I am just a lazy script kiddie playing around with programs against my own network to see what would work if I was to be at the other side of the world and closing down things all the time - because exploits go much faster nowadays than solutions. (heard about the latest flash exploit lately)
But when I am bored I would start looking out for something else to have fun with - (stop I am really joking here - I am never going to hack or exploit any other network because I know the Belgian law much too well for this and I would repeat this all the time to whoever wants to hear it - even if it seems to have another effect sometimes).
But as I am lazy I go to the wikiscanner http://wikiscanner.virgil.gr and I can fill out a name of a city, a country,, a firm, part of a name, an ISP, a hoster, an administration or just an IP address and even if it doesn't find any wikipedia changes it will still give you the list of all the known parts of the network it has found in the giant database of IP2LOC.
So lazy admins you are totally naked now. No part of your network is hidden, no unpatched or unmonitored system can not be found and checked, no Ip address is anonymous anymore. In about half an hour I know your network and where is your mailserver, your server, your DNS and all your routing. Than comes the exploits (do you know there are huge lists of zero days that aren't even known yet ?). So you are lost....
except if wikiscanner changes it policy and only gives networkranges where there are changes in wikipedia and leaves out all the rest so the more important ranges of your network that were supposed to be more hidden aren't listed anymore.
words to try bank, national, ministerie, politie, stock market, insurance, ebay, microsoft, fortis, antwerp, brussels, ....................
No I won't publish them here
Untill now Wikipedia has not been in blacklists - even after the placement of some viruses it kept its white knight image. But with Wikiscanner that can all change now. Now anybody may look up whatever change was done from your network on wikipedia and you may become the laughing stock or the 'big manipulator' on the web.
Any user on your network will be identified with your natted IP address. This is the single point of identification. It will not say that the firm itself has done it but some employee. And when you go through the changes people are making, you sometimes ask yourself if their boss knows about this .....
What you should ban is that nobody in the firm should bring any changes or comment on anything on the web regarding your firm, its business or its news stories without having the agreement of the communications department. This is the only department where one can decide about the opportunity of changing or adding things to forums and wiki's just like wikipedia.
It shows also that communications departments of firms should employ webwatch software and have some people (freelance or not) to keep an eye on things. The development of a 'rapid response strategy' could be handy in case you need it - and you won't have the time to decide about such things.
Wikipedia is not an encyclopedia, it is just a collection of facts, rubbish, mistakes, ideologies and stupidity. You can find some information in it, but you should always double check. Using wikipedia at school or letting it be used as a solely source for research is totally irresponsable.
The proof has been given with the new tool wikiscanner that gives the world the possibility to see what has been changed by whom. And oh surprise it shows that agencies and firms are changing their own pages and distorting truth, covering up things or just trying to get things out.
It shows that the battle for truth and facts can't be won on this basis because the paid 'changers' by the firms will always win in time and resources against the freelancers that just try to get the facts right. It will also show that the ideological and fanatical will always win against the moderate in this kind of online battles because the first will do whatever it takes to have things going their way.
Wikipedia says it is no problem because there are guardians looking over things and trying to mediate or stop spammers and abuse and that the majority will always win over the minority, but is it really so ? You can see for yourself now.
A collection of new modules for netvibes is being placed online and new collections will follow in the coming weeks. If you do not know http://www.netvibes.com you should try it out. It has been awarded many prizes in the web2.0 contests as being the best or one of the best starting pages.
The 100 modules for netvibes you will find are more or less mostly connected to administrators - webdesign - network people and security
Just click and play to integrate them
project blog http://netvibes.skynetblogs.be
The first stage of leakage has begon in the upcoming trial of the Lernaut Hauspie scandal (you know the locals from here that promised us to become the next microsoft and while doing that burned all the money all their believers gave them). Apart from the fact that we have been waiting 6 years on this trial and that the case itself has a 400.000 pages to go through, some 600 crucial pages have become semi-public. The 600 pages that the public prosecutor was going to present beginning of october have been read and commented by some journalists who have published limited parts of it.
The question is if it wouldn't be important to make all the important pieces of the trial public so the public - because we were losers in some way - public. This way the possibility of a mistrial is maybe less.
The two important links you can find here (in dutch)