Additional Info on Bulgaria Connections!

[Zvezdelin Vladov]

A qucik adding note to the previous description of Bulgaria's connections:

4. National Academic Network - domain name 'acad.bg'
There is national academic network run with the support of many organizations,
but right now it is a little bit slow. In the capital city, though, three
of the biggest universities are conneted into an FDDI optical ring(100Mb/s).
But for the other participiants from the country the links are no more than
the usual analog one - 28.8 Kb/s to Sofia(the capital city). This network
is mainly financed from TEMPUS --a European Union's project.

5. Public Data Networks -- Used mainly for hacking :( -- The last well know
case -- a famous virus writer has became a hacker and thru X.25's country wide
public data network and thru its connection to the outside world (the
capacity of this outside link is in Kb/s range) has been able to get into the
computers of one of the oldest state universities -- University of Sofia.
He calls himself dav -- Dark Avanger. So, check out your /etc/passwd or similar
file and if you find something like unknown user called 'dav' it is better to
pull out you internet cable for couple of hours. This guy went to US thru X.25
and from there manipulating DNS protocol, and thru a bug in Talk Demon goes into
your system into the root account. After this he creates user called dav.
Check this out -- He got into the computers of the University of Sofia at
the speed of 2400 b/s (2400 bits per second!) and has used some scripts to add
himself to the /etc/passwd file. He's used also 'vi' to add himself to the
/etc/passwd list. This thing happend about December 1996, and report has been
generated to CERT. Sorry if this is too much info for you.

Zvezdelin Vladov


--- 
/****************************************************************************
 * Zvezdelin Vladov, Assistant, United States Peace Corps - Bulgaria        *
 * Phones: 35932 226546; 35932 272009; fax: 35932 563382; City of Plovdiv   *
 ****************************************************************************/