Anonops #11: Stop ACTA

quote:

Interview: With 13yo hacker @s3rverexe who hacked UFC and other high profile sites

Over the past few months there has been a fair few high profile government and non government sites hacked by an anonymous hacker named @s3rverexe .

Well CWN has had a chance to one on one interview them about the recent hacks and to help the public get to know them better as well.

To our surprise, s3rver is just a young kid raging havoc across the Internet at just the age of 13. Some of the sites they have hacked are usa.gov, 80 Brazilian Government Sites in the name of #OpBrazil and of coarse the well know very public attacks on the UFC websites.

Well here is the raw interview that we had with them.

quote:

Attracties van zwembad door hackers te beheren

Door een blunder van de Gemeente Stichtse Vecht kon iedereen een subtropisch zwembad beheren. Van glijbaan tot de temperatuur van het water, alles stond wijd open. Het lek is inmiddels gedicht.

Het lek werd gevonden door twee beveiligingsonderzoekers, die zich op voorwaarde van anonimiteit meldden bij Webwereld. Zij waren vooral bezorgd over het welzijn van kinderen. Het SCADA-systeem van zwembad ' t Kikkerfort stond weken open en bloot op internet. Daardoor konden zaken als de temperatuur van het water en het aan en uit zetten van attracties door iedereen van afstand worden geregeld.

Bezorgd

Aanvankelijk dachten de onderzoekers dat ook de chloortoevoer kon worden geregeld. "Ik heb zelf kinderen en toen ik zag dat het ook om chloor ging, wilde ik dat er meteen iets gebeurde", vertelt een van de onderzoekers tegen Webwereld. "Het is mijn nachtmerrie dat er iets met kinderen gebeurt omdat iemand in een of ander vreemd land een 'grapje' wil uithalen. Als je aan de kassa komt van een zwembad vraag je niet of er een SCADA-systeem in gebruik is."

Webwereld heeft na de melding onmiddellijk contact gezocht met het verantwoordelijke installatiebedrijf, medewerkers van het zwembad en het National Cyber Security Center. Hierop is het systeem van internet ontkoppelt. Pas daarna werd duidelijk dat de hoeveelheid chloor niet kon worden ingesteld. "Dat durfden wij niet te bekijken, want dan ga je een grens over", zeggen de onderzoekers.

Onderhoud

De verantwoordelijke gemeente Stichtse Vecht erkent het probleem en legt uit dat de verbinding naar het systeem wordt opgezet voor onderhoud door de installateur als een probleem niet door medewerkers van het zwembad kan worden opgelost. "Onlangs is dit systeem na onderhoudswerkzaamheden van de installateur niet gesloten, waardoor het - langer dan normaal het geval is - heeft open gestaan", vertelt voorlichter Pieter Doesburg aan Webwereld.

"De gemeente beaamt dat deze werkwijze in het systeem niet veilig is en heeft direct actie ondernomen door de verbinding te beveiligen voor derden. Hierdoor is het in de toekomst niet meer mogelijk om op het systeem te komen", stelt Doesburg. Hij benadrukt dat het niet mogelijk was de gezondheid in gevaar te brengen, maar begrijpt de bezorgdheid wel. "Nogmaals, de gemeente betreurt de gang van zaken en is blij dat - dankzij deze onderzoeksjournalist - ons bewustzijn en handelen op het gebied van veiligheid van IT-systemen is aangescherpt."

VPN-optie

Ook Hollander Techniek, die het systeem heeft geleverd, erkent de situatie en de lezing van de gemeente. Omdat Webwereld meerdere systemen van dit bedrijf heeft aangemeld, hebben zij na melding direct een scan uitgevoerd bij al hun klanten en die gewaarschuwd.

"We bieden de mogelijkheid om de verbinding te beveiligen met een VPN en bieden dat ook altijd aan. Maar ja, dat kost wel geld en niet iedere klant wil dan de extra beveiliging", vertelt Jacob Brobbel, commercieel manager van het bedrijf. Hij wijst erop dat zwembaden moeten rondkomen van een klein budget. "Zwembaden zitten al krap. Ze zien dat [misbruik van SCADA - redactie] niet als een risico, dus daar wordt niet in geïnvesteerd. Het is onwetendheid. Het komt gewoon omdat het [hacken - redactie] ze zelf niet lukt."

In de standaard procedure wordt bij onderhoud eerst met de klant gebeld, waarna die het systeem aansluit op internet. Als het onderhoudswerk klaar is, wordt de klant opnieuw gebeld om dat aan de klant te melden. "Dan staat de verbinding kort open."

Toch is de recente media-aandacht voor SCADA-problemen voor het bedrijf wel reden om te kijken of er toch aanvullende maatregelen in het standaard product kunnen worden opgenomen.

quote:

Scared of Anonymous? NSA chief says you should be

Anonymous has so far plied its trade in "hactivist" exploits. But according to the director of the National Security Agency, it might soon turn its focus to U.S. infrastructure.

According to the Wall Street Journal, citing sources, Gen. Keith Alexander has said in private meetings at the White House and elsewhere that the U.S. must keep a close eye on Anonymous' growth. He reportedly warned that if the organization continues to gain power, it might even take down a part of the U.S. power grid within the next couple of years.

How serious might such an attack on the power grid be? An industry official speaking to the Journal said that the U.S. grid has backups in place to safeguard against attacks. For a limited period of time, however, it could cause trouble.

The NSA's concerns about Anonymous underscore the power the loosely affiliated group of individuals has secured in recent months. The organization played a role in the scandal surrounding WikiLeaks founder Julian Assange, retaliating after Assange's bank accounts were frozen and methods of donations cut off by credit card companies and payment services like PayPal. Anonymous has continued to target individuals and organizations, all with the goal of embarrassing them or revealing what it believes is are injustices.

Anonymous has made no indication that it plans to attack the power grid. And its hacks, while decried by government officials, are celebrated by others who say the group is acting on the average citizen's behalf.

Lately, however, Anonymous has turned its attention toward governments. Earlier this month, the hacking collective claimed to have taken down the CIA's Web site, as well as sites for the Mexican Senate and Interior Ministry. The group also revealed that it accessed identifying information, including Social Security numbers and criminal records, of 46,000 Alabama residents.

Those hacks came just days after Anonymous released hundreds of e-mails purported to come from Syrian President Bashar al Assad's office.

Securing the electrical grid from both hackers and other governments has been a concern for years. So far, however, the U.S. government can't quite decide which agency should be charged with managing its security.

In December, MIT researchers issued a report saying that a single federal agency should be safeguarding the electrical grid. The Obama Administration has argued that the Department of Homeland Security should handle the task, while members of Congress have called on the Department of Energy or Federal Energy Regulatory Commission to take over.

Regardless, MIT isn't convinced that the threats to the electrical grid are something to be too concerned about. The researchers said that only complacency could lead to its downfall.

"Between now and 2030, the electric grid will confront significant new challenges and inevitably undergo major changes," the researchers said. "Despite alarmist rhetoric, there is no crisis here. But we do not advise complacency."

quote:

The Pirate Bay Faces UK ISP Block After High Court Ruling

In a case brought by major recording labels including Sony, EMI and Warner, today a judge in the High Court ruled that The Pirate Bay and its users breach copyright on a major scale. The ruling means that it is almost inevitable that The Pirate Bay will face a nationwide UK ISP blockade in the coming months.

After the MPA won its blocking case against the Newzbin2 Usenet indexing site last year, it became clear that the entertainment industries would seek further injunctions against similar sites.

Predictions pointing towards The Pirate Bay, the world’s largest BitTorrent site, were spot on. This time Hollywood would step aside and leave it to the recording industry to obtain an injunction which would force ISPs to block the infamous torrent site.

Nine labels including EMI , Polydor, Sony, Virgin and Warner, say that The Pirate Bay infringes their copyrights and that several ISPs including BSkyB, BT, TalkTalk, Telefonica and Virgin Media, should implement a blockade under Section 97A of the Copyright, Designs and Patents Act.

Section 97A of the Act gives courts the power to order an injunction against an ISP if it can be proven that it had knowledge that its services were being used to infringe copyright.

In the High Court today Mr Justice Arnold drew parallels with the Newzbin2 case but actually went further by stating that the case against The Pirate Bay and its users was actually somewhat stronger.

He said that the operators of TPB have the power to prevent copyright infringement and noted that the site is prepared to remove torrents if they are mislabeled, child porn, malware or spam.

“As a matter of policy, however, the rights of copyright owners are excluded from the criteria by which the operators of TPB choose to exercise this power,” he said, noting that the site’s owners had treated previous rulings against them with contempt.

“Indeed, according to a statement on the website, the reason for its recent adoption of Magnet links as the default option is that ‘it’s not as easy to block as .torrent files’. This confirms the operators’ determination to do whatever they can to provide users with unrestricted access to torrent files and thereby enable the users to continue to infringe,” Justice Arnold noted.

“In my judgment, the operators of TPB do authorize its users’ infringing acts of copying and communication to the public. They go far beyond merely enabling or assisting. On any view, they ‘sanction, approve and countenance’ the infringements of copyright committed by its users. But in my view they also purport to grant users the right to do the acts complained of.

“It is no defense that they openly defy the rights of the copyright owners. I would add that I consider the present case to be indistinguishable from 20C Fox v Newzbin in this respect. If anything, it is a stronger case,” he concluded.

According to Geoff Taylor, chief executive of the British Phonographic Industry, today’s ruling is a clear indication that The Pirate Bay operates illegally.

“The ruling helps clarify the law on website blocking and we will now proceed with our application to have the site blocked to protect the UK’s creative industries from further harm,” Taylor said.

If things go smoothly for the labels, a nationwide blockade of The Pirate Bay could be in place in a matter of months. We’ll update this post later today with comment from the site’s operators.

quote:

Anonymous Accuse NSA of Fear Mongering

Anonymous hackers have lashed out at NSA comments suggesting it would soon be able to bring about limited power outages using cyber attacks.

Responding to comments allegedly made by the director of the National Security Agency (NSA) General Keith Alexander to The Wall Street Journal, numerous Twitter accounts associated with Anonymous tweeted messages accusing the agency of fear mongering.

"Why would Anons shut off a power grid? There are ppl on life support / other vital services that rely on it. Try again NSA. #FearMongering." read one tweet from YourAnonNews.

Citing people familiar with the matter as its source, The Wall Street Journal reported that Alexander had made the comments during meetings at the White House and a number of other private sessions.

The publication claimed that Alexander had expressed concerns that Anonymous would be able to disrupt power supplies. Alexander had previously publicly expressed concerns about cyber criminals' abilities to disable or even damage computer networks.

The concerns expressed by Alexander refer to the numerous high profile cyber attacks Anonymous has mounted across the world. On multiple occasions the hacktivist collective has successfully breached high-profile companies, law enforcement and military organisations including the FBI, Soca and numerous military contractors.

Alexander's comments come just after Anonymous promised to make a "massive" announcement by the end of the week. The statement was made on Tuesday, stemming from the YourAnonNews Twitter account. While remaining vague about the details, the account posted an ominous tweet promising a large announcement was coming.

"Stay tuned for a MASSIVE announcement from #Anonymous, coming later this week," read YourAnonNews's tweet. Following the message numerous other Anons - the name Anonymous members use to refer to themselves - retweeted the message.

The NSA has not responded to the International Business Times UK's requests for comment on The Wall Street Journal's article.

Read more: http://www.ibtimes.co.uk/(...)sa.htm#ixzz1n3Y7jybl

quote:

The U.N. Threat to Internet Freedom

Top-down, international regulation is antithetical to the Net, which has flourished under its current governance model.

On Feb. 27, a diplomatic process will begin in Geneva that could result in a new treaty giving the United Nations unprecedented powers over the Internet. Dozens of countries, including Russia and China, are pushing hard to reach this goal by year's end. As Russian Prime Minister Vladimir Putin said last June, his goal and that of his allies is to establish "international control over the Internet" through the International Telecommunication Union (ITU), a treaty-based organization under U.N. auspices.

If successful, these new regulatory proposals would upend the Internet's flourishing regime, which has been in place since 1988. That year, delegates from 114 countries gathered in Australia to agree to a treaty that set the stage for dramatic liberalization of international telecommunications. This insulated the Internet from economic and technical regulation and quickly became the greatest deregulatory success story of all time.

Since the Net's inception, engineers, academics, user groups and others have convened in bottom-up nongovernmental organizations to keep it operating and thriving through what is known as a "multi-stakeholder" governance model. This consensus-driven private-sector approach has been the key to the Net's phenomenal success.

In 1995, shortly after it was privatized, only 16 million people used the Internet world-wide. By 2011, more than two billion were online—and that number is growing by as much as half a million every day. This explosive growth is the direct result of governments generally keeping their hands off the Internet sphere.

Net access, especially through mobile devices, is improving the human condition more quickly—and more fundamentally—than any other technology in history. Nowhere is this more true than in the developing world, where unfettered Internet technologies are expanding economies and raising living standards.

Farmers who live far from markets are now able to find buyers for their crops through their Internet-connected mobile devices without assuming the risks and expenses of traveling with their goods. Worried parents are able to go online to locate medicine for their sick children. And proponents of political freedom are better able to share information and organize support to break down the walls of tyranny.

The Internet has also been a net job creator. A recent McKinsey study found that for every job disrupted by Internet connectivity, 2.6 new jobs are created. It is no coincidence that these wonderful developments blossomed as the Internet migrated further away from government control.

Today, however, Russia, China and their allies within the 193 member states of the ITU want to renegotiate the 1988 treaty to expand its reach into previously unregulated areas. Reading even a partial list of proposals that could be codified into international law next December at a conference in Dubai is chilling:

• Subject cyber security and data privacy to international control;

• Allow foreign phone companies to charge fees for "international" Internet traffic, perhaps even on a "per-click" basis for certain Web destinations, with the goal of generating revenue for state-owned phone companies and government treasuries;

• Impose unprecedented economic regulations such as mandates for rates, terms and conditions for currently unregulated traffic-swapping agreements known as "peering."

• Establish for the first time ITU dominion over important functions of multi-stakeholder Internet governance entities such as the Internet Corporation for Assigned Names and Numbers, the nonprofit entity that coordinates the .com and .org Web addresses of the world;

• Subsume under intergovernmental control many functions of the Internet Engineering Task Force, the Internet Society and other multi-stakeholder groups that establish the engineering and technical standards that allow the Internet to work;

• Regulate international mobile roaming rates and practices.

Many countries in the developing world, including India and Brazil, are particularly intrigued by these ideas. Even though Internet-based technologies are improving billions of lives everywhere, some governments feel excluded and want more control.

And let's face it, strong-arm regimes are threatened by popular outcries for political freedom that are empowered by unfettered Internet connectivity. They have formed impressive coalitions, and their efforts have progressed significantly.

Merely saying "no" to any changes to the current structure of Internet governance is likely to be a losing proposition. A more successful strategy would be for proponents of Internet freedom and prosperity within every nation to encourage a dialogue among all interested parties, including governments and the ITU, to broaden the multi-stakeholder umbrella with the goal of reaching consensus to address reasonable concerns. As part of this conversation, we should underscore the tremendous benefits that the Internet has yielded for the developing world through the multi-stakeholder model.

Upending this model with a new regulatory treaty is likely to partition the Internet as some countries would inevitably choose to opt out. A balkanized Internet would be devastating to global free trade and national sovereignty. It would impair Internet growth most severely in the developing world but also globally as technologists are forced to seek bureaucratic permission to innovate and invest. This would also undermine the proliferation of new cross-border technologies, such as cloud computing.

A top-down, centralized, international regulatory overlay is antithetical to the architecture of the Net, which is a global network of networks without borders. No government, let alone an intergovernmental body, can make engineering and economic decisions in lightning-fast Internet time. Productivity, rising living standards and the spread of freedom everywhere, but especially in the developing world, would grind to a halt as engineering and business decisions become politically paralyzed within a global regulatory body.

Any attempts to expand intergovernmental powers over the Internet—no matter how incremental or seemingly innocuous—should be turned back. Modernization and reform can be constructive, but not if the end result is a new global bureaucracy that departs from the multi-stakeholder model. Enlightened nations should draw a line in the sand against new regulations while welcoming reform that could include a nonregulatory role for the ITU.

Pro-regulation forces are, thus far, much more energized and organized than those who favor the multi-stakeholder approach. Regulation proponents only need to secure a simple majority of the 193 member states to codify their radical and counterproductive agenda. Unlike the U.N. Security Council, no country can wield a veto in ITU proceedings. With this in mind, some estimate that approximately 90 countries could be supporting intergovernmental Net regulation—a mere seven short of a majority.

While precious time ticks away, the U.S. has not named a leader for the treaty negotiation. We must awake from our slumber and engage before it is too late. Not only do these developments have the potential to affect the daily lives of all Americans, they also threaten freedom and prosperity across the globe.

quote:

Op dinsdag 21 februari 2012 23:07 schreef n00b13 het volgende:
Leest iemand al die artikelen?

quote:

Op dinsdag 21 februari 2012 23:28 schreef n00b13 het volgende:

[..]

ik wilde je ook niet aanvallen ofzo hoor (lees het net terug en denk: hm..), het was meer dat het zoveel was.

twitter:

anonymouSabu twitterde op dinsdag 21-02-2012 om 23:50:17 Read the story of the 3 greek teenagers arrested for hacking the ministryofjustice.gr? We just showed the world the Greek feds got it wrong reageer retweet

twitter:

AnonymousIRC twitterde op dinsdag 21-02-2012 om 23:54:09 ministryofjustice.gr HACKED BY #ANTISEC. DONT PUT IN JAIL POLITICAL DISSIDENTS #Anonymous #ALLYOURBASEAREBELONGTOUS reageer retweet

quote:

Op woensdag 22 februari 2012 15:08 schreef YazooW het volgende:
Niet helemaal gevolgd over de Grieken, wat hebben ze gedaan nu anon boos is op ze?

quote:

Anonymous Hacks Greek Ministry Website, Demands IMF Withdrawal, Threatens It Will Wipe Away All Citizen Debts

If there is one war that Greece could not afford to join, that is with the global computer hacking collective known as Anonymous. Yet as of minutes ago, that is precisley what happened, after Anonymous, as part of what it now calls Operation Greece, took down the Greek Ministry of Justice (http://www.ministryofjustice.gr/). While the pretext for the hacking appears to have been an arrest of the wrong people, is seems to have angered Anonymous to the point where they have left an extended message of demands on the Greek website, warning that unless the IMF withdraws from the country and the government resigns, all debts of Greek citizens will be wiped clean.

Translated from the Greek:

Citizens of Greece

We are Anonymous.
We watch every day your government abolishes the constitution and institutions of the country.
We see them leading you closer and closer to poverty.
We see them pass laws that deprive you of any right to dignity.
We see them and deliver the country to the IMF and the bankers.
We know about the soup kitchens in schools,
for people who are left jobless and now wait in queues for a plate of food.
We know that your country voted ACTA in your effort to silence and other Greeks.
We know everything ...
The Republic in Greece has died.
He died while a government that has not been elected by the people.
And for this reason that the time for discussion came and went.
Not negotiating anything with any of those who murdered him.
Can you hunt as you like, you can even capture some of us,
When you attempt to silence us ...
But for every one that will capture 3 others will spring up. There are 5 or 10 or 100.
Now the Greeks are all Anonymous.
We are millions against you and the 300 in this war tear gas will not help you.

Occupying Government of Greece
These days are going to vote for a bill that will be the last nail in the coffin of the Greek.
A bill to return the country to a totalitarian rule.
To bring the country and its people in absolute poverty.
We will not allow another misery to the Greek people.
We demand your resignation immediately, and elections.
We demand not paid a cent to moneylenders 'friends' you.
We demand the immediate withdrawal of the IMF from Greece.
The Justice Department was only a small sample of what we're capable of doing
Even you have not seen the full wrath of Anonymous.
For each article of a bill that would shame the vote,
we will shut the system and deleting an Inland Revenue debts of Greek citizens
Debts which requires them to fascist pay.
Can the demonstrations of the Greeks to their encounter with incredible violence,
anexelekta hitting, but the internet is our field. And I love this war.
We are many and we will be brief.

Citizens of Greece, Anonymous is now fighting on your side ...

Government of Greece, let us wait ...

E X P E C T U S !

J U S T I C E I S C O M I N G !

quote:

Statement by Viviane Reding, Vice-President of the European Commission
and EU Commissioner for Justice, Fundamental Rights and Citizenship,
on freedom of expression and information via the Internet, attempts to
block websites, "three-strikes-laws", and ACTA

quote:

The European Commission has therefore decided today to ask the
European Court of Justice for a legal opinion to clarify that the ACTA
agreement and its implementation must be fully compatible with
freedom of expression and freedom of the Internet.

quote:

Database Nationale Theaterkassa gehackt, creditcardgegevens gelekt

Een van de databases van concertkaartensite Nationale Theaterkassa is gehackt. Daardoor zijn adres- en creditkaartgegevens van bijna honderdduizend mensen op straat komen te liggen. De hacker heeft de database, die ook transacties en correspondentie bevat, volledig opengezet.

Dat meldt nu.nl, die de informatie van een andere hacker toegespeeld heeft gekregen. Die hacker kwam erachter dat de database zonder wachtwoord te benaderen was. Onder de gegevens bevinden zich ook 2100 creditcardnummers met vervaldatum, waarvan er nog 226 actief zijn.

De Nationale Theaterkassa heeft de gegevens inmiddels weer ontoegankelijk gemaakt. Ze werden alleen nog gebruikt voor het versturen van een nieuwsbrief.

Ticketsysteem
In een verklaring aan Nu.nl benadrukt de Nationale Theaterkassa dat het huidige ticketsysteem niet betrokken is geweest bij de hack, en dat de gegevens daarvan dus niet inzichtelijk zijn geweest. De gehackte database is sinds 2009 niet meer in gebruik.

Het bedrijf heeft de gegevensdiefstal gemeld bij het Openbaar Ministerie en het Nationaal Cyber Security Centrum. De gebruikers worden geïnformeerd over de hack.

Uit intern onderzoek is gebleken dat de gegevens van 226 creditcards waarvan de geldigheid actueel is, zijn gestolen. De dader heeft alleen het het nummer van deze creditcards kunnen inzien, aldus de Nationale Theaterkassa.

quote:

Jacob Appelbaum is an independent computer security researcher and hacker. He is currently employed by the University of Washington,[1] and is a core member of the Tor project. Appelbaum is known for representing Wikileaks at the 2010 Hope conference.[5] He has subsequently been repeatedly targeted by US law enforcement agencies, who obtained a court order for his Twitter account data, detained him 12[6] times at the US border after trips abroad, and seized a laptop and several mobile phones.

transmediale 2k12: Jacob Appelbaum calls for political action with Anonymous!

quote:

Anonymous reveals Cybersecurity Act of 2012

This week it appears that the NSA has brought forth warnings of the hacker group Anonymous’ ability to take down the power grid at a most opportune time, according to none other than Anonymous. While earlier this week it was warned by the NSA that Anonymous might be targeting the US power grid, the hacker group has noted that they’d do no such thing, as “there are ppl on life support/other vital services that rely on it.” In addition, the group has brought attention today to a new bill that’s looking to get passed in the first part of the year: the Cybersecurity Act of 2012.

You can download and read this bill in its entirety here: Senate Committee Homeland Security and Governmental Affairs, downloading files here: The Cybersecurity Act of 2012, S. 2105 and here: Cybersecurity Support Letter: Reid in PDF form. This bill calls upon the Senate and the House to ratify a bill that would, and I quote, guard against the following:

quote:

Nederland en VS pakken cybercrime gezamenlijk aan

quote:

Nederland en de Verenigde Staten gaan samenwerken bij het aanpakken van cybercriminaliteit. Minister van Veiligheid en Justitie Ivo Opstelten (VVD) heeft daartoe gisteravond plaatselijke tijd in Washington een verdrag getekend.