后知后觉的我发现milw0rm关闭了

这几年,就像我退出之前说的那样,已经不太碰这些东西了,可是心里还是总挂念着,所以还会时不时去收集和恶补一些信息和知识。这一年多,我的时间全被大大小小的事瓜分完了,能够自己坐下来做点感兴趣的事已经不容易了。毕业后,由于创业和求学的矛盾,最终搁置了种种计划。现在除了准备考试,时间总算都属于我了,这也算是我在纷乱中找到的一点平静吧,能够读点书,冥想,做点爱做的事。

保钓的时候有朋友来问我是不是该有所表示,我否决,感觉有些幼稚,我已没有了当年的那份冲动了吧。不过热情还是有的。今天我又尝试打开milw0rm的主页,访问无能了。一搜,说是站点关闭了。不禁有点心疼,多好的站子啊……

后来又是wiki又是forum地找,看到了一份比较官方的文字,当然不了解的同学也可以从这段文字中了解一些背景知识,如下:

milw0rm_logoOne of the major sources of proof of con­cept (PoC) exploits on the Inter­net, milw0rm.com, will be clos­ing down. The website´s main­tainer, str0ke, announces that he can´t com­mit any­more to review­ing exploits sub­mit­ted by third-parties, in a timely manner.

While this is sad news for peo­ple famil­iar with the exploit release scene, as well as a fair amount of script kid­dies by some accounts, it might not mean much for the unini­ti­ated with­out some back­ground history.

Milw0rm was orig­i­nally the name of a group of hack­ers with mem­bers from var­i­ous parts around the globe that com­mu­ni­cated with each other over IRC (Inter­net Relay Chat). The out­fit went on to achieve inter­na­tional fame after it took credit for com­pro­mis­ing the com­puter net­work of India´s Bhabha Atomic Research Cen­tre (BARC) in Bom­bay and gain­ing admin­is­tra­tive access (root) on mul­ti­ple sys­tems dur­ing the night of June 3, 1998.

The hack­ers walked off with con­fi­den­tial emails and clas­si­fied doc­u­ments about nuclear tests, amount­ing to around five megabytes. The first news out­let to break out the story (http://www.wired.com/science/discoveries/news/1998/06/12717) at the time was Wired, which the col­lec­tive con­tacted with proof of their feat.

The rea­sons behind the attack were mostly polit­i­cal in nature. The group´s mem­bers, who were still teenagers at the time, wanted to show their dis­ap­proval over the devel­op­ment and test­ing of atomic weapons, mak­ing this pretty clear by defac­ing the BARC home page and post­ing (http://goo.gl/YAdF) paci­fist messages.

˝I like the world in its cur­rent state (i guess), well its bet­ter than the world would be if the b0mb went b00m. think about it k1dz, its not clever, its not big, so don´t think destruc­tion is cool, coz its not […] So India, LISTEN TO WISE OLD MILWORM … You do not need nuclear weapons in the 1990s!#@!˝ a part of the mes­sage, which was signed by JF, VeN­oMouS, Hamst0r, Key­stroke, savec0re and ExtreemUK, read.

Milw0rm announce­ment and exploit list­ing screen­shot Enlarge pic­ture The group dis­banded soon after this high-profile hack, or at least its mem­bers stopped being hack­tivists. Sev­eral years later, in 2004, Key­stroke, who is, today, bet­ter known as str0ke, went on to set up milw0rm.com as a place to pub­lish PoC exploits, with the con­sent of some of his for­mer comrades.

In order to ensure a high qual­ity for the pub­lished con­tent, str0ke per­son­ally ver­i­fied and tested all exploits sub­mit­ted by other hack­ers, some­thing that, unfor­tu­nately, he can no longer do. ˝Well, this is my good­bye header for milw0rm. I wish I had the time I did in the past to post exploits, I just don´t,˝ a mes­sage from str0ke dis­played on the home page reads.

He goes on to explain that, ˝For the past 3 months I have actu­ally done a pretty crappy job of get­ting peo­ples work out fast enough to be proud of, 0 to 72 hours (tak­ing off week­ends) isn´t fair to the authors on this site.˝ Finally, the hacker extends his thanks to every­one who con­tributed to the web­site. ˝I appre­ci­ate and thank every­one for their sup­port in the past. Be safe, /str0ke,˝ he signs off.

The footer on milw0rm now informs vis­i­tors that, ˝Sub­mis­sions are closed.˝

–By Lucian Con­stan­tin on Softpedia!

milw0rm

当然这些说得很官方。站长的身体状况确实不佳,曾在2009年11月3日爆出因心脏病死亡的消息。可5日的时候自己又发推说:

I’m not dead yet, just being trolled.

之后就没有推过。所以说句题外话,做技术的朋友们,要保重身体啊。

当然也有人说站点的关闭跟另一间事情有关,milw0rm 上公布了Lxadmin(现在的kloxo) 的exploit,当时那个exploit使很多站被黑,数据被清空,最后导致Lxadmin的作者Ligesh自杀。又是一个悲剧……再说一句题外话,做技术的朋友们,要有豁达的心态和过硬的心理素质啊,漏洞是客观存在的,不用为了这点事就自杀;工作压力是有的,但是也不值得自杀或熬夜慢性自杀。

就这样,我后知后觉地知道了这件事,虽然不是什么好消息,可有点释然,终于可以自由支配自己了。

最后再分享昨天我看一段视频听到的一句哲言:自由不是想做什么就做什么,自由是可以选择不做。是的,我现在自由了,短暂的。也许在生活面前,这自由就是奢侈品。

Be safe

CBlog

Tags: ,

About Conan

博客,好学者,开源控,爱编程,喜设计,迷摄影,爱音乐。好学对象:平面设计,网站架构,算法,网络安全,视觉艺术。