Tuesday, May 13, 2003

NMAP's Fyodor: Security Expert or Insidious Hacker?

It has come to my attention that on May 12, 2003, Slashdot ran a story in which it solicited questions for one Fyodor, (in)famous author of Open Source hacker tool nmap. I am rarely roused to action anymore, but I could not let what I saw pass. Millions of innocent security hobbyists and computer enthusiasts are being duped by Slashdot into using tools and websites created by Fyodor without knowing all of the facts:

Fyodor is not a heroic "white hat" security expert, but a depraved, insidious hacker hell-bent on criminal intrusions into systems owned by minors!

Please read on and review some of the facts so that you may come to your own conclusions about Fyodor and nmap.

Beginning innocuously enough with this post by one electricmonk, supposedly a "Linux booth babe," several lonely Slashdot geeks were trolled into replying, both on Slashdot itself and privately by email. One of the individuals who replied privately by email was none other than the subject of this exposé, Fyodor, cruising for some hot geek-loving ass. Little did Fyodor know that electricmonk was none other than SumDeusExMachina, AKA SDEM, long-time trolling stalwart. Fyodor had let his hormones get the better of his common sense as he began an attempt to seduce electricmonk.

Not wanting to carry his charade on any further (and understandably so, with an over-excited Fyodor on his tail), SDEM explained politely and truthfully to Fyodor about the non-existant Linux booth babe who was really just a bored young man enrolled in college for the Summer. Fyodor's latest hantise femelle destroyed, he vowed revenge on SDEM no matter the cost. The word wanker echoed in his head as he decided not even the law would stop him in his unholy vengeance. In just over a week, Fyodor had owned SDEM's box and began posting about it in trolltalk.

Luckily, on one unbelievably hot, humid Kansas City day back in August of 2002, Dame Fortune guided my hand to save a copy of trolltalk complete with Fyodor gloating at his criminal victory over SDEM. Scroll down a bit and look for posts by fv and decide for yourself. We even have a statement from one of the two parties involved and a nice summary of events by a very dependable third party who witnessed the entire fiasco. And back in the present, we have several individuals raising questions about Fyodor's morality and legal status.

I now ask you, gentle sirs and madams, would you use a tool written by a known criminal, especially a known criminal who specifically attacks underage boys? Fyodor's endorsement by Slashdot is obviously a betrayal of simple journalistic integrity and ethics, with both the Slashdot staff and Fyodor standing to experience a significant financial windfall from their collaboration. I urge you to reconsider not only your patronage of Slashdot, but also any viewing or use of tools or websites created by or related to Fyodor. He is not a man to be trusted, nor is he a man at all.

Thank you.

0 comments:

Post a Comment