Don't be alarmed by the subject. Some sooper 1337 hax0r managed to dump publicly available information from the database serving www.ci.uchicago.edu (aka www.ci.anl.gov). As far as I can tell, there's no real incursion here -- just a likely SQL injection. Still, we should make sure things are secure and figure out what allowed this to happen so we can lock it down. -- Craig Begin forwarded message:
From: "Kwiatkowski, Matthew A." <[email protected]> Subject: Hacked CI server. Date: April 11, 2012 9:33:39 AM CDT To: "Stacey, Craig J." <[email protected]> Cc: "CSPO ([email protected])" <[email protected]>
Craig,
Got news last night (just read it this AM) the JC3-CIRC found that www.ci.anl.gov was defaced and/or a person was able to dump out the following DB’s on the server…
Hacked by: DMTryptamine, you can follow me at: https://twitter.com/#!/DimethylTrypta1 Salutations mother fuckers, owned these three .govs good and hard, so happens they were my first .govs as well ^>^ Shout outs to: Ichi, Spec, 7hor, and Iner7ia
www.ci.anl.gov
Databases: , division , events , grants , innews , news , papers , people , posters , projects , purpose , research_areas , research_groups , role , sites , tags
People: fname: Jim,Xiabing,Jan,Rick,Cheryl,Bill,Raymond,Andrew,Susan,Jean,Rachana,Mihai,Charles,John, Pavan,Satish,Jaydeep, Daniela,Peter,Joseph,Judy, Sanjukta,Eric,Rick,John,La Joyce,Darius,Fausto,Beth, Anthony,Lisa,Alok,Karen,Matthew,Narayan,Terry, Robert S.,Paul,Ian T.,Zheng (Cynthia),Silvia,Ninfa,Tim,Margaret,Aleksandr,Susan,Mary,Philip,Faith,Jack,Ahmed,Mihael, Mark,Paul, Randy,Zinetulla,Joseph,Kamil,Robert,Ed,Ivan,Mary,Yi,Hans,Nicholas,Dmitry,Dinesh,Kate,Rajkumar,Jong,Thomas,Li,Matt,Samuel,Jay,Robert,Scott, Gary,Ti, Sven,R. Lee,Michael,James,Ray,Cory,Ewing L. (Rusty), James N.,Ravi,Stuart, Richard F.,Stephen,Lois Curfman,William,William,JaQuel,Van Thi,Folker,Sheri,Neill,Misun,Darlyn,Tom,Vitali,Todd,John-Paul,Corby,Benoit,Boyana,John,David,Eric,Robert, Ross, Daniel, Tobias,Michael,Bruce,Carolyn,Shucai,Gail,Tomasz, Gordon David,Ken,Ioan, Kavithaa,Sandra,Gene,David,Katherine,John, Alexis A.,Gigi,Rob,Jason,Jaewook,Frank,Andrew,Dane,Barry,Mary,Craig,Tisha,Tina,Judy, Lori, Valerie,Brian,Max (Adam),Thomas, Jean,John,Lynn,Vero
lname: Feigl,Xu,Griffin,Stevens,Zidel,Allcock,Bair,Cherry,Coghlan,Allain,Ananthakrishnan,Anitescu,Bacon,Blaas,Balaji,Balay,Bardhan,Bartels,Beckman,Bester,Beumer,Bhowmick,Blau,Bradshaw,Bresnahan,Bullock,Buntinas,Cattaneo,Cerny,Chan,Childers,Choudhary,Cobb,Cohoon,Desai,Disz,Eisenberg,Fischer,Foster,Gu,Palomino,Mayorga,Freeman,Kaczmarski,Obabko,Gregurich,McIlvain,Carns,Ruppert,O?Connell,Hassanein,Hategan-Marandiuc,Hereld,Hovland,Hudson,Insepov,Insley,Iskra,Jacob,Jedlicka,Judson,Van Gammeren,Zhang,Kaper,Karonis,Karpeev,Kaushik,Keahey,Kettimuthu,Kim,Peterka,Li,Knepley,Lang,Larson,Latham,Lathrop,Leaf,Leggett,Leyffer,Liming,Link,Lottes,Loy,Lueninghoener,Lusk,Lyness,Madduri,Martin,Mattas,Thomas,McInnes,Trimble,Trimble,Bullock,Bui,Meyer,Mickelson,Miller,Min,Mishur,Morgan,Morozov,Munson,Navarro,Schmitz,Roux,Norris,Norris,Nowak,Olson,Olson,Overbeek,Paarmann,Paczian,Papka,Parrello,Peters,Xiao,Pieper,Plewa,Pusch,Raffenetti,Raicu,Rajavenkateshwaran,Bittner,Rackow,Ressman,Riley,Roberts,Rodriguez,Rohder,Ross,Sarich,Shin,Sie benlist
University of Chicago username: feigl,xbxu,griffin,stevens,zidel,allcock,bair,acherry,smc,allain,ranantha,anitescu,bacon,wilshire,balaji,balay,jbardhan,bartels,beckman,bester,beumer,bhowmick,blau,bradshaw,bresnaha,bullock,buntinas,cattaneo,bcerny,chan,childers,choudhar,cobb,cohoon,desai,disz,beisenbe,fischer,itf,,palomino,ninfa,tfreeman,mkaczmar,obabko,greguric,mcilvain,carns,ruppert,joconne,hassanei,hategan,hereld,hovland,hudson,insepov,insley,iskra,jacob,jedlicka,judson,mvan,yzhang,kaper,karonis,karpeev,kaushik,keahey,kettimut,jkim,tpeterka,likli,knepley,slang,larson,robl,lathrop,leaf,leggett,leyffer,liming,mlink,jlottes,rloy,lueningh,lusk,lyness,madduri,smartin,mattas,sthomas,curfman,trimble,trimble,jbullock,Bui,folker,mickelso,neillm,mmin,mishur,tmorgan,morozov,tmunson,navarro,cschmitz,roux,norris,jnorris,nowak,eolson,olson,overbeek,paarmann,paczian,papka,parrello,cpeters,,pieper,tomek,gdpusch,raffenet,iraicu,kavithaa,bittner,rackow,davidr,riley,roberts,arodri7,rohder,rross,sarich,jaewook,franks,siegela,skow,bsmith,spada,stace,t stacey,
phone numbers: (630) 252-7894,,(630) 252-7271,(630) 252-3378,(630) 252-7818,(630) 252-7573,(630) 252-5751,(630) 252-4296,(630) 252-1637,(630) 252-5184,(630) 252-2273,(630) 252-4172,(630) 252-5569,630-252-1177,(630) 252-3017,(630) 252-4912,(630) 252-4698,(630) 252-3135,(630) 252-9020,(630) 252-4779,(630) 252-7165,(630) 252-1842,(630) 252-5638,(630) 252-1498,(630) 252-4243,(630) 252-1842,(630) 252-7928,(630) 252-7160,(630) 252-1100,(630) 252-6044,(630) 252-0922,(630) 252-4909,(630) 252-6599,(630) 252-1881,(630) 252-7587,(630) 252-7831,(630) 252-5878,(630) 252-6018,(630) 252-4619,,(630) 252-6188,,(630) 252-5694,(630) 252-0958,(630) 252-5296,(630) 252-7120,252-1773,630-685-1268,(630) 252-1351,(630) 252-3610,(630) 252-5889,(630) 252-6003,(630) 252-4170,(630) 252-6384,(630) 252-8690,(630) 252-5049,(630) 252-5649,(630) 252-7197,(630) 252-2983,(630) 252-6785,(630) 252-3050,(630) 252-4185,(630) 252-5687,(630) 252-9948,(630) 252-7942,(630) 252-1229,(630) 252-6779,(630) 252-1673,(630) 252-0915,(630) 252-4213,(630) 252-719
alternate phone numbers: ,,(773) 834-6816,,,,,,,,,(312) 952-1714,,,,,,,,,,,,,,,(773) 702-8028,,,,,,,,,,,,,,(773) 834-6685,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,(505) 899-4098,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,(773) 834-6814,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,(773) 834-6692,,,,,,,,,,,,,,,,,,,,,(773) 702-4545,,,,,,,,773 834 3913,,773 702 5073,,,,,,,,,,773 834 9956,773 702 5948,773 702 3855,773 702 9116,773 834 9096,773 834 2604,(773)702-3485,,(773) 702-7823,(773) 702-6778,(773) 834-0525,(773) 702-7194,,,773 702 2330,773 834 1037,773 702 4441,773 702 5694,773 702 1051,773 702 8507,,(773) 702-7189,,(773) 702-8208,(773) 702-3493,773 702 5315,773 834 7394,773 702 6964,(773) 702-3405,312 665 7729,773 834 2978,,773 702-2185,773 702 9257,773 702 1222,773 834 0250,773 702 0647,773 834 4393,773 702 0795,773 702 3104,773 702 0557,773 702 4226,773 702 1693,773 834 0743,773 834 2242,,847 491 3714,773 702 6852,773 834 7919,773 834 0735,(773) 702-1632,773 702 4179,773 834 5248,773 834 8178,773 702 5753,773 702 0380,773 702 6117,
emails (.gov emails :D):[email protected],[email protected],[email protected],[email protected],[email protected],[email protected],[email protected],[email protected],[email protected],[email protected],[email protected],[email protected],[email protected],[email protected],[email protected],[email protected],[email protected],[email protected],[email protected],[email protected],[email protected],[email protected],[email protected],[email protected],[email protected],[email protected],[email protected],[email protected],[email protected],[email protected],[email protected],[email protected],[email protected],[email protected],[email protected],[email protected],[email protected],[email protected],[email protected],[email protected],[email protected],,[email protected],[email protected],[email protected],[email protected],,[email protected],[email protected],[email protected],[email protected],[email protected],[email protected],[email protected],[email protected],
alternate emails: ,,,[email protected],,allcock @mcs.anl.gov,,,,,,,[email protected],,,,,,[email protected],,,,,,,,,,,,,,,,,,,,,,,[email protected],,,,,,,[email protected],,,,,,,,,,[email protected],,,,,,,,,,,,,,,,,,,[email protected],,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,[email protected],,,,,,,,,[email protected],,,,,,,,,,,,,,,[email protected],,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,[email protected],,,,,,,,[email protected],,[email protected],,,,,,,,,,[email protected],[email protected],[email protected],[email protected],[email protected],[email protected],[email protected],,[email protected],[email protected],[email protected],[email protected],,,[email protected],[email protected],[email protected],[email protected],[email protected],[email protected],,[email protected],[email protected],edkoddjob.uchicago.edu,[email protected],[email protected],[email protected]
fax numbers: ,,,(630) 252-6333,,,,,,,,(630) 252 6434,,,(630) 252-5986,,,,,,,,,,,(630) 252-4916,(630) 252-5986,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,(630) 252-5986,,,,,,,,,,,,,,,,,,,,,,,,,,(630) 252-2211,,,,,,,630-252-6104,,,,,,,,,,,,,(631) 791-1048,,,,,,,,(630) 252-6333,,,,,,,,,,,,,,,(630) 252-1997,,,,,,,,,,(630) 252-2828,630-252-7692,,,,,,,,,(630) 252-1997,,,(630) 252-2211,,,,,,,,,,,(630) 252-5986,,,,,(630) 252-5676,,,,,,,,,,,,,(630) 252-5676,,(630) 252-4517,,,,,,,,,,,,,,,,,,,,,,,(630) 252-6073,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,(630) 252-8895,,,,,,,,,,,,,,,630 252 9155,,,,,,,,(630) 252 1342,,,,,,,,,,,,,(630) 252-5986,,,,,,,,,,,(608) 263-4499,,,,,,,,,,,,,,,,,,,,(630) 252-3387,,,,,,,,,,,,,,,,,,,,,,,(630) 252-5986,,,,,,(630) 252-3387,,,,,,,,,,,,,,,,,(630) 252 3387,,,,,,,(630) 252-5986,,,,,,,(630) 252-6073,,,,,,,,(630) 252-6073,,,(630) 252-6008,,,,(630) 252-7923,,,,630-252-5986,,,,(630) 252-7777,(630) 252-6008,(630) 252-4289,(630) 252-9868,(630) 252-7777,,,,,,,(630) 252-4470
alternate fax numbers: ,,,(773) 834-6818,,,,,,,,,(773) 834-6818,,,,,,,,,,,,,,,(773) 834-6818,,,,,,,,,,,,,,(773) 834-3700,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,773 834 2877,,773 702 0439,,,,,,,,,,773 834 0139,773 702 9740,773 702 9740,773 702 9237,773 702 5863,773 834 0188,(773)702-8487,,(773) 702-8038,(773) 702-0371,(773) 834-0505,,,,773 834 5250,773 834 0505,773 702 3002,773 702 3172,773 702 4427,773 834 8470,,(773) 702-2172,,,(773) 702-8487,773 702 3172,773 702 3172,773 834 9029,,312 665 7754,773 702 9740,,773 702 6260,773 702 0439,773 702 9740,773 702 4394,773 702 9379,773 702 0271,773 702 9311,773 702 9740 ,773 702 9740,773 834 3028,773 702 9740,773 702 2567,773 834 4546,,847 491 4461,773 702 6260,773 702 9838,773 834 0505,(773) 834-3834,773 702 0439,773 834 0505,773 834 0505,773 834 5906,773 702 4634,773 702 3002,312 996 6312,773 702 9740,773 834 2877,,312 996 0539,773 834 8150,773 702 0037,773 834 8400,,773 702 9740 ,,,773 702
Research groups: name: Laboratory for Scalable Parallel System Software,Bioinformatics,Futures Laboratory,Laboratory for Advanced Numerical Simulations,Distributed Systems Laboratory,Climate Modeling Group,MCS Systems Group name: ADIX,Compbio,FL,LANS,DSL,CMG,Systems
description: Our mission is to develop the technologies required to dramatically increase the productivity of scientists developing applications for parallel supercomputers. The focus is fourfold: integration of parallel programming tools, reuse of parallel program components, development of scientific computing toolkits and portable libraries, and exploration of requirements of future parallel computers.,Bioinformatics is the study of biological systems through the use of computational tools and the application of methods from computer science, mathematics, and information theory. At Argonne, our goal is to develop new methods and technologies for acquiring, organizing, analyzing, and visualizing such data. We apply these methods and technologies in two principal areas: sequence and comparative analysis, phylogenetic and evolutionary studies; systems-centered biology and statistical genomics.,The Argonne Futures Laboratory performs basic and applied research in advanced communications, collaboration, and visualization.
Grants: Abstract: The goal of the IESP to empower ultrahigh resolution and data intensive science and engineering research through the year 2020 by developing a plan for 1) a common, high quality computational environment for peta/exascale systems and for 2) catalyzing, coordinating, and sustaining the effort of the international open source software community to create that environment as quickly as possible. To achieve this goal, the IESP will stage a series of three international meetings, one each in the United States, Europe and Asia, beginning in the spring 2009. On-line collaboration technology will be heavily used to lay the groundwork for and consolidate the results of each meeting, to publish drafts of the plan and elicit contributions from the community, and to ensure that the final plan develops in a way that engages broad participation and ongoing input.
award_amount: award_amount: 2215670.00,217046.00,23206000.00,33426.00,365861.00,1000000.00,3436020.00,159650.00,2430050.00,340409.00,1560000.00,64706.00,199877.00,74462.00,95000.00,27969.00,4999610.00,885621.00,50460.00,38865.00,14981400.00,69954.00,3468670.00,270650.00,596829.00,379140.00,301747.00,479999.00,3960420.00,66977.00,999081.00,7999130.00,399985.00,350000.00,74815.00,430802.00,1215740.00,485670.00,517683.00,299974.00,80000.00,790907.00,2085750.00,82882.00,49075.00,393230.00,50000.00,250000.00,598296.00,2490000.00,540235.00,21000.00,250010.00,1696130.00,1144610.00,750000.00,330196.00,308811.00,24590700.00,116470.00,135794.00,862414.00,1489670.00,626247.00,354636.00,341171.00,1519390.00,1200000.00,390000.00,293004.00,189870.00,276510.00,379367.00,1919390.00,36445.00,299713.00,1641280.00,169999.00,1315230.00,7795800.00,29999.00,410000.00,621999.00,27234300.00,30207400.00,1642000.00,1400000.00,1813060.00,50000.00,1799990.00,211600.00,90000.00,977489.00,160002.00,379367.00,243591.00,79999.00,465000.00,10440000.00,3731864.00
funding_agency: NIH,NSF,NSF,NSF,NSF,NIH,NSF,DOE,NIH,NSF,NIH,NIH,NSF,NSF,Searle,Fermi Lab,NIH,NSF,NSF,NSF,NSF,NIH,NSF,Novartis Inst for BioMedical Res,NSF,NSF,NSF,NSF,NSF,NSF,NIH,NIH,NIH,MacArthur Fnd,NSF,NSF,NIH,NSF,NIH,NIH,NIH,NSF,NSF,Booz Allen Hamilton,NSF,NSF,National Academies Keck Futures Initiatives,NSF,NSF,ONR,NSF,WM Keck Foundation,NSF,NSF,NSF,St Johns Hosp,NSF,NSF,NIH,NSF,NSF,NSF,NSF,NSF,NSF,NSF,DOD,NSF USDA,NSF USDA,NSF,CBC,NSF,DOE,NSF,NIH,NSF,NSF,NSF,NIH,NIH,DOE,NIH,DOE,NIH,NSF,NIH,NIH,NIH-NIAID,NSF,NSF,DOE,NSF,MacArthur Fnd,NSF,DOE,NSF,NIH,DOE-ASCR,DOE-BER,DOE-ASCR
Papers: Authors: A. A. Rodriguez, T. Bompada, M. Syed, P. K. Shah, and N. Maltsev,P. Balaji, W. Feng, J. Archuleta, H. Lin, R. Kettimuthu, R. Thakur, and X. Ma,S. Park,Darius Buntinas, Guillaume Mercier, and William Gropp,P. Balaji, W. Feng, S. Bhagvat, D. K. Panda, R. Thakur, and W. Gropp,A. Baranovski, S. Bharathi, J. Bresnahan, A. Chervenak, I. Foster, D. Fraser, T. Freeman, D. Gunter, K. Jackson, K. Keahey, C. Kesselman, D. E. Konerding, N. Leroy, M. Link, M. Livny, N. Miller, R. Miller, G. Oleynik, L. Pearlman, J. M. Schopf, R. Schuler, and B. Tierney,L. Yang, C. Liu, J. M. Schopf, and I. Foster,K. Keahey, T. Freeman, J. Lauret, and D. Olson,D. Buntinas and W. Gropp,V. M. Zavala, J. Wang, S. Leyffer, E. M. Constantinescu, M. Anitescu, and G. Conzelmann,D. Buntinas, G. Mercier, and W. Gropp,D. Buntinas, G. Mercier and W. Gropp,J. L. Träff, W. Gropp, and R. Thakur,R. Thakur and W. Gropp,J. Shin, P. Malusare, and P. D. Hovland,Lin, M.F., Bratt, J.D., Engelhardt, M., Hagler, Ph., Hemmert, T.R., Meyer, H.B., Negele, J.W.,
-- Matt Kwiatkowski M.S.I.S. Interim Cyber Security Program Manager Aviation Safety Officer Argonne Cyber Security Program Office
Argonne National Laboratory http://www.anl.gov 9700 South Cass Avenue Bldg 240 Office 5310 Argonne, IL 60439
[email protected] Phone (630) 252-6465 Fax (630) 252-9689
HEALTH WARNING: Care should be taken when lifting this e-mail, since its mass, and thus its weight, is dependent on its velocity relative to the user.
Okay, well, pretty sure I see how it happened. In /www/logs/www.ci.uchicago.edu/access_log.2012Apr10 on pokey, I see lots of stuff like this: 61.178.84.251 - - [10/Apr/2012:09:13:25 -0500] "GET /people/profile.php?id=999999.9+union+all+select+0x31303235343830303536%2C0x31303235343830303536%2C0x31303235343830303536%2C0x31303235343830303536%2C0x31303235343830303536-- HTTP/1.1" 200 8083 (etc.) Looks like we need some scrubbing/validation on the PHP for this. I suspect MCS may have the same issue with its site. -- Craig On Apr 11, 2012, at 9:57 AM, Craig Stacey wrote:
Don't be alarmed by the subject.
Some sooper 1337 hax0r managed to dump publicly available information from the database serving www.ci.uchicago.edu (aka www.ci.anl.gov). As far as I can tell, there's no real incursion here -- just a likely SQL injection. Still, we should make sure things are secure and figure out what allowed this to happen so we can lock it down.
-- Craig
Begin forwarded message:
From: "Kwiatkowski, Matthew A." <[email protected]> Subject: Hacked CI server. Date: April 11, 2012 9:33:39 AM CDT To: "Stacey, Craig J." <[email protected]> Cc: "CSPO ([email protected])" <[email protected]>
Craig,
Got news last night (just read it this AM) the JC3-CIRC found that www.ci.anl.gov was defaced and/or a person was able to dump out the following DB’s on the server…
Hacked by: DMTryptamine, you can follow me at: https://twitter.com/#!/DimethylTrypta1 Salutations mother fuckers, owned these three .govs good and hard, so happens they were my first .govs as well ^>^ Shout outs to: Ichi, Spec, 7hor, and Iner7ia
www.ci.anl.gov
Databases: , division , events , grants , innews , news , papers , people , posters , projects , purpose , research_areas , research_groups , role , sites , tags
People: fname: Jim,Xiabing,Jan,Rick,Cheryl,Bill,Raymond,Andrew,Susan,Jean,Rachana,Mihai,Charles,John, Pavan,Satish,Jaydeep, Daniela,Peter,Joseph,Judy, Sanjukta,Eric,Rick,John,La Joyce,Darius,Fausto,Beth, Anthony,Lisa,Alok,Karen,Matthew,Narayan,Terry, Robert S.,Paul,Ian T.,Zheng (Cynthia),Silvia,Ninfa,Tim,Margaret,Aleksandr,Susan,Mary,Philip,Faith,Jack,Ahmed,Mihael, Mark,Paul, Randy,Zinetulla,Joseph,Kamil,Robert,Ed,Ivan,Mary,Yi,Hans,Nicholas,Dmitry,Dinesh,Kate,Rajkumar,Jong,Thomas,Li,Matt,Samuel,Jay,Robert,Scott, Gary,Ti, Sven,R. Lee,Michael,James,Ray,Cory,Ewing L. (Rusty), James N.,Ravi,Stuart, Richard F.,Stephen,Lois Curfman,William,William,JaQuel,Van Thi,Folker,Sheri,Neill,Misun,Darlyn,Tom,Vitali,Todd,John-Paul,Corby,Benoit,Boyana,John,David,Eric,Robert, Ross, Daniel, Tobias,Michael,Bruce,Carolyn,Shucai,Gail,Tomasz, Gordon David,Ken,Ioan, Kavithaa,Sandra,Gene,David,Katherine,John, Alexis A.,Gigi,Rob,Jason,Jaewook,Frank,Andrew,Dane,Barry,Mary,Craig,Tisha,Tina,Judy, Lori, Valerie,Brian,Max (Adam),Thomas, Jean,John,Lynn,Vero
lname: Feigl,Xu,Griffin,Stevens,Zidel,Allcock,Bair,Cherry,Coghlan,Allain,Ananthakrishnan,Anitescu,Bacon,Blaas,Balaji,Balay,Bardhan,Bartels,Beckman,Bester,Beumer,Bhowmick,Blau,Bradshaw,Bresnahan,Bullock,Buntinas,Cattaneo,Cerny,Chan,Childers,Choudhary,Cobb,Cohoon,Desai,Disz,Eisenberg,Fischer,Foster,Gu,Palomino,Mayorga,Freeman,Kaczmarski,Obabko,Gregurich,McIlvain,Carns,Ruppert,O?Connell,Hassanein,Hategan-Marandiuc,Hereld,Hovland,Hudson,Insepov,Insley,Iskra,Jacob,Jedlicka,Judson,Van Gammeren,Zhang,Kaper,Karonis,Karpeev,Kaushik,Keahey,Kettimuthu,Kim,Peterka,Li,Knepley,Lang,Larson,Latham,Lathrop,Leaf,Leggett,Leyffer,Liming,Link,Lottes,Loy,Lueninghoener,Lusk,Lyness,Madduri,Martin,Mattas,Thomas,McInnes,Trimble,Trimble,Bullock,Bui,Meyer,Mickelson,Miller,Min,Mishur,Morgan,Morozov,Munson,Navarro,Schmitz,Roux,Norris,Norris,Nowak,Olson,Olson,Overbeek,Paarmann,Paczian,Papka,Parrello,Peters,Xiao,Pieper,Plewa,Pusch,Raffenetti,Raicu,Rajavenkateshwaran,Bittner,Rackow,Ressman,Riley,Roberts,Rodriguez,Rohder,Ross,Sarich,Shin,Sie benlist
University of Chicago username: feigl,xbxu,griffin,stevens,zidel,allcock,bair,acherry,smc,allain,ranantha,anitescu,bacon,wilshire,balaji,balay,jbardhan,bartels,beckman,bester,beumer,bhowmick,blau,bradshaw,bresnaha,bullock,buntinas,cattaneo,bcerny,chan,childers,choudhar,cobb,cohoon,desai,disz,beisenbe,fischer,itf,,palomino,ninfa,tfreeman,mkaczmar,obabko,greguric,mcilvain,carns,ruppert,joconne,hassanei,hategan,hereld,hovland,hudson,insepov,insley,iskra,jacob,jedlicka,judson,mvan,yzhang,kaper,karonis,karpeev,kaushik,keahey,kettimut,jkim,tpeterka,likli,knepley,slang,larson,robl,lathrop,leaf,leggett,leyffer,liming,mlink,jlottes,rloy,lueningh,lusk,lyness,madduri,smartin,mattas,sthomas,curfman,trimble,trimble,jbullock,Bui,folker,mickelso,neillm,mmin,mishur,tmorgan,morozov,tmunson,navarro,cschmitz,roux,norris,jnorris,nowak,eolson,olson,overbeek,paarmann,paczian,papka,parrello,cpeters,,pieper,tomek,gdpusch,raffenet,iraicu,kavithaa,bittner,rackow,davidr,riley,roberts,arodri7,rohder,rross,sarich,jaewook,franks,siegela,skow,bsmith,spada,stace,t stacey,
phone numbers: (630) 252-7894,,(630) 252-7271,(630) 252-3378,(630) 252-7818,(630) 252-7573,(630) 252-5751,(630) 252-4296,(630) 252-1637,(630) 252-5184,(630) 252-2273,(630) 252-4172,(630) 252-5569,630-252-1177,(630) 252-3017,(630) 252-4912,(630) 252-4698,(630) 252-3135,(630) 252-9020,(630) 252-4779,(630) 252-7165,(630) 252-1842,(630) 252-5638,(630) 252-1498,(630) 252-4243,(630) 252-1842,(630) 252-7928,(630) 252-7160,(630) 252-1100,(630) 252-6044,(630) 252-0922,(630) 252-4909,(630) 252-6599,(630) 252-1881,(630) 252-7587,(630) 252-7831,(630) 252-5878,(630) 252-6018,(630) 252-4619,,(630) 252-6188,,(630) 252-5694,(630) 252-0958,(630) 252-5296,(630) 252-7120,252-1773,630-685-1268,(630) 252-1351,(630) 252-3610,(630) 252-5889,(630) 252-6003,(630) 252-4170,(630) 252-6384,(630) 252-8690,(630) 252-5049,(630) 252-5649,(630) 252-7197,(630) 252-2983,(630) 252-6785,(630) 252-3050,(630) 252-4185,(630) 252-5687,(630) 252-9948,(630) 252-7942,(630) 252-1229,(630) 252-6779,(630) 252-1673,(630) 252-0915,(630) 252-4213,(630) 252-719
alternate phone numbers: ,,(773) 834-6816,,,,,,,,,(312) 952-1714,,,,,,,,,,,,,,,(773) 702-8028,,,,,,,,,,,,,,(773) 834-6685,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,(505) 899-4098,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,(773) 834-6814,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,(773) 834-6692,,,,,,,,,,,,,,,,,,,,,(773) 702-4545,,,,,,,,773 834 3913,,773 702 5073,,,,,,,,,,773 834 9956,773 702 5948,773 702 3855,773 702 9116,773 834 9096,773 834 2604,(773)702-3485,,(773) 702-7823,(773) 702-6778,(773) 834-0525,(773) 702-7194,,,773 702 2330,773 834 1037,773 702 4441,773 702 5694,773 702 1051,773 702 8507,,(773) 702-7189,,(773) 702-8208,(773) 702-3493,773 702 5315,773 834 7394,773 702 6964,(773) 702-3405,312 665 7729,773 834 2978,,773 702-2185,773 702 9257,773 702 1222,773 834 0250,773 702 0647,773 834 4393,773 702 0795,773 702 3104,773 702 0557,773 702 4226,773 702 1693,773 834 0743,773 834 2242,,847 491 3714,773 702 6852,773 834 7919,773 834 0735,(773) 702-1632,773 702 4179,773 834 5248,773 834 8178,773 702 5753,773 702 0380,773 702 6117,
emails (.gov emails :D):[email protected],[email protected],[email protected],[email protected],[email protected],[email protected],[email protected],[email protected],[email protected],[email protected],[email protected],[email protected],[email protected],[email protected],[email protected],[email protected],[email protected],[email protected],[email protected],[email protected],[email protected],[email protected],[email protected],[email protected],[email protected],[email protected],[email protected],[email protected],[email protected],[email protected],[email protected],[email protected],[email protected],[email protected],[email protected],[email protected],[email protected],[email protected],[email protected],[email protected],[email protected],,[email protected],[email protected],[email protected],[email protected],,[email protected],[email protected],[email protected],[email protected],[email protected],[email protected],[email protected],[email protected],
alternate emails: ,,,[email protected],,allcock @mcs.anl.gov,,,,,,,[email protected],,,,,,[email protected],,,,,,,,,,,,,,,,,,,,,,,[email protected],,,,,,,[email protected],,,,,,,,,,[email protected],,,,,,,,,,,,,,,,,,,[email protected],,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,[email protected],,,,,,,,,[email protected],,,,,,,,,,,,,,,[email protected],,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,[email protected],,,,,,,,[email protected],,[email protected],,,,,,,,,,[email protected],[email protected],[email protected],[email protected],[email protected],[email protected],[email protected],,[email protected],[email protected],[email protected],[email protected],,,[email protected],[email protected],[email protected],[email protected],[email protected],[email protected],,[email protected],[email protected],edkoddjob.uchicago.edu,[email protected],[email protected],[email protected]
fax numbers: ,,,(630) 252-6333,,,,,,,,(630) 252 6434,,,(630) 252-5986,,,,,,,,,,,(630) 252-4916,(630) 252-5986,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,(630) 252-5986,,,,,,,,,,,,,,,,,,,,,,,,,,(630) 252-2211,,,,,,,630-252-6104,,,,,,,,,,,,,(631) 791-1048,,,,,,,,(630) 252-6333,,,,,,,,,,,,,,,(630) 252-1997,,,,,,,,,,(630) 252-2828,630-252-7692,,,,,,,,,(630) 252-1997,,,(630) 252-2211,,,,,,,,,,,(630) 252-5986,,,,,(630) 252-5676,,,,,,,,,,,,,(630) 252-5676,,(630) 252-4517,,,,,,,,,,,,,,,,,,,,,,,(630) 252-6073,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,(630) 252-8895,,,,,,,,,,,,,,,630 252 9155,,,,,,,,(630) 252 1342,,,,,,,,,,,,,(630) 252-5986,,,,,,,,,,,(608) 263-4499,,,,,,,,,,,,,,,,,,,,(630) 252-3387,,,,,,,,,,,,,,,,,,,,,,,(630) 252-5986,,,,,,(630) 252-3387,,,,,,,,,,,,,,,,,(630) 252 3387,,,,,,,(630) 252-5986,,,,,,,(630) 252-6073,,,,,,,,(630) 252-6073,,,(630) 252-6008,,,,(630) 252-7923,,,,630-252-5986,,,,(630) 252-7777,(630) 252-6008,(630) 252-4289,(630) 252-9868,(630) 252-7777,,,,,,,(630) 252-4470
alternate fax numbers: ,,,(773) 834-6818,,,,,,,,,(773) 834-6818,,,,,,,,,,,,,,,(773) 834-6818,,,,,,,,,,,,,,(773) 834-3700,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,773 834 2877,,773 702 0439,,,,,,,,,,773 834 0139,773 702 9740,773 702 9740,773 702 9237,773 702 5863,773 834 0188,(773)702-8487,,(773) 702-8038,(773) 702-0371,(773) 834-0505,,,,773 834 5250,773 834 0505,773 702 3002,773 702 3172,773 702 4427,773 834 8470,,(773) 702-2172,,,(773) 702-8487,773 702 3172,773 702 3172,773 834 9029,,312 665 7754,773 702 9740,,773 702 6260,773 702 0439,773 702 9740,773 702 4394,773 702 9379,773 702 0271,773 702 9311,773 702 9740 ,773 702 9740,773 834 3028,773 702 9740,773 702 2567,773 834 4546,,847 491 4461,773 702 6260,773 702 9838,773 834 0505,(773) 834-3834,773 702 0439,773 834 0505,773 834 0505,773 834 5906,773 702 4634,773 702 3002,312 996 6312,773 702 9740,773 834 2877,,312 996 0539,773 834 8150,773 702 0037,773 834 8400,,773 702 9740 ,,,773 702
Research groups: name: Laboratory for Scalable Parallel System Software,Bioinformatics,Futures Laboratory,Laboratory for Advanced Numerical Simulations,Distributed Systems Laboratory,Climate Modeling Group,MCS Systems Group name: ADIX,Compbio,FL,LANS,DSL,CMG,Systems
description: Our mission is to develop the technologies required to dramatically increase the productivity of scientists developing applications for parallel supercomputers. The focus is fourfold: integration of parallel programming tools, reuse of parallel program components, development of scientific computing toolkits and portable libraries, and exploration of requirements of future parallel computers.,Bioinformatics is the study of biological systems through the use of computational tools and the application of methods from computer science, mathematics, and information theory. At Argonne, our goal is to develop new methods and technologies for acquiring, organizing, analyzing, and visualizing such data. We apply these methods and technologies in two principal areas: sequence and comparative analysis, phylogenetic and evolutionary studies; systems-centered biology and statistical genomics.,The Argonne Futures Laboratory performs basic and applied research in advanced communications, collaboration, and visualization.
Grants: Abstract: The goal of the IESP to empower ultrahigh resolution and data intensive science and engineering research through the year 2020 by developing a plan for 1) a common, high quality computational environment for peta/exascale systems and for 2) catalyzing, coordinating, and sustaining the effort of the international open source software community to create that environment as quickly as possible. To achieve this goal, the IESP will stage a series of three international meetings, one each in the United States, Europe and Asia, beginning in the spring 2009. On-line collaboration technology will be heavily used to lay the groundwork for and consolidate the results of each meeting, to publish drafts of the plan and elicit contributions from the community, and to ensure that the final plan develops in a way that engages broad participation and ongoing input.
award_amount: award_amount: 2215670.00,217046.00,23206000.00,33426.00,365861.00,1000000.00,3436020.00,159650.00,2430050.00,340409.00,1560000.00,64706.00,199877.00,74462.00,95000.00,27969.00,4999610.00,885621.00,50460.00,38865.00,14981400.00,69954.00,3468670.00,270650.00,596829.00,379140.00,301747.00,479999.00,3960420.00,66977.00,999081.00,7999130.00,399985.00,350000.00,74815.00,430802.00,1215740.00,485670.00,517683.00,299974.00,80000.00,790907.00,2085750.00,82882.00,49075.00,393230.00,50000.00,250000.00,598296.00,2490000.00,540235.00,21000.00,250010.00,1696130.00,1144610.00,750000.00,330196.00,308811.00,24590700.00,116470.00,135794.00,862414.00,1489670.00,626247.00,354636.00,341171.00,1519390.00,1200000.00,390000.00,293004.00,189870.00,276510.00,379367.00,1919390.00,36445.00,299713.00,1641280.00,169999.00,1315230.00,7795800.00,29999.00,410000.00,621999.00,27234300.00,30207400.00,1642000.00,1400000.00,1813060.00,50000.00,1799990.00,211600.00,90000.00,977489.00,160002.00,379367.00,243591.00,79999.00,465000.00,10440000.00,3731864.00
funding_agency: NIH,NSF,NSF,NSF,NSF,NIH,NSF,DOE,NIH,NSF,NIH,NIH,NSF,NSF,Searle,Fermi Lab,NIH,NSF,NSF,NSF,NSF,NIH,NSF,Novartis Inst for BioMedical Res,NSF,NSF,NSF,NSF,NSF,NSF,NIH,NIH,NIH,MacArthur Fnd,NSF,NSF,NIH,NSF,NIH,NIH,NIH,NSF,NSF,Booz Allen Hamilton,NSF,NSF,National Academies Keck Futures Initiatives,NSF,NSF,ONR,NSF,WM Keck Foundation,NSF,NSF,NSF,St Johns Hosp,NSF,NSF,NIH,NSF,NSF,NSF,NSF,NSF,NSF,NSF,DOD,NSF USDA,NSF USDA,NSF,CBC,NSF,DOE,NSF,NIH,NSF,NSF,NSF,NIH,NIH,DOE,NIH,DOE,NIH,NSF,NIH,NIH,NIH-NIAID,NSF,NSF,DOE,NSF,MacArthur Fnd,NSF,DOE,NSF,NIH,DOE-ASCR,DOE-BER,DOE-ASCR
Papers: Authors: A. A. Rodriguez, T. Bompada, M. Syed, P. K. Shah, and N. Maltsev,P. Balaji, W. Feng, J. Archuleta, H. Lin, R. Kettimuthu, R. Thakur, and X. Ma,S. Park,Darius Buntinas, Guillaume Mercier, and William Gropp,P. Balaji, W. Feng, S. Bhagvat, D. K. Panda, R. Thakur, and W. Gropp,A. Baranovski, S. Bharathi, J. Bresnahan, A. Chervenak, I. Foster, D. Fraser, T. Freeman, D. Gunter, K. Jackson, K. Keahey, C. Kesselman, D. E. Konerding, N. Leroy, M. Link, M. Livny, N. Miller, R. Miller, G. Oleynik, L. Pearlman, J. M. Schopf, R. Schuler, and B. Tierney,L. Yang, C. Liu, J. M. Schopf, and I. Foster,K. Keahey, T. Freeman, J. Lauret, and D. Olson,D. Buntinas and W. Gropp,V. M. Zavala, J. Wang, S. Leyffer, E. M. Constantinescu, M. Anitescu, and G. Conzelmann,D. Buntinas, G. Mercier, and W. Gropp,D. Buntinas, G. Mercier and W. Gropp,J. L. Träff, W. Gropp, and R. Thakur,R. Thakur and W. Gropp,J. Shin, P. Malusare, and P. D. Hovland,Lin, M.F., Bratt, J.D., Engelhardt, M., Hagler, Ph., Hemmert, T.R., Meyer, H.B., Negele, J.W.,
-- Matt Kwiatkowski M.S.I.S. Interim Cyber Security Program Manager Aviation Safety Officer Argonne Cyber Security Program Office
Argonne National Laboratory http://www.anl.gov 9700 South Cass Avenue Bldg 240 Office 5310 Argonne, IL 60439
[email protected] Phone (630) 252-6465 Fax (630) 252-9689
HEALTH WARNING: Care should be taken when lifting this e-mail, since its mass, and thus its weight, is dependent on its velocity relative to the user.
yeah the db in question is the that cels adminforms application On Apr 11, 2012, at 10:04 AM, Craig Stacey wrote:
Okay, well, pretty sure I see how it happened.
In /www/logs/www.ci.uchicago.edu/access_log.2012Apr10 on pokey, I see lots of stuff like this:
61.178.84.251 - - [10/Apr/2012:09:13:25 -0500] "GET /people/profile.php?id=999999.9+union+all+select+0x31303235343830303536%2C0x31303235343830303536%2C0x31303235343830303536%2C0x31303235343830303536%2C0x31303235343830303536-- HTTP/1.1" 200 8083
(etc.)
Looks like we need some scrubbing/validation on the PHP for this. I suspect MCS may have the same issue with its site. -- Craig
On Apr 11, 2012, at 9:57 AM, Craig Stacey wrote:
Don't be alarmed by the subject.
Some sooper 1337 hax0r managed to dump publicly available information from the database serving www.ci.uchicago.edu (aka www.ci.anl.gov). As far as I can tell, there's no real incursion here -- just a likely SQL injection. Still, we should make sure things are secure and figure out what allowed this to happen so we can lock it down.
-- Craig
Begin forwarded message:
From: "Kwiatkowski, Matthew A." <[email protected]> Subject: Hacked CI server. Date: April 11, 2012 9:33:39 AM CDT To: "Stacey, Craig J." <[email protected]> Cc: "CSPO ([email protected])" <[email protected]>
Craig,
Got news last night (just read it this AM) the JC3-CIRC found that www.ci.anl.gov was defaced and/or a person was able to dump out the following DB’s on the server…
Hacked by: DMTryptamine, you can follow me at: https://twitter.com/#!/DimethylTrypta1 Salutations mother fuckers, owned these three .govs good and hard, so happens they were my first .govs as well ^>^ Shout outs to: Ichi, Spec, 7hor, and Iner7ia
www.ci.anl.gov
Databases: , division , events , grants , innews , news , papers , people , posters , projects , purpose , research_areas , research_groups , role , sites , tags
People: fname: Jim,Xiabing,Jan,Rick,Cheryl,Bill,Raymond,Andrew,Susan,Jean,Rachana,Mihai,Charles,John, Pavan,Satish,Jaydeep, Daniela,Peter,Joseph,Judy, Sanjukta,Eric,Rick,John,La Joyce,Darius,Fausto,Beth, Anthony,Lisa,Alok,Karen,Matthew,Narayan,Terry, Robert S.,Paul,Ian T.,Zheng (Cynthia),Silvia,Ninfa,Tim,Margaret,Aleksandr,Susan,Mary,Philip,Faith,Jack,Ahmed,Mihael, Mark,Paul, Randy,Zinetulla,Joseph,Kamil,Robert,Ed,Ivan,Mary,Yi,Hans,Nicholas,Dmitry,Dinesh,Kate,Rajkumar,Jong,Thomas,Li,Matt,Samuel,Jay,Robert,Scott, Gary,Ti, Sven,R. Lee,Michael,James,Ray,Cory,Ewing L. (Rusty), James N.,Ravi,Stuart, Richard F.,Stephen,Lois Curfman,William,William,JaQuel,Van Thi,Folker,Sheri,Neill,Misun,Darlyn,Tom,Vitali,Todd,John-Paul,Corby,Benoit,Boyana,John,David,Eric,Robert, Ross, Daniel, Tobias,Michael,Bruce,Carolyn,Shucai,Gail,Tomasz, Gordon David,Ken,Ioan, Kavithaa,Sandra,Gene,David,Katherine,John, Alexis A.,Gigi,Rob,Jason,Jaewook,Frank,Andrew,Dane,Barry,Mary,Craig,Tisha,Tina,Judy, Lori, Valerie,Brian,Max (Adam),Thomas, Jean,John,Lynn,Vero
lname: Feigl,Xu,Griffin,Stevens,Zidel,Allcock,Bair,Cherry,Coghlan,Allain,Ananthakrishnan,Anitescu,Bacon,Blaas,Balaji,Balay,Bardhan,Bartels,Beckman,Bester,Beumer,Bhowmick,Blau,Bradshaw,Bresnahan,Bullock,Buntinas,Cattaneo,Cerny,Chan,Childers,Choudhary,Cobb,Cohoon,Desai,Disz,Eisenberg,Fischer,Foster,Gu,Palomino,Mayorga,Freeman,Kaczmarski,Obabko,Gregurich,McIlvain,Carns,Ruppert,O?Connell,Hassanein,Hategan-Marandiuc,Hereld,Hovland,Hudson,Insepov,Insley,Iskra,Jacob,Jedlicka,Judson,Van Gammeren,Zhang,Kaper,Karonis,Karpeev,Kaushik,Keahey,Kettimuthu,Kim,Peterka,Li,Knepley,Lang,Larson,Latham,Lathrop,Leaf,Leggett,Leyffer,Liming,Link,Lottes,Loy,Lueninghoener,Lusk,Lyness,Madduri,Martin,Mattas,Thomas,McInnes,Trimble,Trimble,Bullock,Bui,Meyer,Mickelson,Miller,Min,Mishur,Morgan,Morozov,Munson,Navarro,Schmitz,Roux,Norris,Norris,Nowak,Olson,Olson,Overbeek,Paarmann,Paczian,Papka,Parrello,Peters,Xiao,Pieper,Plewa,Pusch,Raffenetti,Raicu,Rajavenkateshwaran,Bittner,Rackow,Ressman,Riley,Roberts,Rodriguez,Rohder,Ross,Sarich,Shin,Sie benlist
University of Chicago username: feigl,xbxu,griffin,stevens,zidel,allcock,bair,acherry,smc,allain,ranantha,anitescu,bacon,wilshire,balaji,balay,jbardhan,bartels,beckman,bester,beumer,bhowmick,blau,bradshaw,bresnaha,bullock,buntinas,cattaneo,bcerny,chan,childers,choudhar,cobb,cohoon,desai,disz,beisenbe,fischer,itf,,palomino,ninfa,tfreeman,mkaczmar,obabko,greguric,mcilvain,carns,ruppert,joconne,hassanei,hategan,hereld,hovland,hudson,insepov,insley,iskra,jacob,jedlicka,judson,mvan,yzhang,kaper,karonis,karpeev,kaushik,keahey,kettimut,jkim,tpeterka,likli,knepley,slang,larson,robl,lathrop,leaf,leggett,leyffer,liming,mlink,jlottes,rloy,lueningh,lusk,lyness,madduri,smartin,mattas,sthomas,curfman,trimble,trimble,jbullock,Bui,folker,mickelso,neillm,mmin,mishur,tmorgan,morozov,tmunson,navarro,cschmitz,roux,norris,jnorris,nowak,eolson,olson,overbeek,paarmann,paczian,papka,parrello,cpeters,,pieper,tomek,gdpusch,raffenet,iraicu,kavithaa,bittner,rackow,davidr,riley,roberts,arodri7,rohder,rross,sarich,jaewook,franks,siegela,skow,bsmith,spada,stace,t stacey,
phone numbers: (630) 252-7894,,(630) 252-7271,(630) 252-3378,(630) 252-7818,(630) 252-7573,(630) 252-5751,(630) 252-4296,(630) 252-1637,(630) 252-5184,(630) 252-2273,(630) 252-4172,(630) 252-5569,630-252-1177,(630) 252-3017,(630) 252-4912,(630) 252-4698,(630) 252-3135,(630) 252-9020,(630) 252-4779,(630) 252-7165,(630) 252-1842,(630) 252-5638,(630) 252-1498,(630) 252-4243,(630) 252-1842,(630) 252-7928,(630) 252-7160,(630) 252-1100,(630) 252-6044,(630) 252-0922,(630) 252-4909,(630) 252-6599,(630) 252-1881,(630) 252-7587,(630) 252-7831,(630) 252-5878,(630) 252-6018,(630) 252-4619,,(630) 252-6188,,(630) 252-5694,(630) 252-0958,(630) 252-5296,(630) 252-7120,252-1773,630-685-1268,(630) 252-1351,(630) 252-3610,(630) 252-5889,(630) 252-6003,(630) 252-4170,(630) 252-6384,(630) 252-8690,(630) 252-5049,(630) 252-5649,(630) 252-7197,(630) 252-2983,(630) 252-6785,(630) 252-3050,(630) 252-4185,(630) 252-5687,(630) 252-9948,(630) 252-7942,(630) 252-1229,(630) 252-6779,(630) 252-1673,(630) 252-0915,(630) 252-4213,(630) 252-719
alternate phone numbers: ,,(773) 834-6816,,,,,,,,,(312) 952-1714,,,,,,,,,,,,,,,(773) 702-8028,,,,,,,,,,,,,,(773) 834-6685,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,(505) 899-4098,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,(773) 834-6814,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,(773) 834-6692,,,,,,,,,,,,,,,,,,,,,(773) 702-4545,,,,,,,,773 834 3913,,773 702 5073,,,,,,,,,,773 834 9956,773 702 5948,773 702 3855,773 702 9116,773 834 9096,773 834 2604,(773)702-3485,,(773) 702-7823,(773) 702-6778,(773) 834-0525,(773) 702-7194,,,773 702 2330,773 834 1037,773 702 4441,773 702 5694,773 702 1051,773 702 8507,,(773) 702-7189,,(773) 702-8208,(773) 702-3493,773 702 5315,773 834 7394,773 702 6964,(773) 702-3405,312 665 7729,773 834 2978,,773 702-2185,773 702 9257,773 702 1222,773 834 0250,773 702 0647,773 834 4393,773 702 0795,773 702 3104,773 702 0557,773 702 4226,773 702 1693,773 834 0743,773 834 2242,,847 491 3714,773 702 6852,773 834 7919,773 834 0735,(773) 702-1632,773 702 4179,773 834 5248,773 834 8178,773 702 5753,773 702 0380,773 702 6117,
emails (.gov emails :D):[email protected],[email protected],[email protected],[email protected],[email protected],[email protected],[email protected],[email protected],[email protected],[email protected],[email protected],[email protected],[email protected],[email protected],[email protected],[email protected],[email protected],[email protected],[email protected],[email protected],[email protected],[email protected],[email protected],[email protected],[email protected],[email protected],[email protected],[email protected],[email protected],[email protected],[email protected],[email protected],[email protected],[email protected],[email protected],[email protected],[email protected],[email protected],[email protected],[email protected],[email protected],,[email protected],[email protected],[email protected],[email protected],,[email protected],[email protected],[email protected],[email protected],[email protected],[email protected],[email protected],[email protected],
alternate emails: ,,,[email protected],,allcock @mcs.anl.gov,,,,,,,[email protected],,,,,,[email protected],,,,,,,,,,,,,,,,,,,,,,,[email protected],,,,,,,[email protected],,,,,,,,,,[email protected],,,,,,,,,,,,,,,,,,,[email protected],,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,[email protected],,,,,,,,,[email protected],,,,,,,,,,,,,,,[email protected],,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,[email protected],,,,,,,,[email protected],,[email protected],,,,,,,,,,[email protected],[email protected],[email protected],[email protected],[email protected],[email protected],[email protected],,[email protected],[email protected],[email protected],[email protected],,,[email protected],[email protected],[email protected],[email protected],[email protected],[email protected],,[email protected],[email protected],edkoddjob.uchicago.edu,[email protected],[email protected],[email protected]
fax numbers: ,,,(630) 252-6333,,,,,,,,(630) 252 6434,,,(630) 252-5986,,,,,,,,,,,(630) 252-4916,(630) 252-5986,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,(630) 252-5986,,,,,,,,,,,,,,,,,,,,,,,,,,(630) 252-2211,,,,,,,630-252-6104,,,,,,,,,,,,,(631) 791-1048,,,,,,,,(630) 252-6333,,,,,,,,,,,,,,,(630) 252-1997,,,,,,,,,,(630) 252-2828,630-252-7692,,,,,,,,,(630) 252-1997,,,(630) 252-2211,,,,,,,,,,,(630) 252-5986,,,,,(630) 252-5676,,,,,,,,,,,,,(630) 252-5676,,(630) 252-4517,,,,,,,,,,,,,,,,,,,,,,,(630) 252-6073,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,(630) 252-8895,,,,,,,,,,,,,,,630 252 9155,,,,,,,,(630) 252 1342,,,,,,,,,,,,,(630) 252-5986,,,,,,,,,,,(608) 263-4499,,,,,,,,,,,,,,,,,,,,(630) 252-3387,,,,,,,,,,,,,,,,,,,,,,,(630) 252-5986,,,,,,(630) 252-3387,,,,,,,,,,,,,,,,,(630) 252 3387,,,,,,,(630) 252-5986,,,,,,,(630) 252-6073,,,,,,,,(630) 252-6073,,,(630) 252-6008,,,,(630) 252-7923,,,,630-252-5986,,,,(630) 252-7777,(630) 252-6008,(630) 252-4289,(630) 252-9868,(630) 252-7777,,,,,,,(630) 252-4470
alternate fax numbers: ,,,(773) 834-6818,,,,,,,,,(773) 834-6818,,,,,,,,,,,,,,,(773) 834-6818,,,,,,,,,,,,,,(773) 834-3700,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,773 834 2877,,773 702 0439,,,,,,,,,,773 834 0139,773 702 9740,773 702 9740,773 702 9237,773 702 5863,773 834 0188,(773)702-8487,,(773) 702-8038,(773) 702-0371,(773) 834-0505,,,,773 834 5250,773 834 0505,773 702 3002,773 702 3172,773 702 4427,773 834 8470,,(773) 702-2172,,,(773) 702-8487,773 702 3172,773 702 3172,773 834 9029,,312 665 7754,773 702 9740,,773 702 6260,773 702 0439,773 702 9740,773 702 4394,773 702 9379,773 702 0271,773 702 9311,773 702 9740 ,773 702 9740,773 834 3028,773 702 9740,773 702 2567,773 834 4546,,847 491 4461,773 702 6260,773 702 9838,773 834 0505,(773) 834-3834,773 702 0439,773 834 0505,773 834 0505,773 834 5906,773 702 4634,773 702 3002,312 996 6312,773 702 9740,773 834 2877,,312 996 0539,773 834 8150,773 702 0037,773 834 8400,,773 702 9740 ,,,773 702
Research groups: name: Laboratory for Scalable Parallel System Software,Bioinformatics,Futures Laboratory,Laboratory for Advanced Numerical Simulations,Distributed Systems Laboratory,Climate Modeling Group,MCS Systems Group name: ADIX,Compbio,FL,LANS,DSL,CMG,Systems
description: Our mission is to develop the technologies required to dramatically increase the productivity of scientists developing applications for parallel supercomputers. The focus is fourfold: integration of parallel programming tools, reuse of parallel program components, development of scientific computing toolkits and portable libraries, and exploration of requirements of future parallel computers.,Bioinformatics is the study of biological systems through the use of computational tools and the application of methods from computer science, mathematics, and information theory. At Argonne, our goal is to develop new methods and technologies for acquiring, organizing, analyzing, and visualizing such data. We apply these methods and technologies in two principal areas: sequence and comparative analysis, phylogenetic and evolutionary studies; systems-centered biology and statistical genomics.,The Argonne Futures Laboratory performs basic and applied research in advanced communications, collaboration, and visualization.
Grants: Abstract: The goal of the IESP to empower ultrahigh resolution and data intensive science and engineering research through the year 2020 by developing a plan for 1) a common, high quality computational environment for peta/exascale systems and for 2) catalyzing, coordinating, and sustaining the effort of the international open source software community to create that environment as quickly as possible. To achieve this goal, the IESP will stage a series of three international meetings, one each in the United States, Europe and Asia, beginning in the spring 2009. On-line collaboration technology will be heavily used to lay the groundwork for and consolidate the results of each meeting, to publish drafts of the plan and elicit contributions from the community, and to ensure that the final plan develops in a way that engages broad participation and ongoing input.
award_amount: award_amount: 2215670.00,217046.00,23206000.00,33426.00,365861.00,1000000.00,3436020.00,159650.00,2430050.00,340409.00,1560000.00,64706.00,199877.00,74462.00,95000.00,27969.00,4999610.00,885621.00,50460.00,38865.00,14981400.00,69954.00,3468670.00,270650.00,596829.00,379140.00,301747.00,479999.00,3960420.00,66977.00,999081.00,7999130.00,399985.00,350000.00,74815.00,430802.00,1215740.00,485670.00,517683.00,299974.00,80000.00,790907.00,2085750.00,82882.00,49075.00,393230.00,50000.00,250000.00,598296.00,2490000.00,540235.00,21000.00,250010.00,1696130.00,1144610.00,750000.00,330196.00,308811.00,24590700.00,116470.00,135794.00,862414.00,1489670.00,626247.00,354636.00,341171.00,1519390.00,1200000.00,390000.00,293004.00,189870.00,276510.00,379367.00,1919390.00,36445.00,299713.00,1641280.00,169999.00,1315230.00,7795800.00,29999.00,410000.00,621999.00,27234300.00,30207400.00,1642000.00,1400000.00,1813060.00,50000.00,1799990.00,211600.00,90000.00,977489.00,160002.00,379367.00,243591.00,79999.00,465000.00,10440000.00,3731864.00
funding_agency: NIH,NSF,NSF,NSF,NSF,NIH,NSF,DOE,NIH,NSF,NIH,NIH,NSF,NSF,Searle,Fermi Lab,NIH,NSF,NSF,NSF,NSF,NIH,NSF,Novartis Inst for BioMedical Res,NSF,NSF,NSF,NSF,NSF,NSF,NIH,NIH,NIH,MacArthur Fnd,NSF,NSF,NIH,NSF,NIH,NIH,NIH,NSF,NSF,Booz Allen Hamilton,NSF,NSF,National Academies Keck Futures Initiatives,NSF,NSF,ONR,NSF,WM Keck Foundation,NSF,NSF,NSF,St Johns Hosp,NSF,NSF,NIH,NSF,NSF,NSF,NSF,NSF,NSF,NSF,DOD,NSF USDA,NSF USDA,NSF,CBC,NSF,DOE,NSF,NIH,NSF,NSF,NSF,NIH,NIH,DOE,NIH,DOE,NIH,NSF,NIH,NIH,NIH-NIAID,NSF,NSF,DOE,NSF,MacArthur Fnd,NSF,DOE,NSF,NIH,DOE-ASCR,DOE-BER,DOE-ASCR
Papers: Authors: A. A. Rodriguez, T. Bompada, M. Syed, P. K. Shah, and N. Maltsev,P. Balaji, W. Feng, J. Archuleta, H. Lin, R. Kettimuthu, R. Thakur, and X. Ma,S. Park,Darius Buntinas, Guillaume Mercier, and William Gropp,P. Balaji, W. Feng, S. Bhagvat, D. K. Panda, R. Thakur, and W. Gropp,A. Baranovski, S. Bharathi, J. Bresnahan, A. Chervenak, I. Foster, D. Fraser, T. Freeman, D. Gunter, K. Jackson, K. Keahey, C. Kesselman, D. E. Konerding, N. Leroy, M. Link, M. Livny, N. Miller, R. Miller, G. Oleynik, L. Pearlman, J. M. Schopf, R. Schuler, and B. Tierney,L. Yang, C. Liu, J. M. Schopf, and I. Foster,K. Keahey, T. Freeman, J. Lauret, and D. Olson,D. Buntinas and W. Gropp,V. M. Zavala, J. Wang, S. Leyffer, E. M. Constantinescu, M. Anitescu, and G. Conzelmann,D. Buntinas, G. Mercier, and W. Gropp,D. Buntinas, G. Mercier and W. Gropp,J. L. Träff, W. Gropp, and R. Thakur,R. Thakur and W. Gropp,J. Shin, P. Malusare, and P. D. Hovland,Lin, M.F., Bratt, J.D., Engelhardt, M., Hagler, Ph., Hemmert, T.R., Meyer, H.B., Negele, J.W.,
-- Matt Kwiatkowski M.S.I.S. Interim Cyber Security Program Manager Aviation Safety Officer Argonne Cyber Security Program Office
Argonne National Laboratory http://www.anl.gov 9700 South Cass Avenue Bldg 240 Office 5310 Argonne, IL 60439
[email protected] Phone (630) 252-6465 Fax (630) 252-9689
HEALTH WARNING: Care should be taken when lifting this e-mail, since its mass, and thus its weight, is dependent on its velocity relative to the user.
All the hits seem to focus on profile.php. Chris, would you have some time to look at that code and see if it's vulnerable? -- Craig On Apr 11, 2012, at 10:08 AM, Chris Walker wrote:
yeah the db in question is the that cels adminforms application
On Apr 11, 2012, at 10:04 AM, Craig Stacey wrote:
Okay, well, pretty sure I see how it happened.
In /www/logs/www.ci.uchicago.edu/access_log.2012Apr10 on pokey, I see lots of stuff like this:
61.178.84.251 - - [10/Apr/2012:09:13:25 -0500] "GET /people/profile.php?id=999999.9+union+all+select+0x31303235343830303536%2C0x31303235343830303536%2C0x31303235343830303536%2C0x31303235343830303536%2C0x31303235343830303536-- HTTP/1.1" 200 8083
(etc.)
Looks like we need some scrubbing/validation on the PHP for this. I suspect MCS may have the same issue with its site. -- Craig
On Apr 11, 2012, at 9:57 AM, Craig Stacey wrote:
Don't be alarmed by the subject.
Some sooper 1337 hax0r managed to dump publicly available information from the database serving www.ci.uchicago.edu (aka www.ci.anl.gov). As far as I can tell, there's no real incursion here -- just a likely SQL injection. Still, we should make sure things are secure and figure out what allowed this to happen so we can lock it down.
-- Craig
Begin forwarded message:
From: "Kwiatkowski, Matthew A." <[email protected]> Subject: Hacked CI server. Date: April 11, 2012 9:33:39 AM CDT To: "Stacey, Craig J." <[email protected]> Cc: "CSPO ([email protected])" <[email protected]>
Craig,
Got news last night (just read it this AM) the JC3-CIRC found that www.ci.anl.gov was defaced and/or a person was able to dump out the following DB’s on the server…
Hacked by: DMTryptamine, you can follow me at: https://twitter.com/#!/DimethylTrypta1 Salutations mother fuckers, owned these three .govs good and hard, so happens they were my first .govs as well ^>^ Shout outs to: Ichi, Spec, 7hor, and Iner7ia
www.ci.anl.gov
Databases: , division , events , grants , innews , news , papers , people , posters , projects , purpose , research_areas , research_groups , role , sites , tags
People: fname: Jim,Xiabing,Jan,Rick,Cheryl,Bill,Raymond,Andrew,Susan,Jean,Rachana,Mihai,Charles,John, Pavan,Satish,Jaydeep, Daniela,Peter,Joseph,Judy, Sanjukta,Eric,Rick,John,La Joyce,Darius,Fausto,Beth, Anthony,Lisa,Alok,Karen,Matthew,Narayan,Terry, Robert S.,Paul,Ian T.,Zheng (Cynthia),Silvia,Ninfa,Tim,Margaret,Aleksandr,Susan,Mary,Philip,Faith,Jack,Ahmed,Mihael, Mark,Paul, Randy,Zinetulla,Joseph,Kamil,Robert,Ed,Ivan,Mary,Yi,Hans,Nicholas,Dmitry,Dinesh,Kate,Rajkumar,Jong,Thomas,Li,Matt,Samuel,Jay,Robert,Scott, Gary,Ti, Sven,R. Lee,Michael,James,Ray,Cory,Ewing L. (Rusty), James N.,Ravi,Stuart, Richard F.,Stephen,Lois Curfman,William,William,JaQuel,Van Thi,Folker,Sheri,Neill,Misun,Darlyn,Tom,Vitali,Todd,John-Paul,Corby,Benoit,Boyana,John,David,Eric,Robert, Ross, Daniel, Tobias,Michael,Bruce,Carolyn,Shucai,Gail,Tomasz, Gordon David,Ken,Ioan, Kavithaa,Sandra,Gene,David,Katherine,John, Alexis A.,Gigi,Rob,Jason,Jaewook,Frank,Andrew,Dane,Barry,Mary,Craig,Tisha,Tina,Judy, Lori, Valerie,Brian,Max (Adam),Thomas, Jean,John,Lynn,Vero
lname: Feigl,Xu,Griffin,Stevens,Zidel,Allcock,Bair,Cherry,Coghlan,Allain,Ananthakrishnan,Anitescu,Bacon,Blaas,Balaji,Balay,Bardhan,Bartels,Beckman,Bester,Beumer,Bhowmick,Blau,Bradshaw,Bresnahan,Bullock,Buntinas,Cattaneo,Cerny,Chan,Childers,Choudhary,Cobb,Cohoon,Desai,Disz,Eisenberg,Fischer,Foster,Gu,Palomino,Mayorga,Freeman,Kaczmarski,Obabko,Gregurich,McIlvain,Carns,Ruppert,O?Connell,Hassanein,Hategan-Marandiuc,Hereld,Hovland,Hudson,Insepov,Insley,Iskra,Jacob,Jedlicka,Judson,Van Gammeren,Zhang,Kaper,Karonis,Karpeev,Kaushik,Keahey,Kettimuthu,Kim,Peterka,Li,Knepley,Lang,Larson,Latham,Lathrop,Leaf,Leggett,Leyffer,Liming,Link,Lottes,Loy,Lueninghoener,Lusk,Lyness,Madduri,Martin,Mattas,Thomas,McInnes,Trimble,Trimble,Bullock,Bui,Meyer,Mickelson,Miller,Min,Mishur,Morgan,Morozov,Munson,Navarro,Schmitz,Roux,Norris,Norris,Nowak,Olson,Olson,Overbeek,Paarmann,Paczian,Papka,Parrello,Peters,Xiao,Pieper,Plewa,Pusch,Raffenetti,Raicu,Rajavenkateshwaran,Bittner,Rackow,Ressman,Riley,Roberts,Rodriguez,Rohder,Ross,Sarich,Shin,Sie benlist
University of Chicago username: feigl,xbxu,griffin,stevens,zidel,allcock,bair,acherry,smc,allain,ranantha,anitescu,bacon,wilshire,balaji,balay,jbardhan,bartels,beckman,bester,beumer,bhowmick,blau,bradshaw,bresnaha,bullock,buntinas,cattaneo,bcerny,chan,childers,choudhar,cobb,cohoon,desai,disz,beisenbe,fischer,itf,,palomino,ninfa,tfreeman,mkaczmar,obabko,greguric,mcilvain,carns,ruppert,joconne,hassanei,hategan,hereld,hovland,hudson,insepov,insley,iskra,jacob,jedlicka,judson,mvan,yzhang,kaper,karonis,karpeev,kaushik,keahey,kettimut,jkim,tpeterka,likli,knepley,slang,larson,robl,lathrop,leaf,leggett,leyffer,liming,mlink,jlottes,rloy,lueningh,lusk,lyness,madduri,smartin,mattas,sthomas,curfman,trimble,trimble,jbullock,Bui,folker,mickelso,neillm,mmin,mishur,tmorgan,morozov,tmunson,navarro,cschmitz,roux,norris,jnorris,nowak,eolson,olson,overbeek,paarmann,paczian,papka,parrello,cpeters,,pieper,tomek,gdpusch,raffenet,iraicu,kavithaa,bittner,rackow,davidr,riley,roberts,arodri7,rohder,rross,sarich,jaewook,franks,siegela,skow,bsmith,spada,stace,t stacey,
phone numbers: (630) 252-7894,,(630) 252-7271,(630) 252-3378,(630) 252-7818,(630) 252-7573,(630) 252-5751,(630) 252-4296,(630) 252-1637,(630) 252-5184,(630) 252-2273,(630) 252-4172,(630) 252-5569,630-252-1177,(630) 252-3017,(630) 252-4912,(630) 252-4698,(630) 252-3135,(630) 252-9020,(630) 252-4779,(630) 252-7165,(630) 252-1842,(630) 252-5638,(630) 252-1498,(630) 252-4243,(630) 252-1842,(630) 252-7928,(630) 252-7160,(630) 252-1100,(630) 252-6044,(630) 252-0922,(630) 252-4909,(630) 252-6599,(630) 252-1881,(630) 252-7587,(630) 252-7831,(630) 252-5878,(630) 252-6018,(630) 252-4619,,(630) 252-6188,,(630) 252-5694,(630) 252-0958,(630) 252-5296,(630) 252-7120,252-1773,630-685-1268,(630) 252-1351,(630) 252-3610,(630) 252-5889,(630) 252-6003,(630) 252-4170,(630) 252-6384,(630) 252-8690,(630) 252-5049,(630) 252-5649,(630) 252-7197,(630) 252-2983,(630) 252-6785,(630) 252-3050,(630) 252-4185,(630) 252-5687,(630) 252-9948,(630) 252-7942,(630) 252-1229,(630) 252-6779,(630) 252-1673,(630) 252-0915,(630) 252-4213,(630) 252-719
alternate phone numbers: ,,(773) 834-6816,,,,,,,,,(312) 952-1714,,,,,,,,,,,,,,,(773) 702-8028,,,,,,,,,,,,,,(773) 834-6685,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,(505) 899-4098,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,(773) 834-6814,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,(773) 834-6692,,,,,,,,,,,,,,,,,,,,,(773) 702-4545,,,,,,,,773 834 3913,,773 702 5073,,,,,,,,,,773 834 9956,773 702 5948,773 702 3855,773 702 9116,773 834 9096,773 834 2604,(773)702-3485,,(773) 702-7823,(773) 702-6778,(773) 834-0525,(773) 702-7194,,,773 702 2330,773 834 1037,773 702 4441,773 702 5694,773 702 1051,773 702 8507,,(773) 702-7189,,(773) 702-8208,(773) 702-3493,773 702 5315,773 834 7394,773 702 6964,(773) 702-3405,312 665 7729,773 834 2978,,773 702-2185,773 702 9257,773 702 1222,773 834 0250,773 702 0647,773 834 4393,773 702 0795,773 702 3104,773 702 0557,773 702 4226,773 702 1693,773 834 0743,773 834 2242,,847 491 3714,773 702 6852,773 834 7919,773 834 0735,(773) 702-1632,773 702 4179,773 834 5248,773 834 8178,773 702 5753,773 702 0380,773 702 6117,
emails (.gov emails :D):[email protected],[email protected],[email protected],[email protected],[email protected],[email protected],[email protected],[email protected],[email protected],[email protected],[email protected],[email protected],[email protected],[email protected],[email protected],[email protected],[email protected],[email protected],[email protected],[email protected],[email protected],[email protected],[email protected],[email protected],[email protected],[email protected],[email protected],[email protected],[email protected],[email protected],[email protected],[email protected],[email protected],[email protected],[email protected],[email protected],[email protected],[email protected],[email protected],[email protected],[email protected],,[email protected],[email protected],[email protected],[email protected],,[email protected],[email protected],[email protected],[email protected],[email protected],[email protected],[email protected],[email protected],
alternate emails: ,,,[email protected],,allcock @mcs.anl.gov,,,,,,,[email protected],,,,,,[email protected],,,,,,,,,,,,,,,,,,,,,,,[email protected],,,,,,,[email protected],,,,,,,,,,[email protected],,,,,,,,,,,,,,,,,,,[email protected],,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,[email protected],,,,,,,,,[email protected],,,,,,,,,,,,,,,[email protected],,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,[email protected],,,,,,,,[email protected],,[email protected],,,,,,,,,,[email protected],[email protected],[email protected],[email protected],[email protected],[email protected],[email protected],,[email protected],[email protected],[email protected],[email protected],,,[email protected],[email protected],[email protected],[email protected],[email protected],[email protected],,[email protected],[email protected],edkoddjob.uchicago.edu,[email protected],[email protected],[email protected]
fax numbers: ,,,(630) 252-6333,,,,,,,,(630) 252 6434,,,(630) 252-5986,,,,,,,,,,,(630) 252-4916,(630) 252-5986,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,(630) 252-5986,,,,,,,,,,,,,,,,,,,,,,,,,,(630) 252-2211,,,,,,,630-252-6104,,,,,,,,,,,,,(631) 791-1048,,,,,,,,(630) 252-6333,,,,,,,,,,,,,,,(630) 252-1997,,,,,,,,,,(630) 252-2828,630-252-7692,,,,,,,,,(630) 252-1997,,,(630) 252-2211,,,,,,,,,,,(630) 252-5986,,,,,(630) 252-5676,,,,,,,,,,,,,(630) 252-5676,,(630) 252-4517,,,,,,,,,,,,,,,,,,,,,,,(630) 252-6073,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,(630) 252-8895,,,,,,,,,,,,,,,630 252 9155,,,,,,,,(630) 252 1342,,,,,,,,,,,,,(630) 252-5986,,,,,,,,,,,(608) 263-4499,,,,,,,,,,,,,,,,,,,,(630) 252-3387,,,,,,,,,,,,,,,,,,,,,,,(630) 252-5986,,,,,,(630) 252-3387,,,,,,,,,,,,,,,,,(630) 252 3387,,,,,,,(630) 252-5986,,,,,,,(630) 252-6073,,,,,,,,(630) 252-6073,,,(630) 252-6008,,,,(630) 252-7923,,,,630-252-5986,,,,(630) 252-7777,(630) 252-6008,(630) 252-4289,(630) 252-9868,(630) 252-7777,,,,,,,(630) 252-4470
alternate fax numbers: ,,,(773) 834-6818,,,,,,,,,(773) 834-6818,,,,,,,,,,,,,,,(773) 834-6818,,,,,,,,,,,,,,(773) 834-3700,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,773 834 2877,,773 702 0439,,,,,,,,,,773 834 0139,773 702 9740,773 702 9740,773 702 9237,773 702 5863,773 834 0188,(773)702-8487,,(773) 702-8038,(773) 702-0371,(773) 834-0505,,,,773 834 5250,773 834 0505,773 702 3002,773 702 3172,773 702 4427,773 834 8470,,(773) 702-2172,,,(773) 702-8487,773 702 3172,773 702 3172,773 834 9029,,312 665 7754,773 702 9740,,773 702 6260,773 702 0439,773 702 9740,773 702 4394,773 702 9379,773 702 0271,773 702 9311,773 702 9740 ,773 702 9740,773 834 3028,773 702 9740,773 702 2567,773 834 4546,,847 491 4461,773 702 6260,773 702 9838,773 834 0505,(773) 834-3834,773 702 0439,773 834 0505,773 834 0505,773 834 5906,773 702 4634,773 702 3002,312 996 6312,773 702 9740,773 834 2877,,312 996 0539,773 834 8150,773 702 0037,773 834 8400,,773 702 9740 ,,,773 702
Research groups: name: Laboratory for Scalable Parallel System Software,Bioinformatics,Futures Laboratory,Laboratory for Advanced Numerical Simulations,Distributed Systems Laboratory,Climate Modeling Group,MCS Systems Group name: ADIX,Compbio,FL,LANS,DSL,CMG,Systems
description: Our mission is to develop the technologies required to dramatically increase the productivity of scientists developing applications for parallel supercomputers. The focus is fourfold: integration of parallel programming tools, reuse of parallel program components, development of scientific computing toolkits and portable libraries, and exploration of requirements of future parallel computers.,Bioinformatics is the study of biological systems through the use of computational tools and the application of methods from computer science, mathematics, and information theory. At Argonne, our goal is to develop new methods and technologies for acquiring, organizing, analyzing, and visualizing such data. We apply these methods and technologies in two principal areas: sequence and comparative analysis, phylogenetic and evolutionary studies; systems-centered biology and statistical genomics.,The Argonne Futures Laboratory performs basic and applied research in advanced communications, collaboration, and visualization.
Grants: Abstract: The goal of the IESP to empower ultrahigh resolution and data intensive science and engineering research through the year 2020 by developing a plan for 1) a common, high quality computational environment for peta/exascale systems and for 2) catalyzing, coordinating, and sustaining the effort of the international open source software community to create that environment as quickly as possible. To achieve this goal, the IESP will stage a series of three international meetings, one each in the United States, Europe and Asia, beginning in the spring 2009. On-line collaboration technology will be heavily used to lay the groundwork for and consolidate the results of each meeting, to publish drafts of the plan and elicit contributions from the community, and to ensure that the final plan develops in a way that engages broad participation and ongoing input.
award_amount: award_amount: 2215670.00,217046.00,23206000.00,33426.00,365861.00,1000000.00,3436020.00,159650.00,2430050.00,340409.00,1560000.00,64706.00,199877.00,74462.00,95000.00,27969.00,4999610.00,885621.00,50460.00,38865.00,14981400.00,69954.00,3468670.00,270650.00,596829.00,379140.00,301747.00,479999.00,3960420.00,66977.00,999081.00,7999130.00,399985.00,350000.00,74815.00,430802.00,1215740.00,485670.00,517683.00,299974.00,80000.00,790907.00,2085750.00,82882.00,49075.00,393230.00,50000.00,250000.00,598296.00,2490000.00,540235.00,21000.00,250010.00,1696130.00,1144610.00,750000.00,330196.00,308811.00,24590700.00,116470.00,135794.00,862414.00,1489670.00,626247.00,354636.00,341171.00,1519390.00,1200000.00,390000.00,293004.00,189870.00,276510.00,379367.00,1919390.00,36445.00,299713.00,1641280.00,169999.00,1315230.00,7795800.00,29999.00,410000.00,621999.00,27234300.00,30207400.00,1642000.00,1400000.00,1813060.00,50000.00,1799990.00,211600.00,90000.00,977489.00,160002.00,379367.00,243591.00,79999.00,465000.00,10440000.00,3731864.00
funding_agency: NIH,NSF,NSF,NSF,NSF,NIH,NSF,DOE,NIH,NSF,NIH,NIH,NSF,NSF,Searle,Fermi Lab,NIH,NSF,NSF,NSF,NSF,NIH,NSF,Novartis Inst for BioMedical Res,NSF,NSF,NSF,NSF,NSF,NSF,NIH,NIH,NIH,MacArthur Fnd,NSF,NSF,NIH,NSF,NIH,NIH,NIH,NSF,NSF,Booz Allen Hamilton,NSF,NSF,National Academies Keck Futures Initiatives,NSF,NSF,ONR,NSF,WM Keck Foundation,NSF,NSF,NSF,St Johns Hosp,NSF,NSF,NIH,NSF,NSF,NSF,NSF,NSF,NSF,NSF,DOD,NSF USDA,NSF USDA,NSF,CBC,NSF,DOE,NSF,NIH,NSF,NSF,NSF,NIH,NIH,DOE,NIH,DOE,NIH,NSF,NIH,NIH,NIH-NIAID,NSF,NSF,DOE,NSF,MacArthur Fnd,NSF,DOE,NSF,NIH,DOE-ASCR,DOE-BER,DOE-ASCR
Papers: Authors: A. A. Rodriguez, T. Bompada, M. Syed, P. K. Shah, and N. Maltsev,P. Balaji, W. Feng, J. Archuleta, H. Lin, R. Kettimuthu, R. Thakur, and X. Ma,S. Park,Darius Buntinas, Guillaume Mercier, and William Gropp,P. Balaji, W. Feng, S. Bhagvat, D. K. Panda, R. Thakur, and W. Gropp,A. Baranovski, S. Bharathi, J. Bresnahan, A. Chervenak, I. Foster, D. Fraser, T. Freeman, D. Gunter, K. Jackson, K. Keahey, C. Kesselman, D. E. Konerding, N. Leroy, M. Link, M. Livny, N. Miller, R. Miller, G. Oleynik, L. Pearlman, J. M. Schopf, R. Schuler, and B. Tierney,L. Yang, C. Liu, J. M. Schopf, and I. Foster,K. Keahey, T. Freeman, J. Lauret, and D. Olson,D. Buntinas and W. Gropp,V. M. Zavala, J. Wang, S. Leyffer, E. M. Constantinescu, M. Anitescu, and G. Conzelmann,D. Buntinas, G. Mercier, and W. Gropp,D. Buntinas, G. Mercier and W. Gropp,J. L. Träff, W. Gropp, and R. Thakur,R. Thakur and W. Gropp,J. Shin, P. Malusare, and P. D. Hovland,Lin, M.F., Bratt, J.D., Engelhardt, M., Hagler, Ph., Hemmert, T.R., Meyer, H.B., Negele, J.W.,
-- Matt Kwiatkowski M.S.I.S. Interim Cyber Security Program Manager Aviation Safety Officer Argonne Cyber Security Program Office
Argonne National Laboratory http://www.anl.gov 9700 South Cass Avenue Bldg 240 Office 5310 Argonne, IL 60439
[email protected] Phone (630) 252-6465 Fax (630) 252-9689
HEALTH WARNING: Care should be taken when lifting this e-mail, since its mass, and thus its weight, is dependent on its velocity relative to the user.
So securing that page is done, it will now only accept numeric values for the id, I also found the same problem in /research/project_detail.php, /news/detail.php and /events/detail.php I think that's the exposed portions of the adminforms stuff on that site, I can't think of other areas that build sql statements from the query string, if anyone sees any other pages that do something like that, let me know.. The fix is simple, it goes from $id = mysql_real_escape_string($_GET['id']); to $id = 0; if(ctype_digit($_GET["id"])) $id = mysql_real_escape_string($_GET['id']); On Apr 11, 2012, at 10:08 AM, Chris Walker wrote:
yeah the db in question is the that cels adminforms application
On Apr 11, 2012, at 10:04 AM, Craig Stacey wrote:
Okay, well, pretty sure I see how it happened.
In /www/logs/www.ci.uchicago.edu/access_log.2012Apr10 on pokey, I see lots of stuff like this:
61.178.84.251 - - [10/Apr/2012:09:13:25 -0500] "GET /people/profile.php?id=999999.9+union+all+select+0x31303235343830303536%2C0x31303235343830303536%2C0x31303235343830303536%2C0x31303235343830303536%2C0x31303235343830303536-- HTTP/1.1" 200 8083
(etc.)
Looks like we need some scrubbing/validation on the PHP for this. I suspect MCS may have the same issue with its site. -- Craig
On Apr 11, 2012, at 9:57 AM, Craig Stacey wrote:
Don't be alarmed by the subject.
Some sooper 1337 hax0r managed to dump publicly available information from the database serving www.ci.uchicago.edu (aka www.ci.anl.gov). As far as I can tell, there's no real incursion here -- just a likely SQL injection. Still, we should make sure things are secure and figure out what allowed this to happen so we can lock it down.
-- Craig
Begin forwarded message:
From: "Kwiatkowski, Matthew A." <[email protected]> Subject: Hacked CI server. Date: April 11, 2012 9:33:39 AM CDT To: "Stacey, Craig J." <[email protected]> Cc: "CSPO ([email protected])" <[email protected]>
Craig,
Got news last night (just read it this AM) the JC3-CIRC found that www.ci.anl.gov was defaced and/or a person was able to dump out the following DB’s on the server…
Hacked by: DMTryptamine, you can follow me at: https://twitter.com/#!/DimethylTrypta1 Salutations mother fuckers, owned these three .govs good and hard, so happens they were my first .govs as well ^>^ Shout outs to: Ichi, Spec, 7hor, and Iner7ia
www.ci.anl.gov
Databases: , division , events , grants , innews , news , papers , people , posters , projects , purpose , research_areas , research_groups , role , sites , tags
People: fname: Jim,Xiabing,Jan,Rick,Cheryl,Bill,Raymond,Andrew,Susan,Jean,Rachana,Mihai,Charles,John, Pavan,Satish,Jaydeep, Daniela,Peter,Joseph,Judy, Sanjukta,Eric,Rick,John,La Joyce,Darius,Fausto,Beth, Anthony,Lisa,Alok,Karen,Matthew,Narayan,Terry, Robert S.,Paul,Ian T.,Zheng (Cynthia),Silvia,Ninfa,Tim,Margaret,Aleksandr,Susan,Mary,Philip,Faith,Jack,Ahmed,Mihael, Mark,Paul, Randy,Zinetulla,Joseph,Kamil,Robert,Ed,Ivan,Mary,Yi,Hans,Nicholas,Dmitry,Dinesh,Kate,Rajkumar,Jong,Thomas,Li,Matt,Samuel,Jay,Robert,Scott, Gary,Ti, Sven,R. Lee,Michael,James,Ray,Cory,Ewing L. (Rusty), James N.,Ravi,Stuart, Richard F.,Stephen,Lois Curfman,William,William,JaQuel,Van Thi,Folker,Sheri,Neill,Misun,Darlyn,Tom,Vitali,Todd,John-Paul,Corby,Benoit,Boyana,John,David,Eric,Robert, Ross, Daniel, Tobias,Michael,Bruce,Carolyn,Shucai,Gail,Tomasz, Gordon David,Ken,Ioan, Kavithaa,Sandra,Gene,David,Katherine,John, Alexis A.,Gigi,Rob,Jason,Jaewook,Frank,Andrew,Dane,Barry,Mary,Craig,Tisha,Tina,Judy, Lori, Valerie,Brian,Max (Adam),Thomas, Jean,John,Lynn,Vero
lname: Feigl,Xu,Griffin,Stevens,Zidel,Allcock,Bair,Cherry,Coghlan,Allain,Ananthakrishnan,Anitescu,Bacon,Blaas,Balaji,Balay,Bardhan,Bartels,Beckman,Bester,Beumer,Bhowmick,Blau,Bradshaw,Bresnahan,Bullock,Buntinas,Cattaneo,Cerny,Chan,Childers,Choudhary,Cobb,Cohoon,Desai,Disz,Eisenberg,Fischer,Foster,Gu,Palomino,Mayorga,Freeman,Kaczmarski,Obabko,Gregurich,McIlvain,Carns,Ruppert,O?Connell,Hassanein,Hategan-Marandiuc,Hereld,Hovland,Hudson,Insepov,Insley,Iskra,Jacob,Jedlicka,Judson,Van Gammeren,Zhang,Kaper,Karonis,Karpeev,Kaushik,Keahey,Kettimuthu,Kim,Peterka,Li,Knepley,Lang,Larson,Latham,Lathrop,Leaf,Leggett,Leyffer,Liming,Link,Lottes,Loy,Lueninghoener,Lusk,Lyness,Madduri,Martin,Mattas,Thomas,McInnes,Trimble,Trimble,Bullock,Bui,Meyer,Mickelson,Miller,Min,Mishur,Morgan,Morozov,Munson,Navarro,Schmitz,Roux,Norris,Norris,Nowak,Olson,Olson,Overbeek,Paarmann,Paczian,Papka,Parrello,Peters,Xiao,Pieper,Plewa,Pusch,Raffenetti,Raicu,Rajavenkateshwaran,Bittner,Rackow,Ressman,Riley,Roberts,Rodriguez,Rohder,Ross,Sarich,Shin,Sie benlist
University of Chicago username: feigl,xbxu,griffin,stevens,zidel,allcock,bair,acherry,smc,allain,ranantha,anitescu,bacon,wilshire,balaji,balay,jbardhan,bartels,beckman,bester,beumer,bhowmick,blau,bradshaw,bresnaha,bullock,buntinas,cattaneo,bcerny,chan,childers,choudhar,cobb,cohoon,desai,disz,beisenbe,fischer,itf,,palomino,ninfa,tfreeman,mkaczmar,obabko,greguric,mcilvain,carns,ruppert,joconne,hassanei,hategan,hereld,hovland,hudson,insepov,insley,iskra,jacob,jedlicka,judson,mvan,yzhang,kaper,karonis,karpeev,kaushik,keahey,kettimut,jkim,tpeterka,likli,knepley,slang,larson,robl,lathrop,leaf,leggett,leyffer,liming,mlink,jlottes,rloy,lueningh,lusk,lyness,madduri,smartin,mattas,sthomas,curfman,trimble,trimble,jbullock,Bui,folker,mickelso,neillm,mmin,mishur,tmorgan,morozov,tmunson,navarro,cschmitz,roux,norris,jnorris,nowak,eolson,olson,overbeek,paarmann,paczian,papka,parrello,cpeters,,pieper,tomek,gdpusch,raffenet,iraicu,kavithaa,bittner,rackow,davidr,riley,roberts,arodri7,rohder,rross,sarich,jaewook,franks,siegela,skow,bsmith,spada,stace,t stacey,
phone numbers: (630) 252-7894,,(630) 252-7271,(630) 252-3378,(630) 252-7818,(630) 252-7573,(630) 252-5751,(630) 252-4296,(630) 252-1637,(630) 252-5184,(630) 252-2273,(630) 252-4172,(630) 252-5569,630-252-1177,(630) 252-3017,(630) 252-4912,(630) 252-4698,(630) 252-3135,(630) 252-9020,(630) 252-4779,(630) 252-7165,(630) 252-1842,(630) 252-5638,(630) 252-1498,(630) 252-4243,(630) 252-1842,(630) 252-7928,(630) 252-7160,(630) 252-1100,(630) 252-6044,(630) 252-0922,(630) 252-4909,(630) 252-6599,(630) 252-1881,(630) 252-7587,(630) 252-7831,(630) 252-5878,(630) 252-6018,(630) 252-4619,,(630) 252-6188,,(630) 252-5694,(630) 252-0958,(630) 252-5296,(630) 252-7120,252-1773,630-685-1268,(630) 252-1351,(630) 252-3610,(630) 252-5889,(630) 252-6003,(630) 252-4170,(630) 252-6384,(630) 252-8690,(630) 252-5049,(630) 252-5649,(630) 252-7197,(630) 252-2983,(630) 252-6785,(630) 252-3050,(630) 252-4185,(630) 252-5687,(630) 252-9948,(630) 252-7942,(630) 252-1229,(630) 252-6779,(630) 252-1673,(630) 252-0915,(630) 252-4213,(630) 252-719
alternate phone numbers: ,,(773) 834-6816,,,,,,,,,(312) 952-1714,,,,,,,,,,,,,,,(773) 702-8028,,,,,,,,,,,,,,(773) 834-6685,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,(505) 899-4098,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,(773) 834-6814,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,(773) 834-6692,,,,,,,,,,,,,,,,,,,,,(773) 702-4545,,,,,,,,773 834 3913,,773 702 5073,,,,,,,,,,773 834 9956,773 702 5948,773 702 3855,773 702 9116,773 834 9096,773 834 2604,(773)702-3485,,(773) 702-7823,(773) 702-6778,(773) 834-0525,(773) 702-7194,,,773 702 2330,773 834 1037,773 702 4441,773 702 5694,773 702 1051,773 702 8507,,(773) 702-7189,,(773) 702-8208,(773) 702-3493,773 702 5315,773 834 7394,773 702 6964,(773) 702-3405,312 665 7729,773 834 2978,,773 702-2185,773 702 9257,773 702 1222,773 834 0250,773 702 0647,773 834 4393,773 702 0795,773 702 3104,773 702 0557,773 702 4226,773 702 1693,773 834 0743,773 834 2242,,847 491 3714,773 702 6852,773 834 7919,773 834 0735,(773) 702-1632,773 702 4179,773 834 5248,773 834 8178,773 702 5753,773 702 0380,773 702 6117,
emails (.gov emails :D):[email protected],[email protected],[email protected],[email protected],[email protected],[email protected],[email protected],[email protected],[email protected],[email protected],[email protected],[email protected],[email protected],[email protected],[email protected],[email protected],[email protected],[email protected],[email protected],[email protected],[email protected],[email protected],[email protected],[email protected],[email protected],[email protected],[email protected],[email protected],[email protected],[email protected],[email protected],[email protected],[email protected],[email protected],[email protected],[email protected],[email protected],[email protected],[email protected],[email protected],[email protected],,[email protected],[email protected],[email protected],[email protected],,[email protected],[email protected],[email protected],[email protected],[email protected],[email protected],[email protected],[email protected],
alternate emails: ,,,[email protected],,allcock @mcs.anl.gov,,,,,,,[email protected],,,,,,[email protected],,,,,,,,,,,,,,,,,,,,,,,[email protected],,,,,,,[email protected],,,,,,,,,,[email protected],,,,,,,,,,,,,,,,,,,[email protected],,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,[email protected],,,,,,,,,[email protected],,,,,,,,,,,,,,,[email protected],,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,[email protected],,,,,,,,[email protected],,[email protected],,,,,,,,,,[email protected],[email protected],[email protected],[email protected],[email protected],[email protected],[email protected],,[email protected],[email protected],[email protected],[email protected],,,[email protected],[email protected],[email protected],[email protected],[email protected],[email protected],,[email protected],[email protected],edkoddjob.uchicago.edu,[email protected],[email protected],[email protected]
fax numbers: ,,,(630) 252-6333,,,,,,,,(630) 252 6434,,,(630) 252-5986,,,,,,,,,,,(630) 252-4916,(630) 252-5986,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,(630) 252-5986,,,,,,,,,,,,,,,,,,,,,,,,,,(630) 252-2211,,,,,,,630-252-6104,,,,,,,,,,,,,(631) 791-1048,,,,,,,,(630) 252-6333,,,,,,,,,,,,,,,(630) 252-1997,,,,,,,,,,(630) 252-2828,630-252-7692,,,,,,,,,(630) 252-1997,,,(630) 252-2211,,,,,,,,,,,(630) 252-5986,,,,,(630) 252-5676,,,,,,,,,,,,,(630) 252-5676,,(630) 252-4517,,,,,,,,,,,,,,,,,,,,,,,(630) 252-6073,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,(630) 252-8895,,,,,,,,,,,,,,,630 252 9155,,,,,,,,(630) 252 1342,,,,,,,,,,,,,(630) 252-5986,,,,,,,,,,,(608) 263-4499,,,,,,,,,,,,,,,,,,,,(630) 252-3387,,,,,,,,,,,,,,,,,,,,,,,(630) 252-5986,,,,,,(630) 252-3387,,,,,,,,,,,,,,,,,(630) 252 3387,,,,,,,(630) 252-5986,,,,,,,(630) 252-6073,,,,,,,,(630) 252-6073,,,(630) 252-6008,,,,(630) 252-7923,,,,630-252-5986,,,,(630) 252-7777,(630) 252-6008,(630) 252-4289,(630) 252-9868,(630) 252-7777,,,,,,,(630) 252-4470
alternate fax numbers: ,,,(773) 834-6818,,,,,,,,,(773) 834-6818,,,,,,,,,,,,,,,(773) 834-6818,,,,,,,,,,,,,,(773) 834-3700,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,773 834 2877,,773 702 0439,,,,,,,,,,773 834 0139,773 702 9740,773 702 9740,773 702 9237,773 702 5863,773 834 0188,(773)702-8487,,(773) 702-8038,(773) 702-0371,(773) 834-0505,,,,773 834 5250,773 834 0505,773 702 3002,773 702 3172,773 702 4427,773 834 8470,,(773) 702-2172,,,(773) 702-8487,773 702 3172,773 702 3172,773 834 9029,,312 665 7754,773 702 9740,,773 702 6260,773 702 0439,773 702 9740,773 702 4394,773 702 9379,773 702 0271,773 702 9311,773 702 9740 ,773 702 9740,773 834 3028,773 702 9740,773 702 2567,773 834 4546,,847 491 4461,773 702 6260,773 702 9838,773 834 0505,(773) 834-3834,773 702 0439,773 834 0505,773 834 0505,773 834 5906,773 702 4634,773 702 3002,312 996 6312,773 702 9740,773 834 2877,,312 996 0539,773 834 8150,773 702 0037,773 834 8400,,773 702 9740 ,,,773 702
Research groups: name: Laboratory for Scalable Parallel System Software,Bioinformatics,Futures Laboratory,Laboratory for Advanced Numerical Simulations,Distributed Systems Laboratory,Climate Modeling Group,MCS Systems Group name: ADIX,Compbio,FL,LANS,DSL,CMG,Systems
description: Our mission is to develop the technologies required to dramatically increase the productivity of scientists developing applications for parallel supercomputers. The focus is fourfold: integration of parallel programming tools, reuse of parallel program components, development of scientific computing toolkits and portable libraries, and exploration of requirements of future parallel computers.,Bioinformatics is the study of biological systems through the use of computational tools and the application of methods from computer science, mathematics, and information theory. At Argonne, our goal is to develop new methods and technologies for acquiring, organizing, analyzing, and visualizing such data. We apply these methods and technologies in two principal areas: sequence and comparative analysis, phylogenetic and evolutionary studies; systems-centered biology and statistical genomics.,The Argonne Futures Laboratory performs basic and applied research in advanced communications, collaboration, and visualization.
Grants: Abstract: The goal of the IESP to empower ultrahigh resolution and data intensive science and engineering research through the year 2020 by developing a plan for 1) a common, high quality computational environment for peta/exascale systems and for 2) catalyzing, coordinating, and sustaining the effort of the international open source software community to create that environment as quickly as possible. To achieve this goal, the IESP will stage a series of three international meetings, one each in the United States, Europe and Asia, beginning in the spring 2009. On-line collaboration technology will be heavily used to lay the groundwork for and consolidate the results of each meeting, to publish drafts of the plan and elicit contributions from the community, and to ensure that the final plan develops in a way that engages broad participation and ongoing input.
award_amount: award_amount: 2215670.00,217046.00,23206000.00,33426.00,365861.00,1000000.00,3436020.00,159650.00,2430050.00,340409.00,1560000.00,64706.00,199877.00,74462.00,95000.00,27969.00,4999610.00,885621.00,50460.00,38865.00,14981400.00,69954.00,3468670.00,270650.00,596829.00,379140.00,301747.00,479999.00,3960420.00,66977.00,999081.00,7999130.00,399985.00,350000.00,74815.00,430802.00,1215740.00,485670.00,517683.00,299974.00,80000.00,790907.00,2085750.00,82882.00,49075.00,393230.00,50000.00,250000.00,598296.00,2490000.00,540235.00,21000.00,250010.00,1696130.00,1144610.00,750000.00,330196.00,308811.00,24590700.00,116470.00,135794.00,862414.00,1489670.00,626247.00,354636.00,341171.00,1519390.00,1200000.00,390000.00,293004.00,189870.00,276510.00,379367.00,1919390.00,36445.00,299713.00,1641280.00,169999.00,1315230.00,7795800.00,29999.00,410000.00,621999.00,27234300.00,30207400.00,1642000.00,1400000.00,1813060.00,50000.00,1799990.00,211600.00,90000.00,977489.00,160002.00,379367.00,243591.00,79999.00,465000.00,10440000.00,3731864.00
funding_agency: NIH,NSF,NSF,NSF,NSF,NIH,NSF,DOE,NIH,NSF,NIH,NIH,NSF,NSF,Searle,Fermi Lab,NIH,NSF,NSF,NSF,NSF,NIH,NSF,Novartis Inst for BioMedical Res,NSF,NSF,NSF,NSF,NSF,NSF,NIH,NIH,NIH,MacArthur Fnd,NSF,NSF,NIH,NSF,NIH,NIH,NIH,NSF,NSF,Booz Allen Hamilton,NSF,NSF,National Academies Keck Futures Initiatives,NSF,NSF,ONR,NSF,WM Keck Foundation,NSF,NSF,NSF,St Johns Hosp,NSF,NSF,NIH,NSF,NSF,NSF,NSF,NSF,NSF,NSF,DOD,NSF USDA,NSF USDA,NSF,CBC,NSF,DOE,NSF,NIH,NSF,NSF,NSF,NIH,NIH,DOE,NIH,DOE,NIH,NSF,NIH,NIH,NIH-NIAID,NSF,NSF,DOE,NSF,MacArthur Fnd,NSF,DOE,NSF,NIH,DOE-ASCR,DOE-BER,DOE-ASCR
Papers: Authors: A. A. Rodriguez, T. Bompada, M. Syed, P. K. Shah, and N. Maltsev,P. Balaji, W. Feng, J. Archuleta, H. Lin, R. Kettimuthu, R. Thakur, and X. Ma,S. Park,Darius Buntinas, Guillaume Mercier, and William Gropp,P. Balaji, W. Feng, S. Bhagvat, D. K. Panda, R. Thakur, and W. Gropp,A. Baranovski, S. Bharathi, J. Bresnahan, A. Chervenak, I. Foster, D. Fraser, T. Freeman, D. Gunter, K. Jackson, K. Keahey, C. Kesselman, D. E. Konerding, N. Leroy, M. Link, M. Livny, N. Miller, R. Miller, G. Oleynik, L. Pearlman, J. M. Schopf, R. Schuler, and B. Tierney,L. Yang, C. Liu, J. M. Schopf, and I. Foster,K. Keahey, T. Freeman, J. Lauret, and D. Olson,D. Buntinas and W. Gropp,V. M. Zavala, J. Wang, S. Leyffer, E. M. Constantinescu, M. Anitescu, and G. Conzelmann,D. Buntinas, G. Mercier, and W. Gropp,D. Buntinas, G. Mercier and W. Gropp,J. L. Träff, W. Gropp, and R. Thakur,R. Thakur and W. Gropp,J. Shin, P. Malusare, and P. D. Hovland,Lin, M.F., Bratt, J.D., Engelhardt, M., Hagler, Ph., Hemmert, T.R., Meyer, H.B., Negele, J.W.,
-- Matt Kwiatkowski M.S.I.S. Interim Cyber Security Program Manager Aviation Safety Officer Argonne Cyber Security Program Office
Argonne National Laboratory http://www.anl.gov 9700 South Cass Avenue Bldg 240 Office 5310 Argonne, IL 60439
[email protected] Phone (630) 252-6465 Fax (630) 252-9689
HEALTH WARNING: Care should be taken when lifting this e-mail, since its mass, and thus its weight, is dependent on its velocity relative to the user.
Rockin'. -- Craig On Apr 11, 2012, at 10:23 AM, Chris Walker wrote:
So securing that page is done, it will now only accept numeric values for the id, I also found the same problem in /research/project_detail.php, /news/detail.php and /events/detail.php
I think that's the exposed portions of the adminforms stuff on that site, I can't think of other areas that build sql statements from the query string, if anyone sees any other pages that do something like that, let me know..
The fix is simple,
it goes from $id = mysql_real_escape_string($_GET['id']);
to
$id = 0; if(ctype_digit($_GET["id"])) $id = mysql_real_escape_string($_GET['id']);
On Apr 11, 2012, at 10:08 AM, Chris Walker wrote:
yeah the db in question is the that cels adminforms application
On Apr 11, 2012, at 10:04 AM, Craig Stacey wrote:
Okay, well, pretty sure I see how it happened.
In /www/logs/www.ci.uchicago.edu/access_log.2012Apr10 on pokey, I see lots of stuff like this:
61.178.84.251 - - [10/Apr/2012:09:13:25 -0500] "GET /people/profile.php?id=999999.9+union+all+select+0x31303235343830303536%2C0x31303235343830303536%2C0x31303235343830303536%2C0x31303235343830303536%2C0x31303235343830303536-- HTTP/1.1" 200 8083
(etc.)
Looks like we need some scrubbing/validation on the PHP for this. I suspect MCS may have the same issue with its site. -- Craig
On Apr 11, 2012, at 9:57 AM, Craig Stacey wrote:
Don't be alarmed by the subject.
Some sooper 1337 hax0r managed to dump publicly available information from the database serving www.ci.uchicago.edu (aka www.ci.anl.gov). As far as I can tell, there's no real incursion here -- just a likely SQL injection. Still, we should make sure things are secure and figure out what allowed this to happen so we can lock it down.
-- Craig
Begin forwarded message:
From: "Kwiatkowski, Matthew A." <[email protected]> Subject: Hacked CI server. Date: April 11, 2012 9:33:39 AM CDT To: "Stacey, Craig J." <[email protected]> Cc: "CSPO ([email protected])" <[email protected]>
Craig,
Got news last night (just read it this AM) the JC3-CIRC found that www.ci.anl.gov was defaced and/or a person was able to dump out the following DB’s on the server…
Hacked by: DMTryptamine, you can follow me at: https://twitter.com/#!/DimethylTrypta1 Salutations mother fuckers, owned these three .govs good and hard, so happens they were my first .govs as well ^>^ Shout outs to: Ichi, Spec, 7hor, and Iner7ia
www.ci.anl.gov
Databases: , division , events , grants , innews , news , papers , people , posters , projects , purpose , research_areas , research_groups , role , sites , tags
People: fname: Jim,Xiabing,Jan,Rick,Cheryl,Bill,Raymond,Andrew,Susan,Jean,Rachana,Mihai,Charles,John, Pavan,Satish,Jaydeep, Daniela,Peter,Joseph,Judy, Sanjukta,Eric,Rick,John,La Joyce,Darius,Fausto,Beth, Anthony,Lisa,Alok,Karen,Matthew,Narayan,Terry, Robert S.,Paul,Ian T.,Zheng (Cynthia),Silvia,Ninfa,Tim,Margaret,Aleksandr,Susan,Mary,Philip,Faith,Jack,Ahmed,Mihael, Mark,Paul, Randy,Zinetulla,Joseph,Kamil,Robert,Ed,Ivan,Mary,Yi,Hans,Nicholas,Dmitry,Dinesh,Kate,Rajkumar,Jong,Thomas,Li,Matt,Samuel,Jay,Robert,Scott, Gary,Ti, Sven,R. Lee,Michael,James,Ray,Cory,Ewing L. (Rusty), James N.,Ravi,Stuart, Richard F.,Stephen,Lois Curfman,William,William,JaQuel,Van Thi,Folker,Sheri,Neill,Misun,Darlyn,Tom,Vitali,Todd,John-Paul,Corby,Benoit,Boyana,John,David,Eric,Robert, Ross, Daniel, Tobias,Michael,Bruce,Carolyn,Shucai,Gail,Tomasz, Gordon David,Ken,Ioan, Kavithaa,Sandra,Gene,David,Katherine,John, Alexis A.,Gigi,Rob,Jason,Jaewook,Frank,Andrew,Dane,Barry,Mary,Craig,Tisha,Tina,Judy, Lori, Valerie,Brian,Max (Adam),Thomas, Jean,John,Lynn,Vero
lname: Feigl,Xu,Griffin,Stevens,Zidel,Allcock,Bair,Cherry,Coghlan,Allain,Ananthakrishnan,Anitescu,Bacon,Blaas,Balaji,Balay,Bardhan,Bartels,Beckman,Bester,Beumer,Bhowmick,Blau,Bradshaw,Bresnahan,Bullock,Buntinas,Cattaneo,Cerny,Chan,Childers,Choudhary,Cobb,Cohoon,Desai,Disz,Eisenberg,Fischer,Foster,Gu,Palomino,Mayorga,Freeman,Kaczmarski,Obabko,Gregurich,McIlvain,Carns,Ruppert,O?Connell,Hassanein,Hategan-Marandiuc,Hereld,Hovland,Hudson,Insepov,Insley,Iskra,Jacob,Jedlicka,Judson,Van Gammeren,Zhang,Kaper,Karonis,Karpeev,Kaushik,Keahey,Kettimuthu,Kim,Peterka,Li,Knepley,Lang,Larson,Latham,Lathrop,Leaf,Leggett,Leyffer,Liming,Link,Lottes,Loy,Lueninghoener,Lusk,Lyness,Madduri,Martin,Mattas,Thomas,McInnes,Trimble,Trimble,Bullock,Bui,Meyer,Mickelson,Miller,Min,Mishur,Morgan,Morozov,Munson,Navarro,Schmitz,Roux,Norris,Norris,Nowak,Olson,Olson,Overbeek,Paarmann,Paczian,Papka,Parrello,Peters,Xiao,Pieper,Plewa,Pusch,Raffenetti,Raicu,Rajavenkateshwaran,Bittner,Rackow,Ressman,Riley,Roberts,Rodriguez,Rohder,Ross,Sarich,Shin,Sie benlist
University of Chicago username: feigl,xbxu,griffin,stevens,zidel,allcock,bair,acherry,smc,allain,ranantha,anitescu,bacon,wilshire,balaji,balay,jbardhan,bartels,beckman,bester,beumer,bhowmick,blau,bradshaw,bresnaha,bullock,buntinas,cattaneo,bcerny,chan,childers,choudhar,cobb,cohoon,desai,disz,beisenbe,fischer,itf,,palomino,ninfa,tfreeman,mkaczmar,obabko,greguric,mcilvain,carns,ruppert,joconne,hassanei,hategan,hereld,hovland,hudson,insepov,insley,iskra,jacob,jedlicka,judson,mvan,yzhang,kaper,karonis,karpeev,kaushik,keahey,kettimut,jkim,tpeterka,likli,knepley,slang,larson,robl,lathrop,leaf,leggett,leyffer,liming,mlink,jlottes,rloy,lueningh,lusk,lyness,madduri,smartin,mattas,sthomas,curfman,trimble,trimble,jbullock,Bui,folker,mickelso,neillm,mmin,mishur,tmorgan,morozov,tmunson,navarro,cschmitz,roux,norris,jnorris,nowak,eolson,olson,overbeek,paarmann,paczian,papka,parrello,cpeters,,pieper,tomek,gdpusch,raffenet,iraicu,kavithaa,bittner,rackow,davidr,riley,roberts,arodri7,rohder,rross,sarich,jaewook,franks,siegela,skow,bsmith,spada,stace,t stacey,
phone numbers: (630) 252-7894,,(630) 252-7271,(630) 252-3378,(630) 252-7818,(630) 252-7573,(630) 252-5751,(630) 252-4296,(630) 252-1637,(630) 252-5184,(630) 252-2273,(630) 252-4172,(630) 252-5569,630-252-1177,(630) 252-3017,(630) 252-4912,(630) 252-4698,(630) 252-3135,(630) 252-9020,(630) 252-4779,(630) 252-7165,(630) 252-1842,(630) 252-5638,(630) 252-1498,(630) 252-4243,(630) 252-1842,(630) 252-7928,(630) 252-7160,(630) 252-1100,(630) 252-6044,(630) 252-0922,(630) 252-4909,(630) 252-6599,(630) 252-1881,(630) 252-7587,(630) 252-7831,(630) 252-5878,(630) 252-6018,(630) 252-4619,,(630) 252-6188,,(630) 252-5694,(630) 252-0958,(630) 252-5296,(630) 252-7120,252-1773,630-685-1268,(630) 252-1351,(630) 252-3610,(630) 252-5889,(630) 252-6003,(630) 252-4170,(630) 252-6384,(630) 252-8690,(630) 252-5049,(630) 252-5649,(630) 252-7197,(630) 252-2983,(630) 252-6785,(630) 252-3050,(630) 252-4185,(630) 252-5687,(630) 252-9948,(630) 252-7942,(630) 252-1229,(630) 252-6779,(630) 252-1673,(630) 252-0915,(630) 252-4213,(630) 252-719
alternate phone numbers: ,,(773) 834-6816,,,,,,,,,(312) 952-1714,,,,,,,,,,,,,,,(773) 702-8028,,,,,,,,,,,,,,(773) 834-6685,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,(505) 899-4098,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,(773) 834-6814,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,(773) 834-6692,,,,,,,,,,,,,,,,,,,,,(773) 702-4545,,,,,,,,773 834 3913,,773 702 5073,,,,,,,,,,773 834 9956,773 702 5948,773 702 3855,773 702 9116,773 834 9096,773 834 2604,(773)702-3485,,(773) 702-7823,(773) 702-6778,(773) 834-0525,(773) 702-7194,,,773 702 2330,773 834 1037,773 702 4441,773 702 5694,773 702 1051,773 702 8507,,(773) 702-7189,,(773) 702-8208,(773) 702-3493,773 702 5315,773 834 7394,773 702 6964,(773) 702-3405,312 665 7729,773 834 2978,,773 702-2185,773 702 9257,773 702 1222,773 834 0250,773 702 0647,773 834 4393,773 702 0795,773 702 3104,773 702 0557,773 702 4226,773 702 1693,773 834 0743,773 834 2242,,847 491 3714,773 702 6852,773 834 7919,773 834 0735,(773) 702-1632,773 702 4179,773 834 5248,773 834 8178,773 702 5753,773 702 0380,773 702 6117,
emails (.gov emails :D):[email protected],[email protected],[email protected],[email protected],[email protected],[email protected],[email protected],[email protected],[email protected],[email protected],[email protected],[email protected],[email protected],[email protected],[email protected],[email protected],[email protected],[email protected],[email protected],[email protected],[email protected],[email protected],[email protected],[email protected],[email protected],[email protected],[email protected],[email protected],[email protected],[email protected],[email protected],[email protected],[email protected],[email protected],[email protected],[email protected],[email protected],[email protected],[email protected],[email protected],[email protected],,[email protected],[email protected],[email protected],[email protected],,[email protected],[email protected],[email protected],[email protected],[email protected],[email protected],[email protected],[email protected],
alternate emails: ,,,[email protected],,allcock @mcs.anl.gov,,,,,,,[email protected],,,,,,[email protected],,,,,,,,,,,,,,,,,,,,,,,[email protected],,,,,,,[email protected],,,,,,,,,,[email protected],,,,,,,,,,,,,,,,,,,[email protected],,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,[email protected],,,,,,,,,[email protected],,,,,,,,,,,,,,,[email protected],,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,[email protected],,,,,,,,[email protected],,[email protected],,,,,,,,,,[email protected],[email protected],[email protected],[email protected],[email protected],[email protected],[email protected],,[email protected],[email protected],[email protected],[email protected],,,[email protected],[email protected],[email protected],[email protected],[email protected],[email protected],,[email protected],[email protected],edkoddjob.uchicago.edu,[email protected],[email protected],[email protected]
fax numbers: ,,,(630) 252-6333,,,,,,,,(630) 252 6434,,,(630) 252-5986,,,,,,,,,,,(630) 252-4916,(630) 252-5986,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,(630) 252-5986,,,,,,,,,,,,,,,,,,,,,,,,,,(630) 252-2211,,,,,,,630-252-6104,,,,,,,,,,,,,(631) 791-1048,,,,,,,,(630) 252-6333,,,,,,,,,,,,,,,(630) 252-1997,,,,,,,,,,(630) 252-2828,630-252-7692,,,,,,,,,(630) 252-1997,,,(630) 252-2211,,,,,,,,,,,(630) 252-5986,,,,,(630) 252-5676,,,,,,,,,,,,,(630) 252-5676,,(630) 252-4517,,,,,,,,,,,,,,,,,,,,,,,(630) 252-6073,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,(630) 252-8895,,,,,,,,,,,,,,,630 252 9155,,,,,,,,(630) 252 1342,,,,,,,,,,,,,(630) 252-5986,,,,,,,,,,,(608) 263-4499,,,,,,,,,,,,,,,,,,,,(630) 252-3387,,,,,,,,,,,,,,,,,,,,,,,(630) 252-5986,,,,,,(630) 252-3387,,,,,,,,,,,,,,,,,(630) 252 3387,,,,,,,(630) 252-5986,,,,,,,(630) 252-6073,,,,,,,,(630) 252-6073,,,(630) 252-6008,,,,(630) 252-7923,,,,630-252-5986,,,,(630) 252-7777,(630) 252-6008,(630) 252-4289,(630) 252-9868,(630) 252-7777,,,,,,,(630) 252-4470
alternate fax numbers: ,,,(773) 834-6818,,,,,,,,,(773) 834-6818,,,,,,,,,,,,,,,(773) 834-6818,,,,,,,,,,,,,,(773) 834-3700,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,773 834 2877,,773 702 0439,,,,,,,,,,773 834 0139,773 702 9740,773 702 9740,773 702 9237,773 702 5863,773 834 0188,(773)702-8487,,(773) 702-8038,(773) 702-0371,(773) 834-0505,,,,773 834 5250,773 834 0505,773 702 3002,773 702 3172,773 702 4427,773 834 8470,,(773) 702-2172,,,(773) 702-8487,773 702 3172,773 702 3172,773 834 9029,,312 665 7754,773 702 9740,,773 702 6260,773 702 0439,773 702 9740,773 702 4394,773 702 9379,773 702 0271,773 702 9311,773 702 9740 ,773 702 9740,773 834 3028,773 702 9740,773 702 2567,773 834 4546,,847 491 4461,773 702 6260,773 702 9838,773 834 0505,(773) 834-3834,773 702 0439,773 834 0505,773 834 0505,773 834 5906,773 702 4634,773 702 3002,312 996 6312,773 702 9740,773 834 2877,,312 996 0539,773 834 8150,773 702 0037,773 834 8400,,773 702 9740 ,,,773 702
Research groups: name: Laboratory for Scalable Parallel System Software,Bioinformatics,Futures Laboratory,Laboratory for Advanced Numerical Simulations,Distributed Systems Laboratory,Climate Modeling Group,MCS Systems Group name: ADIX,Compbio,FL,LANS,DSL,CMG,Systems
description: Our mission is to develop the technologies required to dramatically increase the productivity of scientists developing applications for parallel supercomputers. The focus is fourfold: integration of parallel programming tools, reuse of parallel program components, development of scientific computing toolkits and portable libraries, and exploration of requirements of future parallel computers.,Bioinformatics is the study of biological systems through the use of computational tools and the application of methods from computer science, mathematics, and information theory. At Argonne, our goal is to develop new methods and technologies for acquiring, organizing, analyzing, and visualizing such data. We apply these methods and technologies in two principal areas: sequence and comparative analysis, phylogenetic and evolutionary studies; systems-centered biology and statistical genomics.,The Argonne Futures Laboratory performs basic and applied research in advanced communications, collaboration, and visualization.
Grants: Abstract: The goal of the IESP to empower ultrahigh resolution and data intensive science and engineering research through the year 2020 by developing a plan for 1) a common, high quality computational environment for peta/exascale systems and for 2) catalyzing, coordinating, and sustaining the effort of the international open source software community to create that environment as quickly as possible. To achieve this goal, the IESP will stage a series of three international meetings, one each in the United States, Europe and Asia, beginning in the spring 2009. On-line collaboration technology will be heavily used to lay the groundwork for and consolidate the results of each meeting, to publish drafts of the plan and elicit contributions from the community, and to ensure that the final plan develops in a way that engages broad participation and ongoing input.
award_amount: award_amount: 2215670.00,217046.00,23206000.00,33426.00,365861.00,1000000.00,3436020.00,159650.00,2430050.00,340409.00,1560000.00,64706.00,199877.00,74462.00,95000.00,27969.00,4999610.00,885621.00,50460.00,38865.00,14981400.00,69954.00,3468670.00,270650.00,596829.00,379140.00,301747.00,479999.00,3960420.00,66977.00,999081.00,7999130.00,399985.00,350000.00,74815.00,430802.00,1215740.00,485670.00,517683.00,299974.00,80000.00,790907.00,2085750.00,82882.00,49075.00,393230.00,50000.00,250000.00,598296.00,2490000.00,540235.00,21000.00,250010.00,1696130.00,1144610.00,750000.00,330196.00,308811.00,24590700.00,116470.00,135794.00,862414.00,1489670.00,626247.00,354636.00,341171.00,1519390.00,1200000.00,390000.00,293004.00,189870.00,276510.00,379367.00,1919390.00,36445.00,299713.00,1641280.00,169999.00,1315230.00,7795800.00,29999.00,410000.00,621999.00,27234300.00,30207400.00,1642000.00,1400000.00,1813060.00,50000.00,1799990.00,211600.00,90000.00,977489.00,160002.00,379367.00,243591.00,79999.00,465000.00,10440000.00,3731864.00
funding_agency: NIH,NSF,NSF,NSF,NSF,NIH,NSF,DOE,NIH,NSF,NIH,NIH,NSF,NSF,Searle,Fermi Lab,NIH,NSF,NSF,NSF,NSF,NIH,NSF,Novartis Inst for BioMedical Res,NSF,NSF,NSF,NSF,NSF,NSF,NIH,NIH,NIH,MacArthur Fnd,NSF,NSF,NIH,NSF,NIH,NIH,NIH,NSF,NSF,Booz Allen Hamilton,NSF,NSF,National Academies Keck Futures Initiatives,NSF,NSF,ONR,NSF,WM Keck Foundation,NSF,NSF,NSF,St Johns Hosp,NSF,NSF,NIH,NSF,NSF,NSF,NSF,NSF,NSF,NSF,DOD,NSF USDA,NSF USDA,NSF,CBC,NSF,DOE,NSF,NIH,NSF,NSF,NSF,NIH,NIH,DOE,NIH,DOE,NIH,NSF,NIH,NIH,NIH-NIAID,NSF,NSF,DOE,NSF,MacArthur Fnd,NSF,DOE,NSF,NIH,DOE-ASCR,DOE-BER,DOE-ASCR
Papers: Authors: A. A. Rodriguez, T. Bompada, M. Syed, P. K. Shah, and N. Maltsev,P. Balaji, W. Feng, J. Archuleta, H. Lin, R. Kettimuthu, R. Thakur, and X. Ma,S. Park,Darius Buntinas, Guillaume Mercier, and William Gropp,P. Balaji, W. Feng, S. Bhagvat, D. K. Panda, R. Thakur, and W. Gropp,A. Baranovski, S. Bharathi, J. Bresnahan, A. Chervenak, I. Foster, D. Fraser, T. Freeman, D. Gunter, K. Jackson, K. Keahey, C. Kesselman, D. E. Konerding, N. Leroy, M. Link, M. Livny, N. Miller, R. Miller, G. Oleynik, L. Pearlman, J. M. Schopf, R. Schuler, and B. Tierney,L. Yang, C. Liu, J. M. Schopf, and I. Foster,K. Keahey, T. Freeman, J. Lauret, and D. Olson,D. Buntinas and W. Gropp,V. M. Zavala, J. Wang, S. Leyffer, E. M. Constantinescu, M. Anitescu, and G. Conzelmann,D. Buntinas, G. Mercier, and W. Gropp,D. Buntinas, G. Mercier and W. Gropp,J. L. Träff, W. Gropp, and R. Thakur,R. Thakur and W. Gropp,J. Shin, P. Malusare, and P. D. Hovland,Lin, M.F., Bratt, J.D., Engelhardt, M., Hagler, Ph., Hemmert, T.R., Meyer, H.B., Negele, J.W.,
-- Matt Kwiatkowski M.S.I.S. Interim Cyber Security Program Manager Aviation Safety Officer Argonne Cyber Security Program Office
Argonne National Laboratory http://www.anl.gov 9700 South Cass Avenue Bldg 240 Office 5310 Argonne, IL 60439
[email protected] Phone (630) 252-6465 Fax (630) 252-9689
HEALTH WARNING: Care should be taken when lifting this e-mail, since its mass, and thus its weight, is dependent on its velocity relative to the user.
Went through the MCS public site as well, since it was the same codebase the projects, research groups, news, events and publications also needed fixing. I think that covers it, but it's hard to be sure On Apr 11, 2012, at 10:24 AM, Craig Stacey wrote:
Rockin'. -- Craig
On Apr 11, 2012, at 10:23 AM, Chris Walker wrote:
So securing that page is done, it will now only accept numeric values for the id, I also found the same problem in /research/project_detail.php, /news/detail.php and /events/detail.php
I think that's the exposed portions of the adminforms stuff on that site, I can't think of other areas that build sql statements from the query string, if anyone sees any other pages that do something like that, let me know..
The fix is simple,
it goes from $id = mysql_real_escape_string($_GET['id']);
to
$id = 0; if(ctype_digit($_GET["id"])) $id = mysql_real_escape_string($_GET['id']);
On Apr 11, 2012, at 10:08 AM, Chris Walker wrote:
yeah the db in question is the that cels adminforms application
On Apr 11, 2012, at 10:04 AM, Craig Stacey wrote:
Okay, well, pretty sure I see how it happened.
In /www/logs/www.ci.uchicago.edu/access_log.2012Apr10 on pokey, I see lots of stuff like this:
61.178.84.251 - - [10/Apr/2012:09:13:25 -0500] "GET /people/profile.php?id=999999.9+union+all+select+0x31303235343830303536%2C0x31303235343830303536%2C0x31303235343830303536%2C0x31303235343830303536%2C0x31303235343830303536-- HTTP/1.1" 200 8083
(etc.)
Looks like we need some scrubbing/validation on the PHP for this. I suspect MCS may have the same issue with its site. -- Craig
On Apr 11, 2012, at 9:57 AM, Craig Stacey wrote:
Don't be alarmed by the subject.
Some sooper 1337 hax0r managed to dump publicly available information from the database serving www.ci.uchicago.edu (aka www.ci.anl.gov). As far as I can tell, there's no real incursion here -- just a likely SQL injection. Still, we should make sure things are secure and figure out what allowed this to happen so we can lock it down.
-- Craig
Begin forwarded message:
From: "Kwiatkowski, Matthew A." <[email protected]> Subject: Hacked CI server. Date: April 11, 2012 9:33:39 AM CDT To: "Stacey, Craig J." <[email protected]> Cc: "CSPO ([email protected])" <[email protected]>
Craig,
Got news last night (just read it this AM) the JC3-CIRC found that www.ci.anl.gov was defaced and/or a person was able to dump out the following DB’s on the server…
Hacked by: DMTryptamine, you can follow me at: https://twitter.com/#!/DimethylTrypta1 Salutations mother fuckers, owned these three .govs good and hard, so happens they were my first .govs as well ^>^ Shout outs to: Ichi, Spec, 7hor, and Iner7ia
www.ci.anl.gov
Databases: , division , events , grants , innews , news , papers , people , posters , projects , purpose , research_areas , research_groups , role , sites , tags
People: fname: Jim,Xiabing,Jan,Rick,Cheryl,Bill,Raymond,Andrew,Susan,Jean,Rachana,Mihai,Charles,John, Pavan,Satish,Jaydeep, Daniela,Peter,Joseph,Judy, Sanjukta,Eric,Rick,John,La Joyce,Darius,Fausto,Beth, Anthony,Lisa,Alok,Karen,Matthew,Narayan,Terry, Robert S.,Paul,Ian T.,Zheng (Cynthia),Silvia,Ninfa,Tim,Margaret,Aleksandr,Susan,Mary,Philip,Faith,Jack,Ahmed,Mihael, Mark,Paul, Randy,Zinetulla,Joseph,Kamil,Robert,Ed,Ivan,Mary,Yi,Hans,Nicholas,Dmitry,Dinesh,Kate,Rajkumar,Jong,Thomas,Li,Matt,Samuel,Jay,Robert,Scott, Gary,Ti, Sven,R. Lee,Michael,James,Ray,Cory,Ewing L. (Rusty), James N.,Ravi,Stuart, Richard F.,Stephen,Lois Curfman,William,William,JaQuel,Van Thi,Folker,Sheri,Neill,Misun,Darlyn,Tom,Vitali,Todd,John-Paul,Corby,Benoit,Boyana,John,David,Eric,Robert, Ross, Daniel, Tobias,Michael,Bruce,Carolyn,Shucai,Gail,Tomasz, Gordon David,Ken,Ioan, Kavithaa,Sandra,Gene,David,Katherine,John, Alexis A.,Gigi,Rob,Jason,Jaewook,Frank,Andrew,Dane,Barry,Mary,Craig,Tisha,Tina,Judy, Lori, Valerie,Brian,Max (Adam),Thomas, Jean,John,Lynn,Vero
lname: Feigl,Xu,Griffin,Stevens,Zidel,Allcock,Bair,Cherry,Coghlan,Allain,Ananthakrishnan,Anitescu,Bacon,Blaas,Balaji,Balay,Bardhan,Bartels,Beckman,Bester,Beumer,Bhowmick,Blau,Bradshaw,Bresnahan,Bullock,Buntinas,Cattaneo,Cerny,Chan,Childers,Choudhary,Cobb,Cohoon,Desai,Disz,Eisenberg,Fischer,Foster,Gu,Palomino,Mayorga,Freeman,Kaczmarski,Obabko,Gregurich,McIlvain,Carns,Ruppert,O?Connell,Hassanein,Hategan-Marandiuc,Hereld,Hovland,Hudson,Insepov,Insley,Iskra,Jacob,Jedlicka,Judson,Van Gammeren,Zhang,Kaper,Karonis,Karpeev,Kaushik,Keahey,Kettimuthu,Kim,Peterka,Li,Knepley,Lang,Larson,Latham,Lathrop,Leaf,Leggett,Leyffer,Liming,Link,Lottes,Loy,Lueninghoener,Lusk,Lyness,Madduri,Martin,Mattas,Thomas,McInnes,Trimble,Trimble,Bullock,Bui,Meyer,Mickelson,Miller,Min,Mishur,Morgan,Morozov,Munson,Navarro,Schmitz,Roux,Norris,Norris,Nowak,Olson,Olson,Overbeek,Paarmann,Paczian,Papka,Parrello,Peters,Xiao,Pieper,Plewa,Pusch,Raffenetti,Raicu,Rajavenkateshwaran,Bittner,Rackow,Ressman,Riley,Roberts,Rodriguez,Rohder,Ross,Sarich,Shin,Sie benlist
University of Chicago username: feigl,xbxu,griffin,stevens,zidel,allcock,bair,acherry,smc,allain,ranantha,anitescu,bacon,wilshire,balaji,balay,jbardhan,bartels,beckman,bester,beumer,bhowmick,blau,bradshaw,bresnaha,bullock,buntinas,cattaneo,bcerny,chan,childers,choudhar,cobb,cohoon,desai,disz,beisenbe,fischer,itf,,palomino,ninfa,tfreeman,mkaczmar,obabko,greguric,mcilvain,carns,ruppert,joconne,hassanei,hategan,hereld,hovland,hudson,insepov,insley,iskra,jacob,jedlicka,judson,mvan,yzhang,kaper,karonis,karpeev,kaushik,keahey,kettimut,jkim,tpeterka,likli,knepley,slang,larson,robl,lathrop,leaf,leggett,leyffer,liming,mlink,jlottes,rloy,lueningh,lusk,lyness,madduri,smartin,mattas,sthomas,curfman,trimble,trimble,jbullock,Bui,folker,mickelso,neillm,mmin,mishur,tmorgan,morozov,tmunson,navarro,cschmitz,roux,norris,jnorris,nowak,eolson,olson,overbeek,paarmann,paczian,papka,parrello,cpeters,,pieper,tomek,gdpusch,raffenet,iraicu,kavithaa,bittner,rackow,davidr,riley,roberts,arodri7,rohder,rross,sarich,jaewook,franks,siegela,skow,bsmith,spada,stace,t stacey,
phone numbers: (630) 252-7894,,(630) 252-7271,(630) 252-3378,(630) 252-7818,(630) 252-7573,(630) 252-5751,(630) 252-4296,(630) 252-1637,(630) 252-5184,(630) 252-2273,(630) 252-4172,(630) 252-5569,630-252-1177,(630) 252-3017,(630) 252-4912,(630) 252-4698,(630) 252-3135,(630) 252-9020,(630) 252-4779,(630) 252-7165,(630) 252-1842,(630) 252-5638,(630) 252-1498,(630) 252-4243,(630) 252-1842,(630) 252-7928,(630) 252-7160,(630) 252-1100,(630) 252-6044,(630) 252-0922,(630) 252-4909,(630) 252-6599,(630) 252-1881,(630) 252-7587,(630) 252-7831,(630) 252-5878,(630) 252-6018,(630) 252-4619,,(630) 252-6188,,(630) 252-5694,(630) 252-0958,(630) 252-5296,(630) 252-7120,252-1773,630-685-1268,(630) 252-1351,(630) 252-3610,(630) 252-5889,(630) 252-6003,(630) 252-4170,(630) 252-6384,(630) 252-8690,(630) 252-5049,(630) 252-5649,(630) 252-7197,(630) 252-2983,(630) 252-6785,(630) 252-3050,(630) 252-4185,(630) 252-5687,(630) 252-9948,(630) 252-7942,(630) 252-1229,(630) 252-6779,(630) 252-1673,(630) 252-0915,(630) 252-4213,(630) 252-719
alternate phone numbers: ,,(773) 834-6816,,,,,,,,,(312) 952-1714,,,,,,,,,,,,,,,(773) 702-8028,,,,,,,,,,,,,,(773) 834-6685,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,(505) 899-4098,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,(773) 834-6814,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,(773) 834-6692,,,,,,,,,,,,,,,,,,,,,(773) 702-4545,,,,,,,,773 834 3913,,773 702 5073,,,,,,,,,,773 834 9956,773 702 5948,773 702 3855,773 702 9116,773 834 9096,773 834 2604,(773)702-3485,,(773) 702-7823,(773) 702-6778,(773) 834-0525,(773) 702-7194,,,773 702 2330,773 834 1037,773 702 4441,773 702 5694,773 702 1051,773 702 8507,,(773) 702-7189,,(773) 702-8208,(773) 702-3493,773 702 5315,773 834 7394,773 702 6964,(773) 702-3405,312 665 7729,773 834 2978,,773 702-2185,773 702 9257,773 702 1222,773 834 0250,773 702 0647,773 834 4393,773 702 0795,773 702 3104,773 702 0557,773 702 4226,773 702 1693,773 834 0743,773 834 2242,,847 491 3714,773 702 6852,773 834 7919,773 834 0735,(773) 702-1632,773 702 4179,773 834 5248,773 834 8178,773 702 5753,773 702 0380,773 702 6117,
emails (.gov emails :D):[email protected],[email protected],[email protected],[email protected],[email protected],[email protected],[email protected],[email protected],[email protected],[email protected],[email protected],[email protected],[email protected],[email protected],[email protected],[email protected],[email protected],[email protected],[email protected],[email protected],[email protected],[email protected],[email protected],[email protected],[email protected],[email protected],[email protected],[email protected],[email protected],[email protected],[email protected],[email protected],[email protected],[email protected],[email protected],[email protected],[email protected],[email protected],[email protected],[email protected],[email protected],,[email protected],[email protected],[email protected],[email protected],,[email protected],[email protected],[email protected],[email protected],[email protected],[email protected],[email protected],[email protected],
alternate emails: ,,,[email protected],,allcock @mcs.anl.gov,,,,,,,[email protected],,,,,,[email protected],,,,,,,,,,,,,,,,,,,,,,,[email protected],,,,,,,[email protected],,,,,,,,,,[email protected],,,,,,,,,,,,,,,,,,,[email protected],,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,[email protected],,,,,,,,,[email protected],,,,,,,,,,,,,,,[email protected],,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,[email protected],,,,,,,,[email protected],,[email protected],,,,,,,,,,[email protected],[email protected],[email protected],[email protected],[email protected],[email protected],[email protected],,[email protected],[email protected],[email protected],[email protected],,,[email protected],[email protected],[email protected],[email protected],[email protected],[email protected],,[email protected],[email protected],edkoddjob.uchicago.edu,[email protected],[email protected],[email protected]
fax numbers: ,,,(630) 252-6333,,,,,,,,(630) 252 6434,,,(630) 252-5986,,,,,,,,,,,(630) 252-4916,(630) 252-5986,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,(630) 252-5986,,,,,,,,,,,,,,,,,,,,,,,,,,(630) 252-2211,,,,,,,630-252-6104,,,,,,,,,,,,,(631) 791-1048,,,,,,,,(630) 252-6333,,,,,,,,,,,,,,,(630) 252-1997,,,,,,,,,,(630) 252-2828,630-252-7692,,,,,,,,,(630) 252-1997,,,(630) 252-2211,,,,,,,,,,,(630) 252-5986,,,,,(630) 252-5676,,,,,,,,,,,,,(630) 252-5676,,(630) 252-4517,,,,,,,,,,,,,,,,,,,,,,,(630) 252-6073,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,(630) 252-8895,,,,,,,,,,,,,,,630 252 9155,,,,,,,,(630) 252 1342,,,,,,,,,,,,,(630) 252-5986,,,,,,,,,,,(608) 263-4499,,,,,,,,,,,,,,,,,,,,(630) 252-3387,,,,,,,,,,,,,,,,,,,,,,,(630) 252-5986,,,,,,(630) 252-3387,,,,,,,,,,,,,,,,,(630) 252 3387,,,,,,,(630) 252-5986,,,,,,,(630) 252-6073,,,,,,,,(630) 252-6073,,,(630) 252-6008,,,,(630) 252-7923,,,,630-252-5986,,,,(630) 252-7777,(630) 252-6008,(630) 252-4289,(630) 252-9868,(630) 252-7777,,,,,,,(630) 252-4470
alternate fax numbers: ,,,(773) 834-6818,,,,,,,,,(773) 834-6818,,,,,,,,,,,,,,,(773) 834-6818,,,,,,,,,,,,,,(773) 834-3700,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,773 834 2877,,773 702 0439,,,,,,,,,,773 834 0139,773 702 9740,773 702 9740,773 702 9237,773 702 5863,773 834 0188,(773)702-8487,,(773) 702-8038,(773) 702-0371,(773) 834-0505,,,,773 834 5250,773 834 0505,773 702 3002,773 702 3172,773 702 4427,773 834 8470,,(773) 702-2172,,,(773) 702-8487,773 702 3172,773 702 3172,773 834 9029,,312 665 7754,773 702 9740,,773 702 6260,773 702 0439,773 702 9740,773 702 4394,773 702 9379,773 702 0271,773 702 9311,773 702 9740 ,773 702 9740,773 834 3028,773 702 9740,773 702 2567,773 834 4546,,847 491 4461,773 702 6260,773 702 9838,773 834 0505,(773) 834-3834,773 702 0439,773 834 0505,773 834 0505,773 834 5906,773 702 4634,773 702 3002,312 996 6312,773 702 9740,773 834 2877,,312 996 0539,773 834 8150,773 702 0037,773 834 8400,,773 702 9740 ,,,773 702
Research groups: name: Laboratory for Scalable Parallel System Software,Bioinformatics,Futures Laboratory,Laboratory for Advanced Numerical Simulations,Distributed Systems Laboratory,Climate Modeling Group,MCS Systems Group name: ADIX,Compbio,FL,LANS,DSL,CMG,Systems
description: Our mission is to develop the technologies required to dramatically increase the productivity of scientists developing applications for parallel supercomputers. The focus is fourfold: integration of parallel programming tools, reuse of parallel program components, development of scientific computing toolkits and portable libraries, and exploration of requirements of future parallel computers.,Bioinformatics is the study of biological systems through the use of computational tools and the application of methods from computer science, mathematics, and information theory. At Argonne, our goal is to develop new methods and technologies for acquiring, organizing, analyzing, and visualizing such data. We apply these methods and technologies in two principal areas: sequence and comparative analysis, phylogenetic and evolutionary studies; systems-centered biology and statistical genomics.,The Argonne Futures Laboratory performs basic and applied research in advanced communications, collaboration, and visualization.
Grants: Abstract: The goal of the IESP to empower ultrahigh resolution and data intensive science and engineering research through the year 2020 by developing a plan for 1) a common, high quality computational environment for peta/exascale systems and for 2) catalyzing, coordinating, and sustaining the effort of the international open source software community to create that environment as quickly as possible. To achieve this goal, the IESP will stage a series of three international meetings, one each in the United States, Europe and Asia, beginning in the spring 2009. On-line collaboration technology will be heavily used to lay the groundwork for and consolidate the results of each meeting, to publish drafts of the plan and elicit contributions from the community, and to ensure that the final plan develops in a way that engages broad participation and ongoing input.
award_amount: award_amount: 2215670.00,217046.00,23206000.00,33426.00,365861.00,1000000.00,3436020.00,159650.00,2430050.00,340409.00,1560000.00,64706.00,199877.00,74462.00,95000.00,27969.00,4999610.00,885621.00,50460.00,38865.00,14981400.00,69954.00,3468670.00,270650.00,596829.00,379140.00,301747.00,479999.00,3960420.00,66977.00,999081.00,7999130.00,399985.00,350000.00,74815.00,430802.00,1215740.00,485670.00,517683.00,299974.00,80000.00,790907.00,2085750.00,82882.00,49075.00,393230.00,50000.00,250000.00,598296.00,2490000.00,540235.00,21000.00,250010.00,1696130.00,1144610.00,750000.00,330196.00,308811.00,24590700.00,116470.00,135794.00,862414.00,1489670.00,626247.00,354636.00,341171.00,1519390.00,1200000.00,390000.00,293004.00,189870.00,276510.00,379367.00,1919390.00,36445.00,299713.00,1641280.00,169999.00,1315230.00,7795800.00,29999.00,410000.00,621999.00,27234300.00,30207400.00,1642000.00,1400000.00,1813060.00,50000.00,1799990.00,211600.00,90000.00,977489.00,160002.00,379367.00,243591.00,79999.00,465000.00,10440000.00,3731864.00
funding_agency: NIH,NSF,NSF,NSF,NSF,NIH,NSF,DOE,NIH,NSF,NIH,NIH,NSF,NSF,Searle,Fermi Lab,NIH,NSF,NSF,NSF,NSF,NIH,NSF,Novartis Inst for BioMedical Res,NSF,NSF,NSF,NSF,NSF,NSF,NIH,NIH,NIH,MacArthur Fnd,NSF,NSF,NIH,NSF,NIH,NIH,NIH,NSF,NSF,Booz Allen Hamilton,NSF,NSF,National Academies Keck Futures Initiatives,NSF,NSF,ONR,NSF,WM Keck Foundation,NSF,NSF,NSF,St Johns Hosp,NSF,NSF,NIH,NSF,NSF,NSF,NSF,NSF,NSF,NSF,DOD,NSF USDA,NSF USDA,NSF,CBC,NSF,DOE,NSF,NIH,NSF,NSF,NSF,NIH,NIH,DOE,NIH,DOE,NIH,NSF,NIH,NIH,NIH-NIAID,NSF,NSF,DOE,NSF,MacArthur Fnd,NSF,DOE,NSF,NIH,DOE-ASCR,DOE-BER,DOE-ASCR
Papers: Authors: A. A. Rodriguez, T. Bompada, M. Syed, P. K. Shah, and N. Maltsev,P. Balaji, W. Feng, J. Archuleta, H. Lin, R. Kettimuthu, R. Thakur, and X. Ma,S. Park,Darius Buntinas, Guillaume Mercier, and William Gropp,P. Balaji, W. Feng, S. Bhagvat, D. K. Panda, R. Thakur, and W. Gropp,A. Baranovski, S. Bharathi, J. Bresnahan, A. Chervenak, I. Foster, D. Fraser, T. Freeman, D. Gunter, K. Jackson, K. Keahey, C. Kesselman, D. E. Konerding, N. Leroy, M. Link, M. Livny, N. Miller, R. Miller, G. Oleynik, L. Pearlman, J. M. Schopf, R. Schuler, and B. Tierney,L. Yang, C. Liu, J. M. Schopf, and I. Foster,K. Keahey, T. Freeman, J. Lauret, and D. Olson,D. Buntinas and W. Gropp,V. M. Zavala, J. Wang, S. Leyffer, E. M. Constantinescu, M. Anitescu, and G. Conzelmann,D. Buntinas, G. Mercier, and W. Gropp,D. Buntinas, G. Mercier and W. Gropp,J. L. Träff, W. Gropp, and R. Thakur,R. Thakur and W. Gropp,J. Shin, P. Malusare, and P. D. Hovland,Lin, M.F., Bratt, J.D., Engelhardt, M., Hagler, Ph., Hemmert, T.R., Meyer, H.B., Negele, J.W.,
-- Matt Kwiatkowski M.S.I.S. Interim Cyber Security Program Manager Aviation Safety Officer Argonne Cyber Security Program Office
Argonne National Laboratory http://www.anl.gov 9700 South Cass Avenue Bldg 240 Office 5310 Argonne, IL 60439
[email protected] Phone (630) 252-6465 Fax (630) 252-9689
HEALTH WARNING: Care should be taken when lifting this e-mail, since its mass, and thus its weight, is dependent on its velocity relative to the user.
Hi, What a great week to be out, sorry this is falling in your lap. I'm w/out my computer so there anything I can do. Feel free to send me an email with anything I need to do tonight. Beth ----- Original Message ----- From: Chris Walker <[email protected]> To: Craig Stacey <[email protected]> Cc: Core Admins <[email protected]> Sent: Wed, 11 Apr 2012 10:47:45 -0500 (CDT) Subject: Re: Hacked CI server. Went through the MCS public site as well, since it was the same codebase the projects, research groups, news, events and publications also needed fixing. I think that covers it, but it's hard to be sure On Apr 11, 2012, at 10:24 AM, Craig Stacey wrote:
Rockin'. -- Craig
On Apr 11, 2012, at 10:23 AM, Chris Walker wrote:
So securing that page is done, it will now only accept numeric values for the id, I also found the same problem in /research/project_detail.php, /news/detail.php and /events/detail.php
I think that's the exposed portions of the adminforms stuff on that site, I can't think of other areas that build sql statements from the query string, if anyone sees any other pages that do something like that, let me know..
The fix is simple,
it goes from $id = mysql_real_escape_string($_GET['id']);
to
$id = 0; if(ctype_digit($_GET["id"])) $id = mysql_real_escape_string($_GET['id']);
On Apr 11, 2012, at 10:08 AM, Chris Walker wrote:
yeah the db in question is the that cels adminforms application
On Apr 11, 2012, at 10:04 AM, Craig Stacey wrote:
Okay, well, pretty sure I see how it happened.
In /www/logs/www.ci.uchicago.edu/access_log.2012Apr10 on pokey, I see lots of stuff like this:
61.178.84.251 - - [10/Apr/2012:09:13:25 -0500] "GET /people/profile.php?id=999999.9+union+all+select+0x31303235343830303536%2C0x31303235343830303536%2C0x31303235343830303536%2C0x31303235343830303536%2C0x31303235343830303536-- HTTP/1.1" 200 8083
(etc.)
Looks like we need some scrubbing/validation on the PHP for this. I suspect MCS may have the same issue with its site. -- Craig
On Apr 11, 2012, at 9:57 AM, Craig Stacey wrote:
Don't be alarmed by the subject.
Some sooper 1337 hax0r managed to dump publicly available information from the database serving www.ci.uchicago.edu (aka www.ci.anl.gov). As far as I can tell, there's no real incursion here -- just a likely SQL injection. Still, we should make sure things are secure and figure out what allowed this to happen so we can lock it down.
-- Craig
Begin forwarded message:
From: "Kwiatkowski, Matthew A." <[email protected]> Subject: Hacked CI server. Date: April 11, 2012 9:33:39 AM CDT To: "Stacey, Craig J." <[email protected]> Cc: "CSPO ([email protected])" <[email protected]>
Craig,
Got news last night (just read it this AM) the JC3-CIRC found that www.ci.anl.gov was defaced and/or a person was able to dump out the following DB’s on the server…
Hacked by: DMTryptamine, you can follow me at: https://twitter.com/#!/DimethylTrypta1 Salutations mother fuckers, owned these three .govs good and hard, so happens they were my first .govs as well ^>^ Shout outs to: Ichi, Spec, 7hor, and Iner7ia
www.ci.anl.gov
Databases: , division , events , grants , innews , news , papers , people , posters , projects , purpose , research_areas , research_groups , role , sites , tags
People: fname: Jim,Xiabing,Jan,Rick,Cheryl,Bill,Raymond,Andrew,Susan,Jean,Rachana,Mihai,Charles,John, Pavan,Satish,Jaydeep, Daniela,Peter,Joseph,Judy, Sanjukta,Eric,Rick,John,La Joyce,Darius,Fausto,Beth, Anthony,Lisa,Alok,Karen,Matthew,Narayan,Terry, Robert S.,Paul,Ian T.,Zheng (Cynthia),Silvia,Ninfa,Tim,Margaret,Aleksandr,Susan,Mary,Philip,Faith,Jack,Ahmed,Mihael, Mark,Paul, Randy,Zinetulla,Joseph,Kamil,Robert,Ed,Ivan,Mary,Yi,Hans,Nicholas,Dmitry,Dinesh,Kate,Rajkumar,Jong,Thomas,Li,Matt,Samuel,Jay,Robert,Scott, Gary,Ti, Sven,R. Lee,Michael,James,Ray,Cory,Ewing L. (Rusty), James N.,Ravi,Stuart, Richard F.,Stephen,Lois Curfman,William,William,JaQuel,Van Thi,Folker,Sheri,Neill,Misun,Darlyn,Tom,Vitali,Todd,John-Paul,Corby,Benoit,Boyana,John,David,Eric,Robert, Ross, Daniel, Tobias,Michael,Bruce,Carolyn,Shucai,Gail,Tomasz, Gordon David,Ken,Ioan, Kavithaa,Sandra,Gene,David,Katherine,John, Alexis A.,Gigi,Rob,Jason,Jaewook,Frank,Andrew,Dane,Barry,Mary,Craig,Tisha,Tina,Judy, Lori, Valerie,Brian,Max (Adam),Thomas, Jean,John,Lynn,Vero
lname: Feigl,Xu,Griffin,Stevens,Zidel,Allcock,Bair,Cherry,Coghlan,Allain,Ananthakrishnan,Anitescu,Bacon,Blaas,Balaji,Balay,Bardhan,Bartels,Beckman,Bester,Beumer,Bhowmick,Blau,Bradshaw,Bresnahan,Bullock,Buntinas,Cattaneo,Cerny,Chan,Childers,Choudhary,Cobb,Cohoon,Desai,Disz,Eisenberg,Fischer,Foster,Gu,Palomino,Mayorga,Freeman,Kaczmarski,Obabko,Gregurich,McIlvain,Carns,Ruppert,O?Connell,Hassanein,Hategan-Marandiuc,Hereld,Hovland,Hudson,Insepov,Insley,Iskra,Jacob,Jedlicka,Judson,Van Gammeren,Zhang,Kaper,Karonis,Karpeev,Kaushik,Keahey,Kettimuthu,Kim,Peterka,Li,Knepley,Lang,Larson,Latham,Lathrop,Leaf,Leggett,Leyffer,Liming,Link,Lottes,Loy,Lueninghoener,Lusk,Lyness,Madduri,Martin,Mattas,Thomas,McInnes,Trimble,Trimble,Bullock,Bui,Meyer,Mickelson,Miller,Min,Mishur,Morgan,Morozov,Munson,Navarro,Schmitz,Roux,Norris,Norris,Nowak,Olson,Olson,Overbeek,Paarmann,Paczian,Papka,Parrello,Peters,Xiao,Pieper,Plewa,Pusch,Raffenetti,Raicu,Rajavenkateshwaran,Bittner,Rackow,Ressman,Riley,Roberts,Rodriguez,Rohder,Ross,Sarich,Shin,Sie benlist
University of Chicago username: feigl,xbxu,griffin,stevens,zidel,allcock,bair,acherry,smc,allain,ranantha,anitescu,bacon,wilshire,balaji,balay,jbardhan,bartels,beckman,bester,beumer,bhowmick,blau,bradshaw,bresnaha,bullock,buntinas,cattaneo,bcerny,chan,childers,choudhar,cobb,cohoon,desai,disz,beisenbe,fischer,itf,,palomino,ninfa,tfreeman,mkaczmar,obabko,greguric,mcilvain,carns,ruppert,joconne,hassanei,hategan,hereld,hovland,hudson,insepov,insley,iskra,jacob,jedlicka,judson,mvan,yzhang,kaper,karonis,karpeev,kaushik,keahey,kettimut,jkim,tpeterka,likli,knepley,slang,larson,robl,lathrop,leaf,leggett,leyffer,liming,mlink,jlottes,rloy,lueningh,lusk,lyness,madduri,smartin,mattas,sthomas,curfman,trimble,trimble,jbullock,Bui,folker,mickelso,neillm,mmin,mishur,tmorgan,morozov,tmunson,navarro,cschmitz,roux,norris,jnorris,nowak,eolson,olson,overbeek,paarmann,paczian,papka,parrello,cpeters,,pieper,tomek,gdpusch,raffenet,iraicu,kavithaa,bittner,rackow,davidr,riley,roberts,arodri7,rohder,rross,sarich,jaewook,franks,siegela,skow,bsmith,spada,stace,t stacey,
phone numbers: (630) 252-7894,,(630) 252-7271,(630) 252-3378,(630) 252-7818,(630) 252-7573,(630) 252-5751,(630) 252-4296,(630) 252-1637,(630) 252-5184,(630) 252-2273,(630) 252-4172,(630) 252-5569,630-252-1177,(630) 252-3017,(630) 252-4912,(630) 252-4698,(630) 252-3135,(630) 252-9020,(630) 252-4779,(630) 252-7165,(630) 252-1842,(630) 252-5638,(630) 252-1498,(630) 252-4243,(630) 252-1842,(630) 252-7928,(630) 252-7160,(630) 252-1100,(630) 252-6044,(630) 252-0922,(630) 252-4909,(630) 252-6599,(630) 252-1881,(630) 252-7587,(630) 252-7831,(630) 252-5878,(630) 252-6018,(630) 252-4619,,(630) 252-6188,,(630) 252-5694,(630) 252-0958,(630) 252-5296,(630) 252-7120,252-1773,630-685-1268,(630) 252-1351,(630) 252-3610,(630) 252-5889,(630) 252-6003,(630) 252-4170,(630) 252-6384,(630) 252-8690,(630) 252-5049,(630) 252-5649,(630) 252-7197,(630) 252-2983,(630) 252-6785,(630) 252-3050,(630) 252-4185,(630) 252-5687,(630) 252-9948,(630) 252-7942,(630) 252-1229,(630) 252-6779,(630) 252-1673,(630) 252-0915,(630) 252-4213,(630) 252-719
alternate phone numbers: ,,(773) 834-6816,,,,,,,,,(312) 952-1714,,,,,,,,,,,,,,,(773) 702-8028,,,,,,,,,,,,,,(773) 834-6685,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,(505) 899-4098,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,(773) 834-6814,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,(773) 834-6692,,,,,,,,,,,,,,,,,,,,,(773) 702-4545,,,,,,,,773 834 3913,,773 702 5073,,,,,,,,,,773 834 9956,773 702 5948,773 702 3855,773 702 9116,773 834 9096,773 834 2604,(773)702-3485,,(773) 702-7823,(773) 702-6778,(773) 834-0525,(773) 702-7194,,,773 702 2330,773 834 1037,773 702 4441,773 702 5694,773 702 1051,773 702 8507,,(773) 702-7189,,(773) 702-8208,(773) 702-3493,773 702 5315,773 834 7394,773 702 6964,(773) 702-3405,312 665 7729,773 834 2978,,773 702-2185,773 702 9257,773 702 1222,773 834 0250,773 702 0647,773 834 4393,773 702 0795,773 702 3104,773 702 0557,773 702 4226,773 702 1693,773 834 0743,773 834 2242,,847 491 3714,773 702 6852,773 834 7919,773 834 0735,(773) 702-1632,773 702 4179,773 834 5248,773 834 8178,773 702 5753,773 702 0380,773 702 6117,
emails (.gov emails :D):[email protected],[email protected],[email protected],[email protected],[email protected],[email protected],[email protected],[email protected],[email protected],[email protected],[email protected],[email protected],[email protected],[email protected],[email protected],[email protected],[email protected],[email protected],[email protected],[email protected],[email protected],[email protected],[email protected],[email protected],[email protected],[email protected],[email protected],[email protected],[email protected],[email protected],[email protected],[email protected],[email protected],[email protected],[email protected],[email protected],[email protected],[email protected],[email protected],[email protected],[email protected],,[email protected],[email protected],[email protected],[email protected],,[email protected],[email protected],[email protected],[email protected],[email protected],[email protected],[email protected],[email protected],
alternate emails: ,,,[email protected],,allcock @mcs.anl.gov,,,,,,,[email protected],,,,,,[email protected],,,,,,,,,,,,,,,,,,,,,,,[email protected],,,,,,,[email protected],,,,,,,,,,[email protected],,,,,,,,,,,,,,,,,,,[email protected],,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,[email protected],,,,,,,,,[email protected],,,,,,,,,,,,,,,[email protected],,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,[email protected],,,,,,,,[email protected],,[email protected],,,,,,,,,,[email protected],[email protected],[email protected],[email protected],[email protected],[email protected],[email protected],,[email protected],[email protected],[email protected],[email protected],,,[email protected],[email protected],[email protected],[email protected],[email protected],[email protected],,[email protected],[email protected],edkoddjob.uchicago.edu,[email protected],[email protected],[email protected]
fax numbers: ,,,(630) 252-6333,,,,,,,,(630) 252 6434,,,(630) 252-5986,,,,,,,,,,,(630) 252-4916,(630) 252-5986,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,(630) 252-5986,,,,,,,,,,,,,,,,,,,,,,,,,,(630) 252-2211,,,,,,,630-252-6104,,,,,,,,,,,,,(631) 791-1048,,,,,,,,(630) 252-6333,,,,,,,,,,,,,,,(630) 252-1997,,,,,,,,,,(630) 252-2828,630-252-7692,,,,,,,,,(630) 252-1997,,,(630) 252-2211,,,,,,,,,,,(630) 252-5986,,,,,(630) 252-5676,,,,,,,,,,,,,(630) 252-5676,,(630) 252-4517,,,,,,,,,,,,,,,,,,,,,,,(630) 252-6073,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,(630) 252-8895,,,,,,,,,,,,,,,630 252 9155,,,,,,,,(630) 252 1342,,,,,,,,,,,,,(630) 252-5986,,,,,,,,,,,(608) 263-4499,,,,,,,,,,,,,,,,,,,,(630) 252-3387,,,,,,,,,,,,,,,,,,,,,,,(630) 252-5986,,,,,,(630) 252-3387,,,,,,,,,,,,,,,,,(630) 252 3387,,,,,,,(630) 252-5986,,,,,,,(630) 252-6073,,,,,,,,(630) 252-6073,,,(630) 252-6008,,,,(630) 252-7923,,,,630-252-5986,,,,(630) 252-7777,(630) 252-6008,(630) 252-4289,(630) 252-9868,(630) 252-7777,,,,,,,(630) 252-4470
alternate fax numbers: ,,,(773) 834-6818,,,,,,,,,(773) 834-6818,,,,,,,,,,,,,,,(773) 834-6818,,,,,,,,,,,,,,(773) 834-3700,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,773 834 2877,,773 702 0439,,,,,,,,,,773 834 0139,773 702 9740,773 702 9740,773 702 9237,773 702 5863,773 834 0188,(773)702-8487,,(773) 702-8038,(773) 702-0371,(773) 834-0505,,,,773 834 5250,773 834 0505,773 702 3002,773 702 3172,773 702 4427,773 834 8470,,(773) 702-2172,,,(773) 702-8487,773 702 3172,773 702 3172,773 834 9029,,312 665 7754,773 702 9740,,773 702 6260,773 702 0439,773 702 9740,773 702 4394,773 702 9379,773 702 0271,773 702 9311,773 702 9740 ,773 702 9740,773 834 3028,773 702 9740,773 702 2567,773 834 4546,,847 491 4461,773 702 6260,773 702 9838,773 834 0505,(773) 834-3834,773 702 0439,773 834 0505,773 834 0505,773 834 5906,773 702 4634,773 702 3002,312 996 6312,773 702 9740,773 834 2877,,312 996 0539,773 834 8150,773 702 0037,773 834 8400,,773 702 9740 ,,,773 702
Research groups: name: Laboratory for Scalable Parallel System Software,Bioinformatics,Futures Laboratory,Laboratory for Advanced Numerical Simulations,Distributed Systems Laboratory,Climate Modeling Group,MCS Systems Group name: ADIX,Compbio,FL,LANS,DSL,CMG,Systems
description: Our mission is to develop the technologies required to dramatically increase the productivity of scientists developing applications for parallel supercomputers. The focus is fourfold: integration of parallel programming tools, reuse of parallel program components, development of scientific computing toolkits and portable libraries, and exploration of requirements of future parallel computers.,Bioinformatics is the study of biological systems through the use of computational tools and the application of methods from computer science, mathematics, and information theory. At Argonne, our goal is to develop new methods and technologies for acquiring, organizing, analyzing, and visualizing such data. We apply these methods and technologies in two principal areas: sequence and comparative analysis, phylogenetic and evolutionary studies; systems-centered biology and statistical genomics.,The Argonne Futures Laboratory performs basic and applied research in advanced communications, collaboration, and visualization.
Grants: Abstract: The goal of the IESP to empower ultrahigh resolution and data intensive science and engineering research through the year 2020 by developing a plan for 1) a common, high quality computational environment for peta/exascale systems and for 2) catalyzing, coordinating, and sustaining the effort of the international open source software community to create that environment as quickly as possible. To achieve this goal, the IESP will stage a series of three international meetings, one each in the United States, Europe and Asia, beginning in the spring 2009. On-line collaboration technology will be heavily used to lay the groundwork for and consolidate the results of each meeting, to publish drafts of the plan and elicit contributions from the community, and to ensure that the final plan develops in a way that engages broad participation and ongoing input.
award_amount: award_amount: 2215670.00,217046.00,23206000.00,33426.00,365861.00,1000000.00,3436020.00,159650.00,2430050.00,340409.00,1560000.00,64706.00,199877.00,74462.00,95000.00,27969.00,4999610.00,885621.00,50460.00,38865.00,14981400.00,69954.00,3468670.00,270650.00,596829.00,379140.00,301747.00,479999.00,3960420.00,66977.00,999081.00,7999130.00,399985.00,350000.00,74815.00,430802.00,1215740.00,485670.00,517683.00,299974.00,80000.00,790907.00,2085750.00,82882.00,49075.00,393230.00,50000.00,250000.00,598296.00,2490000.00,540235.00,21000.00,250010.00,1696130.00,1144610.00,750000.00,330196.00,308811.00,24590700.00,116470.00,135794.00,862414.00,1489670.00,626247.00,354636.00,341171.00,1519390.00,1200000.00,390000.00,293004.00,189870.00,276510.00,379367.00,1919390.00,36445.00,299713.00,1641280.00,169999.00,1315230.00,7795800.00,29999.00,410000.00,621999.00,27234300.00,30207400.00,1642000.00,1400000.00,1813060.00,50000.00,1799990.00,211600.00,90000.00,977489.00,160002.00,379367.00,243591.00,79999.00,465000.00,10440000.00,3731864.00
funding_agency: NIH,NSF,NSF,NSF,NSF,NIH,NSF,DOE,NIH,NSF,NIH,NIH,NSF,NSF,Searle,Fermi Lab,NIH,NSF,NSF,NSF,NSF,NIH,NSF,Novartis Inst for BioMedical Res,NSF,NSF,NSF,NSF,NSF,NSF,NIH,NIH,NIH,MacArthur Fnd,NSF,NSF,NIH,NSF,NIH,NIH,NIH,NSF,NSF,Booz Allen Hamilton,NSF,NSF,National Academies Keck Futures Initiatives,NSF,NSF,ONR,NSF,WM Keck Foundation,NSF,NSF,NSF,St Johns Hosp,NSF,NSF,NIH,NSF,NSF,NSF,NSF,NSF,NSF,NSF,DOD,NSF USDA,NSF USDA,NSF,CBC,NSF,DOE,NSF,NIH,NSF,NSF,NSF,NIH,NIH,DOE,NIH,DOE,NIH,NSF,NIH,NIH,NIH-NIAID,NSF,NSF,DOE,NSF,MacArthur Fnd,NSF,DOE,NSF,NIH,DOE-ASCR,DOE-BER,DOE-ASCR
Papers: Authors: A. A. Rodriguez, T. Bompada, M. Syed, P. K. Shah, and N. Maltsev,P. Balaji, W. Feng, J. Archuleta, H. Lin, R. Kettimuthu, R. Thakur, and X. Ma,S. Park,Darius Buntinas, Guillaume Mercier, and William Gropp,P. Balaji, W. Feng, S. Bhagvat, D. K. Panda, R. Thakur, and W. Gropp,A. Baranovski, S. Bharathi, J. Bresnahan, A. Chervenak, I. Foster, D. Fraser, T. Freeman, D. Gunter, K. Jackson, K. Keahey, C. Kesselman, D. E. Konerding, N. Leroy, M. Link, M. Livny, N. Miller, R. Miller, G. Oleynik, L. Pearlman, J. M. Schopf, R. Schuler, and B. Tierney,L. Yang, C. Liu, J. M. Schopf, and I. Foster,K. Keahey, T. Freeman, J. Lauret, and D. Olson,D. Buntinas and W. Gropp,V. M. Zavala, J. Wang, S. Leyffer, E. M. Constantinescu, M. Anitescu, and G. Conzelmann,D. Buntinas, G. Mercier, and W. Gropp,D. Buntinas, G. Mercier and W. Gropp,J. L. Träff, W. Gropp, and R. Thakur,R. Thakur and W. Gropp,J. Shin, P. Malusare, and P. D. Hovland,Lin, M.F., Bratt, J.D., Engelhardt, M., Hagler, Ph., Hemmert, T.R., Meyer, H.B., Negele, J.W.,
-- Matt Kwiatkowski M.S.I.S. Interim Cyber Security Program Manager Aviation Safety Officer Argonne Cyber Security Program Office
Argonne National Laboratory http://www.anl.gov 9700 South Cass Avenue Bldg 240 Office 5310 Argonne, IL 60439
[email protected] Phone (630) 252-6465 Fax (630) 252-9689
HEALTH WARNING: Care should be taken when lifting this e-mail, since its mass, and thus its weight, is dependent on its velocity relative to the user.
It's taken care of, just the public pages that pull individual records out of the DB based on the query string needed protecting, I just made sure the id passed in was entirely numeric.. If you think of pages that behave that way and I haven't mentioned, let me know On Apr 11, 2012, at 11:48 AM, Beth Cerny Patino wrote:
Hi,
What a great week to be out, sorry this is falling in your lap. I'm w/out my computer so there anything I can do. Feel free to send me an email with anything I need to do tonight.
Beth
----- Original Message ----- From: Chris Walker <[email protected]> To: Craig Stacey <[email protected]> Cc: Core Admins <[email protected]> Sent: Wed, 11 Apr 2012 10:47:45 -0500 (CDT) Subject: Re: Hacked CI server. Went through the MCS public site as well, since it was the same codebase the projects, research groups, news, events and publications also needed fixing. I think that covers it, but it's hard to be sure On Apr 11, 2012, at 10:24 AM, Craig Stacey wrote:
Rockin'. -- Craig
On Apr 11, 2012, at 10:23 AM, Chris Walker wrote:
So securing that page is done, it will now only accept numeric values for the id, I also found the same problem in /research/project_detail.php, /news/detail.php and /events/detail.php
I think that's the exposed portions of the adminforms stuff on that site, I can't think of other areas that build sql statements from the query string, if anyone sees any other pages that do something like that, let me know..
The fix is simple,
it goes from $id = mysql_real_escape_string($_GET['id']);
to
$id = 0; if(ctype_digit($_GET["id"])) $id = mysql_real_escape_string($_GET['id']);
On Apr 11, 2012, at 10:08 AM, Chris Walker wrote:
yeah the db in question is the that cels adminforms application
On Apr 11, 2012, at 10:04 AM, Craig Stacey wrote:
Okay, well, pretty sure I see how it happened.
In /www/logs/www.ci.uchicago.edu/access_log.2012Apr10 on pokey, I see lots of stuff like this:
61.178.84.251 - - [10/Apr/2012:09:13:25 -0500] "GET /people/profile.php?id=999999.9+union+all+select+0x31303235343830303536%2C0x31303235343830303536%2C0x31303235343830303536%2C0x31303235343830303536%2C0x31303235343830303536-- HTTP/1.1" 200 8083
(etc.)
Looks like we need some scrubbing/validation on the PHP for this. I suspect MCS may have the same issue with its site. -- Craig
On Apr 11, 2012, at 9:57 AM, Craig Stacey wrote:
Don't be alarmed by the subject.
Some sooper 1337 hax0r managed to dump publicly available information from the database serving www.ci.uchicago.edu (aka www.ci.anl.gov). As far as I can tell, there's no real incursion here -- just a likely SQL injection. Still, we should make sure things are secure and figure out what allowed this to happen so we can lock it down.
-- Craig
Begin forwarded message:
From: "Kwiatkowski, Matthew A." <[email protected]> Subject: Hacked CI server. Date: April 11, 2012 9:33:39 AM CDT To: "Stacey, Craig J." <[email protected]> Cc: "CSPO ([email protected])" <[email protected]>
Craig,
Got news last night (just read it this AM) the JC3-CIRC found that www.ci.anl.gov was defaced and/or a person was able to dump out the following DB’s on the server…
Hacked by: DMTryptamine, you can follow me at: https://twitter.com/#!/DimethylTrypta1 Salutations mother fuckers, owned these three .govs good and hard, so happens they were my first .govs as well ^>^ Shout outs to: Ichi, Spec, 7hor, and Iner7ia
www.ci.anl.gov
Databases: , division , events , grants , innews , news , papers , people , posters , projects , purpose , research_areas , research_groups , role , sites , tags
People: fname: Jim,Xiabing,Jan,Rick,Cheryl,Bill,Raymond,Andrew,Susan,Jean,Rachana,Mihai,Charles,John, Pavan,Satish,Jaydeep, Daniela,Peter,Joseph,Judy, Sanjukta,Eric,Rick,John,La Joyce,Darius,Fausto,Beth, Anthony,Lisa,Alok,Karen,Matthew,Narayan,Terry, Robert S.,Paul,Ian T.,Zheng (Cynthia),Silvia,Ninfa,Tim,Margaret,Aleksandr,Susan,Mary,Philip,Faith,Jack,Ahmed,Mihael, Mark,Paul, Randy,Zinetulla,Joseph,Kamil,Robert,Ed,Ivan,Mary,Yi,Hans,Nicholas,Dmitry,Dinesh,Kate,Rajkumar,Jong,Thomas,Li,Matt,Samuel,Jay,Robert,Scott, Gary,Ti, Sven,R. Lee,Michael,James,Ray,Cory,Ewing L. (Rusty), James N.,Ravi,Stuart, Richard F.,Stephen,Lois Curfman,William,William,JaQuel,Van Thi,Folker,Sheri,Neill,Misun,Darlyn,Tom,Vitali,Todd,John-Paul,Corby,Benoit,Boyana,John,David,Eric,Robert, Ross, Daniel, Tobias,Michael,Bruce,Carolyn,Shucai,Gail,Tomasz, Gordon David,Ken,Ioan, Kavithaa,Sandra,Gene,David,Katherine,John, Alexis A.,Gigi,Rob,Jason,Jaewook,Frank,Andrew,Dane,Barry,Mary,Craig,Tisha,Tina,Judy, Lori, Valerie,Brian,Max (Adam),Thomas, Jean,John,Lynn,Vero
lname: Feigl,Xu,Griffin,Stevens,Zidel,Allcock,Bair,Cherry,Coghlan,Allain,Ananthakrishnan,Anitescu,Bacon,Blaas,Balaji,Balay,Bardhan,Bartels,Beckman,Bester,Beumer,Bhowmick,Blau,Bradshaw,Bresnahan,Bullock,Buntinas,Cattaneo,Cerny,Chan,Childers,Choudhary,Cobb,Cohoon,Desai,Disz,Eisenberg,Fischer,Foster,Gu,Palomino,Mayorga,Freeman,Kaczmarski,Obabko,Gregurich,McIlvain,Carns,Ruppert,O?Connell,Hassanein,Hategan-Marandiuc,Hereld,Hovland,Hudson,Insepov,Insley,Iskra,Jacob,Jedlicka,Judson,Van Gammeren,Zhang,Kaper,Karonis,Karpeev,Kaushik,Keahey,Kettimuthu,Kim,Peterka,Li,Knepley,Lang,Larson,Latham,Lathrop,Leaf,Leggett,Leyffer,Liming,Link,Lottes,Loy,Lueninghoener,Lusk,Lyness,Madduri,Martin,Mattas,Thomas,McInnes,Trimble,Trimble,Bullock,Bui,Meyer,Mickelson,Miller,Min,Mishur,Morgan,Morozov,Munson,Navarro,Schmitz,Roux,Norris,Norris,Nowak,Olson,Olson,Overbeek,Paarmann,Paczian,Papka,Parrello,Peters,Xiao,Pieper,Plewa,Pusch,Raffenetti,Raicu,Rajavenkateshwaran,Bittner,Rackow,Ressman,Riley,Roberts,Rodriguez,Rohder,Ross,Sarich,Shin,Sie benlist
University of Chicago username: feigl,xbxu,griffin,stevens,zidel,allcock,bair,acherry,smc,allain,ranantha,anitescu,bacon,wilshire,balaji,balay,jbardhan,bartels,beckman,bester,beumer,bhowmick,blau,bradshaw,bresnaha,bullock,buntinas,cattaneo,bcerny,chan,childers,choudhar,cobb,cohoon,desai,disz,beisenbe,fischer,itf,,palomino,ninfa,tfreeman,mkaczmar,obabko,greguric,mcilvain,carns,ruppert,joconne,hassanei,hategan,hereld,hovland,hudson,insepov,insley,iskra,jacob,jedlicka,judson,mvan,yzhang,kaper,karonis,karpeev,kaushik,keahey,kettimut,jkim,tpeterka,likli,knepley,slang,larson,robl,lathrop,leaf,leggett,leyffer,liming,mlink,jlottes,rloy,lueningh,lusk,lyness,madduri,smartin,mattas,sthomas,curfman,trimble,trimble,jbullock,Bui,folker,mickelso,neillm,mmin,mishur,tmorgan,morozov,tmunson,navarro,cschmitz,roux,norris,jnorris,nowak,eolson,olson,overbeek,paarmann,paczian,papka,parrello,cpeters,,pieper,tomek,gdpusch,raffenet,iraicu,kavithaa,bittner,rackow,davidr,riley,roberts,arodri7,rohder,rross,sarich,jaewook,franks,siegela,skow,bsmith,spada,stace,t stacey,
phone numbers: (630) 252-7894,,(630) 252-7271,(630) 252-3378,(630) 252-7818,(630) 252-7573,(630) 252-5751,(630) 252-4296,(630) 252-1637,(630) 252-5184,(630) 252-2273,(630) 252-4172,(630) 252-5569,630-252-1177,(630) 252-3017,(630) 252-4912,(630) 252-4698,(630) 252-3135,(630) 252-9020,(630) 252-4779,(630) 252-7165,(630) 252-1842,(630) 252-5638,(630) 252-1498,(630) 252-4243,(630) 252-1842,(630) 252-7928,(630) 252-7160,(630) 252-1100,(630) 252-6044,(630) 252-0922,(630) 252-4909,(630) 252-6599,(630) 252-1881,(630) 252-7587,(630) 252-7831,(630) 252-5878,(630) 252-6018,(630) 252-4619,,(630) 252-6188,,(630) 252-5694,(630) 252-0958,(630) 252-5296,(630) 252-7120,252-1773,630-685-1268,(630) 252-1351,(630) 252-3610,(630) 252-5889,(630) 252-6003,(630) 252-4170,(630) 252-6384,(630) 252-8690,(630) 252-5049,(630) 252-5649,(630) 252-7197,(630) 252-2983,(630) 252-6785,(630) 252-3050,(630) 252-4185,(630) 252-5687,(630) 252-9948,(630) 252-7942,(630) 252-1229,(630) 252-6779,(630) 252-1673,(630) 252-0915,(630) 252-4213,(630) 252-719
alternate phone numbers: ,,(773) 834-6816,,,,,,,,,(312) 952-1714,,,,,,,,,,,,,,,(773) 702-8028,,,,,,,,,,,,,,(773) 834-6685,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,(505) 899-4098,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,(773) 834-6814,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,(773) 834-6692,,,,,,,,,,,,,,,,,,,,,(773) 702-4545,,,,,,,,773 834 3913,,773 702 5073,,,,,,,,,,773 834 9956,773 702 5948,773 702 3855,773 702 9116,773 834 9096,773 834 2604,(773)702-3485,,(773) 702-7823,(773) 702-6778,(773) 834-0525,(773) 702-7194,,,773 702 2330,773 834 1037,773 702 4441,773 702 5694,773 702 1051,773 702 8507,,(773) 702-7189,,(773) 702-8208,(773) 702-3493,773 702 5315,773 834 7394,773 702 6964,(773) 702-3405,312 665 7729,773 834 2978,,773 702-2185,773 702 9257,773 702 1222,773 834 0250,773 702 0647,773 834 4393,773 702 0795,773 702 3104,773 702 0557,773 702 4226,773 702 1693,773 834 0743,773 834 2242,,847 491 3714,773 702 6852,773 834 7919,773 834 0735,(773) 702-1632,773 702 4179,773 834 5248,773 834 8178,773 702 5753,773 702 0380,773 702 6117,
emails (.gov emails :D):[email protected],[email protected],[email protected],[email protected],[email protected],[email protected],[email protected],[email protected],[email protected],[email protected],[email protected],[email protected],[email protected],[email protected],[email protected],[email protected],[email protected],[email protected],[email protected],[email protected],[email protected],[email protected],[email protected],[email protected],[email protected],[email protected],[email protected],[email protected],[email protected],[email protected],[email protected],[email protected],[email protected],[email protected],[email protected],[email protected],[email protected],[email protected],[email protected],[email protected],[email protected],,[email protected],[email protected],[email protected],[email protected],,[email protected],[email protected],[email protected],[email protected],[email protected],[email protected],[email protected],[email protected],
alternate emails: ,,,[email protected],,allcock @mcs.anl.gov,,,,,,,[email protected],,,,,,[email protected],,,,,,,,,,,,,,,,,,,,,,,[email protected],,,,,,,[email protected],,,,,,,,,,[email protected],,,,,,,,,,,,,,,,,,,[email protected],,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,[email protected],,,,,,,,,[email protected],,,,,,,,,,,,,,,[email protected],,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,[email protected],,,,,,,,[email protected],,[email protected],,,,,,,,,,[email protected],[email protected],[email protected],[email protected],[email protected],[email protected],[email protected],,[email protected],[email protected],[email protected],[email protected],,,[email protected],[email protected],[email protected],[email protected],[email protected],[email protected],,[email protected],[email protected],edkoddjob.uchicago.edu,[email protected],[email protected],[email protected]
fax numbers: ,,,(630) 252-6333,,,,,,,,(630) 252 6434,,,(630) 252-5986,,,,,,,,,,,(630) 252-4916,(630) 252-5986,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,(630) 252-5986,,,,,,,,,,,,,,,,,,,,,,,,,,(630) 252-2211,,,,,,,630-252-6104,,,,,,,,,,,,,(631) 791-1048,,,,,,,,(630) 252-6333,,,,,,,,,,,,,,,(630) 252-1997,,,,,,,,,,(630) 252-2828,630-252-7692,,,,,,,,,(630) 252-1997,,,(630) 252-2211,,,,,,,,,,,(630) 252-5986,,,,,(630) 252-5676,,,,,,,,,,,,,(630) 252-5676,,(630) 252-4517,,,,,,,,,,,,,,,,,,,,,,,(630) 252-6073,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,(630) 252-8895,,,,,,,,,,,,,,,630 252 9155,,,,,,,,(630) 252 1342,,,,,,,,,,,,,(630) 252-5986,,,,,,,,,,,(608) 263-4499,,,,,,,,,,,,,,,,,,,,(630) 252-3387,,,,,,,,,,,,,,,,,,,,,,,(630) 252-5986,,,,,,(630) 252-3387,,,,,,,,,,,,,,,,,(630) 252 3387,,,,,,,(630) 252-5986,,,,,,,(630) 252-6073,,,,,,,,(630) 252-6073,,,(630) 252-6008,,,,(630) 252-7923,,,,630-252-5986,,,,(630) 252-7777,(630) 252-6008,(630) 252-4289,(630) 252-9868,(630) 252-7777,,,,,,,(630) 252-4470
alternate fax numbers: ,,,(773) 834-6818,,,,,,,,,(773) 834-6818,,,,,,,,,,,,,,,(773) 834-6818,,,,,,,,,,,,,,(773) 834-3700,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,773 834 2877,,773 702 0439,,,,,,,,,,773 834 0139,773 702 9740,773 702 9740,773 702 9237,773 702 5863,773 834 0188,(773)702-8487,,(773) 702-8038,(773) 702-0371,(773) 834-0505,,,,773 834 5250,773 834 0505,773 702 3002,773 702 3172,773 702 4427,773 834 8470,,(773) 702-2172,,,(773) 702-8487,773 702 3172,773 702 3172,773 834 9029,,312 665 7754,773 702 9740,,773 702 6260,773 702 0439,773 702 9740,773 702 4394,773 702 9379,773 702 0271,773 702 9311,773 702 9740 ,773 702 9740,773 834 3028,773 702 9740,773 702 2567,773 834 4546,,847 491 4461,773 702 6260,773 702 9838,773 834 0505,(773) 834-3834,773 702 0439,773 834 0505,773 834 0505,773 834 5906,773 702 4634,773 702 3002,312 996 6312,773 702 9740,773 834 2877,,312 996 0539,773 834 8150,773 702 0037,773 834 8400,,773 702 9740 ,,,773 702
Research groups: name: Laboratory for Scalable Parallel System Software,Bioinformatics,Futures Laboratory,Laboratory for Advanced Numerical Simulations,Distributed Systems Laboratory,Climate Modeling Group,MCS Systems Group name: ADIX,Compbio,FL,LANS,DSL,CMG,Systems
description: Our mission is to develop the technologies required to dramatically increase the productivity of scientists developing applications for parallel supercomputers. The focus is fourfold: integration of parallel programming tools, reuse of parallel program components, development of scientific computing toolkits and portable libraries, and exploration of requirements of future parallel computers.,Bioinformatics is the study of biological systems through the use of computational tools and the application of methods from computer science, mathematics, and information theory. At Argonne, our goal is to develop new methods and technologies for acquiring, organizing, analyzing, and visualizing such data. We apply these methods and technologies in two principal areas: sequence and comparative analysis, phylogenetic and evolutionary studies; systems-centered biology and statistical genomics.,The Argonne Futures Laboratory performs basic and applied research in advanced communications, collaboration, and visualization.
Grants: Abstract: The goal of the IESP to empower ultrahigh resolution and data intensive science and engineering research through the year 2020 by developing a plan for 1) a common, high quality computational environment for peta/exascale systems and for 2) catalyzing, coordinating, and sustaining the effort of the international open source software community to create that environment as quickly as possible. To achieve this goal, the IESP will stage a series of three international meetings, one each in the United States, Europe and Asia, beginning in the spring 2009. On-line collaboration technology will be heavily used to lay the groundwork for and consolidate the results of each meeting, to publish drafts of the plan and elicit contributions from the community, and to ensure that the final plan develops in a way that engages broad participation and ongoing input.
award_amount: award_amount: 2215670.00,217046.00,23206000.00,33426.00,365861.00,1000000.00,3436020.00,159650.00,2430050.00,340409.00,1560000.00,64706.00,199877.00,74462.00,95000.00,27969.00,4999610.00,885621.00,50460.00,38865.00,14981400.00,69954.00,3468670.00,270650.00,596829.00,379140.00,301747.00,479999.00,3960420.00,66977.00,999081.00,7999130.00,399985.00,350000.00,74815.00,430802.00,1215740.00,485670.00,517683.00,299974.00,80000.00,790907.00,2085750.00,82882.00,49075.00,393230.00,50000.00,250000.00,598296.00,2490000.00,540235.00,21000.00,250010.00,1696130.00,1144610.00,750000.00,330196.00,308811.00,24590700.00,116470.00,135794.00,862414.00,1489670.00,626247.00,354636.00,341171.00,1519390.00,1200000.00,390000.00,293004.00,189870.00,276510.00,379367.00,1919390.00,36445.00,299713.00,1641280.00,169999.00,1315230.00,7795800.00,29999.00,410000.00,621999.00,27234300.00,30207400.00,1642000.00,1400000.00,1813060.00,50000.00,1799990.00,211600.00,90000.00,977489.00,160002.00,379367.00,243591.00,79999.00,465000.00,10440000.00,3731864.00
funding_agency: NIH,NSF,NSF,NSF,NSF,NIH,NSF,DOE,NIH,NSF,NIH,NIH,NSF,NSF,Searle,Fermi Lab,NIH,NSF,NSF,NSF,NSF,NIH,NSF,Novartis Inst for BioMedical Res,NSF,NSF,NSF,NSF,NSF,NSF,NIH,NIH,NIH,MacArthur Fnd,NSF,NSF,NIH,NSF,NIH,NIH,NIH,NSF,NSF,Booz Allen Hamilton,NSF,NSF,National Academies Keck Futures Initiatives,NSF,NSF,ONR,NSF,WM Keck Foundation,NSF,NSF,NSF,St Johns Hosp,NSF,NSF,NIH,NSF,NSF,NSF,NSF,NSF,NSF,NSF,DOD,NSF USDA,NSF USDA,NSF,CBC,NSF,DOE,NSF,NIH,NSF,NSF,NSF,NIH,NIH,DOE,NIH,DOE,NIH,NSF,NIH,NIH,NIH-NIAID,NSF,NSF,DOE,NSF,MacArthur Fnd,NSF,DOE,NSF,NIH,DOE-ASCR,DOE-BER,DOE-ASCR
Papers: Authors: A. A. Rodriguez, T. Bompada, M. Syed, P. K. Shah, and N. Maltsev,P. Balaji, W. Feng, J. Archuleta, H. Lin, R. Kettimuthu, R. Thakur, and X. Ma,S. Park,Darius Buntinas, Guillaume Mercier, and William Gropp,P. Balaji, W. Feng, S. Bhagvat, D. K. Panda, R. Thakur, and W. Gropp,A. Baranovski, S. Bharathi, J. Bresnahan, A. Chervenak, I. Foster, D. Fraser, T. Freeman, D. Gunter, K. Jackson, K. Keahey, C. Kesselman, D. E. Konerding, N. Leroy, M. Link, M. Livny, N. Miller, R. Miller, G. Oleynik, L. Pearlman, J. M. Schopf, R. Schuler, and B. Tierney,L. Yang, C. Liu, J. M. Schopf, and I. Foster,K. Keahey, T. Freeman, J. Lauret, and D. Olson,D. Buntinas and W. Gropp,V. M. Zavala, J. Wang, S. Leyffer, E. M. Constantinescu, M. Anitescu, and G. Conzelmann,D. Buntinas, G. Mercier, and W. Gropp,D. Buntinas, G. Mercier and W. Gropp,J. L. Träff, W. Gropp, and R. Thakur,R. Thakur and W. Gropp,J. Shin, P. Malusare, and P. D. Hovland,Lin, M.F., Bratt, J.D., Engelhardt, M., Hagler, Ph., Hemmert, T.R., Meyer, H.B., Negele, J.W.,
-- Matt Kwiatkowski M.S.I.S. Interim Cyber Security Program Manager Aviation Safety Officer Argonne Cyber Security Program Office
Argonne National Laboratory http://www.anl.gov 9700 South Cass Avenue Bldg 240 Office 5310 Argonne, IL 60439
[email protected] Phone (630) 252-6465 Fax (630) 252-9689
HEALTH WARNING: Care should be taken when lifting this e-mail, since its mass, and thus its weight, is dependent on its velocity relative to the user.
I'll bring you in some Michelob Ultra ;) Thanks!!! Sent from my iPhone On Apr 11, 2012, at 12:51 PM, Chris Walker <[email protected]> wrote:
It's taken care of, just the public pages that pull individual records out of the DB based on the query string needed protecting, I just made sure the id passed in was entirely numeric.. If you think of pages that behave that way and I haven't mentioned, let me know
On Apr 11, 2012, at 11:48 AM, Beth Cerny Patino wrote:
Hi,
What a great week to be out, sorry this is falling in your lap. I'm w/out my computer so there anything I can do. Feel free to send me an email with anything I need to do tonight.
Beth
----- Original Message ----- From: Chris Walker <[email protected]> To: Craig Stacey <[email protected]> Cc: Core Admins <[email protected]> Sent: Wed, 11 Apr 2012 10:47:45 -0500 (CDT) Subject: Re: Hacked CI server. Went through the MCS public site as well, since it was the same codebase the projects, research groups, news, events and publications also needed fixing. I think that covers it, but it's hard to be sure On Apr 11, 2012, at 10:24 AM, Craig Stacey wrote:
Rockin'. -- Craig
On Apr 11, 2012, at 10:23 AM, Chris Walker wrote:
So securing that page is done, it will now only accept numeric values for the id, I also found the same problem in /research/project_detail.php, /news/detail.php and /events/detail.php
I think that's the exposed portions of the adminforms stuff on that site, I can't think of other areas that build sql statements from the query string, if anyone sees any other pages that do something like that, let me know..
The fix is simple,
it goes from $id = mysql_real_escape_string($_GET['id']);
to
$id = 0; if(ctype_digit($_GET["id"])) $id = mysql_real_escape_string($_GET['id']);
On Apr 11, 2012, at 10:08 AM, Chris Walker wrote:
yeah the db in question is the that cels adminforms application
On Apr 11, 2012, at 10:04 AM, Craig Stacey wrote:
Okay, well, pretty sure I see how it happened.
In /www/logs/www.ci.uchicago.edu/access_log.2012Apr10 on pokey, I see lots of stuff like this:
61.178.84.251 - - [10/Apr/2012:09:13:25 -0500] "GET /people/profile.php?id=999999.9+union+all+select+0x31303235343830303536%2C0x31303235343830303536%2C0x31303235343830303536%2C0x31303235343830303536%2C0x31303235343830303536-- HTTP/1.1" 200 8083
(etc.)
Looks like we need some scrubbing/validation on the PHP for this. I suspect MCS may have the same issue with its site. -- Craig
On Apr 11, 2012, at 9:57 AM, Craig Stacey wrote:
Don't be alarmed by the subject.
Some sooper 1337 hax0r managed to dump publicly available information from the database serving www.ci.uchicago.edu (aka www.ci.anl.gov). As far as I can tell, there's no real incursion here -- just a likely SQL injection. Still, we should make sure things are secure and figure out what allowed this to happen so we can lock it down.
-- Craig
Begin forwarded message:
From: "Kwiatkowski, Matthew A." <[email protected]> Subject: Hacked CI server. Date: April 11, 2012 9:33:39 AM CDT To: "Stacey, Craig J." <[email protected]> Cc: "CSPO ([email protected])" <[email protected]>
Craig,
Got news last night (just read it this AM) the JC3-CIRC found that www.ci.anl.gov was defaced and/or a person was able to dump out the following DB’s on the server…
Hacked by: DMTryptamine, you can follow me at: https://twitter.com/#!/DimethylTrypta1 Salutations mother fuckers, owned these three .govs good and hard, so happens they were my first .govs as well ^>^ Shout outs to: Ichi, Spec, 7hor, and Iner7ia
www.ci.anl.gov
Databases: , division , events , grants , innews , news , papers , people , posters , projects , purpose , research_areas , research_groups , role , sites , tags
People: fname: Jim,Xiabing,Jan,Rick,Cheryl,Bill,Raymond,Andrew,Susan,Jean,Rachana,Mihai,Charles,John, Pavan,Satish,Jaydeep, Daniela,Peter,Joseph,Judy, Sanjukta,Eric,Rick,John,La Joyce,Darius,Fausto,Beth, Anthony,Lisa,Alok,Karen,Matthew,Narayan,Terry, Robert S.,Paul,Ian T.,Zheng (Cynthia),Silvia,Ninfa,Tim,Margaret,Aleksandr,Susan,Mary,Philip,Faith,Jack,Ahmed,Mihael, Mark,Paul, Randy,Zinetulla,Joseph,Kamil,Robert,Ed,Ivan,Mary,Yi,Hans,Nicholas,Dmitry,Dinesh,Kate,Rajkumar,Jong,Thomas,Li,Matt,Samuel,Jay,Robert,Scott, Gary,Ti, Sven,R. Lee,Michael,James,Ray,Cory,Ewing L. (Rusty), James N.,Ravi,Stuart, Richard F.,Stephen,Lois Curfman,William,William,JaQuel,Van Thi,Folker,Sheri,Neill,Misun,Darlyn,Tom,Vitali,Todd,John-Paul,Corby,Benoit,Boyana,John,David,Eric,Robert, Ross, Daniel, Tobias,Michael,Bruce,Carolyn,Shucai,Gail,Tomasz, Gordon David,Ken,Ioan, Kavithaa,Sandra,Gene,David,Katherine,John, Alexis A.,Gigi,Rob,Jason,Jaewook,Frank,Andrew,Dane,Barry,Mary,Craig,Tisha,Tina,Judy, Lori, Valerie,Brian,Max (Adam),Thomas, Jean,John,Lynn,Vero
lname: Feigl,Xu,Griffin,Stevens,Zidel,Allcock,Bair,Cherry,Coghlan,Allain,Ananthakrishnan,Anitescu,Bacon,Blaas,Balaji,Balay,Bardhan,Bartels,Beckman,Bester,Beumer,Bhowmick,Blau,Bradshaw,Bresnahan,Bullock,Buntinas,Cattaneo,Cerny,Chan,Childers,Choudhary,Cobb,Cohoon,Desai,Disz,Eisenberg,Fischer,Foster,Gu,Palomino,Mayorga,Freeman,Kaczmarski,Obabko,Gregurich,McIlvain,Carns,Ruppert,O?Connell,Hassanein,Hategan-Marandiuc,Hereld,Hovland,Hudson,Insepov,Insley,Iskra,Jacob,Jedlicka,Judson,Van Gammeren,Zhang,Kaper,Karonis,Karpeev,Kaushik,Keahey,Kettimuthu,Kim,Peterka,Li,Knepley,Lang,Larson,Latham,Lathrop,Leaf,Leggett,Leyffer,Liming,Link,Lottes,Loy,Lueninghoener,Lusk,Lyness,Madduri,Martin,Mattas,Thomas,McInnes,Trimble,Trimble,Bullock,Bui,Meyer,Mickelson,Miller,Min,Mishur,Morgan,Morozov,Munson,Navarro,Schmitz,Roux,Norris,Norris,Nowak,Olson,Olson,Overbeek,Paarmann,Paczian,Papka,Parrello,Peters,Xiao,Pieper,Plewa,Pusch,Raffenetti,Raicu,Rajavenkateshwaran,Bittner,Rackow,Ressman,Riley,Roberts,Rodriguez,Rohder,Ross,Sarich,Shin,Sie benlist
University of Chicago username: feigl,xbxu,griffin,stevens,zidel,allcock,bair,acherry,smc,allain,ranantha,anitescu,bacon,wilshire,balaji,balay,jbardhan,bartels,beckman,bester,beumer,bhowmick,blau,bradshaw,bresnaha,bullock,buntinas,cattaneo,bcerny,chan,childers,choudhar,cobb,cohoon,desai,disz,beisenbe,fischer,itf,,palomino,ninfa,tfreeman,mkaczmar,obabko,greguric,mcilvain,carns,ruppert,joconne,hassanei,hategan,hereld,hovland,hudson,insepov,insley,iskra,jacob,jedlicka,judson,mvan,yzhang,kaper,karonis,karpeev,kaushik,keahey,kettimut,jkim,tpeterka,likli,knepley,slang,larson,robl,lathrop,leaf,leggett,leyffer,liming,mlink,jlottes,rloy,lueningh,lusk,lyness,madduri,smartin,mattas,sthomas,curfman,trimble,trimble,jbullock,Bui,folker,mickelso,neillm,mmin,mishur,tmorgan,morozov,tmunson,navarro,cschmitz,roux,norris,jnorris,nowak,eolson,olson,overbeek,paarmann,paczian,papka,parrello,cpeters,,pieper,tomek,gdpusch,raffenet,iraicu,kavithaa,bittner,rackow,davidr,riley,roberts,arodri7,rohder,rross,sarich,jaewook,franks,siegela,skow,bsmith,spada,stace,t stacey,
phone numbers: (630) 252-7894,,(630) 252-7271,(630) 252-3378,(630) 252-7818,(630) 252-7573,(630) 252-5751,(630) 252-4296,(630) 252-1637,(630) 252-5184,(630) 252-2273,(630) 252-4172,(630) 252-5569,630-252-1177,(630) 252-3017,(630) 252-4912,(630) 252-4698,(630) 252-3135,(630) 252-9020,(630) 252-4779,(630) 252-7165,(630) 252-1842,(630) 252-5638,(630) 252-1498,(630) 252-4243,(630) 252-1842,(630) 252-7928,(630) 252-7160,(630) 252-1100,(630) 252-6044,(630) 252-0922,(630) 252-4909,(630) 252-6599,(630) 252-1881,(630) 252-7587,(630) 252-7831,(630) 252-5878,(630) 252-6018,(630) 252-4619,,(630) 252-6188,,(630) 252-5694,(630) 252-0958,(630) 252-5296,(630) 252-7120,252-1773,630-685-1268,(630) 252-1351,(630) 252-3610,(630) 252-5889,(630) 252-6003,(630) 252-4170,(630) 252-6384,(630) 252-8690,(630) 252-5049,(630) 252-5649,(630) 252-7197,(630) 252-2983,(630) 252-6785,(630) 252-3050,(630) 252-4185,(630) 252-5687,(630) 252-9948,(630) 252-7942,(630) 252-1229,(630) 252-6779,(630) 252-1673,(630) 252-0915,(630) 252-4213,(630) 252-719
alternate phone numbers: ,,(773) 834-6816,,,,,,,,,(312) 952-1714,,,,,,,,,,,,,,,(773) 702-8028,,,,,,,,,,,,,,(773) 834-6685,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,(505) 899-4098,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,(773) 834-6814,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,(773) 834-6692,,,,,,,,,,,,,,,,,,,,,(773) 702-4545,,,,,,,,773 834 3913,,773 702 5073,,,,,,,,,,773 834 9956,773 702 5948,773 702 3855,773 702 9116,773 834 9096,773 834 2604,(773)702-3485,,(773) 702-7823,(773) 702-6778,(773) 834-0525,(773) 702-7194,,,773 702 2330,773 834 1037,773 702 4441,773 702 5694,773 702 1051,773 702 8507,,(773) 702-7189,,(773) 702-8208,(773) 702-3493,773 702 5315,773 834 7394,773 702 6964,(773) 702-3405,312 665 7729,773 834 2978,,773 702-2185,773 702 9257,773 702 1222,773 834 0250,773 702 0647,773 834 4393,773 702 0795,773 702 3104,773 702 0557,773 702 4226,773 702 1693,773 834 0743,773 834 2242,,847 491 3714,773 702 6852,773 834 7919,773 834 0735,(773) 702-1632,773 702 4179,773 834 5248,773 834 8178,773 702 5753,773 702 0380,773 702 6117,
emails (.gov emails :D):[email protected],[email protected],[email protected],[email protected],[email protected],[email protected],[email protected],[email protected],[email protected],[email protected],[email protected],[email protected],[email protected],[email protected],[email protected],[email protected],[email protected],[email protected],[email protected],[email protected],[email protected],[email protected],[email protected],[email protected],[email protected],[email protected],[email protected],[email protected],[email protected],[email protected],[email protected],[email protected],[email protected],[email protected],[email protected],[email protected],[email protected],[email protected],[email protected],[email protected],[email protected],,[email protected],[email protected],[email protected],[email protected],,[email protected],[email protected],[email protected],[email protected],[email protected],[email protected],[email protected],[email protected],
alternate emails: ,,,[email protected],,allcock @mcs.anl.gov,,,,,,,[email protected],,,,,,[email protected],,,,,,,,,,,,,,,,,,,,,,,[email protected],,,,,,,[email protected],,,,,,,,,,[email protected],,,,,,,,,,,,,,,,,,,[email protected],,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,[email protected],,,,,,,,,[email protected],,,,,,,,,,,,,,,[email protected],,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,[email protected],,,,,,,,[email protected],,[email protected],,,,,,,,,,[email protected],[email protected],[email protected],[email protected],[email protected],[email protected],[email protected],,[email protected],[email protected],[email protected],[email protected],,,[email protected],[email protected],[email protected],[email protected],[email protected],[email protected],,[email protected],[email protected],edkoddjob.uchicago.edu,[email protected],[email protected],[email protected]
fax numbers: ,,,(630) 252-6333,,,,,,,,(630) 252 6434,,,(630) 252-5986,,,,,,,,,,,(630) 252-4916,(630) 252-5986,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,(630) 252-5986,,,,,,,,,,,,,,,,,,,,,,,,,,(630) 252-2211,,,,,,,630-252-6104,,,,,,,,,,,,,(631) 791-1048,,,,,,,,(630) 252-6333,,,,,,,,,,,,,,,(630) 252-1997,,,,,,,,,,(630) 252-2828,630-252-7692,,,,,,,,,(630) 252-1997,,,(630) 252-2211,,,,,,,,,,,(630) 252-5986,,,,,(630) 252-5676,,,,,,,,,,,,,(630) 252-5676,,(630) 252-4517,,,,,,,,,,,,,,,,,,,,,,,(630) 252-6073,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,(630) 252-8895,,,,,,,,,,,,,,,630 252 9155,,,,,,,,(630) 252 1342,,,,,,,,,,,,,(630) 252-5986,,,,,,,,,,,(608) 263-4499,,,,,,,,,,,,,,,,,,,,(630) 252-3387,,,,,,,,,,,,,,,,,,,,,,,(630) 252-5986,,,,,,(630) 252-3387,,,,,,,,,,,,,,,,,(630) 252 3387,,,,,,,(630) 252-5986,,,,,,,(630) 252-6073,,,,,,,,(630) 252-6073,,,(630) 252-6008,,,,(630) 252-7923,,,,630-252-5986,,,,(630) 252-7777,(630) 252-6008,(630) 252-4289,(630) 252-9868,(630) 252-7777,,,,,,,(630) 252-4470
alternate fax numbers: ,,,(773) 834-6818,,,,,,,,,(773) 834-6818,,,,,,,,,,,,,,,(773) 834-6818,,,,,,,,,,,,,,(773) 834-3700,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,773 834 2877,,773 702 0439,,,,,,,,,,773 834 0139,773 702 9740,773 702 9740,773 702 9237,773 702 5863,773 834 0188,(773)702-8487,,(773) 702-8038,(773) 702-0371,(773) 834-0505,,,,773 834 5250,773 834 0505,773 702 3002,773 702 3172,773 702 4427,773 834 8470,,(773) 702-2172,,,(773) 702-8487,773 702 3172,773 702 3172,773 834 9029,,312 665 7754,773 702 9740,,773 702 6260,773 702 0439,773 702 9740,773 702 4394,773 702 9379,773 702 0271,773 702 9311,773 702 9740 ,773 702 9740,773 834 3028,773 702 9740,773 702 2567,773 834 4546,,847 491 4461,773 702 6260,773 702 9838,773 834 0505,(773) 834-3834,773 702 0439,773 834 0505,773 834 0505,773 834 5906,773 702 4634,773 702 3002,312 996 6312,773 702 9740,773 834 2877,,312 996 0539,773 834 8150,773 702 0037,773 834 8400,,773 702 9740 ,,,773 702
Research groups: name: Laboratory for Scalable Parallel System Software,Bioinformatics,Futures Laboratory,Laboratory for Advanced Numerical Simulations,Distributed Systems Laboratory,Climate Modeling Group,MCS Systems Group name: ADIX,Compbio,FL,LANS,DSL,CMG,Systems
description: Our mission is to develop the technologies required to dramatically increase the productivity of scientists developing applications for parallel supercomputers. The focus is fourfold: integration of parallel programming tools, reuse of parallel program components, development of scientific computing toolkits and portable libraries, and exploration of requirements of future parallel computers.,Bioinformatics is the study of biological systems through the use of computational tools and the application of methods from computer science, mathematics, and information theory. At Argonne, our goal is to develop new methods and technologies for acquiring, organizing, analyzing, and visualizing such data. We apply these methods and technologies in two principal areas: sequence and comparative analysis, phylogenetic and evolutionary studies; systems-centered biology and statistical genomics.,The Argonne Futures Laboratory performs basic and applied research in advanced communications, collaboration, and visualization.
Grants: Abstract: The goal of the IESP to empower ultrahigh resolution and data intensive science and engineering research through the year 2020 by developing a plan for 1) a common, high quality computational environment for peta/exascale systems and for 2) catalyzing, coordinating, and sustaining the effort of the international open source software community to create that environment as quickly as possible. To achieve this goal, the IESP will stage a series of three international meetings, one each in the United States, Europe and Asia, beginning in the spring 2009. On-line collaboration technology will be heavily used to lay the groundwork for and consolidate the results of each meeting, to publish drafts of the plan and elicit contributions from the community, and to ensure that the final plan develops in a way that engages broad participation and ongoing input.
award_amount: award_amount: 2215670.00,217046.00,23206000.00,33426.00,365861.00,1000000.00,3436020.00,159650.00,2430050.00,340409.00,1560000.00,64706.00,199877.00,74462.00,95000.00,27969.00,4999610.00,885621.00,50460.00,38865.00,14981400.00,69954.00,3468670.00,270650.00,596829.00,379140.00,301747.00,479999.00,3960420.00,66977.00,999081.00,7999130.00,399985.00,350000.00,74815.00,430802.00,1215740.00,485670.00,517683.00,299974.00,80000.00,790907.00,2085750.00,82882.00,49075.00,393230.00,50000.00,250000.00,598296.00,2490000.00,540235.00,21000.00,250010.00,1696130.00,1144610.00,750000.00,330196.00,308811.00,24590700.00,116470.00,135794.00,862414.00,1489670.00,626247.00,354636.00,341171.00,1519390.00,1200000.00,390000.00,293004.00,189870.00,276510.00,379367.00,1919390.00,36445.00,299713.00,1641280.00,169999.00,1315230.00,7795800.00,29999.00,410000.00,621999.00,27234300.00,30207400.00,1642000.00,1400000.00,1813060.00,50000.00,1799990.00,211600.00,90000.00,977489.00,160002.00,379367.00,243591.00,79999.00,465000.00,10440000.00,3731864.00
funding_agency: NIH,NSF,NSF,NSF,NSF,NIH,NSF,DOE,NIH,NSF,NIH,NIH,NSF,NSF,Searle,Fermi Lab,NIH,NSF,NSF,NSF,NSF,NIH,NSF,Novartis Inst for BioMedical Res,NSF,NSF,NSF,NSF,NSF,NSF,NIH,NIH,NIH,MacArthur Fnd,NSF,NSF,NIH,NSF,NIH,NIH,NIH,NSF,NSF,Booz Allen Hamilton,NSF,NSF,National Academies Keck Futures Initiatives,NSF,NSF,ONR,NSF,WM Keck Foundation,NSF,NSF,NSF,St Johns Hosp,NSF,NSF,NIH,NSF,NSF,NSF,NSF,NSF,NSF,NSF,DOD,NSF USDA,NSF USDA,NSF,CBC,NSF,DOE,NSF,NIH,NSF,NSF,NSF,NIH,NIH,DOE,NIH,DOE,NIH,NSF,NIH,NIH,NIH-NIAID,NSF,NSF,DOE,NSF,MacArthur Fnd,NSF,DOE,NSF,NIH,DOE-ASCR,DOE-BER,DOE-ASCR
Papers: Authors: A. A. Rodriguez, T. Bompada, M. Syed, P. K. Shah, and N. Maltsev,P. Balaji, W. Feng, J. Archuleta, H. Lin, R. Kettimuthu, R. Thakur, and X. Ma,S. Park,Darius Buntinas, Guillaume Mercier, and William Gropp,P. Balaji, W. Feng, S. Bhagvat, D. K. Panda, R. Thakur, and W. Gropp,A. Baranovski, S. Bharathi, J. Bresnahan, A. Chervenak, I. Foster, D. Fraser, T. Freeman, D. Gunter, K. Jackson, K. Keahey, C. Kesselman, D. E. Konerding, N. Leroy, M. Link, M. Livny, N. Miller, R. Miller, G. Oleynik, L. Pearlman, J. M. Schopf, R. Schuler, and B. Tierney,L. Yang, C. Liu, J. M. Schopf, and I. Foster,K. Keahey, T. Freeman, J. Lauret, and D. Olson,D. Buntinas and W. Gropp,V. M. Zavala, J. Wang, S. Leyffer, E. M. Constantinescu, M. Anitescu, and G. Conzelmann,D. Buntinas, G. Mercier, and W. Gropp,D. Buntinas, G. Mercier and W. Gropp,J. L. Träff, W. Gropp, and R. Thakur,R. Thakur and W. Gropp,J. Shin, P. Malusare, and P. D. Hovland,Lin, M.F., Bratt, J.D., Engelhardt, M., Hagler, Ph., Hemmert, T.R., Meyer, H.B., Negele, J.W.,
-- Matt Kwiatkowski M.S.I.S. Interim Cyber Security Program Manager Aviation Safety Officer Argonne Cyber Security Program Office
Argonne National Laboratory http://www.anl.gov 9700 South Cass Avenue Bldg 240 Office 5310 Argonne, IL 60439
[email protected] Phone (630) 252-6465 Fax (630) 252-9689
HEALTH WARNING: Care should be taken when lifting this e-mail, since its mass, and thus its weight, is dependent on its velocity relative to the user.
participants (4)
-
Beth Cerny -
Beth Cerny Patino
-
Chris Walker -
Craig Stacey