Archive for the ‘CyberChaos’ Category

Who loves the hacktivists?

Thursday, June 30th, 2011

The oft-repeated aphorism “one man’s terrorist is another man’s freedom fighter” could easily be applied to the world of computer hacking.

Just as spray-painted graffiti can represent either a mindless act or a political statement, the take-down of websites and theft of user information means different things to different people.

The subjective nature of what these shadowy troublemakers get up to is exemplified by the use of the term “hacktivist”.

Anonymous and Lulz Security – two of the highest profile groups at work today – sail under this flag.

“There has always been a streak within hackerdom of ideology mixed with technology,” says Peter Sommer, author of the seminal 1980s text The Hacker’s Handbook.

The hacker, explains Mr Sommer, is distinct from the cyber-criminal, whose motivations are generally larceny and whose relationship with technology is akin to the housebreaker’s relationship to the jemmy – it is a tool of the trade.

Hackers are interested in the mechanism of attack as much as they are in the target.

“One strong element in hacking is seeing how things work. Here is a technology, can I make it do something else?” says Mr Sommer.

That love of technological innovation, and the internet in particular, gives rise to a philosophy.

– More…

LulzSec hits Brazilian websites

Saturday, June 25th, 2011

– and the beat goes on…

– dennis

– – – – – – – – – – – – – – – – – – – – –

The websites of the Brazilian government and President have fallen victim to hacker group Lulz Security.

In a Twitter posting, LulzSec said “Tango Down” and linked to the two sites.

Both are thought to have been taken offline by distributed denial-of-service attacks (DDoS).

LulzSec recently signalled its intent to target the systems of governments and associated organisations around the world.

In the past month, it has attacked the UK’s Serious Organised Crime Agency, the US Senate, Sony, and the broadcaster PBS, as well as a number of games companies.

DDoS attacks are regarded more as malicious activity than hacking, because the sites’ computer systems are not broken into.

Instead, they are deliberately overloading with traffic, such as communication requests or so-called ‘e-mail bombs’.

The group tweeted “Our Brazilian unit is making progress. Well done @LulzSecBrazil, brothers!” shortly after the two sites went down.

– More…

Another burst of six articles on CyberChaos

Tuesday, June 21st, 2011

Thousands of websites exposed in hack attack

High-profile hacks spur security investment

Sega says hackers stole data of 1.29 million users

US builds net for cyber war games

Virgin alerts infected customers

Soca website taken down after LulzSec ‘Ddos attack’

Hackers attack Malaysia government websites

Friday, June 17th, 2011

Hackers have attacked dozens of government websites in Malaysia, days after a hacking group criticised the country over censorship.

Malaysian officials said attempts had been made to hack 51 websites, and at least 41 had been disrupted.

The “Anonymous” group of hackers had threatened Malaysia with an attack this week, accusing the government of blocking some websites.

No group has yet said they carried out the attack.

But Anonymous said in an earlier web post that Malaysia’s censoring of films and television shows and its blocking of file-sharing websites amounted to a denial of human rights.

The exact nature of the attacks was not immediately clear, and it may be that they were denial of service overloads, rather than hacking intrusions into the computer servers.

The main Malaysian government portal was among the websites that was targeted, and it was still inaccessible on Thursday.

The Malaysian Communications and Multimedia Commission said attacks on websites with the .gov.my domain began late on Wednesday.

“We do not expect the overall recovery to these websites to take long as most websites have already recovered from the attack,” the commission said in a statement.

– More…

CyberChaos – a new category on Samadhisoft

Thursday, June 16th, 2011

CyberChaos

CyberChaos

– I don’t often add a new category to the site.  But, as I watch the passing river of information and events go by, I’m seeing a new thread beginning to clearly stand out from the background and I think I need a new category to tie my observations together.

– So, the CyberChaos category is born.

– Hacking, Cyber Warefare, Malware, Viruses, Root Kits, Back doors, Worms, Keyloggers, Cyber Vandalism, attacks by individuals, attacks by organizations (Anonymous and LutzSec, for example) and attacks by nation states (Stuxnet and Iran) and, finally, some of the bizarre ways that the new technologies are weaving themselves into the fabric of our lives.

– I’m not surprised.   I read a lot of cutting edge science fiction and these things have all been predicted loosely for years.   But, the present becomes the future, inexorably, and here we are – science fiction is becoming reality.

– I’ve been vacuuming up a number of stories of late that are part of this thread and I think I’m going to introduce what I’ve collected here in one whack to get the new category off to a good start.

Enjoy (or go hide under the bed – as you like):

– – – – – – – – – – – – – – – – – –

Targeted cyber attacks an ‘epidemic’

Cyber crime stats ‘tip of the iceberg’

Firesheep Sniffs Out Facebook and Other User Credentials on Wi-Fi Hotspots

Personal data stolen from UK developer Codemasters

IMF hit by ‘very major’ cyber security attack

Citibank confirms hacking attack

Catholic church gives blessing to iPhone app

Government ‘may have hacked IMF’

Lulz attacks: US orders review as Senate site hacked

LulzSec opens hack request line

LulzSec hackers claim CIA website shutdown

Dark corners of the net

– And more here… (everything that’s in the CyberChaos category thus far)

Anonymous speaks: the inside story of the HBGary hack

Sunday, February 20th, 2011

– Smashing stuff.   Absolutely top notch.  Anonymous has truly taken the stuffed shirt out of these folks.   And good on them for doing it. – dennis

– Check out the two posts previous to this one:   and as well.

– – – – – – – – – – – – – – – – – – – –

It has been an embarrassing week for security firm HBGary and its HBGary Federal offshoot. HBGary Federal CEO Aaron Barr thought he had unmasked the hacker hordes of Anonymous and was preparing to name and shame those responsible for co-ordinating the group’s actions, including the denial-of-service attacks that hit MasterCard, Visa, and other perceived enemies of WikiLeaks late last year.

When Barr told one of those he believed to be an Anonymous ringleader about his forthcoming exposé, the Anonymous response was swift and humiliating. HBGary’s servers were broken into, its e-mails pillaged and published to the world, its data destroyed, and its website defaced. As an added bonus, a second site owned and operated by Greg Hoglund, owner of HBGary, was taken offline and the user registration database published.

Over the last week, I’ve talked to some of those who participated in the HBGary hack to learn in detail how they penetrated HBGary’s defenses and gave the company such a stunning black eye—and what the HBGary example means for the rest of us mere mortals who use the Internet.

– Please, read more…

-Research thanks to Alan T.

Anonymous victim HBGary goes to ground

Friday, February 18th, 2011

– Great follow up story to my previous one.  Got to love the Anonymous folks – speaking truth to power.  – dennis

– – – – – – – – – – – – – –

The computer security company hacked by members of activist group Anonymous has gone to ground as further revelations about its activites leak online.

HBGary has cancelled its appearances at public events, saying that members of staff had been threatened.

It follows the release of internal documents which appear to show the firm offered to smear Wikileaks’ supporters.

HBGary officials said the online messages could have been altered prior to publication.

The company’s founder, Greg Hoglund had been scheduled to give a talk at the RSA Security conference in San Francisco this week, but pulled out at the last minute.

The company also withdrew from an associated exhibition.

“In an effort to protect our employees, customers and the RSA Conference community, HBGary has decided to remove our booth and cancel all talks,” it said in a statement posted on its website.

According to e-mails that Anonymous claims to have taken from HBGary’s servers, the company had proposed a plan to undermine Wikileaks.

At the time, the whistleblowing website was planning to release documents relating to Bank of America.

The leaked emails also suggest that HBGary had discovered evidence that US officials were attempting to monitor visitors to websites affiliated to al Qaeda.

These messages have been posted online via the Anonymous-supported site Anonleaks.ru.

– More…

Hackers find plan to attack WikiLeaks

Tuesday, February 15th, 2011

– Least anyone wonder, I fully support what Assange’s done.   Governments, and I mean the U.S. especially here, keep far too much secret.   Democracy should be as transparent as it can be consistant with security but most governments err far over that mark.

– So, I applaude Anonymous and their efforts to make the control and suppresdsion of information painful for those who participate in it. – dennis

= = = = = = = = = = = = = = = = = = = = = = = = = = = = =

LONDON – The computer hackers’ collective Anonymous has uncovered a proposal by a consortium of private contractors to attack and discredit WikiLeaks.

Last week Anonymous volunteers broke into the servers of HB Gary Federal, a security company that sells investigative services to companies, and posted thousands of the firm’s emails on to the internet.

The attack was in revenge for claims by the company’s chief executive Aaron Barr that he had successfully infiltrated the shadowy cyber protest network and discovered details of its leadership and structure.

Hacktivists, journalists and bloggers have since pored over the emails and discovered what appears to be a proposal that was intended to be pitched to the Bank of America to sabotage WikiLeaks and discredit journalists who are sympathetic to the whistle-blowing website.

The PowerPoint presentation claims a trio of internet security companies – HB Gary Federal, Palantir Technologies and Berico Technologies – are already prepared to attack WikiLeaks which is rumoured to be getting ready to release a cache of potentially embarrassing information on the Bank of America.

– more…

US unable to win a cyber war

Monday, April 5th, 2010

24 Feb 2010

The inability to deflect even a simulated cyber attack or mitigate its effects shown in the exercise that took place some six days ago at Washington’s Mandarin Oriental Hotel doesn’t bode well for the US.

Mike McConnell, the former Director of National Intelligence, said to the US Senate Commerce, Science, and Transportation Committee yesterday that if the US got involved in a cyber war at this moment, they would surely lose. “We’re the most vulnerable. We’re the most connected. We have the most to lose,” he stated.

Three years ago, McConnell referred to cybersecurity as the ‘‘soft underbelly of this country’’ and it’s clear that he thinks things haven’t changed much since then.

And he isn’t that optimistic about what warnings about the possibility might achieve. According to InfoWorld, he thinks that only an attack with catastrophic consequences will spur the government into action. “We will not mitigate this risk,” he says. “We will talk about it, we will wave our hands, we’ll have a bill, but we will not mitigate this risk.”

James Lewis, director of the Technology and Public Policy Program at the Center for Strategic and International Studies, thinks that cyber security is not something that has to be left in the hands of private companies and that government intervention should be called for. “Government needs to give the market a kick,” says McConnell.

Not so long ago, the introduction of two Senate bills that would allow the US president to shut down the Internet in case of a cyber emergency made corporations all over the country sweat. But, it’s plain to see that government affiliated experts would welcome it with open arms and are longing to see the government taking a more active role when it comes to cybersecurity.

– To the original…

Chips in Official IDs Raise Privacy Fears

Sunday, August 16th, 2009

– Yeah, the U.S. government is pushing these new passports with embedded RFID chips and the hackers have already broken them. It seems like the bureaucrat’s desire to use new technologies has over-ridden anyone’s concerns for the saftey and privacy of those U.S. citizens who carry these little packets of ‘free’ information out into an increasingly hostile world.   I’m glad I’ve got an ‘old-style’ passport for now.

= = = = = = =   = = = = = = =   = = = = = = =

Climbing into his Volvo, outfitted with a Matrics antenna and a Motorola reader he’d bought on eBay for $190, Chris Paget cruised the streets of San Francisco with this objective: To read the identity cards of strangers, wirelessly, without ever leaving his car.

It took him 20 minutes to strike hacker’s gold.

Zipping past Fisherman’s Wharf, his scanner detected, then downloaded to his laptop, the unique serial numbers of two pedestrians’ electronic U.S. passport cards embedded with radio frequency identification, or RFID, tags. Within an hour, he’d “skimmed” the identifiers of four more of the new, microchipped PASS cards from a distance of 20 feet.

Embedding identity documents — passports, drivers licenses, and the like — with RFID chips is a no-brainer to government officials. Increasingly, they are promoting it as a 21st century application of technology that will help speed border crossings, safeguard credentials against counterfeiters, and keep terrorists from sneaking into the country.

But Paget’s February experiment demonstrated something privacy advocates had feared for years: That RFID, coupled with other technologies, could make people trackable without their knowledge or consent.

More…