Useless [hacker|cracker|computer-criminal|*] Movie Trivia: Antitrust

Webspace Sponsored by:

This page (like others in the Useless Trivia space) exist to provide analysis and review of computer security in films. Reviews of usernames and passwords used in these films will be mentioned as they can be found and identified.

Antitrust: Drama, Suspense

First screen that has control of the SYNAPSE satellites:
Left side

-----------------------------------------------------------
|                                           ____          |
|                                        ,~^    ^~.       |
|              -----------------       +            +     |
|1    1    1   |Port Listening#|      =              =    |
|1   189   7   -----------------     /                \   |
--------------  13056 -  -------    /                  \  |
|Auto Delete#|  24005 -  |     |   |                    | |
--------------  84231 -  |     |   /       Network      \ |
|                        |     |   \     Unavailable    / |
--------------           |     |   |                    | |
|            |           |     |    \                  /  |
--------------           |     |     \                /   |
|                        |     |      =              =    |
--------------           |     |       +            +     |
|            |           |     |         ^~,____.~^       |
--------------           |     |                          |
|                        |     |     S  Y  N  A  P  S  E  |
--------------           |     |                          |
|            |           |     |                          |
--------------           -------                          |
|                                                         |
-----------------------------------------------------------
|                                                         |
-----------------------------------------------------------
|                                                         |
|            --------                                     |
|            | HELP |                                     |
|            --------                                     |
-----------------------------------------------------------
|Single   32  SIRC - POCC CMD|| 2 RESUME                  |
|Single   32  SIRC - POCC CMD|| 3                         |
|Single   32  SIRC - POCC CMD|| 4                         |
|Single   32  SIRC - POCC CMD|-----------------------------
-----------------------------------------------------------
___________________________________________________________
|-------.  Command Tracking  ,----------------------------|
|        -------------------                              |
|---------------------------------------------------------|
|     Title                       RSLT   CAP   NDX   POSI |
|---------------------------------------------------------|
| SIRC - POCC CMD                 THRU   N/A   696   PAYC |
| KU LDR - GPS RCDR               SNGL   N/A   704   RFCO |
| Test Command                    SNGL   N/A   0     TELO |
| GPS 2 STOP                      SNGL   N/A   703   DATA |
| GPS 1 RCD SERIAL A              SNGL   N/A   702   DATA |
-----------------------------------------------------------

Right side

                           MANAGEMENT DISPLAY

                 ----------------             ----    ---------
                 |              |        -----| 2|    |PM ANT |
                 |   SATELLITE  |        |PRE||  |    |ACT ULF|
                 | IP ADDRESSES |        -----|CC|    |SM  ULF|
                 |              |        -----|  |    ---------
                 ----------------        |PWR||OK|    |  HEMI |
------ ------    ----------------        -----|__|    ---------
| PF1| | PF2|    | 10.24.53.192 |        |RF |        |ANT SEL|
| OK | | OK |    | 10.43.84.143 |        |TEM||---------------|
------ ------    | 10.59.42.220 |        |REF||---------------|
____________     | 10.84.30.228 |        -----|  A MODE       |
|   CGIL   |     | 10.48.29.234 |             |  OUT          |
------------     | 10.73.24.243 |             -----------------
|PWD    1 2|     | 10.85.39.233 |               ---------------
|CONFIG CMD|     | 10.38.93.212 |      ---------|    KU DA    |
|KU FS DABL|     | 10.32.94.239 |      |ANT MO ||--------------
|ALL IN CMD|     | 10.35.83.242 |      |SEARCH ||    ACT  DES |
------------     | 10.48.93.211 |      |DETECT ||AZ   .1   .1 |
                 | 10.38.74.254 |      |TRACK  ||EL  61.9  62 |
-----------      | SELECT  RCV  |      |DATA G ||A1  -20   GM |
|CMD ERROR|         -------------------|SIG SI |---------------
-----------         | EVA PROTECT INH |---------
--------------------|-----------------|-------  ---------------
|CAL COMP||MADS/OEX||  D  > AZ >   D  ||S-K A|  |MECH||KU TEMP|
--------------------|                 ||     |  ---------------
--------------------|  D  > EL >   D  ||K-S A|  ------
| PSP || PDI || VPs||                 ||     |  |    |
----------------------------------------------  |    |
----------------------------------------------  |SIG |
|PCMU||KU DAT|| IO ||                        |  |    |
--------------------|                        |  |    |
-----------   --------------------------------  |PHAS|
|PI ||DAP |   |    ||        BITE  MODE  TRK |  |    |
-----------   |    ||                        |  |    |
--------------|    ||GPS1     OK   RCDA   1  |  |MODE|
|DAP  AUTO  V  OFF ||                        |  |    |
----------------------------------------------  ------

When Milo signs up for work, he is given a "SmartCard" card key for movement within the Software Engineering complex. Head security officer (Bob) mentions "tailgaiting" and risks for "not challenging" someone you think does not belong there.
Milo's portion of code is on the "critical path" for project development of SYNAPSE project. Because of this, he is given advantage to break some security rules that others might be more strongly disciplined.
Physical security break is encountered when Teddy is killed. The value of his work was greater than the preventative security provided for his physical access.
It was stated that Teddy was paranoid about people gaining access to his computer and this prompted him to install software safeguards and a firewall rules.
Milo Tailgates into Building 20 and gets caught on purpose. While he is in the office of the head of security a timebomb blows up in a closet forcing the security head to react. This gives Milo temporary unrestricted physical access to resources in the security Head's office. (Physical Security: Woot!)
Milo waits for the head to re-check to make sure Milo does not leave, and then Milo used the SmartCard card key generator/printer in Bob's office to forge a new card with elevated access.
```
Card Number : 01-707
Card Name   : K. COSGROVE
Access Level: ALL LEVELS - ALL DOORS
```
Next, Milo sets out to review security tapes to the new building he suspects is being used to gather video one people being spied upon - like his friend Teddy, who was killed. Access to this video is also in Bob's office.
Milo searches for video tapes to building 21. He sets recording to Building 21 to stop, and enables playback of video from 72 hours prior. And then to "Revert to record mode after playback.
You would expect there to be logs of new badges being created and possibly even video of the security office, but that does not come into the story.
You would also think that dispatch would notice when security guards in video are not talking through radio in the picture but are talking through the radio based on the audio.
A second security group is monitoring Building 21. (Security in Layers and with redundancy.) They comment that Milo leaving Building 21 empty handed.
Milo realizes a hidden Satellite dish is installed in the Children's area. He breaks into a computer in the children's area and gets a shell. (A csh or tcsh based on th "%" prompt.)

From a shell, he issues:
ps -aF
[skipped ones owned by root] phil 2569 933 0 Date tty1 19:24:52 /home/phil/bin/grabapp -p 1984 phil 2570 933 0 Date tty1 01:09:18 /home/phil/bin/dayscreen %
He then tries:

% /home/phil/bin/grabapp 
Useage: grabapp -p port
% show -p 1984
% showall
% mount
/dev/sda6 on type ext2 (datatower)
/mnt10/nurv/hr/priv/nbase/executives/tbls/comin?
/mnt13/corp/hr_res/recruitment/academic/ffls/
???n/serv/lvl3/sid/nbaseEMPLOYEES/auto_strt.al
???r/sid/nbase/nbaseRECRUITS/gasv/
???r/sid/nbase/nbaseEMPLOYEES/tasv/
???in/bstls/nb_edt/cchcler
???p/nbase/rollback/cache/employees.nb - mod:to


???/load nurv/hr_res/tbls/employees.nb

They show him type three keys: "p", "i", "l" and "k"
New screen listing commands typed:

% /home/phil/bin/grabapp 
Useage: grabapp -p port
% show -p 1984
Error: port 1 in use

% cd /home/phil/bin
% ls
dayscreen  grabapp  hideall  showall
% ls -l
-rwx--x--x   1 phil green     2691856 Date 21  199 dayscreen
-rwx--x--x   1 phil green     3464372 Date 21  199 grabapp
-rwx--x--x   1 phil green       91648 Date  9  199 hideall
-rwx--x--x   1 phil green       85096 Date  9  199 (dns helper)
% df
Filesystem           1k-blocks      Used Available Use% Mounted on
/dev/sda6              1981000   18249243    53646  97% /

% show -p 1984

% showall

%

%

Shifts to graphics:

                          Current Employees

                    -----------------------------------
                    |O                             _=X|
                    -----------------------------------
                    |  Abbon, T.M.                  |#|
                    |  Adams, Barbara               |x|
                    |  Adams, Charles               |x|
                    |  Aisle, Pat                   |x|
                    |  Aldin, Joan                  |x|
                    |  Alexander, Richard           |x|
                    |  Allen, Linda                 | |
                    |  Allison, C. R.               | |
 $ % ^ & V          |  Ally, Andrew                 | |
Base Team           |  Alvin, William               | |
                    |  Anderson, David              | |
                    |  Anderson, Dorothy            | |
                    |  Andrews, Michael             | |
                    |  Archer, Jim                  | |
                    |  Arnold, James                | |
                    |  Asher, F.C.                  | |
                    |  Atkinson, Robert             | |
                    |  Austin, Robbie               | |
                    |  Avery, Elizabeth             | |
                    |  Ayell, Homer                 | |
                    |  Bailey, Charles              | |
                    |  Baily, Sharon                | |
                    |  Bain, Donald                 | |
                    |  Baker, Elizabeth             | |
                          (break)
                    |  Boyd, David                  | |
                    |  Bradley, Scott               | |
                    |  Brewer, John                 | |
                    |  Brooks, Kenneth              | |
                    |  Brown, Lorraine              | |
                    |  Buchanan, Gerry              | |
                    |  Bucks, Josh                  | |
                    |  Burke, Gina                  | |
                    |  Butler, Venkal               | |
                    |  Cain, Becky                  | |
                    |  Calighan, Lisa               | |
                    |  Campbell, Anne               | |
                    |  Campbell, Hyle               | |
                    |----------------------------------

He clicks on "Calighan, Lisa" and pulls up BIO on her:

DOB:      July 16
YOB:      1979
POB:      Dayton, Ohio

Height:   5'4"
Weight:   110 lbs

Parents:  Divorced. Mother remarried.

Molested by Stepfather at age 8

Distinguishing marks:
          Scar on her inner left thigh

Dental Records:
          On file with Dr Erickson

He clicks on the link "Molested by Stepfather at age 8"

CHILD MOLESTED BY STEPFATHER

Name of perpetrator:   C. F. Calighan
Relationship to child: Stepfather
Age of child at time of incident: 8 year

Assault aggravated by use of threatening force
Hospital treatment received for injury sustained.
Child received 11 stitches

C.F. Calighan received jury trial and found guilty
Sentenced to 20 years
Child testified at trial

Child & mother relocated after threats received on child's life

C.F. CALIGHAN CURRENTLY OUT ON PAROLE.

New screen:

------------------------------     ------------------------------
|                            |     |                            |
|   ACTIVE EMPLOYEES         |     |   CURRENT RECRUITMENT      |
|                            |     |                            |
------------------------------     ------------------------------

------------------------------     ------------------------------
|                            |     |                            |
|   STANDARD EMPLOYEES       |     |   UNDER OBSERVATION        |
|                            |     |                            |
------------------------------     ------------------------------

------------------------------     ------------------------------
|                            |     |                            |
|   RESOURCES                |     |   PENDING RESOLUTION       |
|                            |     |                            |
------------------------------     ------------------------------

                ------------------------------ ----------
                |                            | | SEARCH |
                ------------------------------ ----------

He chooses "Under Observation"

                          Current Employees

                    -----------------------------------
                    |O                             _=X|
                    -----------------------------------
                    |  Adams, B.                    |#|
                    |  Allen, S.                    |x|
                    |  Anderson, W.                 |x|
                    |  Baxter, R.                   |x|
                    |  Bennett, A.                  |x|
                    |  Brown, V.                    | |
                    |  Campbell, M.                 | |
                    |  Chan, G.                     | |
                    |  Chau, K.                     | |
                    |  Chen, J.                     | |
                    |  Cheung, E.                   | |
                    |  Chin, T.                     | |
                    |  Cooper, P.                   | |
                    |  Davies, M.                   | |
                    -----------------------------------

He finds papers showing Teddy was under surveillance. Follows story to link about "frequent collaborator Milo Hoffman"

DOB:      December 22, 1980
POB:      Kings County Hospital, Fresno, CA

Parents:  Father/Mother deceased
          Fatal auto accident, July 3, 1987
          San Bernardino, California

Siblings: None

Resultant psychological evaluation by Dr. H. Zabrinsky
of the Hanford Mental Health: within normal range.

Suffers from a catastrophic allergy to sesame seeds.
Admitted as critical, recovery complete.

Interests include chess, snowboarding, and
interactive strategic games.
Enjoys pop music-techno and hip-hop.
Collects comic books. Left campus on several
occasions to attend comics conventions

Graduated from Fresno Senior High School
Accepted to Stanford University on scholarship.
Major: Computer Science.

Developed temporal database for combinatorial
optimization and compression algorithm with best
friend and long time collaborator Teddy Chin.

Clicks on link for "catastrophic allergy to sesame seeds."

If taken internally:
     Immediate breathing obstruction
     Loss of consciousness
     Sudden death

and:

CATASTROPHIC REACTION TO SESAME SEEDS:

Symptoms:

     Elevated heart rate
     Tightness and swelling of Larynx
     Tightness and swelling of Oral cavity
     Tightness and swelling of Trachea
     Tightness and swelling of Bronchial tubes

     Resulting in
        Complete breathing obstruction
        Loss of consciousness
        Signs of sever cyanosis and shock

Taken to Stanford Medical Center November 9th by Alice Poulson

Dental records filed at the Zyberg/Jones Dental
Clinic. X-rays on file at the Kings County General
Hospital: fracture of the right femur

Identifying marks: N/A

Follows link to "Alice Poulson"

Alice Poulson

Real name Rebecca Paul

DOB: January 27, 1978 Homebirth
POB: Hartford, Connecticut
Height: 5'10" Weight 115 lbs

Criminal History summary:
      Criminal trespass 1

Paper shows she was expelled from the University of Illinois

Rebecca Paul

April 7th
  Approached by ND47
  Negotiations successful

May 5th
  1st meeting arranged with Hoffman

May 14th
  School records amended by ND47

Sept 2nd
  Transferred to Sranford Univ.

Another partial:

     Receiving stolen goods
     Illegal poss-narcotic

Arrest record deleted by ND47.


University of Illinois.

He chooses link "ND47" (Later determined to be the letters for a name for an american football team (Notre Dame 47), and the number 47, from the shirt of a player as seen on the wall of a federal agent paid by NURV to deal with legal issues on behalf of the company.)

Loading from ND47 Resource File

and then:

                   --------------
Data access from : | Cerebellum |
                   --------------

and then he finds criminal background for :

Criminal Suspects
          Aryan Brothers

          Chris Van Vleit

          Brian Callier

and he clicks on Aryan Brothers

PERRY EARL SMITH & WESLEY JAMES SMITH

Area of operation: Silicon Valley area

MODUS OPERANDI:
1.    Racial epithets scrawled on walls
      and/or windows i.e. "Die Chink"
2.    Random destruction of property
3.    Hate literature left behind

ARREST RECORD:
1. Charged as juveniles with break and enter of
   corner store - Palo Alto, California
      - Theft of cigarettes
      - Sentences as first time offenders
      - 3 months probation
2. Charged while on probation with assault
   causing bodily harm.
      - Sentenced to 6 months juvenile detention
3. Charged with mischief and perpetrating a
   Hate Crime in San Jose, California. Spray
   painting and vandalizing a Chinese Garden.
      - Sentenced 6 weeks boot camp program
4. Charged with Perpetrating a Hate Crime and
   Arson, Cupertino, California. For attempting
   to burn a Vietnamese Bookstore
      - Trial moved to adult court
      - Sentenced to a year less a day

He clicks on link "Die Chink" but finds file is missing. He tries to find inodes and repair/restore missing file:

% cd xdrv

chin_serv1.cm     chin_serv2.cm     chin_serv3.cm
chin_serv4.cm     chin_serv5.cm     chin_sun.m

% ?tnode -l chin_serv1.cm > scat -b 00cf -hex

Displaying 384 bytes of directory tree-node
for file "chin_serv1.com" in hex mode:
000000  1A2F FB03 9C00 FB03 0003 9863 0D0F 9823
000010  08EB 06D3 0B98 0FF2 932A A306 E30B 6282
000020  7B99 E408 2C4B 0208 980A D30B DB02 AB16
000030  DB16 DB04 0000 0000 0000 0000 0000 0000
000040  0000 0000 0000 0000 0000 0000 0000 0000
000050  0000 0000 B0E6 0144 3260 83B0 8142 B060
000060  B369 3032 B060 3010 FDEA 104C B960 8837
000070  1263 030B 300A 0C7F B16D B176 30D0 FC10
000080  0431 A930 3631 6930 0EBB 1083 3B45 ED32
000090  60F5 2BB1 09B1 60B9 74B1 6531 6EB0 0E31
0000A0  60A0 B14B 30D6 B1A2 0FDE F85B 1093 2C9C


% restore -i 1a2f -s 0055
Restored File "chin_serv1.cm"

Video Streaming Initiated

At this point he see the murder of his friend on video and realizes the murder was not a racial kill, but a killing over greed by his employer's henchmen.
A different video-screen is offered to us when we see the video running:

% xdir

chin_serv1.cm     chin_serv2.cm     chin_serv3.cm
chin_serv4.cm     chin_serv5.cm     chin_sun.m

% xdf -s chin_serv1

Displaying First 256 characters of file
"chin_serv1.cm" in ASCI format (48char/line):

eof@2f98a-physlen:2fa2-loglentp:2f52-crypto_mpg4
-pkey:038f9a8b8c00bb-codec:mandel_bronson4-c?a               (?=h or b)
n_tot:3-chan0:8-chan1:8-chan2:IO-stream_dat:0000
0000021985098v709??????g1f65????b1456kj56fgi6y??
095684507fo??36???5ri56???????21347yd56?????245o
878r?vglu????567

% Vidcryp -k pkey > cbin_serv1.com > vdpt

Fay Reversed Calced
Video Decrypted
Video Streaming Initiated...

%

Obviously, most of these things are *NIX-like, but they often have issues. In this case, they probably meant to use < after the "Vidcryp -k pkey" instead of the < since, what they have would delete the file. From this, we could expect the video was originally supposed to be encrypted according to the script, and then he was supposed to find the key, extract it, and then use it to decrypt the video and store the decrypted version in vdget or, more likely, "|" it through a command called "vdpt" for display.
He hears a noise and knows someone is coming. Next we are to believe he writes a script that uses "rsh" (remote shell) to have all of the displays return their operation back to normal.

foreach? rsh daycare$i "hideall - p 1984"

% exit

An alternate end script is found in the next screen:

% foreach i (1 2 3 4 5 6 7 8 9 10 11 12 13 14 15)
foreach? rsh daycare$i "hideall - p 1"
foreach? end

While he hides from the person who just came to the children's play area, he notices a server and a backup server. This guy uses the machine and there is a displayed message before he yanks a drive out of the machine:

-------------------------------------------------------------
|?act: Cory 0808                                            |
-------------------------------------------------------------
|                                                           |
|    24 hours video download completed to drive: Cory_A     |
|                                                           |
|          Video stream switched to drive: Cory_B           |
|                                                           |
|             Drive: Cory_A ready for removal               |
|                                                           |
-------------------------------------------------------------

Difficulty in trust becomes evident when you want to find someone to trust with information that is not desired for release by a larger company and that larger company has controlling or partial ownership in a majority of majory media outlets.
A screen with him coding what appear to be MIME type based on extensions.
At the art party, Milo breaks into his boss' office and gains access to the Satellite control program, but it looks different from the first screen shown at the beginning of this movie review.

Over this screen, he starts up the "MANAGEMENT DISPLAY":

                           MANAGEMENT DISPLAY

                 ----------------             ----    ---------
                 |              |        -----| 2|    |PM ANT |
                 |   SATELLITE  |        |PRE||  |    |ACT ULF|
                 | IP ADDRESSES |        -----|CC|    |SM  ULF|
                 |              |        -----|  |    ---------
                 ----------------        |PWR||OK|    |  HEMI |
------ ------    ----------------        -----|__|    ---------
| PF1| | PF2|    | 10.24.53.192 |        |RF |        |ANT SEL|
| OK | | OK |    | 10.43.84.143 |        |TEM||---------------|
------ ------    | 10.59.42.220 |        |REF||---------------|
____________     | 10.84.30.228 |        -----|  A MODE       |
|   CGIL   |     | 10.48.29.234 |             |  OUT          |
------------     | 10.73.24.243 |             -----------------
|PWD    1 2|     | 10.85.39.233 |               ---------------
|CONFIG CMD|     | 10.38.93.212 |      ---------|    KU DA    |
|KU FS DABL|     | 10.32.94.239 |      |ANT MO ||--------------
|ALL IN CMD|     | 10.35.83.242 |      |SEARCH ||    ACT  DES |
------------     | 10.48.93.211 |      |DETECT ||AZ   .1   .1 |
                 | 10.38.74.254 |      |TRACK  ||EL  61.9  62 |
-----------      | SELECT  RCV  |      |DATA G ||A1  -20   GM |
|CMD ERROR|         -------------------|SIG SI |---------------
-----------         | EVA PROTECT INH |---------
--------------------|-----------------|-------  ---------------
|CAL COMP||MADS/OEX||  D  > AZ >   D  ||S-K A|  |MECH||KU TEMP|
--------------------|                 ||     |  ---------------
--------------------|  D  > EL >   D  ||K-S A|  ------
| PSP || PDI || VPs||                 ||     |  |    |
----------------------------------------------  |    |
----------------------------------------------  |SIG |
|PCMU||KU DAT|| IO ||                        |  |    |
--------------------|                        |  |    |
-----------   --------------------------------  |PHAS|
|PI ||DAP |   |    ||        BITE  MODE  TRK |  |    |
-----------   |    ||                        |  |    |
--------------|    ||GPS1     OK   RCDA   1  |  |MODE|
|DAP  AUTO  V  OFF ||                        |  |    |
----------------------------------------------  ------

Head of Security (Bob) finds discrepancies in SmartCard logs for one of his officers, and realizes that someone gained access to the children's play area with a bogus card. He suspect Milo, and dusts for fingerprints to find a match with Milo. However, one of the two henchmen (Gary) says that the other henchman "Phil" will take care of the problem.
Milo is caught red-handed by Bob as he tries to steal the backup server from the children's play room. Milo puts his trust in Bob and tell Bob the story. Bob lets him go.
Gary and Phil use vehicle tracking system (like the one they use to check for tracking stolen cars (Lo-Jack).)
In reality Lisa, could not be trusted as we find out at the off-site broadcast studio. Milo did not trust her, and had a "backup plan" with his buddy. Security by layers and "fail safe" or "fail-over" is used here.
Movie includes link stating where source code to Synapse was stored. The hostname is valid. http://www.skullbocks.com/ but it is a useless site holding just a "space" with emptiness - probably a domain name futures trader. According to the whois information in the lookup, it is owned by MGM:
```
Registrant:
MGM (SKULLBOCKS-DOM)
   2500 Broadway Street
   SANTA MONICA, CA 90404
   US

   Domain Name: SKULLBOCKS.COM

   Record expires on 05-May-2001.
   Record created on 05-May-2000.
```
Apparently, the shots from the sky of "NURV" were actually shots of Simon Frasier University (A University that is looking to get an Automated Storage and Retrieval System like CSUN, eMich, UNLV and SSU.)

(C) 2006, 2005, 2004, 2003, 2002, 2001 Passwall.com. Copyright Information: Any of the above content that was created by me may be copied so long as each copy includes this copyright and links back to this site with reference to source and the content not be used for financial gain.

(C) 2006, 2005, 2004, 2003, 2002, 2001 of information included above with explicit credit to people other than me who have submitted documentation, additions, corrections. You will need to get their permission to use their included content.

I do not provide screenshots from movies, or downloadable movies for any films to avoid issues with Copyright infringement. It is my intention to legally provide news, information, trivia, and discussion about films and ensure content is not illegally reproduced. If you control Copyright to any of these movies and will extend to me permission is writing to capture screenshot images to be used on the web, please let me know!

If you have suggestions on additions, feel free to e-mail them to me. Please use valid e-mail addresses so I can reply to you. I like to offer credit to people for their submissions. When you provide your submission, please specify what name should be credited with the information provided and if you would like to have an e-mail link to your address or a URL to your home page.

Useless Trivia: Movie reviews with respect to computer security.