How long does it take to remotely hack fully patched Solaris 10 installation with telnet enabled? As long as it takes to type this simple standard system command:telnet -l"-fusername" host i.e. telnet -l"-fbin" solaris10-server or telnet -l"-fsys" 127.0.0.1 Yeh, it's that simple. Here's a screenshot: Information about this 0-day vulnerability appeared on a security news list today and spread like wildfire. Certainly, most organisations which take security seriously will use SSH and disable telnet. However, considering that this vulnerability affects a default system installation, it is likely that companies using Solaris 10 and not implementing strong security configuration, will be seriously affected. That's truly a return of the "good" old days for hackers, when hacking into any server was a trivial task that required only a simple command. To see this type of vulnerability these days is extremely unusual and pretty much shocking for IT security community. Most of all, it is a terrible embarrassment for Sun Microsystems.
I went back to Kelapa Gading to copy some data from my workstation. I moved out of Kelapa Gading on Monday evening, so I had the opportunity to see how the flood condition changed. The news is good. Basically, the flood is off the major streets of Kelapa Gading area, but most houses are still flooded. It is also rather difficult to get into the area using a regular car as all the access points to Kelapa Gading are still flooded:
Living isolated in Kelapa Gading has become unbearable, thus yesterday I moved out of the area. My evacuation vehicle was a Teh Botol SOSRO truck. More than 10 trucks from SOSRO were picking up people all around Kelapa Gading area and transporting to safe location. I'm not sure if SOSRO knows about it, I've tried to ask but they web-site is not updated since 2001, all contact details are wrong and I can't get their phone number."Less rain will be fall in all municipalities in the capital. If the rains fall, it will not be so heavy. Heavy rains may occur in Puncak, Bogor". Oh, that's very interesting what Indonesian Meteorology and Geophysics Agency (BMG) says, because it was raining like crazy in Jakarta last night. Has BMG prognosis been correct at least once? I've also tried to use their RSS data feed but it never worked, their server was down like half of the time. I start to be more curious about this agency. 2. Thuggery. Well, I had to pay to cross the only path across the river. Few thugs controling the path ensured that those who could not pay had to go thorugh shoulder deep stinky water. The SOSRO truck drivers have also told us that some areas of Kelapa Gading were controled by criminals who stopped their trucks and demanded money. 3. Attitude of some people. The SOSRO drivers were very helpful, didn't ask any money and took something like 30 people out of the area on the same truck. Many of those people had cars waiting for them around Arion mal. When we arrived, truck driver stopped near a gas station (around Superindo mal) and informed everyone that he needs to buy gasoline to get back for more people. He asked for any contribution. Now guess how many people contributed? Just me and my wife. All the other people on the truck just left without even saying thank you! I could not believe my eyes. Note: Most of those people were not poor. They were shooting pictures with fancy digital cameras all over the truck like they were on some safari or something. 4. Profesional building management. I'm very surprised how Gading Mediterania Residences building management handled the disaster. They were truly prepared. They had enough gasoline to run power generators for a few days, organised well managed flood refugees centre servicing neighbour areas. Clean water was available at all time and the place was well secured. I must say I'm impressed. Great job guys! I'll try to post some updates when I get back to Kelapa Gading. However, I'm not sure when as it looks like the current condition is not getting better. By the way finally I understand why so many villas in neighbour areas like to use Venice/Greek a like motives: Water is a perfect match, isn't it? PS: Lots of people have sent me e-mails asking about safety of travel to Jakarta, thus let me answer. It is safe to travel to Jakarta, you can get from the airport to main business district, but before you come here please make sure that you have a hotel room booked. Most hotels are at almost full occupancy rate, thus it could be a problem to get a room without prior booking. Flood related posts by other bloggers: bricolage, Jakartass (aftermath), Unspun.
Another day of the Jakarta flood. Today, I had to go through the flood to Cempaka Mas to buy some food. Surprisingly, there was actually more water in Kelapa Gading area than yesterday and I barely managed to cross the river to get to Cempaka Mas mal. Well, and when I already got there it was a completely different world. Business running as usualy, shops and restaurants open, supermarkets full of food etc. Meanwhile in flooded areas of jakarta the flood forced around 300,000 from their homes. Anyway, here are some photos that I took on Sunday afternoon:
Water is an excellent conductor of electricity which makes electrocution a number two cause of death in floods. Knowing this Indonesian state electricity company PLN (Perusahaan Listrik Negara) has cut electricity in areas of Jakarta affected by the February 2007 flood:I took the above photos on Sunday around 4AM, just after a heavy rain. The first one shows area of Cempaka Mas (view of South-West skyline), the second photo shows area of Sunter (view of city's West skyline). It is an extremely odd view as during regular night Jakarta shines with tens of thousands of lights. Last night most lights were still on but today it is just dark space with only a few lone candlelights. A truly gloomy view of Jakarta.
This week Jakarta experienced disastrous flood triggered by the high intensity of rain in the city and surrounding areas. It all started with a very heavy downpour on Thursday night which caused floods in some areas of Jakarta. Next morning number of offices reported missing employees who most likely could not get through the traffic havoc caused by the flood. I was myself stuck in the traffic jam on Friday morning and could not attend several meetings. Soon after I got informed that several of my clients have executed their Business Continuity Plans (BCP) and switched to teleworking. It wasn't without problems as telecommunication networks were also affected by the flood - apparently some telecommunication firms did not plan their DRP well. Fortunately, wireless networks were working well as I was able to access my e-mail from the car using 3G service.Looking at the horrible traffic conditions and worsening weather, I decided to get back home. Luckily, I was back home early enough to avoid major downpour that happened around noon and caused major floods in South, central and North Jakarta. The area of Kelapa Gading was isolated by flood since 2pm and only trucks could get in or out of the area. I've spoken with taxi drivers who parked on a dry piece of road in front of Gading Mediterania Residences. They all were seriously troubled with the flood, as not only they were not able to make any earnings, but also they could not get back home. Moreover, they were all surrounded by people asking for a ride just to hear that there is no way out of the area as every road out is flooded. Most shops and restaurants in the Kelapa Gading area were flooded. Those few which were still open were all out of stock by 10pm – fortunately I bought some additional supply earlier, fearing the rain will continue. On Friday night very heavy downpours - an I mean heavy even by Asian standards - caused even greater flood. Water raised quickly and most roads turned into rivers. On Saturday morning I walked through the flood from Kelapa Gading area to Cempaka Mas mall. There was basically only one way through a very small bridge covered with water, the other option was to rent "mini-boat" which were quickly built by locals. Anyway, here are some photos of the flood that I took around Kelapa Gading area: Some shots from the local news: