These messages were captured from Telenet PC-Pursuit NET-EXCHANGE BBS...
------------------------------------------------------------------------
Msg # 6028 Dated 02-27-88 21:48:34
From: MICHAEL MURRAY
To: ALL
Re: LOOKS LIKE A HACKER
I've encountered a certain situation twice in the past week that leaves
me with a few questions. Upon connecting to my Telenet indial node, in
between attempts to connect to either a Telenet service or outdial
modem, I've gotten the following message:
CONNECTION FROM 301 18A
The first time this happened, whoever was on the other end began typing
several obscenities. Tonight when this happened, the person attempted
to generate a false "@" prompt. Whoever was doing this was trying to
lure me into typing in my PCP acct and password. Sure enough, when I fed
the prompt a made-up acct, hit return...I got back what I know was a
misleading prompt.
I don't think my acct/pw got to him/her, but it scares me that someone
can make such a connection. I called up the Telenet service number to
report this, but all I was told is that nothing can be done except to
change the password, at MY expense. Anybody else have this happen to
them?
Mike
------------------------------------------------------------------------
Msg # 6057 Dated 02-28-88 09:47:49
From: IMA HACKER-
To: ALL
Re: IMPORTANT
The *PCP HACKERS* are working to show PCP what we think of their awful
service and policies. We have been STEALING PCP IDs and PWs and using
them. We can HACK into TELENET and connect to your indial modem without
you even knowing it. Then we watch you hammer at a distant modem with
those dialing scripts and it fills our screen with your pw and id. You
don't see your pw but *WE DO* and we have hundreds of PCP IDs and PWs.
Your TELENET *CONTRACT* makes YOU responsible for all charges to your
ID, and PCP just sent out bills from back in September! We want more
outdial modems and less BUSY. We want responsive Customer Service. We
want a realistic CONTRACT, 300 and 2400 baud. SCREW PCP until then!!!
------------------------------------------------------------------------
Msg # 6062 Dated 02-28-88 12:59:42
From: TONY WADDELL
To: IMA HACKER-
Re: (R)IMPORTANT
I don't know if message #6057 is for real or not ( I find some of the
claims hard to believe ), but perhaps PC-Pursuit should make it just a
little easier for users to change their passwords. I understand it's
quite a nose bleed to get one changed.
------------------------------------------------------------------------
Msg # 6072 Dated 02-27-88 15:45:04
From: LEE RIMAR
To: TOM WADDELL
Re: PASSWORD CHANGES
TW> I don't know if message #6057 is for real or not (I find some of
TW> the claims hard to believe) . . .
(regarding a message on "hacking" PC-Pursuit)
..
I just called Customer Service and expressed concern about it.
Unfortunately, they say it's entirely possible. And that they're
working on the problem.
..
TW> Perhaps PC-Pursuit should make it just a little easier for users
TW> to change their passwords. I understand it's quite a nose bleed
TW> to get one changed.
..
That was not my experience. I changed mine last Monday. Took
less than 10 minutes on the phone (the 1-800-TELENET number), and
the new id/password was in effect immediately.
..LDR
------------------------------------------------------------------------
Msg # 6073 Dated 02-27-88 15:46:13
From: LEE RIMAR
To: IMA HACKER
Re: YOUR INTENTIONS
You claim your aim is to get better customer service from Telenet,
more modems, et al. Has it ever occured to you that your "screw the
system" attitude may be causing more trouble than it solves? Screwing
up Telenet's ability to provide service seems unlikely to result in
better service.
That's always struck me as an argument against violent revolts;
from socialist to anarchist. Patterned after my comment above:
Blowing up a rich man's house does not put a roof over a poor man's
head. See you in the Issues area if you care to debate it.
..LDR
------------------------------------------------------------------------
Msg # 6074 Dated 02-27-88 16:04:02
From: JAMES NORTH
To: ALL
Re: ID PASSWORD SNACTCHING
If password pirates are able to steal PC Pursuit ids and passwords,then
it is possible for them to steal the ids and passwords of business
users that use the Telenet network. Such stolen ids and passwords would
enable such pirates to make illegal international data calls at someone
else's expense. THE ENTIRE TELENET PACKET SWITCHING NETWORK MAY BE IN
DANGER! If this is true, hopefully there is someway that Telenet can
correct this security problem. We could see the termination of the PC
Pursuit service because of this!
------------------------------------------------------------------------
Msg # 6076 Dated 02-27-88 16:21:29
From: BOB FREED
To: TONY WADDELL
Re: (R)IMPORTANT
Re: 6057, 6062
It's for real. I've gotten a new user id and two new passwords in the
past two weeks because of this situation. It's not true that these
jokers can intercept your session completely undetected, though. If
you see a message such as "CONNECTION FROM xxx yyy", disconnect
immediately or contact customer service on a second line.
------------------------------------------------------------------------
Msg # 6077 Dated 02-27-88 16:28:08
From: BOB FREED
To: IMA HACKER-
Re: (R)IMPORTANT
Re: 6057
As I see it, the only thing you're accomplishing is to destroy this
system completely. I'm sure we won't see any of the things you
mentioned (more outdial modems, less BUSY, responsive service, better
contract, 300 and 2400 bps) any sooner if Telenet has to spend
considerable time and effort plugging leaks in their security. In fact,
we may never see them at all. Here's hoping they catch you soon....