-----BEGIN PGP SIGNED MESSAGE-----
Hello everyone,
I have decided to start with a public service announcement. The
British Computer Society and Scotland Yard Computer Crime Unit have
analyzed the Matrix:Reloaded and put forth the following warning for
young viewers:
"Viewers of the new box office blockbuster Matrix Reloaded should not
be tempted to emulate the realistic depiction of computer hacking,
warns the British Computer Society (BCS). Many computer experts are
sufficiently concerned over the accuracy of some of the computing
scenes in the film to alert young computing enthusiasts of the
illegality of hacking and of the tough prison sentences that are now
being handed out to perpetrators of this serious crime.... Although
Hollywood likes to glamorise hacking, and this movie would appear to
be more accurate than many by showing the use of actual network
mapping software, it should not be as simple as it can be made to
appear." -- http://www1.bcs.org.uk/DocsRepository/04900/4992/matrix.htm
And speaking of actual network mapping software, I am pleased to
announce the release of Nmap 3.30. This release offers substantial OS
detection improvements. In particular, it includes the biggest
fingerprint update ever (thanks for all the submissions!). It also
includes a brand new OS classification scheme, and I have made Nmap
more willing to guess the OS when no exact match is found. And while
I was working on OS fingerprinting, Peter Marschall sent me another
huge NmapFE patch that dramatically improves this X-Window GUI
interface to Nmap. Here are the full details from the CHANGELOG:
o Implemented the largest-ever OS fingerprint update! Roughly 300
fingerprints were added/modified. These massive changes span the
gamut from AIX 5.1 to the ZyXEL Prestige broadband router line.
Notable updates include OpenBSD 3.3, FreeBSD 5.1, Mac OS X 10.2.6,
Windows 2003 server, and more WAPs and broadband routers than you
can shake a stick at. Someone even submitted a fingerprint for
Debian Linux running on the Microsoft Xbox. You have to love that
irony :). Thanks to everyone who submitted fingerprints using the
URL Nmap gives you when it gets a clean reading but is stumped. The
fingerprint DB now contains almost 1000 fingerprints.
o Went through every one of the fingerprints to normalize the
descriptions a bit. I also looked up what all of the devices are
(thanks E*Bay and Google!). Results like "Nexland ISB Pro800 Turbo"
and "Siemens 300E Release 6.5" are much more useful when you add the
words "cable modem" and "business phone system"
o Added a new classification system to nmap-os-fingerprints. In
addition to the standard text description, each entry is now
classified by vendor name (e.g. Sun), underlying OS (e.g. Solaris),
OS generation (e.g. 7), and device type ("general purpose", router,
switch, game console, etc). This can be useful if you want to (say)
locate and eliminate the SCO systems on a network, or find the
wireless access points (WAPs) by scanning from the wired side.
o Classification system described above is now used to print out a
"device type" line and OS categories for matches. The free-form
English details are still printed as well. Nmap can sometimes
provide classifications even where it used to provide nothing
because of "too many matches". These have been added to XML output
as well. They are not printed for the "grepable output", as I
consider that format deprecated.
o Nmap will now sometimes guess in the "no exact matches" case, even
if you don't use the secret --osscan_guess or -fuzzy options.
o Applied another huge NmapFE patch from Peter Marschall
(peter(a)adpm.de). This revamps the interface to use a tabbed
format that allows for many more Nmap options to be used. It also
cleans up some crufty parts of the code. Let me and Peter know what
you think (and if you encounter any problems).
o Windows and Amiga ports now use packet receive times from libpcap.
Let me know if you get any "time computation problem" errors.
o Updated version of the Russian man page translation from Alex Volkov
(alex(a)cherepovets-city.ru).
For those of you running Linux/x86 w/a recent version of rpm
(www.rpm.org), you can install/upgrade to the newest version of
nmap/nmapfe by executing these commands as root:
rpm -vhU (nmap url)
where (nmap url) is one (or both) of these:
http://download.insecure.org/nmap/dist/nmap-3.30-1.i386.rpm
http://download.insecure.org/nmap/dist/nmap-frontend-3.30-1.i386.rpm
For the rest of you, source tarballs and source RPMs are always
available at: http://www.insecure.org/nmap/nmap_download.html . That
page also notes sources of binary packages for common operating
systems.
For the more paranoid (smart) members of the list, here are the md5
hashes:
b1f82b9114c63c35acde515acf928ccc nmap-3.30-1.i386.rpm
639fc1c91f48319eca97401e74f9c90e nmap-3.30.tar.bz2
7790fdc81dd8071abaa53f21f874ce12 nmap-3.30.tgz
ec4b4f563488eef4ae4abd0f79f5ac83 nmap-3.30-win32.zip
806420a1a8b8a118f42dc519fce3bcb2 nmap-frontend-3.30-1.i386.rpm
These release notes should be signed with my PGP key, which is
available at http://www.insecure.org/fyodor_gpgkey.txt .
The key fingerprint is: 97 2F 93 AB 9C B0 09 80 D9 51 40 6B B9 BC E1 7E
Cheers,
Fyodor
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.0.4 (GNU/Linux)
Comment: For info see http://www.gnupg.org
iQCVAwUBPv/ZR84dPqJTWH2VAQFt1gP/XuhvDlFGsrvIaSZw3J9TWm4NFneDjajV
GzyFEbMRCvoxlonCaKxTzHYaEdcP3LczmH+gyqHHwz1rfAIx+ejGQxv8RbwCH53B
P/XvVX9O+/ILDkF48MgWaNDXKyv5yEXlg7h24IM4LabKpRiQeg2zp5FDvOV28yfa
+hp0oO9DEMI=
=7Duy
-----END PGP SIGNATURE-----
--------------------------------------------------
For help using this (nmap-hackers) mailing list, send a blank email to
nmap-hackers-help_at_insecure.org . List run by ezmlm-idx (www.ezmlm.org).
Received on Jun 30 2003
Intro
