<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2//EN">
<HTML>
<HEAD>
<META HTTP-EQUIV="Content-Type" CONTENT="text/html; charset=US-ASCII">
<META NAME="Generator" CONTENT="MS Exchange Server version 5.5.2653.12">
<TITLE>RE: Korean server security?</TITLE>
</HEAD>
<BODY>
<BR>
<P><FONT COLOR="#0000FF" SIZE=2 FACE="Arial">Looks like someone actually hacked their main server, and not the one that was the</FONT>
<BR><FONT COLOR="#0000FF" SIZE=2 FACE="Arial">target. Anyone that signed up for the contest got an email something like the following:</FONT>
</P>
<BR>
<BR>
<BR>
<P><FONT COLOR="#0000FF" SIZE=2 FACE="Arial">>Regards,</FONT>
<BR><FONT COLOR="#0000FF" SIZE=2 FACE="Arial">></FONT>
<BR><FONT COLOR="#0000FF" SIZE=2 FACE="Arial">></FONT>
<BR><FONT COLOR="#0000FF" SIZE=2 FACE="Arial">> We should all respect the fact that Korea Digital Works is very brave for releasing </FONT>
<BR><FONT COLOR="#0000FF" SIZE=2 FACE="Arial">>their products to the public like this, and openly inviting all hackers, to find any possible exploits.</FONT>
<BR><FONT COLOR="#0000FF" SIZE=2 FACE="Arial">> One has to keep in mind that no matter how many preventions you take, there will always </FONT>
<BR><FONT COLOR="#0000FF" SIZE=2 FACE="Arial">>potentially be a way to hack the system. Anyway, the contest server was only simulation, </FONT>
<BR><FONT COLOR="#0000FF" SIZE=2 FACE="Arial">>not a real world environment, and you have to ask yourself "who will have a webserver running </FONT>
<BR><FONT COLOR="#0000FF" SIZE=2 FACE="Arial">>with this small amount of services activated". No body. The real world environment provided </FONT>
<BR><FONT COLOR="#0000FF" SIZE=2 FACE="Arial">>in this contest was not the simulation server at all, it was the overall contest in general.</FONT>
<BR><FONT COLOR="#0000FF" SIZE=2 FACE="Arial">></FONT>
<BR><FONT COLOR="#0000FF" SIZE=2 FACE="Arial">> This is why we decided to take the contest to the next level. We chose to skip the </FONT>
<BR><FONT COLOR="#0000FF" SIZE=2 FACE="Arial">>games and festivals, and go straight to the main server (where you registered for the </FONT>
<BR><FONT COLOR="#0000FF" SIZE=2 FACE="Arial">>contest). By taking this step, we achieve a real time environment with a system that has </FONT>
<BR><FONT COLOR="#0000FF" SIZE=2 FACE="Arial">>many services running, just like many other web servers. We also gain access to the server </FONT>
<BR><FONT COLOR="#0000FF" SIZE=2 FACE="Arial">>that contains all of the entries for the contest that is taking place, thus granting us the </FONT>
<BR><FONT COLOR="#0000FF" SIZE=2 FACE="Arial">>ability to manipulate those entries to our liking (keep in mind your prize money relies on </FONT>
<BR><FONT COLOR="#0000FF" SIZE=2 FACE="Arial">>your registration entry). </FONT>
</P>
<BR>
<P><FONT COLOR="#0000FF" SIZE=2 FACE="Arial">Theres more, but didn't want to pollute the list with to much off topic ASC.</FONT>
</P>
<P><FONT COLOR="#0000FF" SIZE=2 FACE="Arial">-Joe</FONT>
</P>
<BR>
<BR>
</BODY>
</HTML>