LulzSec: 50 Days of Lulz statement

http://pastebin.com/1znEGmHa

by brodd • 15 years ago

164 90 15 years ago

pastebin.com

estel• 15 years ago

The torrent appears to contain hacked personal data from:

* EA (Battlefield Heroes) * Hackforums.net * Nato-bookshop.org * Misc other forums

The first of these purports to be 200K+ users.

ianterrell6• 15 years ago

Also of note, AOL and AT&T data. AT&T's rar is 329.9 MB.

Strom2• 15 years ago

The Battlefield Heroes passwords are unsalted MD5. Way to go EA.

ianterrell6• 15 years ago

That still beats the NATO bookstore's plaintext. :)

18802• 15 years ago

Hm, are you sure? I have a couple accounts there (and they are appearing in the dump) and they are not simply md5(password). Of course they were long, random passwords and I don't play this game anymore, but I'm curious. Where did you read that?

veeti• 15 years ago

Some BF Heroes beta server was hacked over 2 years ago. I wonder if this could be the same hack.

lhnz• 15 years ago

Quitting or rebranding is the question I find myself asking.

chao-• 15 years ago

Given that the LulzSec name was a clique from AnonOps rebranding itself to begin with, I would bet on the latter. Although it may be a while before we hear of them pulling such flamboyant stunts again.

BasDirks• 15 years ago

Like a wave they will again become sea, only to rise later as a different wave.

Or to put my high school poetics into plain English:

They will want to blend in with the Anonymous masses, until they deem it safe to once again to craft new identities for themselves.

ianterrell6• 15 years ago

Considering they'd even earlier today advertised a Monday booty release, I suspect that, rather than abandoning the Lulzsec facade after 50 days, it's that the fuzz is a little too hot on their trail for comfort.

46Bit2• 15 years ago

I'd have to agree. Even now I think that with time they will all be outed - if they've not already. Some of these 'raids' have just been too daring to expect to get away with forever.

redthrowaway14• 15 years ago

Really though, if all of your traffic is going through TOR to a vpn in eastern europe, the chances of being tracked down are slim to nil. Sure, there are theoretical weaknesses in TOR, but you'd need to control quite a few exit nodes to even begin to have a chance of pinpointing the endpoints. Combine that with a compromised wifi as a last resort (which you erase the logs of regularly), and you're pretty damned safe. All of the people who were arrested for hacking the CIA or DoD were caught many years ago, when anonymization tools weren't nearly so well developed, and the need for anonymization wasn't so clearly recognized. I'd like to see a modern story of the authorities finding someone who was hidden by TOR + vpn. I just don't see it happening any time soon.

dmix2• 15 years ago

NATO press release about the break in to their ebookstore by LulzSec:

http://www.nato.int/cps/en/SID-40BE0A99-F4F5EB32/natolive/ne...

ianterrell6• 15 years ago

Note that the press release was two days ago, after NATO was notified by police. AFAIK, this is the first that Lulzsec has disclosed that the NATO bookstore was hit, which means the police knew before we did. That can't be good for those behind the mask.

rhizome• 15 years ago

AFAIK, this is the first that Lulzsec has disclosed that the NATO bookstore was hit, which means the police knew before we did. That can't be good for those behind the mask.

Maybe they were seeing how long it would take for the news to come out without their help.

jfb2• 15 years ago

NATO has an ebook store? What are the hell?

p4bl02• 15 years ago

That's also what strikes me in this story. Anyone can explain this?

dexen• 15 years ago

Sheesh, it's described in the linked NATO press release. Nothing big, propably comparable to PACER.

> NATO’s e-Bookshop is a separate service for the public for the release of NATO information and does not contain any classified data.

mrb2• 15 years ago

Who is LulzSec?

redthrowaway14• 15 years ago

I was going to say something snarky, but I checked your comment history and it seems you are on here seldom enough to explain an honest lack of knowledge about them. Basically, LulzSec is a hacking group that has been attacking many targets very publicly over the past 2 months. They've been all over HN, /., reddit, etc. They've even earned some mentions in the MSM.

Basically, they're notable for a) the number of targets they've hit, b) how brazen they are about it (hitting the FBI, CIA, and other law enforcement agencies), and c) how vigorously they court publicity (270k followers on Twitter).

mrb2• 15 years ago

I was being sarcastic :-)

Periodic• 15 years ago

In a few months I won't know either.

shareme2• 15 years ago

Yup, fuzz on their tails..

Not too smart either why include the number of Lulzsec members?

sbierwagen• 15 years ago

1.) What useful information does "there are six of them" convey?

2.) What makes you think that they're not lying?

ianterrell6• 15 years ago

Disinformation is most likely, but I've been hoping for some steganography from their Pastbins from day one.

shareme2• 15 years ago

chat logs show more than 6..

But its only 6 that are active in illegal stuff

redthrowaway14• 15 years ago

1.) What information does the number of columns in a MySQL database convey? It's not just that there are six of them, but that records could be poured over for various irc servers in an attempt to link the 6 accounts that interacted with eachother the most. It allows for deeper inspection, and perhaps more information. However,

2.) They almost certainly are. I could see them saying how many people they actually had almost as a bluff, but more than likely they're just throwing out misinformation.

alvivar• 15 years ago

I guess is part of the concept... transparency, clarity...

Mad_Dud• 15 years ago

It doesn't have to be true.

tathagatadg• 15 years ago

I was trying to search web cache on who used the words lulz and security together before Lulzsec ... and then this final release :|

aklemm• 15 years ago

What about analyzing their writing? They release quite a bit of text...somebody likes to write. Considering there are efforts to identify people by typing patterns, I wonder if this is how they'll get caught: http://petsymposium.org/2011/papers/hotpets11-final8Chairunn...

tsumnia• 15 years ago

Unfortunately given the scope of that paper, it doesn't sound like typing patterns can be used just yet. A sample size of 36 participants doesn't handle the scale involved when going against 'The Internet'.

Also, the paper collected timestamps of each keystroke, something that'd need to done on suspects; however, if they are already suspecting you, they probably have other ways to identify you.

Finally, how in the world does a paper like this get away with having 'nowadays' in it? I know its a legit word, but, just seems awkward.

wisty• 15 years ago

Was it written by an ESL speaker? Sometimes non-English speakers feel insecure starting a point without "However", "Because of this", and other conjunctions. If you don't need a conjunctions, you can say "Nowadays", but you don't need it. It's like the "auto" keyword in C. Because ESL speakers cram a lot of grammar into a few years, rather than spending years making simple sentences, they often use advanced patterns when simpler ones would suffice.

kristofferR• 15 years ago

Damn, the AT&T-release is especially juicy. It contains a lot of highly confidential information about technology and strategy that their competitors would love to get their hands on.

I'm a quite technical guy and I barely understand a thing. No wonders AT&T are having troubles with fixing their network troubles, it looks like a massive, massive beast of technology.

I found the frequency chart fascinating. It's available publicly here: http://www.ntia.doc.gov/osmhome/allochrt.pdf

ender7• 15 years ago

Given the juiciness of this, I'm surprised that more companies don't have corp espionage groups to carry out little lulsec attacks.

afterburner• 15 years ago

Because if they ever got caught the company would be sued out of existence (probably bought by competitors at that point). They have too much to lose in most cases.

count2• 15 years ago

Based on the HBGary leak, I'd say that they currently do.

Skywing• 15 years ago

My first job out of college was at Nortel, coding their 4G data network infrastructure. I still think I only understood about 20% of the big picture by the time I left. So many moving parts, massive code base and tons of acronyms.

skeltoac• 15 years ago

Odds that one of the crew is commenting on this thread?

Zarathust• 15 years ago

It seems that there are better people out there that got angrier

http://www.gamemarshal.com/features/20110622113313/lulzsec-h...

cantbecool• 15 years ago

Looks like they were a getting a bit anxious that they were going to be outed, which will ultimately still happen anyway. Regardless, it was a fun reading their Pastebins and Twitter feeds every few days making a mockery of multiple corporations information security.

Tichy• 15 years ago

How is it possible to register a .com domain in an anonymous way?

trotsky3• 15 years ago

prepaid visa or just get someone who doesn't know you very well to do it

LulzSec: 50 Days of Lulz statement

Related Stories