RE: [MLUG - DISCUSSION] network scanning?

["Deterding, Brent D (UMC-Student)" <EMAIL:PROTECTED>]

hehe I came out on the very sunny side of that dilema, thanks to Justin's
track record at the time. "You know, I hired one guy that broke some rules
before and now he's doing the core network. I wonder if it would work
again?" It did, and here I am! Funny thing was I had a bet with a few people
about how humorous that interview would go "Hi I'm Brent Deterding. Everyone
around here knows me because they had to help bust me. I want to work with
them!" And I got freakin' hired! I was LMAO for days about it but loved
every second of it! I figured I had messed up enough times, I was going to
attempt not to mess up again. Now, a healthy dose of reality and learning
about this-isn't-IRC environments later I did OK. All because some
long-haired kid in Wolpers said "Hey, I think it would be fun to pose as
ccgreg . . . "

-- Brent

-----Original Message-----
From: McNutt, Justin M.
To: EMAIL:PROTECTED
Sent: 4/3/01 10:53 AM
Subject: RE: [MLUG - DISCUSSION] network scanning?

> Just an interesting use of port scans etc. One of the places 
> I applied for
> a job looked at my web site just a few min ago (assuming to 
> see my resume
> and see that I actually can do some of the stuff I claim) and 
> I used dig
> to see the domain name of the machine used to do the looking. 
> Then whois
> to find out that the person that looked happens to be the technical
> contact for the company also. Then I nmap'd the machine to 
> find out that
> it's a fairly insecure NT4.0 machine that doesn't serve as a 
> web server
> but is running as an email server. Now if I wanted to I could 
> reply back
> directly to the person who looked over my resume without them 
> needing to
> ever be told me they looked at it -- not sure if that'd creep 
> them out or
> not. :)

Several possible reactions:

1)  It'd piss them off and they'd go grab somebody from the legal
department
(who'd probably try to tell them to put a sock in it, unless you
*really*
pissed them off).

2)  It'd creep them out and they'd toss your resume.  If they're
intelligent, they'll figure out how you did it, possibly locating holes
in
their security (not likely, since the holes exist to start with).

3)  It'd impress them and you'd get a call for an interview.

4)  They'd think you were a smart ass and send you a nasty reply
(pointless,
but then, so is management).

The funny part is watching one person try to decide which response he
wants
to use.  :-)  "Woah, that's really cool!  Should we hire him or
prosecute?
Decisions, decisions.  :-)"  Brent came out (mostly) on the sunny side
of
that dilemma.  ;-)

--J
--
To manage your subscription, go to
http://mlug.missouri.edu/members/edit.php

Archives are available at http://mlug.missouri.edu/list-archives/
--
To manage your subscription, go to http://mlug.missouri.edu/members/edit.php

Archives are available at http://mlug.missouri.edu/list-archives/