These messages were captured from Telenet PC-Pursuit NET-EXCHANGE BBS...

------------------------------------------------------------------------
Msg #  6028 Dated 02-27-88 21:48:34
 From: MICHAEL MURRAY
   To: ALL
   Re: LOOKS LIKE A HACKER

I've encountered a certain situation twice in the past week that leaves
me with a few questions. Upon connecting to my Telenet indial node, in
between attempts to connect to either a Telenet service or outdial 
modem, I've gotten the following message:
         CONNECTION FROM  301 18A

The first time this happened, whoever was on the other end began typing
several obscenities. Tonight when this happened, the person attempted
to generate a false "@" prompt. Whoever was doing this was trying to
lure me into typing in my PCP acct and password. Sure enough, when I fed
the prompt a made-up acct, hit return...I got back what I know was a 
misleading prompt.  

I don't think my acct/pw got to him/her, but it scares me that someone
can make such a connection. I called up the Telenet service number to
report this, but all I was told is that nothing can be done except to
change the password, at MY expense. Anybody else have this happen to
them?

Mike
------------------------------------------------------------------------
Msg #  6057 Dated 02-28-88 09:47:49
 From: IMA HACKER-
   To: ALL
   Re: IMPORTANT

The *PCP HACKERS* are working to show PCP what we think of their awful 
service and policies. We have been STEALING PCP IDs and PWs and using 
them. We can HACK into TELENET and connect to your indial modem without 
you even knowing it. Then we watch you hammer at a distant modem with 
those dialing scripts and it fills our screen with your pw and id. You 
don't see your pw but *WE DO* and we have hundreds of PCP IDs and PWs. 
Your TELENET  *CONTRACT*  makes YOU responsible for all charges to your 
ID, and PCP just sent out bills from back in September! We want more 
outdial modems and less BUSY. We want responsive Customer Service. We 
want a realistic CONTRACT, 300 and 2400 baud. SCREW PCP until then!!!
------------------------------------------------------------------------
Msg #  6062 Dated 02-28-88 12:59:42
 From: TONY WADDELL
   To: IMA HACKER-
   Re: (R)IMPORTANT

I don't know if message #6057 is for real or not ( I find some of the 
claims hard to believe ), but perhaps PC-Pursuit should make it just a 
little easier for users to change their passwords.  I understand it's 
quite a nose bleed to get one changed.
------------------------------------------------------------------------
Msg #  6072 Dated 02-27-88 15:45:04
 From: LEE RIMAR
   To: TOM WADDELL
   Re: PASSWORD CHANGES

TW>  I don't know if message #6057 is for real or not (I find some of
TW>  the claims hard to believe) . . .
(regarding a message on "hacking" PC-Pursuit)
.
    I just called Customer Service and expressed concern about it.
Unfortunately, they say it's entirely possible.  And that they're
working on the problem.
.
TW>  Perhaps PC-Pursuit should make it just a little easier for users
TW>  to change their passwords.  I understand it's quite a nose bleed
TW>  to get one changed.
.
    That was not my experience.  I changed mine last Monday.  Took
less than 10 minutes on the phone (the 1-800-TELENET number), and
the new id/password was in effect immediately.
.LDR
------------------------------------------------------------------------
Msg #  6073 Dated 02-27-88 15:46:13
 From: LEE RIMAR
   To: IMA HACKER
   Re: YOUR INTENTIONS

    You claim your aim is to get better customer service from Telenet,
more modems, et al.  Has it ever occured to you that your "screw the
system" attitude may be causing more trouble than it solves?  Screwing
up Telenet's ability to provide service seems unlikely to result in
better service.
    That's always struck me as an argument against violent revolts;
from socialist to anarchist.  Patterned after my comment above:
Blowing up a rich man's house does not put a roof over a poor man's
head.  See you in the Issues area if you care to debate it.
.LDR
------------------------------------------------------------------------
Msg #  6074 Dated 02-27-88 16:04:02
 From: JAMES NORTH
   To: ALL
   Re: ID PASSWORD SNACTCHING

If password pirates are able to steal PC Pursuit ids and passwords,then 
it is possible for them to steal the ids and passwords of business 
users that use the Telenet network. Such stolen ids and passwords would 
enable such pirates to make illegal international data calls at someone 
else's expense. THE ENTIRE TELENET PACKET SWITCHING NETWORK MAY BE IN 
DANGER!  If this is true, hopefully there is someway that Telenet can
correct this security problem. We could see the termination of the PC 
Pursuit service because of this!
------------------------------------------------------------------------
Msg #  6076 Dated 02-27-88 16:21:29
 From: BOB FREED
   To: TONY WADDELL
   Re: (R)IMPORTANT

Re: 6057, 6062
 
It's for real.  I've gotten a new user id and two new passwords in the
past two weeks because of this situation.  It's not true that these
jokers can intercept your session completely undetected, though.  If
you see a message such as "CONNECTION FROM xxx yyy", disconnect 
immediately or contact customer service on a second line.
------------------------------------------------------------------------
Msg #  6077 Dated 02-27-88 16:28:08
 From: BOB FREED
   To: IMA HACKER-
   Re: (R)IMPORTANT

Re: 6057
 
As I see it, the only thing you're accomplishing is to destroy this 
system completely.  I'm sure we won't see any of the things you 
mentioned (more outdial modems, less BUSY, responsive service, better 
contract, 300 and 2400 bps) any sooner if Telenet has to spend 
considerable time and effort plugging leaks in their security.  In fact, 
we may never see them at all.  Here's hoping they catch you soon....
