               -    G  L  O  B  E      T  R  O  T  T  E  R     -
+=+=+=||===============================================================||=+=+=+
+         Volume #3,    File #1                    Date:    29/03/1988        +
+                                                                             +
+                                                                             +
+  Written By:  ----====} THE FORCE {====----   From The depths of THE REALM  +
+=+=+=||:::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::||=+=+=+


TO CONTACT US:
:::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::
Germany:    ALTOS          Username: force
Australia:  Any Good BBS In Melbourne  or The Realm
:::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::


CONTRIBUTORS:   NOM


FROM THE EDITOR:

We still need a lot of material to create the next few issues.  If you have
anything you can contribute please contribute.  Write an article anything.

I was going to publish a list of the best hackers in OZ, but we came to the
conclussion that it wouldn't be a good idea, particularly since so many things
are going on at the moment.  Instead Volume #4 or possibly #5 will have a 
list of the top five loosers of all time.  It should be quite interesting,
and I would like your help with this one, so if you know anyone who qualifies,
please mail me.

I must apologise for the lateness of this edition, but due to circumstances 
which you may know about, it was not possible to finish this file in time.  If
you don't know what has been happening, I guess you should be filled in.
A reasonably large majority of Realm Members got busted.  Seems like someone
gave out a phone number (won't mention names, but it doesn't take much
imagination to figure out who it was).  The number was given out to save ones
ass, which was rather stupid since it revealed possible witnesses agains't that
person.  DO YOU KNOW YOUR FRIEDS??   Or I think you should ask yourself 
DO YOUR FRIENDS KNOW YOU??    If so, It might be a good idea to think about it.

Reason number two...  Rumour has it that telescum have traced a large number
of people and compiled a list of hackers using Viatel or Austpac.  From what
I hear (source reasonably reliable) is that they have been going round talking
to people on that list, trying to obtain info on some of the more notorious
characters.   To add more weight to the rumour, a person close to the telescum
war machine has confirmed the existence of such a list.
Aparently I am at the top of the list, with some of the other more active
people. (If nothing else I guess it's nice to be appreciated.)

With all these things going on, we had to take some security precautions like
encryption of all data, spliting the realm into sections and running each at
a different location etc. This is the major reason for the delay.

I guess if you read volume #4 things will still be going great.  If not, you
can pretty well guess the reason for the compulsory retirement. 
(Hehehe Is that possible??) 

May your lines be untraceable.

              CATCH YA LATER
                       ----====} THE FORCE {====----

-------------------------------------------------------------------------------

                            I  N  D  E  X
                            ~~~~~~~~~~~~~
R E G U L A R   F E A T U R E S
--------------------------------

    - Outdial Systems:        There is great demand and no supply,  so only 
                              a little something to wet your appetite.


    - Unusual Systems:        You all know about the 03106 Tymnet Gateway,
                              well, there are others you can t5ry.

    - System Passwords:       It's been a bonanza as far as VAX and PRIME
                              accounts go, so it's been an ordinary month
                              I guess.  You again get the sour cream of the
                              hacks that were made this month.


    - Trix of The Trade       A run in with sys 09 operator and strange OTC
                              tactics to catch hackers.

    - Hack Of The Month       A Super User VAX account.
 

    - Network Profile:        This month we feature DATAPAC nad I have the
                              first part of DATAPAC NUA's.

N O T   S O   R E G U L A R   F E A T U R E S
---------------------------------------------


    - Bt Gold Hacked          The greatest defeat in hacking a system ever,
                              which I didn't even hack boooo.
                              
    - X.xx  Info              A nice file explaining the workings of X.xx 
                              Protocals, thanx to NOM.

    - JANET User Docs #1      Part one of the JANET (UK Academic Network)
                              User Documentations.

===============================================================================


OUTDIAL SYSTEMS
~~~~~~~~~~~~~~~

Nope, as a matter of policy, no more outdials.   This is the second last Issue,
where you can pick up some outdials,  (not so flash).   They die to quickly
and there are only 2 more international I know off.   I suggest for your
outdial needs, use either Unix, Primes or VAX's with an outdial modem.  There
is a lot of them out there.


3106072912  HOUSTON OUTDIAL
3106007376  HOUSTON OUTDIAL        This one used to be a very good, but due
                                   to obuse once again the old NUA has been
                                   changed.   An additional complication is a
                                   password protection they have added.


3106002046  MITEL/CANATA          This one has been used long time ago, and
                                  like the houston O/D it has password 
                                  protection.   I didn't get this one, and I 
                                  am not sure who did, so I don't know who 
                                  to give credit to. Sorry.

-------------------------------------------------------------------------------

UNUSUAL SYSTEMS
~~~~~~~~~~~~~~~

You all know the 03106 gateway.  To connect to it,  you just use that NUA.
Here are some more interesting ones you may not have.

03104 - MCII IMPACS
03132 - Compuserve
03113 - RCA-LSDS
03119 - TRT-DATAPAK
03740 - TEXTEL Trinidad
04542 - C & W  INTELPAK  Hong Kong
04877 - ITA UDAS  Taiwan 

I'll have some more for you, possibly next month.   One thing to note, is that
I have connected to these from DATEX-P,  so some may not work from AUSTPAC
or MIDAS.


-------------------------------------------------------------------------------

SYSTEM PASSWORDS
~~~~~~~~~~~~~~~~

I am very sorry about this, but due to my obsession with Primes, you will 
just have to put up with them for a little longer.

31106030002015  Primos 18.2.1  DPC1       This is the DARTMOUTH PRIME I have
                                          Listed previously, but try logging
                                          is as DOS/DOS instead of GAMES/GAMES

26245890090831  Primos 19.3.4-Z GRAF      LOGIN  TEST


26245221040595  Primos 20.2.4v  TWF_K     LOGIN  PRIME/PRIME


This leaves me with 3 more primes to go,  but don't be afraid, in the next 
issue I promis I will have something slightly better, like a VAX or two 
in ISRAEL.


-------------------------------------------------------------------------------


TRIX OF THE TRADE           
~~~~~~~~~~~~~~~~~ 

Minerva Now has some very claver ways as far as detecting hackers.  They have
learned that there are certain systems frequently visited by hackers, like
Altos for example.  If you connect to altos directly from minerva, you can
say bye bye to your account.  This has been known for a while, but here 
is a slightly new one.

I have been on altos late one evening, (Going via a PAD in GERMANY), when an
operator breaks in.  We had a short chat, but I failed to get him going in
any sort of a decent conversation.  You can usually pick up some usefull
information.  In a situation like this, there is really no need to hang up
or be paranoid about getting traced, since if they wanted to, they could 
have traced any time. Even if it was their intention to trace you, they would
have done it before revealing themselves to you. 
I managed to capture the last bits of the convo (Remembered to Turn on My
Buffer. A little late, but still)

THE ACTUAL CONVO:   (Operator is in lower case)
...............................................................................

HELLO OPERATOR

* OPERATOR user 10 *
you realise i am going to kill this account
I KNOW, AND I WILL GET A NEW ONE.  WE HAVE PLAYED THIS GAME FOR UHH 3 YEARS NOW OR SO
not when i am finished with you

A WELL, IT'S LIKE A SPORT TO ME.  IT GETS RATHER ADDICTIVE.
HOW LONG WERE YOU AN OPERATOR HERE?

bye bye


Bye at 20:22
HANG ON


***From PRIMOS: Forced off.
Off At 20:22 24/02/88 AEST
Time used: 04h 42m connect, 04m 01s CPU, 00m 28s I/O.

Mail call (6 Unread)

CLR PAD 
...............................................................................


This is nothing dramatic, since anyone who ever used minerva for a while 
would have had a simmilar experience.  The account, naturally, died the
minute I was forced off, but surelly the next day,  it was back up working
as usual under the old password??  A hah,  it's enough for anyone to
smell a trap.  This is all leading up to the point I am making and that is,
don't use minerva accounts given to you by other people and don't give out
accounts you use.   I gave the ID do an italian hacker, and he would have 
had no knowldge of this event and anything he would have done on the ID would
have most probably been recorded.  I actually went on the account and changed
the pw myself so he couldn't use it before I had the chance to contact him.
I think the reason OTC does that is to see what addresses are being used, so
that they can more easilly determine a hacker on another ID, just by the 
address used from it.  This is not an isolated incident, because it has 
happened on several occasions in the past.  What I don't understand, is why
they kill the account and then bring it back up?   
Another, even more likelly explanation, is simply the real user finds his
account not working, dials Minerva gets the password changed,  and restores
it to his old one.   In that case, it would mean Minerva is trying to cover
up something shocking.  I would imagine they wipe the bill off,  and don't
tell the user that a hacker has been on the account, but who knows??

This is all bad anough, but minerva actually goes one step further.  There 
are regular hackers of minerva, who have actually been given their own 
ID's to use, which they can check on.   Now, if that isn't low, I don't know
what is.
An interesting solution to the problem would be to mail all the real users 
and tell them the NUA for altos.  If someone does that, they will think twice
before killing off the real users.   (if anyone is game enuff, please check
with the altos sysops first)


-------------------------------------------------------------------------------

HACK OF THE MONTH
~~~~~~~~~~~~~~~~~

System:     Micro VMS
Location:   USA   
Network:    TYMNET    
Date:       07/03/1988     
Hacked By:  ----====} THE FORCE {====----

Sample Login:

..............................................................................


@ c :03106xxxxxx -fcty
Circuit #1
03106xxxxxx Connected


[2J[H(0
#3meeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeem
#4meeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeem
#4x                                    x
#3x                                    x
#4x                                    x
#3x             S I A M E              x
#4x                                    x
#6x          M I C R O V A X           x
#3x                                    x
#4x                                    x
#3meeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeem
#4meeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeem(B

Username: xxxxxxxxx

Password: 
        Welcome to MicroVMS V4.4

    Last interactive login on Tuesday, 29-DEC-1987 21:13
    Last non-interactive login on Thursday,  6-FEB-1986 20:41
Z[c[0c
%SET-W-NOTSET, error modifying NVA8:
-SET-I-UNKTERM, unknown terminal type

                           |||||||||||||||||||||||||||
                           || 7-MAR-1988 16:36:48.08||
                           |||||||||||||||||||||||||||


$ SET PROC/PRIV=(all)

$ SET DEF SYS$SYSTEM

$ RUN AUTHORIZE
UAF> EXIT

UAF-I-NOMODS, no modifications made to system authorization file
%UAF-I-RDBNOMODS, no modifications made to rights database

$ LOG

 xxxxxxx      logged out at  7-MAR-1988 16:37:45.52

03106xxxxxx Disconnected

@ 
...............................................................................

NOTES: I know there are more exiting hacks out there, like NASA, ESA etc, so
       please, edit your sample logins so they can't be recognised and send 
       them in.   If you can, please include any sort of a proof of the 
       hack, I will not put it in here unless I am sure it is genuine. I 
       have had a fantasized file of someone being  one <CR> away from 
       starting the third world war.   I mean really!

===============================================================================

BT GOLD
~~~~~~~

I have spent so much time hacking BT GOLD, that it really isn't funny. I didn't
actually spend a lot of time on it, just small bits extended over the past few
years.    Some of you may recal the good ole days when minerva was
actually minerva not keyling (a Dominant system) and Telememo was Telememo not
keylink a (Shitty system).  Keylink is now a shitty system and Telememo has
improved a bit, but on the whole it still sux.   Good after this rambling, 
I refering to late 1984-1985 where there was no such thing as security on
Minerva.  Them were the days where one could spend 24 hrs Sprinting and 
not worry about the account dying.   It was the time where every second 
password was the users first name and everyone had a supply of at least 200+
accounts at the one time.   

Ahh what a flashback.  Would be nice to have a time machine.  Anyway, as you
all know, minerva is only one system, a part of the entire DIALCOM Network.
(Ok, 3 systems if you want to be picky  07,08 and 09).   A lot of countries 
have a dialcom system of their own, and there is no reason why there can't
be one at the stage of minerva 4 years ago.  Somehow I don't see the operators
worried about hackers in countries like Singapore, HONG-KONG etc (The list
goes on and on). I hope you can now appreciate the potential to find a nice
ripe system, ready for the taking.

In order to be usefull, a dialcom must have the NETLINK Facility, and it must
have an ONLINE USERLISTING.  Without a Netlink, you can't use it as a pad,
and you can't use it for sprinting.  Without a User Directory, it is 
very difficult indeed to hack another account once the ones that you have
information on are exhausted.

PRIMECON NETWORK  -  Us Dialcoms systems are useless, since they don't have
                     an online user list.  I have only chacked system 41
                     and systems in the same cluster namelly in the high
                     thirties and fifties.   There could still be hope for
                     SYSTEMS 90-99   including the inhouse dialcom system 98.

BT GOLD           -  A fantastic system.   The user directory is more 
                  -  Comprehensive than that on Minerva.  Only problem is 
                     that there is no NETLINK, which makes it rather useless.
                     There is however a netlink on system 80,  which is used 
                     by BT GOLD Staff.

As you can see, BT GOLD was an incredible waist of time, but because there is
hope of finding an unripe dialcom ready for raping dialcoms are all go.
The BT GOLD account I got, came from an italian hacker and has been passed
around for some time before that.

-----------------------------------------------------------------------------
GOODIES, GOODIE GOODIE YUM YUM.


NETWORK PROFILE:     D A T A P A C  -  Part #1
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

Dnic:             3020
Location:         CANADA
Owners:           Telecom Canada
Host Responce:    Fair
Network Rating:   Shitty
Nua Structure:    3020    000    00      0000                00
                 <DNIC>  <AREA>      <HOST NUMBER>  <OPTIONAL SUB-ADDRESS>


For More Information, Contact:

     
 Telecom Canada      
 Room 1890 
 160 Elgin Street   
 Ottawa, Ontario    
 K1G 3J4, Canada    
 Contact:  Judith Robertson                     (613) 567-8798   
                                                OnTyme: INTL.TGMKTG   
     
 ACCESS/SPEEDS:    Asynchronous dial-in service at 110-300, 1200 bps  
                   leased line services:           110-300, 1200 bps  
                                                   Bell 103, 212A
                   Synchronous service at:  2400,4800,9600,14400 bps  
     
     
                   U.S. Canadian traffic is complicated by many  
                   factors.  the most common kind of traffic originates in 
                   Canada from a terminal and terminates on a host in the  
                   U.S.  This is Inbound 3101 Collect and is billed by
                   Tymnet in U.S. dollars.  Whether traffic is 3101 or 3000
                   traffic is determined soley by the nature of the   
                   connection in Canada; 3000 is a host, 3101 is a terminal.   
     
                   A username is not needed to access Tymnet from Canada   


NOTES:     There is a well defined area code for NUA's in a particular area,
           much like TELENET, however the area codes a unique and don't match
           the PTSN area codes.  For reference, look up the datapac outdials
           in Volume #2, which relates their codes to the PTSN ones. There
           are lot more areas then given in the outdial list, but usually there
           is some indication as to where the NUA's are.        


:::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::

D A T A P A C   302029500xxx  Sprint,   By:         ---===} THE FORCE {===---
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
From The depths of - THE REALM -                    Last Updated:  09/06/1987
=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=

302029500057                       -
302029500059   VAX/VMS             -
302029500060   VAX/VMS             -
302029500070                       -   KARDGARD 300-C Motor Fuel Mngmnt. Site 1
302029500089   Port Select         -
302029500092   HP-3000             -
302029500098                       -
302029500900   Outdial Port        -    300 Baud
302029500901   Outdial Port        -   1200 Baud

D A T A P A C   302033400xxx Sprint, By:    ---===} THE FORCE {===---
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
From the depths of - THE REALM -                                   28/12/1987
=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=

302033400012   Honewell            -   Waterloo Datanet 8
302033400018                       -   "CHANELLS BUSY"
302033400048                       -
302033400069   Port Select         -   "SERVICE ID="
302033400115   Port Select         -   "SERVICE ID="
302033400131                       -   "CHANELLS BUSY"
302033400140                       -
302033400153                       -   Conttrell Transport/Kitchener
302033400161                       -
302033400171                       -
302033400193                       -
302033400219   Primos 20.1.2       -   PRIMENET 20.1.2  SYSF
302033400236                       -
302033400257   VAX/VMS             -
302033400258                       -   (needs input filename)
302033400276                       -   (needs Input filename)
302033400333   Primos 20.1.2       -   PRIMENET 20.1.2  SYSF
302033400344   Outdial Port        -
302033400345   Outdial Port        -
302033400346   Outdial Port        -
302033400347   Outdial Port        -
302033400348   Outdial Port        -
302033400349   Outdial Port        -
302033400376   fax                 -
302033400383                       -
302033400462                       -   "CHANELLS BUSY"
302033400485                       -
302033400486                       -
302033400492                       -
302033400900   Outdial Port        -    300 Baud
302033400900   Outdial Port        -   1200 Baud


D A T A P A C   302035600xxx Sprint, By:    ---===} THE FORCE {===---
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
From the depths of - THE REALM -                                   28/12/1987
=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=

302035600110   Outdial Port        -
302035600111   Outdial Port        -
302035600113   Outdial Port        -
302035600114   Outdial Port        -
302035600115   Outdial Port        -
302035600116   Outdial Port        -
302035600273   Port Select         -   University Hospital Develnet Network
302035600279                       -
302035600280                       -
302035600298                       -
302035600318                       -
302035600329                       -
302035600330   VAX/VMS             -
302035600900   Outdial Port        -    300 Baud
302035600901   Outdial Port        -   1200 Baud


D A T A P A C   302036700xxx  Sprint, By:    ---===} THE FORCE {===---
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
From the depths of - THE REALM -                                   31/12/1987
=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=

302036700010   fax                 -
302036700017   VAX/VMS             -   "Enter if you Dare"
302036700021                       -   "User Number--"
302036700024   Gateway             -   "International, Datapac,Memotec,Telenet"
302036700026   VAX/VMS             -
302036700027   VAX/VMS 8530 V4.5   -   COMVAX
302036700029   Gateway             -   "International, Datapac,Memotec,Telenet"
302036700030                       -   "User Number--"
302036700042   VAX/VMS             -
302036700045   IBM  VM/370         -
302036700047   Port Select         -   "enter class"
302036700049   VAX/VMS             -
302036700050                       -
302036700052   VAX/VMS             -
302036700053                       -
302036700075                       -
302036700087                       -
302036700095   Port Select         -   Network Control
               VAX 11/780              VAX -   Bryker
302036700118   Unix                -   gnt-1
302036700122                       -   University Library GEAC System
302036700129                       -   TTSCANDAR
302036700162                       -
302036700169   IBM                 -   Ultramar
302036700170   IBM                 -   Ultramar
302036700172                       -   "TACL1> "
302036700178   VAX/VMS 85300 V4.6  -   Magna's VAX
302036700183                       -   "Password> "
302036700184                       -   "Password> "
302036700185                       -   "PORT BUSY"
302036700900   Outdial Port        -    300 Baud
302036700901   Outdial Port        -   1200 Baud


D A T A P A C   302038500xxx  Sprint,   By:         ---===} THE FORCE {===---
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
From The depths of - THE REALM -                    Last Updated:  21/02/1988
=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=

302038500055                       -     
302038500122   HP-3000             -   CC INFOLINE
302038500198                       -  'HM"
302038500216   VAX/VMS             -
302038500226                       -   "CHANNELS BUSY"
302038500245                       -
302038500251                       -
302038500274                       -
302038500287                       -
302038500288                       -
302038500312   VAX/VMS  V4.5       -   Ault Fodds  Hamilton
302038500333                       -   "CLS BUSY"
302038500355                       -
302038500356   HP-3000             -   CC INFOLINE
302038500375                       -
302038500399   Port Select         -   "SERVICE ID= "
302038500412   Port Select         -   "SERVICE ID= "
302038500445                       -
302038500444                       -
302038500559                       -
302038500561   Outdial             -
302038500562   Outdial             -
302038500563   Outdial             -
302038500564   Outdial             -
302038500565   Outdial             -
302038500566   Outdial             -
302038500586   VAX/VMS  V4.3       -   MicroVms
302038500640   Port Select         -   "SERVICE ID= "
302038500641                       -
302038500643                       -
302038500645                       -
302038500652                       -
302038500654                       -
302038500655                       -
302038500669                       -
302038500723                       -
302038500725                       -
302038500726                       -
302038500738   IBM                 -   System: Hamilton, Subsystem: Quinte
302038500739   IBM                 -   System: Hamilton, Subsystem: Quinte
302038500740   IBM                 -   System: Hamilton, Subsystem: Quinte
302038500741   IBM                 -   System: Hamilton, Subsystem: Quinte
302038500746   IBM                 -   System: Hamilton, Subsystem: Quinte
302038500771   Port Select         -   Gandalf PACXS  "Password> "
302038500783                       -
302038500787                       -
302038500900   Outdial             -    300 Baud
302038500901   Outdial             -   1200 Baud
302038500902   IBM                 -   System: Hamilton, Subsystem: Quinte


D A T A P A C   302048400xxx Sprint, By:    ---===} THE FORCE {===---
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
From the depths of - THE REALM -                                   28/12/1987
=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=

302048400040                       -
302048400153                       -
302048400177                       -
302048400209   Port Select         -   "CODE DE SERVICE="
302048400224                       -
302048400234                       -
302048400279   Port Select         -   "CODE DE SERVICE="
302048400322                       -   "V21>"
302048400348   Port Select         -   "SERVICE ID="
302048400398   Outdial Port        -
302048400399   Outdial Port        -
302048400410   Outdial Port        -
302048400411   Outdial Port        -
302048400412   Outdial Port        -
302048400413   Outdial Port        -
302048400430                       -
302048400431   VAX/VMS 

