86 Comments
- ScottJG, on 10/12/2007, -2/+62For legitimate use, of course.
- butlershouse, on 10/12/2007, -1/+35yes... for example when I have configured a two servers for a client and know that it will be public facing. Having this sort of material avialble provides me with some guidelines as to what I will test and what results to expect. Why should it only be the criminals who share the obscure information ?
- vbsurfer, on 10/12/2007, -2/+34I bet about 98% of digg users don't even know what all this means.
- jspalding, on 10/12/2007, -1/+24Testing the security you've put in place on your own boxes. It's legitimate.
But nowadays there are too many *****.
(oops, someone got there before me) - JamesWilson, on 10/12/2007, -1/+24Set the clock. :) Duh. RTFM.
- cathars1s, on 10/12/2007, -0/+22Why do all that when you can simply call up the target and ask them their password?
/Social Engineering FTW! - Tritis, on 10/12/2007, -1/+19Not like a server admin would want a roadmap of things to test for to make sure his server is secure against this very list of attacks.
- CPickler, on 10/12/2007, -0/+18If you are doing penetration testing on your own systems to see how vulnerable your network is, then yes this could be very valuable.
- JamesWilson, on 10/12/2007, -3/+18What resolution are you on to fit this on two screens?
- hadak, on 10/12/2007, -0/+12I'm going to need the numbers off the modem. It's that boxy thing that lets your computer talk to mine...
- morcheeba, on 10/12/2007, -2/+14You are correct, but the original description sucked really badly... I'm glad we got a better description.
- DannySpace, on 10/12/2007, -0/+12 Norman? This is Mr. Eddie Vedder, from
Accounting. I just had a power surge here at
home that wiped out a file I was working on.
Listen, I'm in big trouble, do you know
anything about computers? - TheReport, on 10/12/2007, -3/+14"What, are we being taught how to Hack a computer or set-up a VCR"
Whichever one it is Id imagine it would be easier to Hack into an extremely secrued network than it is to make that goddamn 12:00 to stop blinking on the VCR *pulls out hair* - grungyhamster, on 10/12/2007, -6/+16Too bad it's a burden to scroll through.
- complexigon, on 10/12/2007, -1/+10You should be happy they don't otherwise some of us would be out of a job.
- silhouette88, on 10/12/2007, -0/+9For companies that have a dedicated security team, this map is a pretty good foundation for developing auditing plans against ones own network. This is written kind of like a QA test plan map that you could blow up on a projector, gather your team of white hats (company supplies the beer and pizza of course) and start developing a full-blown test suite that could (hopefully) reveal security exploits before malicious hackers (crackers) exploit them for you. In fact, I think that is exactly what I am going to propose tomorrow during our meeting. Thanks plugitin! :-)
- d3m3, on 10/12/2007, -1/+9That must of taken forever to make, but it is a very nice chart.
- chickentonight, on 10/12/2007, -1/+9Absolutely. Sysadmins, security researchers, and generally security conscious people can make great use of this.
- JamesWilson, on 10/12/2007, -0/+6If you like concept maps you'd love Edward Tufte's work and you'd also like
information aesthetics:
form follows data - data visualization & visual culture
http://www.infosthetics.com
please look at the link before you mod me down. its nice *****. :) - JamesWilson, on 10/12/2007, -2/+8This is called a "webpage".
- DrunkenPirate34, on 10/12/2007, -0/+5PDF+Kinkos
- cantrap, on 10/12/2007, -1/+6 Actually freemind makes it pretty easy. Typing it up annyway.
http://freemind.sourceforge.net/wiki/index.php/Main_Page
handy tool. - DannySpace, on 10/12/2007, -1/+6What, are we being taught how to Hack a computer or set-up a VCR?
- profJohn, on 10/12/2007, -0/+4I'll second the recommendation for MindManager, although to be fair it's not cheap, and freemind is free and an opensource project.
- chrono13, on 10/12/2007, -1/+5Digg is a socially driven site. Users decide what makes it to the front page. You can digg or not digg, or report as you see fit.
I do wonder though, why did you bother opening the link if it didn't interest you? Further, why did you take the time to complain that a social site is socially driven by users, and things that are popular with the user-base are modded up? Would your solution be that popular things make it to the front page - but only if you personally OK'ed them?
Digg may not be for you. There is always /. - AZNL473ncy, on 10/12/2007, -0/+4Because there is no patch for human stupidity...
- cantrap, on 10/12/2007, -2/+5Well, the description stunk... perhaps if there was a way to submit and digg alternate titles/descriptions?
- Pioto, on 10/12/2007, -0/+3Wow, this is quite thorough. I've heard of some of the tools there (nmap, nessus), but not many others. This'll give me something to do on some long dull weekend. :p
- EochaidRiata, on 10/12/2007, -1/+4Step 1: Scatter trojan'd USB drives around entrance of building...
http://www.digg.com/security/Social_Engineering,_the_USB_Way - JamesWilson, on 10/12/2007, -1/+4I like Mindjet MindManager better.. much cleaner. Yes its not open source but it is much richer in features and just as free in cost to me. :)
- micro506, on 10/12/2007, -0/+2Rasterbate it.
- DrunkenPirate34, on 10/12/2007, -0/+2Les and less attacks are occurring via the Internet (Directly), and more and more attacks are directly assisted by the people inside your company. Look up Social Engineering.
- prot0col, on 10/12/2007, -0/+2this just makes it easy for new script kiddies to start. They will not know how to cover their tracks.....I see the FBI knocking in a few doors in the coming moths
- profJohn, on 10/12/2007, -1/+3Also, this is large enough that making it dynamic and collapsable would be helpful. I'm not sure if Freemind supports kicking out dynamic html concept maps, but MindManager will (at least the PC version will; not sure about the new Mac version MIndjet just released.
Personally, while I'm a fan of concept maps, I think this might be better done in a dynamic outline. On Macs, OmniOutliner would be a convenient tool for producing it. - plugitin, on 10/12/2007, -0/+2Yep, they got it right. I definitely thought that this was digg worthy, but your description did it no justice and gave it no chance.
- lazyguy, on 10/12/2007, -1/+3Where is the "Physically take their damn computer"
- aldenhg, on 10/12/2007, -0/+2With a printer.
Specifically, a 300dpi copy of the chart and a spool-fed printer, such as the HP Designjets. - Godware, on 10/12/2007, -0/+1That's not necessarily true, The term hacking just means exploring, Cracking is only part of the process known as 'Hacking.' So to break into a system and take information would be Hacking, not Cracking.
- rmccs0x, on 10/12/2007, -0/+1great for reference. very nice find! + digg
- robdon, on 10/12/2007, -0/+1wow, after first looking up what some of those obscure terms meant, i utilized this as a legitimate resource and a starting point to find ways to poke my server for holes, and i was shocked at the ease at which it was hacked. Many thanks to whoever put this together, you have saved me from potentially catastrophic loss at the hands of some script kiddie with teen angst and malicious intent.
- kagelump, on 10/12/2007, -0/+1i think its just organization to the default password lists =/
- micro506, on 10/12/2007, -0/+1No. "Hacking" can mean really anything to have to do with improving or exploring computers in general. "Cracking" is simply when this is done with malicious intent. For example, if I used this chart to help me pen-test my new server, there's nothing wrong with that: hacking. If I use this information to break into a bank's server and transfer $50,000 into my account, then that's cracking.
- dugem1, on 01/20/2008, -0/+1That's great find
http://www.nasavo.com
http://www.nasavo.com/acne
http://www.nasavo.com/forex
http://car.nasavo.com
http://www.jurugan.com
http://health.jurugan.com
http://www.vrid.net
http://laptop.vrid.net
http://projector.vrid.net
http://tire.vrid.net
http://hyip.ej.am
http://car.ej.am
http://health.bryansoft.com
http://hyipnews.freehostia.com
http://hyipnews.freehostia.com/hyip - hometoast, on 10/12/2007, -1/+2I think the Social Engineering category should be expanded a great deal.
- SenatorPenguin, on 10/12/2007, -0/+1If you look, this is a map for security specialists. Social Engineering is on it, just not at the top. If you can break in remotely, then why not? Social engineering is one step above dumpster diving on the roadmap.
- Civil44, on 10/12/2007, -0/+1im using 2560x1024 still a bit of scrolling but its only up and down with the mouse wheel
- Pests, on 10/12/2007, -4/+5I don't understand the point of this post.
Are you including yourself in that generalization?
Amazes me. - inactive, on 10/12/2007, -1/+1Amateur.
Call in get marks name. Call in to random extension and
"Oh, um, I must have dialed the wrong extension. Can you transfer me to [mark] at [mark's extension]?"
Mark picks up phone and
" Hi, is this [mark]? Yes? Good! Listen, I am [Name of person at random extension] with IT. We are having a small problem with the server and need to verify login IDs and passwords. Can you please tell me what your information is? Ok, got it. Thanks and have a good day!"
Suckers. And, yes, I recognize the lines as being from Hackers. - inactive, on 10/12/2007, -0/+0@skyshock21
Actually, motivation is often the difference be right and wrong, between good and evil, and between legal and illegal.
Shooting someone for standing on the street is wrong, evil, and illegal.
Shooting someone who is shooting at and trying to kill another person for standing on the street is right, good, and legal. -
Show 51 - 84 of 84 discussions



What is Digg?
Browsing Digg on your phone just got easier with our enhancements to the