unforum

[poozle]

[Scribe]

[SteveC]

More audio - interesting audio

SCARLETT, OR VIOLET?!?!

END END ZONE MOUNT CACHE / - - - - ROTATE

(which is end end zone mount rotate cache)

Someone with more umm, software on their machine I guess - mp3 it?

[SteveC]

And another

- - - - - / - - - - - / - - - CACHE - / - - MOUNT ROTATE - / END END ZONE ROTATE -

"
Check notes with lucas
Book test time
upload amends
Mark 142 as done
Book holiday time
"

I'll wiki it shortly, but if someone with mp3 encoding software handy could do the other one, taht'd be great.

[Antony C]

Now be honest ..please..Steve, have you done this with Trial and Error, or has the source been hacked. Nobody has even postulated this type of code, and it hasn't even been suggested at all. Also, from my last post, your original post listed exactly what had happened within the source..

Just worried that the fun may have been taken out of it
Antony C

[SteveC]

Heh. Two things...

1/ Yes, I've been looking at how the server responds to the front end. If nothing else, I might write my own code to send requests in - their command interface really bugs me and I see no reason to slow down manual searches.

2/ No - this was not found by anything but trial and error - I'm still using their interface (which by the way is purely a string generator - in the form 1=XXX&2=XXX&3=XXX [...] 23=XXX&25=XXX&

3/ It's not out of the blue - the wiki has a previously documented command string that starts "END END" from someone else, not sure who. It's origins are beyond my knowledge

4/ There are upwards 60 quadrillion (10^16) possible combinations (though a large proportion of those can immediately be ignored) to go through. I think a "traditional" brute force would be impractical.

5/ You can't reverse engineer this (short of breaking into MC's offices I guess). It's client/server - there is no intelligence in the actual backdoor app (see #2)

Finally, you may not agree, but I don't think MC are playing by "the Beast"'s ruleset. Salk was designed to be picked apart (if you didn't do it yourself, don't bother responding to that), it wasn't necessary to decompile or reverse engineer it. They've led us on merry trails (3p's experiments on how gullible we are.

My opinion is that MC are trying to convince us that TINAG - do what you can to save the poor people of this new civilization. If you need to break something, go ahead, break it (within reason, eg, don't break their actual computers, or windows).

Anyway, the defendent is found "not guilty" - but has found some more interesting things about the backdoor which he is now going to expand on.

[Antony C]

That's fine. So long as it's justified I don't mind. If it was just because of boredom, then I would have had a gripe. But as it's constructive (and I must have missed the wiki END END starter entry), then I have no problem.

Didn't mean to get your back up
A

[pelrun]

[SteveC]

[Antony C]

[quote="pelrun"]

[SteveC]

Right... Scribe and I on IRC are thinking this all through... Well, mostly Scribe, but I can type quicker than he can.

"MOUNT"

I think that MOUNT has to come before SWITCH and ROTATE, but can come before or after ZONE, and has to be after END. It also is a requirement to do so if you want to CACHE a file. I've not fully tested that though..

"CACHE"

I think this just dumps the current file to the output.. hence, we end with it normally when we want to just view our files.

"END"

Pre-Mount, this can be used to break out of one of the three sessions you're starting in.. So, with none of them, you're looking at the filesystem belonging to "user3". With one, "user2" with two "user1" and finally if you end three times - you're logged out, "All login sessions ended. File server inactive"

Hard to postulate if user1, 2 and 3 are real people, or just areas of the account.

"ROTATE", "SWITCH", "ZONE"

My guess is that these are used to traverse a 3d file system. The bounds of this file system are different per each user - eg, user3 has a 3x4x5 space, but user1 appears to have as little as 2x2x1. I'm about to have a look through this in detail though

"COPY", "PWRITE", "POPEN", "PREAD", "FLUSH"

Interesting set - they're all file access commands.. Can we actaully CHANGE things on the filesystem? Maybe find our file, popen it, change it somehow - only problem is that we've no way of entering new text... Changing inetd.conf is interesting - we could add an ftp server maybe?

Another theory is that they're just there to navigate the grid... Especially to create infinite loops...?

"RUN"

Goes anywhere, causes the program to actaully run. Possibly could have an effect on program execution if ot gets into the command path... maybe can even be used, who knows!?

[Scribe]

infinite loops

[Ayanami Rei]

[oliverkeers13]

There's the old Talksport interview here

[SteveC]