Do you really mean?

Yes I do. The whole server is free for everything constructive and creative, people have to learn somewhere about network security as well. gate.polarhome.com is open for hacking attempts to... in some special circumstances and conditions.

Rules:
- attack should be just against gate.polarhome.com
- DoS attacks are not counting.
- attack should not be destructive.
- forkbomb and other methods that paralyze the system are not counting as well.
- should not disturb normal usage of the system for existing users and services.
- after the successful attack winner has to share with the polarhome users community the weakness and method of attack
- you can use just this directory (/home/a/apache/html/hacker/) and your home directory at the system for description and winning ovacies
- we will distinguish four level of attacks:
A - from outside without account
B - achieving root permissions from normal user account
C - possibility to read secret table in MySQL database secret
D - achieving another higher rights

Note 1: Successful attacks and it's description with the user name of the hacker will be published at this page with all respective glory.
Note 2: if the hacker does not follow the rules he/she and the attackers host will be automatically banned from all services of the system and it might be started a criminal process against the attacker for demolition of private property.

Security details:
- gate.polarhome.com is a naked Linux system on the internet.
- system is not uncrackable and deadly secure - it has a learning functionality for the Linux beginners.
- site had been set-up using just the Linux OS (RedHat/Fedora distribution) - no additional hardware or firewall has been used for protection.
- site has improved logging and tracking system what can affect potential hackers.
- site allows just 2 port scans from one host (what is more than enough) after the host will be automatically denied. It is possible to allow again by sending a mail to root
- site has daily backups.
- everybody can make user account for hacking or normal purpose.

If you have more question about, please send mail to root@polarhome.com

Is GATE a secure site?
1045: Access denied for user 'apache'@'localhost' (using password: NO)

Good luck.

Statistics:
 
Successful attacks No. of port scans Denied hosts Re-allowed hosts Denied users Denied domains User attempts
A - 0 B - 0 C - 0 D - 1 301* 134* 6 76*   412*
Note:table is updated manually according to log files, except the list of denied hosts.
* means not counting any more...

Attack descriptions:
1. guest pts/108 Mon Sep 3 10:44 - 12:56 (02:11) cmb5-152.dial-up.arnes.si (description)
2. guest pts/34 Tue Sep 4 06:34 - 06:37 (00:03) AC8BD978.ipt.aol.com (forkbombed - same as above)
3. dookie 202.154.42.251 - - [23/Sep/2001:11:08:25 +0200] (description)
4. your link here...
 
 
You can send your notes, opinion, suggestions, warnings etc. to security@polarhome.com
View archive at security-list


Polarhome, production 1999-2001.
http://www.polarhome.com/hacker/
Member of Polarhome portal.