A friend at work tried to StallOWN me, so I am going to Rick Roll her on Monday. I'm creating a self deleting task on every computer in our Operations department, which will play this video: http://www.youtube.com/watch?v=eBGIQ7ZuuiU at the same time. Does anyone else know what StallOWNED or Rick Roll means? Does anyone have stories of their victories they would like to share?

nope, don't care either......

Ditto. Sorry.

I'm a nerd, but thats a little too nerdy for me.

azrae1l and dae11x,

Since you asked so nicely, I'll tell you.

StallOWNED and Rick Roll are basically the same game. The point of the game is to trick someone into either looking at a picture of Slyvester Stallone or watching a Rick Astley video. It's a challenge to come up with new and sneaky ways to trick someone into seeing the picture or video. In the end, those who play this game learn to think more like the enemy (hackers) and develop skills that will help them in counter-intrusion tactics.

and we wonder why jobs are outsourced

Thanks for the explaination that saves me alot of time googling the interweb for this information.

what?

did you say something?

sorry i was snoring......

I agree, it's mental laziness and disinterest that makes outsourcing jobs a positive thing for many companies. The trick is to be more valuable to the company than the money they are paying you. Quick and creative thinkers have nothing to fear from outsourcing.

I think I saw this on Barney..... WTF

We do the same thing with "Hoffing". Yep, David Hasselhoff, and the more beef-cakey the pic, the better.

WOW...that's it. These guys just f*cked me up. I'm torching all of my server rooms tomorrow and getting a job @ WalMart...

While I am sure some of the 'don't care' people probably are not interested in playing along - the game they are playing is a valid tactical exercise.

For my real job, I would be considered a 'white hat' type creature. IE - I make sure the networks I deal with cannot be broken into. And I do get paid well for doing this sort of work.

Script kiddies ? They don't have a prayer of getting through any of the servers. Why? Because chances are - I have already run better, more advanced versions of the script attacks they try.

The routers have proper ACLs, Firewalls are adaptive type that can even change their own rulesets - and if needed are watched closely by IDS systems. The list goes on (and on and on and on and on)

What I cannot prevent through technology are 'social engineering' attacks. These are often far more effective than any other form of attack in creating havoc. Recent high profile examples are a "few" thousand people being duped by various official looking bank sites.

These guys are playing games to learn social engineering.

HOwever the "Hoffing" is a bit cruel and unusual.