid it as it is going to be a national policy. Nobody can prevent an idea whose time as come.”

The Congress-led UPA Government has already begun a dialogue on including reservations in the private sector for Dalits.

It is probably the first time that a Central Government has pushed forward an agenda without genuine public demand.

Even though the Government is trying to build a consensus on the issue, what is surprising is there has not been a single move by the Dalits for such reservation.

This policy was declared in Maharashtra, which is going to the election polls soon (not that soon).

But those who read the dailies know that it was in Maharashtra, that Dalits have led the longest movement of "Namantar Movement" for getting Marathwada University's name changed after Babasaheb Ambedkar.

If a Government was not able to change the name of a university after a long movement, how is it ready to give reservation to Dalits in the private sector even without any demands by them?

It seems to be more or less a political stunt by the Congress party, which has no long-term plan for the Dalits and it is a general view that it has lost its credentials among them at national level in general and in Maharashtra in particular.

Though there maybe a need for the policy of affirmative action in the private sector because of a dwindling number of Government and public sector jobs due to privatization, liberalization globalization, and disinvestment, it is believed that Dalits are not convinced that the policy will see the light of day in the near future.

Judging by the past record of the Congress Government(records sourced from other reporting agencies), it has not been able to fulfill the allotted quota of reservation (15 per cent for the Dalits under Article 335 of the Indian Constitution in the central Government and public sectors) even 57 years after the commencement of the reservation policy. Mind you, this quota has been enshrined in the Constitution. Second, the various governments took 44 years to identify other backward classes and to begin the implementation of reservation for them.

Then how can Dalits believe that the Government will implement a reservation policy that is not yet born?

That is why the whole exercise looks more like a political stunt and it seems the Congress wants to hide its own sins of not implementing the reservation in the Government and public sector and plans to shift the debate to the private sector.

If it were sincere and seriously believed that reservation is necessary for the uplift of Dalits, then it should have taken concrete steps toward filling the backlog of vacancies within the Government. What is it waiting for? The Government should immediately remove the administrative hurdles before this plan.

These politicians do not have any authentic data to build an argument on the issue of reservation in the private sector. In fact, they do not have any answers for the questions raised by the private sector players asking whether it is a step against industrialization.