Security Incidents mailing list archives

Re: Korea a classic ? was: IP blacklist


From: do.geun.jo () KR ARTHURANDERSEN COM (Doglus Cho)
Date: Tue, 16 May 2000 11:07:19 +0900


Mr. Hektor,

There is a WHOIS server in KRNIC, which surely provide a contact list with "RFC
2142"
compliant addresses.

If you do not want to go over such painful approach, just report your incidents
to cert () certcc or kr
with your solid evidence and wait for reply.
If you are sure that it came from one of the KAIST host, contact
paladin () sparcs kaist ac kr.

It is sad to see this kind of messages on one side and the "ph33r the b33r"
stuff on the other side.

To:   INCIDENTS () securityfocus com
cc:     (bcc: Do Geun Jo)
Date: 2000-05-15 10:32 PM
From: hektor () rz rwth-aachen de
Subject:  Korea a classic ? was: IP blacklist

Hi,

having read the sentence above in this list last week
I started to smile, until there was a portscan from
korea the same day.

So if Korea is a classic, it is at least a classic
tragedy:-(

For the source there were no WHOIS entries at APNIC
     http://www.apnic.net/apnic-bin/whois.pl
(is APNIC located in Korea ? seems to be tragic, too).

So I found out, that it came from KAIST (some "hightech"
university over there). And no chance to reach someone
concerning in security there. No RFC 2142 compliant
adresses like "abuse@" or "security@".

And how about this ? Hacker News Network
     http://www.hackernews.com/
reports that there will be a hacking contest held
by KAIST, more info under:
http://www.koreaherald.co.kr/news/2000/05/__10/20000515_1023.htm

I think I start loving the idea blocking these korean
networks. Or did they already start their "contest" ?

Sorry for my sarcasm, Jens Hektor

*******************Internet Email Confidentiality Footer*******************
Privileged/Confidential Information may be contained in this message. If you are
not the addressee indicated in this message (or responsible for delivery of the
message to such person), you may not copy or deliver this message to anyone. In
such case, you should destroy this message, and notify us immediately. If you or
your employer does not consent to Internet email messages of this kind, please
advise us immediately. Opinions, conclusions and other information expressed in
this message are not given or endorsed by my firm or employer unless otherwise
indicated by an authorized representative independent of this message.


Current thread: