Anonops #11: Stop ACTA

quote:

Since the beginning of the Anonymous movement’s gaining critical mass and bearing the AntiSec fruit, I have been wondering if there is indeed a master plan here. Anonymous claims that they are autonomous, amorphous, a swarm, but I think that is a generalization that only fits when you look at the whole.

When you start to bore down into the cells out there, you can readily see that there are pockets of cohesive groups. One of these groups is of course AntiSec. This group I think has acquired a certain amount of play within the Anonymous circle and thus would be a leadership cell.

Recent posts of the “Coming Insurrection” on sites that have been hacked by AntiSec have lead me to believe that there is a fair amount of Anarchist belief and activity within this cell of Anonymous. In fact, there seems to be from information sources, that AntiSec is in fact running the show now or would like to.

quote:

Anonymous releases Symantec code

HACKTIVIST GROUP Anonymous has lived up to its promise and released Symantec source code.

The group has danced with Symantec for some time, but now that dance is over. "Symantec source code #Anonymous #AntiSec #OhIthinkSymantecGotButtraepd" says a tweet from the @AnonymousIRC account that links to Pirate Bay and Pastebin releases.

The Bittorrent link takes users to a download of PCanywhere source code for remote login software from Symantec, and the statement, "Symantec has been lying to its customers. We exposed this point thus spreading the world that ppl need" - #AntiSec #Anonymous. Spread and share!"

The Pastebin post is a set of emails apparently sent between hacker Yamatough and Symantec, in which the latter apparently was ready to pay $50,000 to retrieve its data.

This was also suggested by long term Anonymous mouthpiece Anonymousabu, who said, "Update regarding Symantec: Stay tuned for the f*cking lulz. Let's just say Symantec tried to give us 50,000 reasons not to release sources!" before the release went live.

"We are not in contact with the FBI. We are using this email account to protect our network from you. Protecting our company and property are our top priorities," says an email apparently sent from a Symantec representative that explains why the firm initially dropped out of the deal.

"We can't pay you $50,000 at once for the reasons we discussed previously. We can pay you $2,500 per month for the first three months. In exchange, you will make a public statement on behalf of your group that you lied about the hack (as you previously stated). Once that's done, we will pay the rest of the $50,000 to your account and you can take it all out at once. That should solve your problem.... Obviously you still have our code so if we don't follow through you still have the upper hand."

Symantec's official line is that no customer data is affected and that it has fixed any vulnerabilities that its code might have.

"Symantec can confirm that a segment of its source code has been accessed. Upon investigation of the claims made by Anonymous regarding source code disclosure, Symantec believes that the disclosure was the result of a theft of source code that occurred in 2006," it says in a statement on a page dedicated to the attack.

"Since 2006, Symantec has instituted a number of policies and procedures to prevent a similar incident from occurring. Furthermore, there are no indications that customer information has been impacted or exposed at this time."

We have asked Symantec to comment on this latest update.

Update
Symantec told us that the emails are genuine but were part of a law enforcement investigation into the attack. It added that the case is ongoing and it would like to stay quiet on the details.

"In January an individual claiming to be part of the Anonymous' group attempted to extort a payment from Symantec in exchange for not publicly posting stolen Symantec source code they claimed to have in their possession. Symantec conducted an internal investigation into this incident and also contacted law enforcement given the attempted extortion and apparent theft of intellectual property," said a spokesperson.

"The communications with the person(s) attempting to extort the payment from Symantec were part of the law enforcement investigation. Given that the investigation is still ongoing, we are not going to disclose the law enforcement agencies involved and have no additional information to provide." µ

Source: The Inquirer (http://s.tt/15zMo)
Source: The Inquirer (http://s.tt/15zMo)

quote:

'Anonymous' hacks personal info of Oakland officials

OAKLAND, Calif. (KGO) -- 'Anonymous' has just released the personal information of some of Oakland's top city officials online in response to clashes between Occupy Oakland and the police.

Anonymous said they are disgusted and shocked by the behavior of Oakland city officials. So they have released the personal information of city officials including the mayor, the city council and the city administrator and the police chief. The details they have made public include home addresses, phone numbers, birthdays and email addresses.

The group posted a statement addressed to the people they targeted saying "we have been actively monitoring your behavior. You tear gassed us and arrested us and beat us. The people on this list are supposed to represent the best of what the city of Oakland has to offer. If they are the best why is there so much trouble within the police department and the city of Oakland?" They end the statement by saying "you should have expected us."

Anonymous is an internationally known hacking group tied to computer attacks on the Pentagon, the White House and other government organizations.

This story is still developing. ABC7 News will bring you reaction from Oakland city officials as soon as possible.

quote:

Brazilië daagt Twitter voor de rechter om verwijdering accounts

Brazilië wil dat Twitter ervoor zorgt dat accounts die politiecontroles doorgeven verwijderd worden. Doet het bedrijf dat niet, dan stapt het land naar de rechter, meldt persbureau AFP.

Voor elke dag dat Twitter niet aan de eis voldoet eist Brazilië een dwangsom van 200.000 euro. Brazilië is bang dat dit soort accounts verkeersveiligheidscampagnes en opsporingsacties ondermijnen.

In januari maakte Twitter bekend dat het berichten gaat blokkeren als de inhoud in strijd is met lokale wetgeving. De sociale netwerksite heeft zijn technologie verfijnd, zodat het berichten en accounts kan censureren per land.

Twitter heeft nog niet op de Braziliaanse klacht gereageerd.

Dit bericht wordt bijgewerkt.

twitter:

AnonymousIRC twitterde op dinsdag 07-02-2012 om 19:52:33 LOL!! press doesn't seem to understand #Symantec got trolled. Code was always set for public release since beginning #Anonymous #AntiSec reageer retweet

quote:

Op dinsdag 7 februari 2012 21:47 schreef YazooW het volgende:

Anonymous en Undercover op pedojacht (promo)

ra ra waar zal dit toch over gaan...
Volgende week zondag bij Undercover in Nederland.

quote:

Op dinsdag 7 februari 2012 22:17 schreef YazooW het volgende:

[..]

Heeft Anonymous die dan?

quote:

Hacked emails allege Russian youth group Nashi paying bloggers

Pro-Kremlin organisation reportedly pays hundreds of thousands of pounds to network of internet users to help political cause

The Russian youth group Nashi has paid hundreds of thousands of pounds to a vast network of bloggers, journalists and internet trolls to create flattering coverage of Vladimir Putin and discredit his political rivals, according to a haul of thousands of emails allegedly sent to and from the group that have been released by Russian hackers.

The mass of data appears to show evidence of the sinister tactics used by Nashi, and includes:

• Price lists for pro-Putin bloggers and commenters which indicate that some are paid as much as 600,000 roubles (£12,500) for leaving hundreds of comments on negative stories about Putin.

• Plans to pay more than 10m roubles to buy a series of articles about Nashi's annual Seliger summer camp in two popular Russian tabloids.

• Calls for paid Nashi activists to "dislike" anti-regime videos posted on YouTube.

• Ideas for smear campaigns against what one activist calls the "fascist" Russian opposition leader, Alexey Navalny, such as a cartoon video likening him to Hitler and a suggestion someone dress up like the blogger to beg for alms in front of the US embassy.

The group of Anonymous hackers told online news portal Gazeta.ru in an interview that they carried out the hack, planned since spring of last year, "as a sign of protest against the government's actions in the public internet sphere".

Opposition leaders have accused Nashi of being behind a series of attacks, including repeated scuffles with the liberal youth leader Ilya Yashin and an incident in which ammonia-laced cola was thrown in the face of the former deputy prime minister Boris Nemtsov. Nashi denied being involved in the latter.

Navalny told the Guardian: "These strategies, what they do on the internet and how they gather protests, are very similar. [Nashi's] main problem is that they don't have real people who are ready to say something in support of them. They don't have one person who supports them for free. So they pay."

The current leader of Nashi, Nikita Borovikov, said: "For several years, I've got used to the fact that our email is periodically hacked. When I heard the rumours that it had been hacked, I wasn't shocked, and have paid no attention to this problem. I'm a law abiding person, and have nothing to fear of hiding, so I pay no attention."

Tracking the Internet Trolls

quote:

The BBC tracks down a notorious Internet troll. Catch the full episode here: http://news.bbc.co.uk/pan(...)_9693000/9693594.stm

quote:

KPN slachtoffer van computerhack

KPN is vorige maand slachtoffer geworden van een geslaagde hackaanval. Dat heeft het bedrijf vanmiddag gemeld. De hacker(s) slaagden erin toegang te krijgen tot servers met klantgegevens van particulieren en bedrijven zoals adressen, telefoonnummers en bankrekeningnummers.

De hack werd op 20 januari ontdekt, aldus een woordvoerder van KPN tegen de NOS. Het bedrijf heeft naar eigen zeggen “onmiddellijk” maatregelen genomen om de gegevens van klanten “maximaal” te beschermen. Een week later bleken de hackers echter nog steeds toegang tot de servers te hebben. Met behulp van internetbedrijf FoX IT lukte het KPN uiteindelijk een aantal dagen later om het probleem op te lossen.

Het is niet duidelijk van hoeveel klanten de hackers de gegevens hebben kunnen inzien, maar volgens KPN zijn er geen gegevens gestolen. KPN heeft alle “relevante” instanties, waaronder justitie en het het Nationaal Cyber Security Centrum, geïnformeerd over het hack en belooft “alle medewerking” om de hackers op te sporen. Het Landelijk Parket van het OM heeft inmiddels een onderzoek lopen. KPN belooft te onderzoeken hoe de servers in de toekomst “nog beter” tegen digitale aanvallen kunnen worden beschermd.

quote:

Ex-U.S. spy chief says may take crisis for new cyber law

(Reuters) - U.S. intelligence agencies have unique capabilities that can help protect American companies from cyber espionage and attack, but it will probably take a crisis to change laws to allow that type of cooperation, a former spy chief said on Monday.

Intelligence agencies like the National Security Agency are authorized to operate abroad but generally are restricted from working within the United States,

"Until we have a banking collapse or electric power goes off in the middle of a snowstorm for eight weeks, or something of that magnitude, we're likely just to talk about it and not do much," Mike McConnell, former director of national intelligence, said.

The Republican-controlled House of Representatives and the Democratic-controlled Senate have separate efforts under way on legislation aimed at improving cybersecurity.

The House intelligence committee in December approved a bill that would allow U.S. spy agencies to share cyber-threat intelligence with private companies. Some critics worry that could lead to government surveillance of private data.

Senate Majority Leader Harry Reid has said the Senate will take up "comprehensive" cybersecurity legislation this year.

"There are unique things that the government can do. For example code-breaking. The private sector out there does not do code-breaking," McConnell, a former National Security Agency director, told Reuters in an interview.

"How would you harness that capability and then make it available to the private sector in a way that their infrastructure could be better protected?"

A U.S. intelligence report last year pointed the finger at China and Russia as using cyber espionage to steal U.S. trade and technology secrets.

McConnell gives an example that if NSA, which conducts electronic eavesdropping to detect foreign threats, observed a cyberthreat against the U.S. private sector, "NSA is powerless to do a thing other than issue a report."

He said in the area of cyber exploitation, such as reading an adversary's mail without leaving fingerprints, the United States, Britain and Russia are probably the best.

The United States also has the ability to conduct cyber attacks, which would be to degrade or destroy an adversary's computerized system, and has used it.

Has the United States used its cyber attack capability? "Yes," McConnell said. Did it work? "Yes."

McConnell, now vice chairman at the Booz Allen Hamilton consulting firm in charge of cyber activities, did not elaborate on the use of a cyber attack capability.

"Do we have the ability to attack, degrade or destroy? Sure. If you do that, what are the consequences? That is the question," he said.

McConnell said the priority is to protect the country's critical infrastructure such as the financial sector, the electric power grid and transportation from cyber attack and stop the theft of intellectual property through cyber espionage.

"There will be a thousand voices on what is the right thing to do," and it will probably require a crisis to reach consensus, he said.

"All I'm arguing is the government has unique capability, figure out a way to harness the capability in the defense of the nation."

quote:

Remember all that talk of how the supporters of SOPA/PIPA were "humbled" by the protests of January 18th, and how they had learned their lessons about trying to push through a bill without actually involving the stakeholders? Remember the talk of how they hoped a new tone could be found in the debate? Yeah. Apparently someone forgot to send that memo to RIAA boss Cary Sherman, who has taken to the pages of the NY Times to lash out at those who fought against SOPA/PIPA, chalking the whole thing up to a massive "misinformation" campaign by Google and Wikipedia. The whole thing is chock full of ridiculous claims, so we might as well go through it bit by bit.

quote:

Senate sneaks in SOPA under a new name

Senate Majority Leader Harry Reid (D-NV) launches a second round of attacks in an attempt to censor the Internet.

After trying to adopt Stop Online Piracy Act (SOPA) and Protect IP Act (PIPA), both pieces of legislation turned out to be a disaster, causing outrage among Internet giants and ordinary users alike. Congress had to retreat. However it's determined to get what it wants this time.

After the shelving of SOPA and PIPA back in January Reid stated,“There is no reason that the legitimate issues raised by many about this bill cannot be resolved.”

As RT reported last month, Senator Reid added that lawmakers will“continue engaging with all stakeholders to forge a balance between protecting Americans’ intellectual property, and maintaining openness and innovation on the Internet.”

The vote on the anti-piracy legislation was postponed from its January 24date after Wikipedia and other popular websites went dark to protest the draft law.

Now the battle for online freedom continues.

The rebuttal to push Internet-regulating legislation has transformed into a new cybersecurity bill. The particulars of the latest attempt by senators to censor the Internet have not been disclosed to the public.

However some leaks suggest that the bill will grant the authority to crack down on the Internet to the executive branch of power, namely the White House. It looks highly possible taking into consideration that the legislation has to come out of the Senate Homeland Security and Government Affairs Committee, chaired by Connecticut Independent Sen. Joe Lieberman.

The same Lieberman who earlier co-sponsored the so called Kill Switch bill that could allow the president of the United States to "declare a cybersecurity emergency," and practically shut down the Internet.

After outrage from Internet advocacy groups, Kill Switch never made it in the Senate. This time it may be back under a new name.

quote:

Op donderdag 9 februari 2012 11:40 schreef picodealion het volgende:

[..]

Iemand dit gezien? De moeite waard om te kijken?

quote:

KPN sloeg groot alarm na hackaanval

De hackaanval bij KPN vorige maand had grotere gevolgen kunnen hebben voor klanten dan eerder gecommuniceerd. De hacker(s) slaagden erin toegang te krijgen tot servers met klantgegevens van particulieren en bedrijven zoals adressen, telefoonnummers en bankrekeningnummers.

Na de ontdekking van de hack op 20 januari werd zelfs de hoogste alarmfase, code Rood, afgekondigd. Dat meldt de NOS. Omdat de software van het KPN-computersysteem niet up to date was konden hackers gemakkelijk toegang krijgen.

Na de ontdekking van de hack zou het bedrijf “onmiddellijk” maatregelen genomen hebben om de gegevens van klanten “maximaal” te beschermen, toch bleken de hackers een week later nog steeds toegang tot de servers te hebben. Met behulp van internetbedrijf FoX IT lukte het KPN uiteindelijk een aantal dagen later om het probleem op te lossen.

De NOS meldt vanavond dat KPN heeft toegeven dat de hackers de mogelijkheid hadden om alarmnummer 112 voor klanten met een abonnement met telefonie en internet onbereikbaar te maken. KPN had door het lek genoodzaakt kunnen worden het hele netwerk uit te schakelen om gegevens en klanten te beschermen.

In een reactie laat de KPN vanavond weten dat er “voor zover” zij nu “kunnen overzien” geen gegevens zijn gestolen en dat het telecombedrijf. KPN:

. “KPN begrijpt dat mensen zich mogelijk zorgen maken over hun gegevens. Voor zover we nu kunnen overzien is er van onze klanten niets gestolen of kapotgemaakt. KPN heeft meteen actie ondernomen en is met een team van meer dan 100 man aan het werk gegaan om ervoor te zorgen dat mensen kunnen blijven bellen, internetten, zaken doen. En zijn extra maatregelen genomen om systemen en gegevens nog beter te beschermen.”

Volgens KPN heeft het zoveel mogelijk geprobeerd “klanten zolang als dat mogelijk was niet actief op de hoogte te stellen van de inbraak in het IT-netwerk van KPN door een inbreker”. Daarvoor geeft het bedrijf drie redenen:


. 1. onze dienstverlening voor onze klanten (internetten, bellen, TV, websites, zaken doen via het internet) veilig te stellen en onnodige onrust in de samenleving te voorkomen
. 2. te voorkomen dat de hacker(s) in de gelegenheid is om gealarmeerd door de melding – snel grote schade aan te richten bij ons en onze klanten
. 3. de opsporing van de hacker(s) niet te verstoren
Na zorgvuldige afweging en overleg met de autoriteiten heeft KPN besloten tot een daadkrachtige aanpak in stilte.

KPN kondigde vanavond eveneens een “diepgaande analyse” aan naar de hack.