Fun With TDOC
by Anonymous
The Tennessee Department of Corrections (TDOC) has "upgraded" their little piece of the State's network.
Management Information Systems (MIS), the people responsible for the piece of crap I called TOMIS, was given the task. TOMIS runs under UNIX as a clumsy interface with infuriatingly cryptic menu names and a pathetic online help menu.
As of November 1999, TOMIS users I said goodbye to their old Memorex Telex terminals and received MTX 1683 terminals. This is because MIS and "The Powers That Be" didn't like the idea of having several PCs connected to TOMIS for the paper-pushers to do their memos and stuff on.
Their paranoia was well placed because the PC I used was equipped with QBasic and the client app for connecting to TOMIS (grin). The prison staff are under-trained and barely computer literate. Most staff had dumb terminals, so PC security has been largely overlooked.
Is the system "secure" now? MIS laid a shitload of fiber, bought hundreds of MTX terminals (diskless), 15" color monitors, and printers. Now TDOC staff have access to the State's Windows NT server!
Of course, they didn't do any real training and the staff are still clueless about how to do anything above the simplest tasks. MIS didn't want to go through all the trouble of putting all the TOMIS stuff on the NT server, so you can either log onto TOMIS or the NT (but not both).
The NT provides access to MS Word, Excel, email, etc. I didn't see anything all that exciting on it, but it's worth exploring because of all the subnets attached to it.
Due to the poor training, I was lucky enough to have the opportunity to spend several hours on the TOMIS and NT "helping" teach the staff I work for. What incarcerated hacker would pass that kind of chance up? After a short time I realized that one of the little MIS idiots forgot to set a configuration password on one of the terminals.
Under the watchful eye of clueless staff members, I was able to view and change anything I wanted. Anyway, here's a little info for anyone who's interested in checking out one of the most pathetic systems I've ever seen.
Windows NT Server Domain Name: state.tn.us DNS Server: 170.142.82.150 Default Gateway: 170.142.48.129 TOMIS (UNIX) Domain Name: tn3270.state.tn.usWarning: TOMIS only runs batch processes (called "conversations" or "requestable reports") and any interactive process will stand out.
Login Procedure
1.) Type IMS2 under State Map (hit Enter).
2.) Type BPNUMBER (replace NUMBER with a valid user ID).
3.) Tab down to Password field and enter password.
4.) Type in the answer to the two personal questions. There are two of them from a list of twenty.
5.) You are now at the Main Menu.
Move your cursor to the lower-left hand corner of the screen next to Function and type in the conversation you want from the following list:
If you choose a conversation that requires a Site ID, here are a few to get you started:
Need Help Using TOMIS?
The TOMIS Hotline (a.k.a. System Development Services) can be reached between 8:00 a.m. and 4:30 p.m, (Central Time) Monday thru Friday.
If you don't like dealing with personnel who might be sitting at a terminal trying to figure out who you are, then just call their on-call people! They aren't at a terminal, but are very willing to give out info to anyone who has their page number.
Call 1-800-841-7243 between 10:00 p.m. and 12:00 a.m., Monday through Friday. On Saturday and Sunday, it's 7:00 a.m. to 4:00 p.m. Another interesting place to look for information is the Data Center. TOMIS users call this number when reporting equipment malfunctions.
- System Development Services: 615-741-1000
- The Data Center: 615-741-1001
If you're reading this article and thinking, "Hey, I could hack TOMIS and change prisoner release dates and they'll let them out!" you're dead wrong. Central Records checks each inmate's paper file before releasing them.
Hacking isn't about short circuiting "justice" anyway, is it?