Anonymous Hacks NATO, Steals GB Of Data

http://www.crn.com/news/security/231002347/anonymous-hacks-nato-steals-gb-of-data.htm

by Garbage • 15 years ago

89 29 15 years ago

Given that Anon has yet use anything other than simple SQLi attacks, I wonder where this data could have been stored (and, by extension, how secret it is). If it was on a public webserver, then one would expect it to be not much more than reports and presentations.

gasull2• 15 years ago

I read somewhere that Anonymous used a 0day exploit against some church they attacked a few months ago.

redthrowaway2• 15 years ago

Who, the WBC? Pretty sure that was just bluster.

aw3c2• 15 years ago

Given that Anon has yet use anything other than simple SQLi attacks

source?

dekz• 15 years ago

Replace Anon with LulzSec and you're correct. Anon != LulzSec

TobbenTM• 15 years ago

True

flexd3• 15 years ago

Considering "NATO secret" machines are not allowed on networks connected to the internet they hopefully do not have anything to put people on the ground in danger.

There could however have been a breach in protocols and someone accidentally hooked something up but I doubt something that serious could have happened. It's not like you accidentally hook a fileserver up to the internet.

Confidential documents would (could) still be bad but there are strict rules about storing those as well.

yaix3• 15 years ago

If it is so easy to break into the NATO network, then these "people on the ground" have been in real danger for a long time aleady.

Because enemy gov't just may have had the idea of doing the break-on themselves, but without telling anybody about it.

gorgoroth6664• 15 years ago

Don't be delusional, there were/are obviously beaches which are not red herrings. And all that "classified nato secret", "not allowed on networks connected to the internet", "breach in protocols" and "strict rules" are BS.

But to say for sure, we would need a thorough analysis of the incriminated data.

flexd3• 15 years ago

I'm not saying this isn't bad enough. I'm just saying there are rules in place to prevent these kinds of things. Like physical network separation and machines with disabled interfaces (like network, usb, firewire). You would require physical access to steal data from those machines and it would be either guarded or locked away.

Data security is taken very seriously within the military & NATO but I can't speak for how other countries do things. Accidents happen, things are poorly secured.

I'm just speaking from my own experience, even if it is limited.

shareme• 15 years ago

I will just say in an air-gap environment the weak link is the military personnel not the computer..did not Manning case set as a precedent? You can have the secret stuff offline to the real internet all you want..some one with a thinking/ethics will at some point leak the stuff....

yaix3• 15 years ago

If a few kids with some SQL knowledge can breach NATO computers in a weekend, then who can't?

Looks like any gov't with a intelligence service of more than 3 people has had access to secret NATO documents for a long time. That can't be good.

lucasjung4• 15 years ago

These documents almost certainly were not classified SECRET: actual classified documents are kept on a separate network that is not connected to the regular internet. They were most likely unclassified documents that were sensitive enough to be kept to restricted access, but not important enough to be classified. If they actually were classified, that means that there was a major breach of protocols just in having them on computers connected to the regular internet.

gorgoroth6664• 15 years ago

It's not like a major breach of protocol is a very rare thing as all personels are not trained at security to say the least.

I'd bet those documents are pretty damn secret.

hack_edu• 15 years ago

You're fooling yourself if you still think they are just weekend warrior kids.

yaix3• 15 years ago

Well, up to now they only used SQL injections.

But please enlighten me.

DrJokepu2• 15 years ago

I'll just leave this here. DOSing Visa and Mastercard is one thing, espionage is something very different.

USC Title 18 § 794

Gathering or delivering defense information to aid foreign government

Whoever, with intent or reason to believe that it is to be used to the injury of the United States or to the advantage of a foreign nation, communicates, delivers, or transmits, or attempts to communicate, deliver, or transmit, to any foreign government, or to any faction or party or military or naval force within a foreign country, whether recognized or unrecognized by the United States, or to any representative, officer, agent, employee, subject, or citizen thereof, either directly or indirectly, any document, writing, code book, signal book, sketch, photograph, photographic negative, blueprint, plan, map, model, note, instrument, appliance, or information relating to the national defense, shall be punished by death or by imprisonment for any term of years or for life, except that the sentence of death shall not be imposed unless the jury or, if there is no jury, the court, further finds that the offense resulted in the identification by a foreign power (as defined in section 101(a) of the Foreign Intelligence Surveillance Act of 1978) of an individual acting as an agent of the United States and consequently in the death of that individual, or directly concerned nuclear weaponry, military spacecraft or satellites, early warning systems, or other means of defense or retaliation against large-scale attack; war plans; communications intelligence or cryptographic information; or any other major weapons system or major element of defense strategy.

scythe2• 15 years ago

>Whoever, with intent or reason to believe that it is to be used to the injury of the United States or to the advantage of a foreign nation

I don't think this qualifies.

DrJokepu2• 15 years ago

> reason to believe that it is to be used to the injury of the United States

I think it does. I'm no lawyer, however.

Anonymous Hacks NATO, Steals GB Of Data

Related Stories