SCO.com Defaced

A whole slew of readers wrote:"According to an Image on the SCO website they own all our code and we shall pay them all our money. (found at Heise online (german IT news). " Yes, I'm sure this will help the whole legal case; defacement has always been such a valued piece of input in court *cough*.

Nothing for you to see here. Please move along

[CmdrGravy]

Very relevant for a change

Re:Nothing for you to see here. Please move along

[Saven Marek]

I have often wondered, to myself, what if this is wrong sinking to their level? Someone defaces their site and its seen as a bad reflection on the linux communitys.

But when it comes down to it, this is not, even remotely close to what SCO are doing! SCO are thieves. Scum. They are wishing to use the legal syste, to gain and ownership and control and misuse the code of thousands of programmers, to scum off them and make profit on what is not theirs, they wish to lie and cheat and deprive the real workers and people playing by the rules of the benefits of their work, and they send letters to senators saying to make open source and linux and GPL unconstitutional??? This is not just a case of a minor disagreement between people about code this is SCO a thieving company wishing to exploit the works already done by so many people. Lying, theft, unconsciounable deceipt and exploitation

I think some graphics replaced on their website is really minor considering the filthy actions they are trying to do!!!. Really!!!

The best chat house on the web [tribbles.org]

Only business

[Anonymous Coward]

Hey, it's only business.

Don't take SCO's actions so personally.

Re:Only business

[Anonymous Coward]

It's only business when someone burgles your house, too. Most of us still take it personally.

Re:Only business

[itwerx]

It's only business when someone burgles your house, too. Most of us still take it personally.

And I hope the burglar doesn't take it personally when I shoot his dumb ass... :)

Re:Only business

[Anonymous Coward]

The point is it's not business. It's extortion. It's "Those tools in your shed, that computer in your house, those toys your children have are mine. Bring them over here or I'll sue you".

No matter whether you own the car or not, you end up involved in a legal squabble that costs you time and money.

Re:Only business

[pjt33]

Battery is either hitting people or a device for storing electrical energy. Did you mean barratry?

Re:Only business

[Thomas Miconi]

Hey, it's only business.

Well at the very least it's quite revealing about the security (or lack thereof) of their OS !

I think they should pay themselves $690 and put Linux on their servers :)

Thomas-

Well ...

[valisk]

according to netcraft [netcraft.com] they are running on Linux [netcraft.com]

Though I do expect that how much Darl paid for his license, is covered by a draconian non disclosure agreement, preventing you from ever revealing this information or any other arbitrary information that Sco may wish you to withold for the entire rest of your life. :D

Re:Only business

[sfjoe]

You forgot to credit that quote:

"It's only business, nothing personal"

-- Michael Corleone

Re:Nothing for you to see here. Please move along

[Anonymous Coward]

I think some graphics replaced on their website is really minor considering the filthy actions they are trying to do!!!

You're right, but all that's besides the point:

1. This doesn't hurt SCO, or those behind SCO, in any way at all.

2. It doesn't help Linux, or those involved in Linux, in any way at all.

3. It does harm the image of Linux users.

4. It's illegal. Yeah, they're doing worse illegal stuff, so what? Vigilante justice is not the answer.

Re:Nothing for you to see here. Please move along

[eric_brissette]

C'mon, you know deep down inside you think it's funny.

Re:Nothing for you to see here. Please move along

[Rimbo]

The long-term negative effects this will have on the Linux community's image and the loathing I have for vandals outweighs the short-term humor of the gag.

Re:Nothing for you to see here. Please move along

[Fullaxx]

if real justice doesn't prevail,
then vigilante justice will.

This Tuesday Night....

[emilng]

Sounds like the tagline for some syndicated action flick.

Re:Nothing for you to see here. Please move along

[hendridm]

1. This doesn't hurt SCO, or those behind SCO, in any way at all.

Well, it can't look good when the manufacturer of a commercial server operating system gets 0wned.

Re:Nothing for you to see here. Please move along

[AdamJ]

Or one of the half-dozen Mac users that have Photoshop on a BSD-based OS, maybe?

Re:Nothing for you to see here. Please move along

[period3]

3. It does harm the image of Linux users

What does the defacement of SCO's website have to do with Linux users? Who says the vandal is a Linux user - and even if he is, why should that affect the 'image' of Linux users?

Re:Nothing for you to see here. Please move along

[falsified]

Because the suspicion (Do you honestly not suspect so?) is that it probably was a Linux user, since those are the only people that SCO would be pissing off to such a great extent. And if people suspect things, then pretty much by definition they believe those things. And those people probably won't be directly questioned by people like you, so their suspicion/belief goes untouched, and so it harms the image of Linux users.

Re:Nothing for you to see here. Please move along

[hesiod]

> a Linux user, since those are the only people that SCO would be pissing off to such a great extent.

I use Windows and still hate SCO...

Re:Nothing for you to see here. Please move along

[ronaldb64]

Who says the vandal is a Linux user - and even if

he is, why should that affect the 'image' of Linux users?

What even makes you think the vandal is a he, you insensitive clod? :)

Re:Nothing for you to see here. Please move along

[forgotten_my_nick]

> 1. This doesn't hurt SCO,

I disagree. It shows to me that either Sco no longer care about thier website or that the site is owned that they can't fix it.

Which brings into question the security in SCO.

Don't think it makes Linux users look like vandals. Just because a few might be acting the maggot doesn't mean every single user is the same. If that was the case every windows user would be a script kiddie spam master.

Re:Nothing for you to see here. Please move along

[Deliveranc3]

If they make a big stink it'll get into some papers, which might see the light of day, as opposed to Slashdot.

It's all about having people ask "Now why would they do that?" and the answer is written right there in the image.

Like the Osama video's describe why he did THAT but of course no one is allowed to see those.

Re:Nothing for you to see here. Please move along

[LWATCDR]

I think Sco did it themselves just like the rigged the elections for Bush and are hidding that UFO they found from us. I mean think about it grep, sed, yacc, these have got to be from another planet.
Yea it was totaly freanking usless and was actually hurtful to Linux to do anything to SCOs website.

Re:Nothing for you to see here. Please move along

[SpaceLifeForm]

I have often wondered, to myself, what if this is wrong sinking to their level? Someone defaces their site and its seen as a bad reflection on the linux communitys.

You making the assumption that it was defaced by someone outside of SCO. They have been keeping their mouth shut lately, so what better way to stir up some noise but to deface the website themselves?

Re:Nothing for you to see here. Please move along

[wo1verin3]

That's a good point, if it wasn't an inside job, wouldn't they have fixed it already?

Can you imagine the SCO office right now?

[lawyer 1] How do we change graphics on our that there webpage thing?
[lawyer 2] graphics?
[lawyer 1] the picture thingy
[lawyer 2] uh....
[lawyer 1] ok maybe we should have kept the IT dept... someone send an e-mail to India asking how please?

Re:Nothing for you to see here. Please move along

[Smidge204]

Maybe it's not vandalism... perhaps they're just being more open about their business plan?

Never attribute to malice that which can be adequately explained by stupidity!
=Smidge=

Re:Nothing for you to see here. Please move along

[CmdrGravy]

We all know the nastiness SCO has sunk to and we don't like it but the most satisfiying solution will be to watch them crash and burn in court.

Defacing SCO's site doesn't do any damage to SCO, in fact the opposite because they can now cast "The Linux" community in a negative light. Amusing as the new logo is, someone has still most likely broken the law in placing it there and so SCO can say with some justification that some of their opponents are willing to even break the law to get at them.

So yes, it is

Re:Nothing for you to see here. Please move along

[Kombat]

Defacing SCO's site doesn't do any damage to SCO, in fact the opposite because they can now cast "The Linux" community in a negative light.

It obviously was not a member of the Linux community, a fact which can be easily proven. The defaced image contains absolutely zero typos. Clearly, it was an inside job.

Re:Nothing for you to see here. Please move along

[bernywork]

I am waiting for them to turn around and say:

"Just kidding!"

My personal hope is that they turn around and follow that up with:

"IBM didn't buy us, we used all our money on legal fees, we are now bankrupt, don't try to counter sue"

It may be defacement...

[Anita Coney]

... but at least it was tastefully done.

Re:It may be defacement...

[Malc]

Indeed. Perhaps it was orchestrated by SCO themselves. Something from their marketing department as an awareness campaign to push up their share price so that the execs can keep making money selling them. Oh it's great being on /.: tin foil hats are so de rigeur!

Re:It may be defacement...

[double-oh three]

That theory is helped by the fact that it is still up on sco.com's mainpage. It's apparently a single image replaced on the server, so either SCO can't access it's own webservers or it's a marketing ploy.

Or maybe they just don't use their website or read /.

hehe

[maharg]

.. but they *do* own all your code ~~~

See it before it goes away!

[mrpuffypants]

http://www.tomservo.net/etc/sco_defaced.jpg [tomservo.net]

Re:See it before it goes away!

[JanusFury]

And another one, as seen from Telnet in Windows XP:

C:\>telnet www.sco.com 80
GET /images/landing_pages_new/webinar_land2-1.jpg
JFIF d d Ducky Adobe d ä

Screenshot Mirror

[nuxx]

In case SCO [sco.com] ever gets around to fixing their site, a screenshot I took of the affected site is available here [nuxx.net].

Re:Screenshot Mirror

[jai0]

did you notice the "hacked by realloc" in the image?? the guy seems to write that..

Re:Screenshot Mirror

[archen]

Heh, only on slashdot would people note a hackers name in the background of a defaced website, and totally overlook a chick in a picture.

Re:Screenshot Mirror

[feargal]

Swine.

I just had to go back and look at the photo. You're right, there *is* a woman in the picture, all I'd noticed before was the tag...

I feel so pathetic, and I hate you for pointing it out.

Re:Screenshot Mirror

[wo1verin3]

They did... the phone call went like this:

*ring ring*
HAL: Mr. Belford?

PLAGUE: My name is the Plague

HAL: Uh, Mr. The Plague, uh, something weird's happening on the net.

PLAGUE: As in what, you hapless techno-weenie?

HAL: Uh, the web server image subdirectory in the Gibson is working really hard. We got one person online, the workload is enough for like ten users. I think we've got a hacker.

PLAGUE: Never fear. I is here.

HAL: I've narrowed the activity to terminal 23.

PLAGUE: Let's echo 23, see

Decent

[chaceboi]

Nice of him not to use the AYCABTU line.

Bad hacker! Bad!

[erlando]

Though you have to admire the subtlety..

calling card

[gosand]

Though you have to admire the subtlety..

And as with most hackers, (s)he left a calling card in the image. Can you spot it? The writing is on the wall, so to speak.

Re:Notice the whiteboard

[kasperd]

notice what the girl has written on the whiteboard: "Hacked by reallocl"

I think it says: "hacked by realloc(". I wonder what the original looked like. Was the girl also in the original? I can't find it anywhere (maybe sco can't either).

Re:Notice the whiteboard

[Zerth]

The girl was in the original, but you couldn't tell what she was writing.

Now if it said...

[chipmeister]

All your base are belong...

Re:Now if it said...

[Young Master Ploppy]

How about "All your codebase are belong to us" ...? (wince)

Look on there faces!

[Timber_Z]

Ah what I wouldn't give to see the look on there faces when they relieze this!

Course since I looked at the image, I am sure now they will try and charge me $699.00.

strings on the graphic

[catalax]

$ strings webinar_land2-1.jpg | head -n 3
JFIF
Ducky
Adobe

Re:strings on the graphic

[Anonymous Coward]

The image is already "tagged" 'Hacked by realloc(' in plain view.

Re:strings on the graphic

[Naikrovek]

did anyone else notice what she was writing?

"hacked by realloc(" and she's drawing the ")"

Re:strings on the graphic

[pchan-]

"hacked by realloc("

i knew realloc(3) was a bad apple! sure, it seems so simple to use, but how many people handle the error case correctly? however, i never would have expected an ansi c function to deface a website like that. it's just so high level (and childish). that kind of behaviour you'd imagine seeing from a language like perl, perhaps. from stdlib, i expected better.

Re:strings on the graphic

[Anonymous Coward]

JFIF means it's in JPEG File Interchange Format.

Adobe means it was created with an Adobe product.

Ducky is there because certain Adobe employees are obsessed with rubber ducks [realworldgolive.com].

Re:strings on the graphic

[mclearn]

Has anyone tried to see if there is a hidden message in it via steganography? Unfortunately, I can't get access to www.sco.com because my stupid employer has blocked www.sco.com. Must be because it violates the "unethical for the workplace" policy of our network use. :-)

Re:strings on the graphic

[petecarlson]

Yeah...

"This copy of photoshop cracked by reallock()"

Twice in one day.

[Amiga Lover]

Earlier in the day the lead story was asking for 256billion in payments from Microsoft, as SCO had found UNIX code in all versions of Windows.

Then that disappeared, but the graphic remained.

Re:Twice in one day.

[catalax]

here is a screenshot [neowin.net] .

Re:Twice in one day.

[Krafty Koder]

Oops - you're broadcasting to the entire slashdot mob that you are still using Internet Exploder....

tut tut.

I...

[sv25]

I would have posted a mirror, but the /. affect on the SCO site is much more fun.

it's not surprising they didn't fix it yet...

[SilveRo_kun]

It's not so obvious that the website is defaced =P

As for me...

[Anonymous Coward]

I welcome our new code-owning overlords.

Another article

[osvejda]

Article on NewsForge [newsforge.com] and screenshot [newsforge.com].

Conspiracy theory of the day

[surelars]

"SCO defaced their own site to discredit the Linux Community". You heard it here first.

This punchline...

[pekoe]

...is what, a year late?

Fixed

[oexeo]

It's been fixed now, it's gone back to the original slogan: "We own all your code, pay us all your money."

look at the blackboard in the background

[Leonig Mig]

the woman has written "hacked by reallock" ?? the name is slightly obscured.

Re:look at the blackboard in the background

[Anonymous Coward]

Efnet: /whois realloc
-!- realloc [[e-mail]]
-!- ircname : h4h4@sco
-!- channels : @#sco
-!- server : irc.nac.net [I have a poisonous friend]
-!- End of WHOIS

Re:look at the blackboard in the background

[drakaan]

somewhat interesting...realloc is laughing at sco, as are we all.

Re:look at the blackboard in the background

[TheSurfer]

$ resolveip nightwish.wideopenbsd.org
IP address of nightwish.wideopenbsd.org is 194.145.249.5
$ whois 194.145.249.5 | egrep '(org|address)'
org: ORG-pI10-RIPE
organisation: ORG-pI10-RIPE
org-name: prq Inet
org-type: NON-REGISTRY
address: Box 1206
address: SE 11479 Stockholm
address: Sweden
address: prq Inet

FTI: these are the same guys that manage thepiratebay.org, the biggest Swedish/European BitTorrent tracker.

Re:look at the blackboard in the background

[Renesis]

"hacked by realloc()"

"realloc()" is the guy that did the hack. His tag was on the RedHat page on the SCO site last night before he obviously thought up something more amusing ;)

that is elegant and leet...

[Anonymous Coward]

Changing only one image and in a way that it looks like it absolutely belongs...

all I can say is that all you other ankle-biters out there need to learn from this....

posting defacings that look like viagra adds and filled with shouts and greetZ only makes you look like a very silly child with only script-kiddie skillz.

(oh and spelling that way makes you simply look like a wanna-be)

congrats to whoever did it. they needed to make it a little more discreet to see if it would have stayed there for a week or more...

Re:that is elegant and leet...

[forgotten_my_nick]

Actually that is what got me too. Someone said to me "SCO has been hacked", I check the site quickly and thought "Oh they fixed it already". It doesn't seem to jump out at you first.

8:35 and it's still there...

[Cletus the yokel]

Conclusion: It's not a defacement. It's their new corperate motto.

Re:8:35 and it's still there...

[DaHat]

They are in Utah, and by my clock it's only 7:15 there... so it's unlikely that many are to the office yet and have yet to read the all of the "OMG LOL, U R SO GAY! WE H4XORED YOU FOO!" style e-mails.

I wouldn't expect to see anything change until at least 8am mountain time.

hacked by realloc?

[Kman_xth]

Anyone looked at what's begin written down in the background of the image? from what you can read: h?cke? by rea??oc( so.. hacked by realloc( also notice the photoshop smear spots near the arms of the woman in the background.

not that I encourage defacement

[enrico_suave]

but the subtle ones, that the people that see the site every day may glaze over and not notice are much more amusing than the "animated gif internet meme some cracking group ownz jo0uz" defacement.

e.

To quote the immortal words of Nelson....

[overbyj]

Ha Ha!

Openserver?

[SlayerofGods]

SCO® OpenServer(TM) 5.0.7
A little too open it would seem.

Re:Openserver?

[avdp]

Would be funny except their website appears to be running Linux.

Re:Openserver?

[TheRaven64]

Well of course it is. They own it, after all...

Still defaced..

[rasty]

Looks like the site is still defaced.. maybe they should teach HTML to some lawyers and fix things up :)

Microsoft.com looks OK

[nmg196]

..and sco.com is hacked. Therefore IIS is more secure :)

Rumors for Nerds, stuff that doesn't matter

[FlynnMP3]

Ooo. A hacked image has been placed on the SCO website. Alert all the SCO haters of the world! (long list granted)

I dislike SCO's business practices as much as the next /.er, but deliberately and maliciously hacking their website certainly doesn't help the business hat's outlook at the open source community.

Yes I know there probably is no corrolation between some script kiddie and the Open Source movement. It's all impressions anyway.

Free clue for the would-be SCO hackers out there: SCO makes themselves look like idiots - very well I might add. They certainly don't need your help.

-FlynnMP3

I just tried...

[zenmojodaddy]

...searching the SCO website for the phrase 'litigious bastards'. It returns an error message: #1040 Too Many Connections.

Made me laugh, anyway.

Announced here yesterday

[erikharrison]

Did anyone other than me not notice when this was "announced" here on Slashdot in the e17 story?

Here. [slashdot.org]

Seems not to have gotten much attention, but it show's that kiddies can't help but crow, even anonymously.

Re:Announced here yesterday

[sepluv]

You shouldn't have done that...

Next /. story: TSG issues subpeana to /. for server logs. (assuming TSG read /. ....yess.....)

(hmmmm....actually...no wait...they are very bored and haven't got anything better to do these days have they?...no money...no products (never had them)...no "IP" (or that)...nearly no lawsuit now....hmm could be....get /. to remove your comment ASAP...)

Why they haven't changed it

[oexeo]

Apparently they haven't changed it yet because their web-development department is having trouble finding the FrontPage shortcut

What about the fake story?

[stevey]

This was covered at The Register [theregister.co.uk] earlier today.

I'm suprised nobody mentioned the fake story which was inserted into the SCO homepage.

This screenshot [dahnielson.com] is a mirror of the article on the SCO page.

Pictures

[SteakandcheeseUm]

What the hell are they doing in This picture?
http://www.sco.com/images/landing_pages/people.gif [sco.com]
I for one, am glad that they got h4x0r3d after publishing this smut.

Re:Pictures

[Gleng]

That's a publicity photo from SCO OpenBukkake 3.7.

(The "before" photo.)

Groklaw down....Counter-attack?

[sepluv]

Groklaw.net [groklaw.net] is down and says:

Warning: mysql_connect(): Can't create a new thread (errno 11). If you are not out of available memory, you can consult the manual for a possible OS-dependent bug in /usr/local/wwwcache/groklaw-private/system/databas es/mysql.class.php on line 108
Cannnot connect to DB server

Maybe SCO have attacked Groklaw in order to get their own back (or maybe they attacked themselves and Groklaw because they were bored).

He was trying to tell them the weakness.

[Bocaj]

I believe there is an Apache exploit involving a realloc() function. addict3d article [addict3d.org]

Suspicious timing

[Animats]

It's interesting that SCO managed to get press releases out on this in the middle of the night over the Thanksgiving weekend.

SCO has a November 30 filing deadline in the IBM case, on the IBM counterclaims. That's tomorrow. SCO has to reply to IBM's "You violated the GPL and you can't use IBM's code in Linux any more" counterclaim. This is the day SCO has to provide legal arguments to back up their "the GPL is unconstitutional/illegal/irrelevant" claim. Which they're not going to be able to do successfully. That's not the news SCO wants heavily publicized.

So the timing here is suspiciously convenient for SCO.

Inside job?

Re:Slow aswell...

[Ralph Yarro]

Hopefully they wont be as slow when they start doing the linux support we pay them for

When they start? I'm already getting the full service.

As a completely unbiased and disinterested observer, I bought a SCO license to see what the fuss was about. Since then NOBODY has sued me for anything, least of all for violating any code SCO might possibly have in the Linux kernel (including any Linux kernels in alternate universes). You can't argue with service like that. I'd recommend it to anyone.

Business proposal...

[hummassa]

I got an infallible rock that keeps tigers away. You can even see me in my webcam and I guarantee: you'll see absolutely NO tigers!!! . Only US$ 694.99 !!

Not a defacement

[koi88]

Why do you think this is a defacemant?
It's their new business model (you insensitive clods)

Re:What changed?

[pjt33]

The words "Hacked by realloc(" in the "We own all your code" image suggest that someone broke into the server. Dunno what changes they made besides adding "Hacked by realloc(" to the image, though.

Re:Damn - it won't go "Slashdotted"

[nmg196]

Well no-one can be expected to account for Mac users ;)

Re:Ah

[TheRaven64]

SCO will be around for many years to come?