[kictanet] NSIS website hacked?

[John Walubengo]

>>>>--- Odhiambo Washington <odhiambo at gmail.com> wrote:

Hey, Walu, it's just the website, the content of which is
for public consumption (and public defacing whenever
possible to prove a point).
<<<<<

Wash,
true, it's just a website and i am definate that there was
nothing critical or sensitive on the site...but think about
it this way, whoever defaced the site had to gain
admininistrator rights on the box and from there he or she
could launch an attack onto other probably more sensitive
boxes within NSIS(the intranet)...

yes, i too checked out and noted their domain (nsis.go.ke)
is hosted at wananchi online. what I dont know is whether
the content(website) is there as well or is in-house at
NSIS which could raise the stakes abit....

walu.
  



-- 
Best regards,
Odhiambo WASHINGTON,
Nairobi,KE
+254733744121/+254722743223

--- Odhiambo Washington <odhiambo at gmail.com> wrote:

> On Dec 11, 2007 3:19 PM, John Walubengo <jwalu at yahoo.com>
> wrote:
> > For those who may not know NSIS stands for National
> > Security Intelligence Service, the Kenyan equivalent of
> the
> > American CIA, Russian KGB, Israeli Mossad and the
> British
> > M15 get the drift?
> >
> > Now these chaps website seems to have been hacked and
> > defaced. Check out...
> >
> > http://www.nsis.go.ke/
> >
> > and please tell me am wrong.
> 
> You are right, it's been "cracked". However it's hosted
> by third
> party, if you look at DNS records, and this can always
> happen when a
> server admin installs on a server stuff they don't quite
> understand,
> or even plays with a sensitive configuration without
> thinking much
> about it.
> Hey, Walu, it's just the website, the content of which is
> for public
> consumption (and public defacing whenever possible to
> prove a point).
> 
> 
> -- 
> Best regards,
> Odhiambo WASHINGTON,
> Nairobi,KE
> +254733744121/+254722743223
> _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _
> 
> "Oh My God! They killed init! You Bastards!"
>                         --from a /. post
> 



      ____________________________________________________________________________________
Be a better friend, newshound, and 
know-it-all with Yahoo! Mobile.  Try it now.  http://mobile.yahoo.com/;_ylt=Ahu06i62sR8HDtDypao8Wcj9tAcJ