Re: Hakin9's new Nmap Guide
seclists.org
seclists.org
I doubt this is widely known on Hacker News, but Hakin9 is one of the most spammy organizations in infosec. They constantly beg everyone with any relationship to security online to write articles for them and it seems impossible to get them to stop. The creation of this epic troll was likely a direct response to that.
The articles they do get tend to be more centered around using and running tools, which isn't that useful and doesn't help you grow, and are filled with typos and errors. I wouldn't be surprised if there were also egregious examples of plagiarism hidden in their magazine like what was discovered at the Infosec Institute (http://attrition.org/errata/plagiarism/infosec_institute/).
Its hilarious, albeit not too surprising, that they published this without even bothering to read it (they crowdsource their proof reading and expect beta readers to report if they are about to publish something inaccurate or outright stupid).
SciGen has famously been used to get falsified publications into several "real" journals - citations are available on the SciGen page linked above and worth checking out.
My name is Ewa Dudzic, I have been the chief editor of Hakin9 for the last 15 years. I would like to make a statement concerning the article which you are mentioning in this post. First of all I would like sincerely apologize to everyone of you and all our readers for what has happened. I have to admit that it was the unintentional mistake on our part. It should not have been published but for some reasons, which we are currently investigating internally, it was published causing as I can see a lot of negative opinions. Mentioning that I would like to thank you for all your reactions. As negative as they sound I humbly accept them and take full responsibility for that mistake on our part. I can only wish that this hopefully one-time error will not undermine the general perception of Hakin9 as professional magazine offering the highest standard possible. I would also like to kindly ask you not to pass the judgment on authors collaborating with us (who devote their professionalism and heart to the content of each issue) basing on this example. I can assure you we will investigate the matter to prevent such "accidents" in the future. If you have any other questions or comments please do not hesitate to contact me via email: ewa.dudzic@hakin9.org
Also - hakin9 has only been around for 7 years, not 15. Sigh.
"...we asked (and answered) what would happen if mutually noisy flip-flop gates were used instead of virtual machines..."
"...J. P. Ito’s seminal treatise on suffix trees and observed effective USB key space..."
Lovely. They've been SocialTexted!
"Our experiments soon proved that exokernelizing our fuzzy Knesis keyboards was more effective than making autonomous them, as previous work suggested. Our experiments soon proved that microkernelizing our PDP 11s was more effective than exokernelizing them, as previous work suggested. We note that other researchers have tried and failed to enable this functionality."
"Despite the results by Qian et al., we can disconfirm that the much-touted real-time algorithm for the improvement of the transistor runs in Ω(2n) time. This may or may not actually hold in reality. Along these same lines, the frame- work for NMAP consists of four independent components: wireless methodologies, voice- over-IP, the appropriate unification of systems and Byzantine fault tolerance, and robust theory. This seems to hold in most cases. Therefore, the framework that our application uses is solidly grounded in reality."
Anyone have a link to this?
There is even an ASCII penis in the "sample output" section, but apparently none of this raised any flags from Hakin9's "review board".
|--[ Exploiting remote IP stack pool overflow:
| Anti ROP kernel heap non exec stack payload bypass
|8======================================================> ((