Email or username:

Password:

Forgot your password?
mcc's posts Post Back to profile
Top-level
leo vriscrab² (homestuck) :dado_verified:

@mcc did you know that Germany will email you if you have an open telnet server

10 Oct 2023 at 19:14 | Wall-to-wall | Open on 60228.dev
17 comments
mcc

@leo is this a joke. like the german government

10 Oct 2023 at 19:19 | Open on mastodon.social
leo vriscrab² (homestuck) :dado_verified:

@mcc not a joke and yes the german government

10 Oct 2023 at 19:20 | Open on 60228.dev
leo vriscrab² (homestuck) :dado_verified:

@mcc unless that was a joke which i just realized it might have been

10 Oct 2023 at 19:20 | Open on 60228.dev
Sven

@leo @mcc It's not, they do that (for Telnet and a bunch of other things like open database servers). Usually not directly, but rather they email the admin contacts of the IP address blocks, who are then asked/in some cases in principle legally required to tell their customers in turn.

10 Oct 2023 at 19:36 | Open on chaos.social
Dan Cassidy 🦌

@HeNeArXn @leo @mcc Is this the BND (German CIA) or some other branch of the government? Because I remember the BND being quite proactive in protecting civilians from hacking attacks in the early 2000s and it's good to hear if that's still the case.

10 Oct 2023 at 20:20 | Open on chitter.xyz
Maxi 10x 💉

@whimsy @HeNeArXn @leo @mcc The BND is for exterior espionage, if this warning procedure is still ongoing it would be the BSI (Bundesamt für Sicherheit in der Informationstechnik).

11 Oct 2023 at 0:04 | Open on chaos.social
leo vriscrab² (homestuck) :dado_verified:

@HeNeArXn I meant that @mcc's reply could've been read as calling the German government a joke

10 Oct 2023 at 20:28 | Open on 60228.dev
Sven
mcc

@HeNeArXn @leo no sorry I just legitimately had not heard of this before

10 Oct 2023 at 20:38 | Open on mastodon.social
™

@HeNeArXn @leo @mcc I also hadn't heard this. In such a case, what information are they asked/required to provide to their customers? (Surely not the address of the open server...?)

10 Oct 2023 at 21:41 | Open on mastodon.social
Sven

@1358531 @mcc BSI emails owner of the IP range, owner of the IP range looks up if they can match the IP to a customer (i.e. it's a statically assigned one and not a dynamic pool) and if they can they email the customer "hey your server has this weird open port/resolver/..., could you please check on that, and fix it if it is actually a problem?"
(I got such a mail in the past, but can't find it and can't 100% say if it was based on a BSI report or just something the provider noticed themselves)

11 Oct 2023 at 3:29 | Open on chaos.social
mcc

@leo that is creepy but I suppose legitimately helpful

10 Oct 2023 at 19:23 | Open on mastodon.social
DELETED

@mcc @leo also if you have like open ports that NFS uses for RPC or something like that

10 Oct 2023 at 19:25 | Open on packmat.es
Motor Sprite

@mcc @leo this reminds me of the Dutch government sending that one person a tshirt that said “I hacked the Dutch government and all I got was this tshirt”

10 Oct 2023 at 19:38 | Open on mastodon.social
オセロットオセロ (VF/AC)

@leo @mcc Wow, a government that points out your security holes so you can close them instead of just exploiting them.

10 Oct 2023 at 19:32 | Open on meow.social
Neia
Panama Red

@leo
I read that at first as "open toilet server," which made it even creepier.

@mcc

10 Oct 2023 at 19:57 | Open on mstdn.social
Go Up