Tuesday 29 November 2011

Programs Are People Too

Sometimes computer systems are set up with programs that have usernames and passwords, just like any other user of the system. Thus if you login as that program, the program is executed. Programs might be a tutorial on how to use the net-work, information system, database, messaging system or just about any sort
of application program. Some sites also have accounts whose user-name is that of an elementary command, such as "time," "date" or "who" (which tells, you who is logged on). This allows people to carry out certain quickie functions without having to go through the hassle of logging on to the machine. Often these command
accounts don't have passwords associated with them, which is ironic since many are given superuser access permissions.

It's possible that you may get in to one of these program users with a name/password combination chosen from words such as these:

guest           demo                      help
info              tutorial                    tut
menu           data                        base
intro            anonymous              database
visit             welcome                  hello

"Visit" or "visitor" might be the username, and "tut" the password, for example. Other possibilities are trying to get in with usernames "calendar," It cal,11 #I sched," "schedule," " whois," "ftp," "who," "Ipq," "archie," or other common command names. Many installations will have a general-usage or even public information system set up. Access may be gotten by logging in as "info," as suggested above, but other variations are possible. The fictional Wakka Doo University may require logging in as "wdu," "wduinfo," "hellowdu, "wdunews," "wdumail," " welcomewdu," or some other variation on the University's initials. If you do manage to get in this way, first of all you are to be congratulated for a very successful hack - but then what? If you are interested in gaining higher access levels or in escaping out of the program entirely, you could have a lot of
diffi-culty ahead of you. An upcoming section will offer suggestions for getting beyond limited access restrictions.