Date:         Wed, 13 Dec 2000 07:45:56 -0600
Reply-To:     Chris Smith <chris.smith@AQUILA.NET>
Sender:       Vanagon Mailing List <vanagon@gerry.vanagon.com>
From:         Chris Smith <chris.smith@AQUILA.NET>
Subject:      Re: Vanagon.com is Hacked!!!
In-Reply-To:  <20001213080231.A17271@osu.edu>
Content-Type: text/plain; charset="us-ascii"; format=flowed

Wow.. I've seen some kiddie hacks and this is not one of them.  The web
site had a major security hole and someone walked right up and said
"boo".  We were lucky.  The hack came from over-seas, and as such would
require the State Department to get involved for any though of
prosecution.  Since the damage was really tiny, this would not likely happen.

More than likely, this "hacker" saw a common hole in our site and did a
simple hack to attract business to him.  He probably knows a few simple
hacks and then breaks into sites to exploit the flaws and, as we've seen,
offer a "fix" to the site owner.  This was a really common practice with
many releases of "Back Office".  You used to be able to download a hacking
tool called "Back Orifice" that would let you into many web sites.

Chris Smith
2600 anyone?