Zines/phrack/47/21.txt

                              ==Phrack Magazine==

                 Volume Six, Issue Forty-Seven, File 21 of 22

****************************************************************************

                             International Scenes

There was once a time when hackers were basically isolated.  It was
almost unheard of to run into hackers from countries other than the
United States.  Then in the mid 1980's thanks largely to the
existence of chat systems accessible through X.25 networks like
Altger, tchh and QSD, hackers world-wide began to run into each other.
They began to talk, trade information, and learn from each other.
Separate and diverse subcultures began to merge into one collective
scene and has brought us the hacking subculture we know today.  A
subculture that knows no borders, one whose denizens share the common goal
of liberating information from its corporate shackles.

With the incredible proliferation of the Internet around the globe, this
group is growing by leaps and bounds.  With this in mind, we want to help
further unite the communities in various countries by shedding light
onto the hacking scenes that exist there.  If you want to contribute a
file about the hacking scene in your country, please send it to us
at phrack@well.com.

This month we have files about the scenes in Norway, France, Italy and an
update from Denmark.

------------------------------------------------------------------------------

=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-
dfp-1   An orientation on the Norwegian hacking/phreaking scene    dfp-1

       Written by the Digital Freedom Phanatic (dfp@powertech.no)
                    Brought to you in January, 1995
- - - - - - - - - - - - - - - - -  - - - - - - - - - - - - - - - - - - -

PROLOGUE: It's 1995 and little has been mentioned about Norwegian
hackers in the media lately.  I thought this would be a nice opportunity
to summarize some of the things that have happened on the scene in
Norway during the last 5 or so years.  For those of you in the Norwegian
audience not recognizing my name; you shouldn't.  I am more or less an
acquaintance of many of you guys, but I feel that in order to get
something done on the Norwegian scene right now (it's been fairly quiet
for a while, nicht wahr?) I cannot reveal my true identity.  Hell, let's
see if I get any responses to this article.  Now for the good stuff...

Unfortunately I entered the scene as late as around 1990, so I'm not
quite up-to-date on stuff that happened before that.  I've been trying
to gather old articles from newspapers and books.  What I have been
able to come up with is more or less some articles about a couple of
hackers who managed to get into a local newspaper's computer.  Also,
I have gotten in touch with some of the _real old Norwegian hackers_
dating back to the '70s.  Needless to say, those people today work in
the telecommunications industry.

AREAS OF INTEREST FOR HACKERS: First, a little introduction to Norway.
We are a very, very rich country, mainly due to the enormous amount of
oil resources which we are pumping from the North Sea.  As a result of
this wealth (I guess), our people are well educated and we have a blooming
industry.  Well, in some cases.  Nevermind.  Keywords: large corporations,
very large and respected telecommunications semi-monopoly, expensive
communications.

So in theory, there should be a lot of corporate hacking taking place in
Norway.  Well, either the people doing this are doing it real well, or
nobody is doing it.  I don't think anybody is.  As I have come to
understand, most hacking in Norway has really been Internet related.
Norway was actually one of the first countries apart from USA getting
connected to the Internet; way back in 1982.

STATUS OF INTERNET CONNECTIVITY: The universities have been hooked up
since the dawn of time, and today these are the centers of the Internet
community and high-speed telecom equipment in general use in Norway.
Actually, we have four universities and at least three of them are
currently networked with each other at a speed of 34Mbps.  The
university network's (Uninett) international Internet connection is
through NORDUnet and has a bandwidth of 2Mbps. Until a couple of
years ago, one could not gain legitimate access to the Internet except
by obtaining an account on one of the Uninett connected machines.  This
was impossible, at least for a majority of the hacker community, so
Uninett, or rather the computers at the University of Oslo, became a Mecca
for the scene.  The big people had accounts there, or borrowed one.
However, security is pretty stiff there and I fear that there was little
actual _hacking_ going on, people were merely borrowing legitimate
accounts through friends.

What's fun about the University of Oslo computer network is that it
until recently could be used for dialling out with speeds up to
14.4kbps. Actually, some of their dialup terminal servers were
configured to let you connect into them and dial out.  Try CONNECT
USEk.15 after logging in to Net/ONE (the University LAN).  I don't think
this works anymore, nor do I know if this was a "feature" introduced
when the terminal servers were installed.  It could be that some hacker
reconfigured them.  In that case, please let me know!  Dialled 820s
as well (The 900 numbers of Norway).

Today the Internet situation is very different.  We have had an
extravagant boost in the number of Internet access providers lately:
Oslonett, PowerTech, EUnet, Vestnett, BigBlue, MoNet, NordNet and PMDData
are those I can think of right now.  Also, a number of companies are
providing leased-line access: TelePost, EUnet and Datametrix.  PowerTech
is starting to do this soon now (they say), presumably with competitive
prices, but they are real bad on bandwidth.  (Well, they've been the
cheapest for me so far.)  At least we're not far from getting Internet
trial accounts shovelled up our asses here.  Let's hope some souls will
soon pour some actual value into the net; more information, more
services. I've seen little of that.

Until we get more Norwegian fun services on the Net, we might as well
exploit the services of Norwegian companies with no clue whatsoever when
it comes to security.  Take, for instance, Cinet AS (cinet.no) which has
a world NFS mountable root disk (rw). BigBlue Systems AS (bigblue.no) uses
a Linux server which you can log to using accounts named node1, node2 or
node3.  Full shell user access.  Or you could try logging in as "-froot"
to obtain root access.  Hm, I think they plugged that. :)  Well, ach so.
There's more out there.  Just get hacking.  And feel free to tell me what
you find!

WHAT WERE THE HACKERS DOING: There used to be a blooming hacking scene
in Norway earlier.  Well, one might not say blooming with bright ideas
and happenings, but at least there were many people doing the right
stuff.  Using X.25 NUIs to get to QSD, Password spoofing at the local
DataPak PAD using Pad2Pad, Social Engineering, Hacking calling cards to
get to the states, finding AT&T Alliance backdoors so as to keep people
up all night long when there was school the day after..  The good old
days.  We could even do easy blueboxing.  1980s-1992.

I must admit, though, that QSD isn't much anymore.  I liked it better
when there were a hundred people logged in simultaneously, and when
there were alliances being held with people from the States, Norway,
Denmark, Israel, all over the place.  Then came the busts.  It was
around October 1992 when the first busts started taking place.  We have
a very interesting timeline there.  First, the police teamed up with a
couple of computer software retailers (BJ Electronics, sounds familiar
huh?) and busted ten or so of the warez type board sysops.  People to
remember: Gizmo, Enemy :-).

Soon after that, bigger names were taken down.  Mario, Graham Two
(Vishnu), Edison, RamJet, Peter, Leikarnes etc.  Kevin was never busted.
I wonder who he was.  These guys were taken for more serious stuff like
carding, datapak (x.25), AT&T Alliance conferences, boxing, and general
abuse of the telephone system.  A couple of shorter raid periods followed
in 1993, and the scene was pretty much dead - except for the k-rad warez
kids.

AT&T and the other big guys we used to bluebox off of have all gone for
CCIS/CCITT #7 so there is little to be done boxing in Norway now.  Well,
as a matter of fact I haven't checked that out lately.  An interesting
thing, though, is that you can temporarily disconnect the complete
international trunk set between Norway and Iceland by breaking (24+26
250ms 26 100ms) on the Iceland Direct line.  Everybody trying to
_legitimately_ dial an Icelandic number from Norway for a while after
that just gets a busy signal.  Ha ha.  Poor man's fun.  Wish I could do
that with the States... :)

WHAT'S AHEAD FOR THE NORWEGIAN SCENE: I think we should get organized. I
have a few projects in mind.  There are a lot of security flaws and
weaknesses yet to be discovered in Norwegian systems and services.  We
need to get all of Norway scanned for automated answering services and
carriers.  We need to get into some Central Offices to check out the
labels on the modems connected to their Ericsson boxes.  We need to get
trashing.  We need to start talking hacking and phreaking at The
Gathering.  We need to find data numbers for C.O.s, banks, corporate
computers, the local McDonalds', we need to get root access at an Internet
provider and we need to be able to listen in to phone conversations.  We
will.  Get in touch with me if you'd like to join.

These were just a couple of thoughts of mine that I wanted to share with
you fellow hackers out there.  Hope you've enjoyed them.  And for heaven's
sake, feel free to give me some feedback (via internet: dfp@powertech.no).

FUN FACTS: Many companies have unconfigured PBXes that you can obtain
outside dialtone on.  There is no flat rate telephony.  A 28k8 modem
goes for a little less than $400.  All phone calls are logged, logs are
erased after a couple of months (presumably).  Only ISDN customers can
get Caller ID.  There are three cellular operator companies.  All the
Norway Direct operators are situated in Kongens gate 21, OSLO, Norway.
The NMT-900 Cellular network doesn't allow calls to Pakistan.  All
Norwegian babes are young, slim and blonde...not :)

I'll be releasing a couple of files on Norwegian hacking/phreaking areas
and techniques in the months to come.  Here's a list of those I am
planning, haven't written anything yet but I think I will.  If there's
anything in particular you'd like to add or to get hurried up, or if you
have information which should be included in these files, then get in
touch with me.

  (*) COCOTs and Monopoly operated Pay Phones in Norway
  (*) MBBS, the Norwegian BBS System; Backdoors and Security
  (*) Norwegian Telecom; TeleNor.  Organization and computer systems.
  (*) The Norwegian State Libraries; BibSys network security
  (*) Telephone Monopoly; current status, what will happen, when?

Sincerely Yours,
  Digital Freedom Phanatic

Yola's to (unsorted, people I know or would like to know):
  Gizmo, Enemy, Mario, Graham Two (Vishnu), Edison, Roger RamJet, Peter,
  Gekko, Ozelot, Sicko, Flesaker, Karstad, Arild Leikarnes, Frode1 og
  Frode2 :-), The Dealer, Saron, Digital Phanatic, SCSI (BayernPower!),
  SevenUp (damiano?), UrbanMatrix, OnkelD.  Where ARE you guys hiding?
  ;-)


------------------------------------------------------------------------------


    >-=-=-=-=-=-<
   <French  Scene>
    >-=-=-=-=-=-<

    By  NeurAlien

The French scene has always been portrayed as weak by both French and
foreign people.  There's a paradox here:  France was one of the first
countries to develop a modern network (in 1981) YET there have been
few _good hackers_.  How is that explained?  I DUNNO !

In fact, stating that France is underdeveloped at a hacker level is
partly false.  In France, hackers have always been isolated or hidden
in little isolated groups.  Whenever a good group formed, everyone was
quickly busted by DST (the agency in charge of computer fraud).  Moreover,
this agency (DST) is somewhat effective and hacking has been illegal here
since 1988.  The risks when you are caught are VERY HEAVY and the trial
lasts forever!  Usually, it takes 3 years to go to trial and the material
is ALWAYS seized even if you're not charged with anything!.

The Videotex initiative that provided France such a breakthrough
in technology is now an handicap because it can't follow the evolution of
modems and isn't well adapted for networking with the Internet.

I- The Videotex aka Minitel
   ------------------------

Minitel has been developed in 1981 by France Telecom.  It was excellent at
the time but it hasn't evolved very much.  Let's see what hacking has
been like in the Minitel world.

To explain a little what "Minitel hacking" was, I must detail
a little how Teletel (the network that supports Minitel) works.
Teletel is based on X25 and provides multiple price levels:

Teletel 0 (T0) is free for the user, costs a lot for the server.
Teletel 1 (T1) costs a local call to the user, the price of the X25
collect connection to the server.
Teletel 2 (T2) costs the price of a local call + X25 communication
(6+ cents per minute) to the user.)
Teletel 3 (T3) costs T2 + a charge that is reversed to the server
(costs 20 cents to $1 per minute to the user.)

A lot of servers are accessible only in T3 for the users.
The principle of hacking Teletel was to find a the X25 number corresponding
to the T3 CODE in order to log on the T3 server from T2 level.
Eventually, there could be a password on the T2 access.

Actually, it's very basic and very dumb hacking since you can only do
some scanning to find the x25 number of the servers.

T1 was used for more professional type servers and the hackers
that used to hack T1 were better than T2 hackers.

T2 K0d3z were very popular among wannabe hackers, some Special Interest
Groups about T2 were formed on a lot of servers and there was even a server
dedicated to T2 codes.  The quality of information has always been extremely
low in this kind of club.  Moreover, the kind of k0dez kidz on these SIGs and
servers were particularly dumb (sorry for them).  It got really bad in 1991
when a lot of T2 guys started to flame each other, accusing them of leeching
some T2 codes from one server and posting them to another, saying that the
other guys were ripping everyone off etc...   It may be continuing now but I'm
totally uninterested by these people so I completely left this scene.

The "good ones" of the T2 K0d3z k1dz stopped T2 (it's not free so it's
too expensive!).  They usually started to Hack T0 which is totally free.
(it's like a 1-800 for Teletel).  The servers of T0 are nearly all of the
"restricted access" kind.  But they have weak protection schemes and can
be easily bypassed with some experience.  The hackers of T0 servers don't
usually know each other and some of them may form a kind of little "islands".
(I'm calling them "islands" because it is always placed in an Information
System on T0, deep within the system.  There are perhaps 10 or so "islands"
that have no connection with other hackers.  A typical "island" consists of
5 to 10 hackers.  Some hackers may go on 2 or more "islands" but prefer to
keep the presence of both "islands" secret. Why? In order not to destroy
both if one of them is found and shut down!

One reason most never heard of these person is that there is nearly
no connection between the Teletel world and the Internet. The only way
to escape to Internet and Intl X25 is Teletel 1 (T1).

II- When Teletel goes professional
    -------------------------------

As I said, the T1 is the only way for a Teletel hacker to evolve
to hacking Internet or International & ASCII X25.  On Teletel 1, you can
sometimes log on to some interesting Unixes, Vaxes etc.
T1 is also the only way on Teletel to use the International X25 network.
You have to get a Transpac NUI to call a foreign address from T1.
Until 1991, the Transpac NUIs were a 4 to 6 random alphanumeric
characters.  A man called IER had made an NUI Scanner that allowed him to
find NUIs by scanning out every 4 character NUI.  It WAS effective,
but Transpac changed to a 6 character NUI.  (IER was busted and caught.
No news from him since that day!)

Many good hackers used T1 a lot to hack systems and to go on the Internet
and the Intl X25 networks.  For example, you may have heard of people
like Netlink, Furax, Jansky or Synaps.  They hacked X25 and Internet but
it seems that each of them was busted and caught.  Some are still alive on
the Net, but some aren't!!!

Some French hackers were really good but it seems that no one can hide
very long from the DST.  They are very effective, and with the help of
France Telecom, they trace back a lot of calls.

Places like QSD haven't been used very much by the French because of
their lack of technological knowledge. ahem...

Moreover, QSD/The Line is tapped by governmental agencies so g00d French
hackers don't like it.

IV- The groups
    ----------

Some groups have been formed in France but they've never lived long enough
to give new hackers the knowledge of the old hackers.  Some groups were:
NICK, Hardcore Hackers, Piratel, TeKila Underground.  Many of them
were hacking systems in Teletel 1.

A group called CCCF appeared in 1991.  It was founded by Jean Bernard
Condat and in fact it was not really a group.  This guy, JBC, is deft
at maneuvering people into doing what he wants.  He organized fake contests
like "The price of the Chaos" to get more information and then act as
if he personally discovered the hacks that were given to him.

He recently started the Chaos newsletter where nothing originates from
him...it's taken from everywhere and from his personal contacts.

He has big power because he works for SVP which is a private
information company that has the goal of providing information to whoever
wants it, for a large amount of money.

Nobody knows what JBC really wants but he is definitely a threat to the
underground.  Somebody, I don't recall who, already mentioned that in Phrack.

V- Phreaking in Phrance
   --------------------

Phone phreaking became really active in France in 1992 after the
massive release of a blue box that worked in France.  Several months
later discovery of this caused the death of blue boxing from France.

The blue box program was running on ST and several people that used it
formed the TeKila Underground.  As far as i know, this was an happy group
that had a lot of parties and liked smoking... :)

They weren't very effective: just into using the blue box.

Then came the movement of the "Horlogers", it was due to the credit you
could gain if you connected in Teletel 3 on some server.  The "horlogers" were
staying HOURS and DAYS on a server with blue box just to have more credit
(counted in minute of connection) on those server.
They were staying connected on a place called "L'horloge" (the timer) that
enabled you not to be disconnected by the server when being idle for a long
time.

Blue boxing is now very hard in France.  The Australian blue box
ceased to work and a lot of phreakers couldn't phreak anymore.

The real problem in France is that nobody (or almost nobody) knows how
the France Telecom phone network works so we can't really use any flaws
in this system.

Calling cards have been heavily used in France, placing the country
in the top ten consumers of stolen CC's.  When AT&T & MCI saw that,
they contacted France Telecom and now each calling card from AT&T, MCI
can't call back to France.

Moreover, FT's CC called "Carte France Telecom" (CFT or CP) is traced and
recorded: I mean, when the person who owns the CFT receives the bill,
written on the bill is the number of the caller and of the called party.

HARD isn't it?

Recently, some busts were done on AT&T and MCI CC users.  They are now
awaiting trial.

VI- Magazines
    ---------

Back before 1990 a magazine was published twice and sent to every
single university in France. It was called "Hackito" from the
"Hackito ergo sum" motto.  (I've never found an issue of it, but if you have
one, send me it to me in email.)

There is also this shitty zine called Chaos...


Now, a new zine is making the underground react in France:
It's called "N0 Way" and I'm the Editor.

This magazine is written entirely in French. The current issue is number 3.
Anyone wanting to submit something to "N0 Way" can send me a message in Email.

Today we are seeing a lot of people in France wanting to know more about
hacking.  It seems to have taken off here but not as much as in Holland or
in the USA.

Email me to receive "N0 Way": an133729@anon.penet.fi

                                                        ++NeurAlien.

------------------------------------------------------------------------------

The Italian Scene
by
Zero Uno

Italy, as you know, is among the industrialized EEC powers.  It deserves
this honor only to the work of talented people, not by its government,
which is utterly idiot and totally unable to fulfill the needs of the people.
This characteristic inevitably has conditioned the whole telecommunication
market, both phone and networks, which must make clever long term decisions,
something that Italian government is not able to do.  The phone company is
owned by the government through Italy Telecom (IT), the new society formed by
the previous three state-owned firms involved in communications.  In the
last five years IT has undoubtedly made good work, but the quality of phone
connections and service was so bad in the past, that many people feel very
upset when comes to talk to IT.

The Telephone System

Italy is divided in 220 telephone districts, each with its own unique
prefix:  a zero followed by a number (up to three digits).  In addition there
are a few special prefixes in order to access cellular phones (0335,0336) or
to reach some 'fake' locations (0769), like many tv programs that use the
telephone to reach people.  (Like 555 in the USA) In this way IT protects
itself from line congestions when successful TV-progs are involved.  All
kind of modern connections are availabl.  This means that payphones, pagers,
cellulars (ETACS and GSM), radio (an old, now unsupported phone for cars in
400 Mhz range) are present.  Another strange beast is televoting (0869) a fake
prefix that holds the number of incoming calls for polls.  It was used to
test some political decisions, but the hack here was so evident (the redial
button) that now televote is not so well thought of.

Standard Numbering

The numbers that begins with the digit '1' are reserved for special services.
This include all amenities like emergency numbers (113, roughly the equivalent
of American 911), 187 (an all-but-everything number for all requests to IT,
such ordering a new phone, installing a new line and so on) and toll free
numbers 167[0 or 8] xxxxx.  As a reminder about IT's long term planning
capacity, the toll free numbers started as 1678-xxxxx, but were so successful
that IT was forced to add the 1670-xxxxx later |-(!  All 1678-7xxxx are in
use by foreign phone companies, and heavily scanned |-).

Some pretty numbers:

  1678-72341   A promo for a XXX-rated line (in north or south america)
  1678-70152   See the following capture

---------------------------------- CAPTURE -------------------------------------

                  OFFICIAL USE ONLY  
          ͻ
                                 FAMNET (sm)                     
                      
                                  AFAS HQ                        
                                    and                          
                                  AF FSCs                        
                      
          ͼ

This system is for the use of authorized users ONLY. Individuals using this
computer system without authority, or in access of their authority, are subject
to having all of their activities on this system monitored and recorded by
system personnel. In the course of monitoring individuals improperly using
this system, or in the course of system maintenance, the activities of
authorized users may also be monitored. Anyone using the system expressly
consents to such monitoring and is advised that such monitoring reveals
possible evidence of criminal activity, system personnel may provide the
evidence of such monitoring to law enforcement officials.

Line trace initialized...........................................

We now have your phone number......WE TRACK HACKERS AND ADVISE AUTHORITIES.

---------------------------- END OF CAPTURE --------------------------------

Unfortunately IT does not support caller ID, so the last sentence is pure
crap.

The above numbers are (obviously) all public. These ones are 'reserved'
for internal use, though many many people play with 'em:

    135             BBS to record maintenance procedures
    138             BBS or human operator (depend on districts)
    1372            Ring-back
    1391            Human operator
    160             Security service (???)
    1414            A yet-to-be-implemented service, that enables a user
                    to use one phone and bill on their own phone the
                    subsequent call. Will be implemented |-)?

Not all districts support this, and since they are not public they can change
rapidly.  Also present are the country direct numbers in the 1721xxx format.

    Country         Code
    -----------------------------
    Argentina       054
    Brazil          055
    Chile           056
    AT&T            011
    MCI             022
    Sprint          877

Services Offered

With the advent of digital COs, 'new' (new to the Italian market, anyway)
services were provided.  The so called STS (additional telephone services)
allowing (obviously paying) the teleconference (three user talking
simultaneously), incoming call signal when you are talking with another
party, and finally calling transfer, useful when you are away from home.
The current pulses billed can be inquired (paying one pulse, obviously!).

The Packet Networks

There is only one packet network provider, ITAPAC (DNIC 2222).  As with other
packet networks, the access is available with a PAD that accepts only NUI
accounts (non-reverse charging) and those who accept reverse-charge calls
(in ITAPAC lingo, the 'easy way').  These are heavily hacked because it is
the most widespread network in Italy (and the most unreliable, insecure, *bad*)
and also because some NUI users simply were not aware of the costs of this kind
of service, and they have payed all the phreakers' bills too!

Sometimes, for promotional sales, some NUIs were discharged to the public.
Other were disseminated by phreakers, collected by PAD (only a few NUIs are
valid across different PADs, most aren't).  Until some time ago QSD France
was the most 'in' PAD site.  Another common activity was surfing across
Packet Networks of different states.  Now many common NUIs were deleted from
system, but some still survive.  Many times the net is unusable because
has reached its maximum load or because of for system outages.  Also, even
if the ports run at 2400 bps, is not uncommon to reach the same speed of a
1200 bps connection.  Use it if you don't pay or pay a limited fee for it.

The H/P/C/V Scene

Common folklore depicts Italians as adaptable to unfriendly environments in
a clever way.  Although these rumors are not completely true, there is an
Italian way of H/P/C/V.  Hacking in Italy is not a common activity.  There
are several teens who spent lot of effort to learn some tricks, but they
are teens, with all pros and cons.  Rarely do these individuals survive the
20 years-old barrier, for one reason or another.  Those who survive generally
self-limit their actions to a restricted area, and generally remain anonymous.
The few that remain are the brightest, with lot of know-how and abilities.
I only know two people at this top rank level.  Hacking is focused on setting
up unauthorized fsp sites in university computers, removing licenses to pro
warez and gaining illicit access to some resources in internet or in ITAPAC.
ITAPAC is now no longer a key issue since ITAPAC (and Italy in general) has
very few computing resources, and ITAPAC has severe security problems, so it
is predated by hacker wannabees.  Also Italy lacks of H/P groups like
LOD,MOD and the CCC. Apart from Omega Team, to my knowledge no other group
has existed.

Phreaking used to be fairly common, but now is much less so because of
new digital COs and stricter security.  Blue boxing to USA was *very* common
until January 1, 1992.  On this date, the software that controls the traffic
over North America was changed, and boxing to USA is no longer possible.
Carding now is the only phreak access, and is used mainly by warez board
sysops.  Rumors said that the software update was imposed on ITALCABLE (that
manages international calls) by AT&T due to the *huge* illicit traffic between
Italy-USA.  Basically, too many people, even non H/P ones ('friends of
friends') were using blue-boxes even without the faintest idea of how they
worked.  Some hackers have sold boxes to normal people, and this probably was
the key to the blocking of illicit calls.  Now, to my knowledge, is possible
to box only to Chile, Argentina and some other third-world countries.

True H/P BBS are few.  One, Pier Group's BBS was the most famous, in part
because one member, MFB (short for MF the Best, basically the best Italian
phreaker in my opinion), has written a series of humorous stories about
hackers and lamerz, that had a phenomenal success.  But since Pier (the
sysop) was also invloved in some other illegal activities apart phreaking
(stolen hardware, carding), and in this kind of activity too much advertising
equals certain arrest, the board went down.  Most other BBS are
warez-oriented, with warez from THG, Razor 1911 and other USA crack groups.
Note however that unlike other nations, Italy has no group HQs:  what counts
is money, not being part of a group.  Many BBS are double-sided:  one a ligit,
more or less lame, part of a legal net like FidoNET, the other accessible only
to subscribers, with warez.  This has changed however since the Italian Hacker
Crackdown.  This is not because the police raided the warez boardz (they are
too ignorant to do this) but because warez sysops, in fear of being caught,
have (temporarily) closed their BBSes.

Virusing has some players, though not very publicized, for obvious reasons.
One has recently become famous (Dr.  Revenge) for his contributions to
Insane Reality, another H/P/V journal that published some 'secret'
telephone numbers for United Kingdom officials.

Nothing really new in Italy, as you can see.  Newspapers are (as are most
people) too ignorant to correctly report these problems, with the result being
that the 'legal' portion of network fanatics fear other unjustified police
raids, and legislators are becoming very unfriendly when dealing with this
kind of communication.  Several politicians and media moguls are proposing
laws that forbid anonymous access to the Net, and universities are very
concerned about these subjects.  Two students were recently arrested because
they used illicit (but almost public) passwords to surf the net (*only* to
see things, *no* data damage).

Italy may one day become very unfriendly to net people, even if Italians are
generally considered very friendly.

Zero Uno
mc1671@mclink.it *only* using PGP, otherwise no response.

-----BEGIN PGP PUBLIC KEY BLOCK-----
Version: 2.3

mQCNAi7zXJ0AAAEEAM3SZQp0+By7fi7ey/oiTU6TT5CdMYdkYnkDeM8f2bZ75Pdp
4mv9C0BTVRP0UrYgJO1I+8YrwvSjZK7+U3hty+c97RJ5lnSYQ0BbF7puSwhUxj4W
AyytlQZVP6j1r4H8ulse1arIVlD9h2+GceXOx09J5uEqqhRG/uo1W3A51ixFAAUR
tBtaZXJvIFVubyA8bWMxNjcxQG1jbGluay5pdD4=
=9GnS
-----END PGP PUBLIC KEY BLOCK-----

------------------------------------------------------------------------------

THE DANISH SCENE BY LE CERVEAU

In the last issue of Phrack (46) I read an article about the Danish
Computer Underground. Though, I was pleased with the text, a lot of
stuff has happened since which I hope most of you have heard about.
Anyway, here's an update..

In short, most (nearly all..) of the Inner Circle hackers in Denmark
have been busted.  It all went down December 1993 where I,
Descore (Zephyr), Dixie (Nitecrawler) were busted at exactly the same
time.  After the 3 busts several more followed: WedLock, Netrunner,
Darkman + some others. I had to spend 14 days in isolation while the
others were released (somewhat due to my own stupidity).

The busts were made because all of the universities in DK had been
more or less taken over by hackers and the FBI + CERT & ASSIST
worked together.  The police told me that UNI*C was threatened to be
cut off the Internet if the hacking from Denmark didn't stop (don't
think that's the truth though. They bullshit alot..).

So, of course the Danish police had to do something and they asked
the infamous Joergen Bo Madsen for help.  And they got it.  And the
situation in DK was getting out of control too - the Phone Company
was hacked, DK's main research center hacked.  No damage to ANYTHING
was done though, but naturally we had to be stopped.  Actually, the
Phone Cmp. screwed up their own system trying to stop us - and now
they blame us!

Now we're all awaiting trial.  It might take a while, since they
said they'd start 'breaking' the PGP-encrypted files with UNI*C's
computers ;).... I'd think if they did that, it'd be quite a while
before trials!

Busted in DK: Zephyr aka Descore, Dixie, WedLock, Netrunner,
              Darkman, Lazarus, Jackal and me (LC).. + Joshua -
              some idiot who might have helped the police a whole lot.

After the bust of Jackal the police says they can't handle anymore so
there won't be any.

----------------------------------------------------------------------

BUSTED
BY LE CERVEAU

I've been busted. Why speak out loud? Why not? I'm screwed anyway.

I was stunned. About six-seven months before my bust I succeeded in
breaking into a Pentagon computer (pentagon-emh4.army.mil -->
otjag.army.mil). What actually launched my interest in this computer
was a file about UFOs where it was listed. Now I have realized that had
I found anything top secret about UFO cover-ups I probably wouldn't have
released it. It wants to be free - but the question is to what degree..
I knew of course that it couldn't be one of their top secret computers
(actually, OTJAG=Office of The Judge Attorney General - AFAIR) but I
also knew that it would be the start of something big - one thing
always leads to another.

After a couple of weeks on the system, doing nothing but leeching
all the mail I could get my hands on I discovered that one of the
majors used an Air Force base-server (flite.jag.af.mil - AFAIR). As
I suspected, all I had to find was his login - the password was
exactly the same. And again this had to lead to more and it did.
I found some stupid sergeant who also was a user on TACOM
(Tank Automotive COMmand). Surely, even though stupid he wouldn't
use the same.. - yup, he did. Access to tacom-emh1.army.mil and
all their other machines granted. If you want one of the
largest lists of MilNet sites then grab /etc/hosts from TACOM.
After gaining SU-access on this machine interesting things started
happening. If, for example, an officer was to issue some order (of
course not any orders concerning war) it'd look something like
this:

You have to report at HQ Monday latest. Your travelling plans
for the international conference <blah> <blah> <blah>..

                                  // Signed //
                                Col. Joe Wilkins

and then some more approved signatures would follow by some
other persons. Of course I grabbed all the mail on TACOM.

After a month or so I was locked out of the Pentagon system -
and it changed it's address to otjag.army.mil. But I didn't
really care. I knew MilNet pretty good so why not I thought..

I started thinking military-systems only - a dangerous thing
to do. I ended up using all my time on it and was therefore
also rewarded. Soon I would have access to more than 30 military
systems around the globe and I knew I was getting in over my head
but I had to keep going - I felt there was no way back. I could
have told myself that having to hide on all of these systems
would be almost impossible. But things seemed to be going just fine.
Just how idiotic can you get?

With access to some CM-5's and a CM-200 at Naval Research Labs
and all the wordfiles in the world no system stupid enough to
let their passwd-file get taken stood a chance - one account with
encrypted passwd was enough. All I had to do was start Crack on
the CM-200 and wait.

I took interest in some of the government machines - they weren't
as hard to hack as the mil's and I soon lost interest. Except in
NASA. I got in on one of their smaller machines (*.gsfc.nasa.
gov) and I knew I just had to wait and it would lead to something
more.

Now 'strange' things started happening. Imagine this: I log in
on TACOM. I log out. When I try to log in again it's impossible
from the same site; I have to use another - that's when I knew
that someone was watching my every step, trying to stop me. Later
it started happening to me no matter how I accessed the nets. That's
when I knew the end was near. A month later I was busted by
the FBI in Denmark - that's the way I feel even though it was the
Danish police. Actually, the trace was made through *.wwb.noaa.gov
which I was using a while for cracking.

That's my story - very shortened! If anyone is interested in details
mail me at Restricted Access # +45-36703060.

Last Words: Don't do it - don't do it.. It'll get you into all kinds of
shit.. Why bother the nice governments and their so trustworthy agencies?
On second thought: Just do it!

[Editors note:  Along with this file I was sent a capture of one of
 the aforementioned hacks (which I promptly deleted).  It looked like
 our Danish friends were in a host at the office of the Judge Advocate
 General.  Knowing how the JAG is going to handle cases isn't exactly
 the kind of thing anyone in the military really wants floating around.
 I guess they need better security, eh? ]