ATTN Cain: OFUK, the Internet is here.

[Telarus]

IT GETS BETTER!

http://blogs.computerworld.com/17827/hbgary_federal_quits_rsa_over_anonymous_wikileaks_email

[Icey]

Boys and Girls, this is just further proof that the internet is no longer for lulz. Your mild-mannered fap page is now a battleground.

I applaud.

[Bebek Sincap Ratatosk]

Couple Comments:

1. Password Rules!!! FFS!!! A password that is alphanumeric is no longer acceptable. A password that is less that 10 characters and is only alphanumeric AND is only hashed with straight MD5 (no salt?!?!?!) is absurd.

2. Password Reset via Social Engineering = Oldest trick in the book. I was rooting companies with that trick last century. For a security firm not to have controls in place for that is nothing more than complete negligence.

3. HOW FAR BEHIND ARE YOU ON PATCHING?!?!?!?!

4. A SQL injection attack? Really, a SQL Injection attack on an external facing server...



This isn't even "Ooohhh, look at Anonymous' 31337 5ki11Z!!!!" this is textbook, first year hacker level stuff. All I can say is that HB Gary is gonna have a hard time recovering their reputation after this!!

[Prince Glittersnatch III]

This isn't even "Ooohhh, look at Anonymous' 31337 5ki11Z!!!!" this is textbook, first year hacker level stuff. All I can say is that HB Gary is gonna have a hard time recovering their reputation after this!!

Most of Anonymous(the ones in the IRC channels that get stuff done) are social engineers with a few skiddies sprinkled in. Of course that doesnt mean they wont use this opportunity to bolster their own egos (lol we h4xX0red a security company look at how 1337 we r)

[Bebek Sincap Ratatosk]

This isn't even "Ooohhh, look at Anonymous' 31337 5ki11Z!!!!" this is textbook, first year hacker level stuff. All I can say is that HB Gary is gonna have a hard time recovering their reputation after this!!

Most of Anonymous(the ones in the IRC channels that get stuff done) are social engineers with a few skiddies sprinkled in. Of course that doesnt mean they wont use this opportunity to bolster their own egos (lol we h4xX0red a security company look at how 1337 we r)

True, but honestly, 9 times out of 10, a successful attack on a target looks a lot like what happened here. Its often about configuration, social engineering and old 'shouldabeen patched' vulnerabilities.

[Bebek Sincap Ratatosk]

w00t!

I just had to write a position paper on this attack for the company. Apparently I'm also going to be in a meeting to "Explain this Anonymous thing to Executives".

[LMNO]

Start with "Wise Beard Man Is Wise", and work backwards from there.

[Bebek Sincap Ratatosk]

Start with "Wise Beard Man Is Wise", and work backwards from there.

First Draft just went out...

First response from CISO:

"So how many of these 'Stand Alone Complex' groups are out there now... and do we need to be concerned?"

[Luna]

Start with "Wise Beard Man Is Wise", and work backwards from there.

First Draft just went out...

First response from CISO:

"So how many of these 'Stand Alone Complex' groups are out there now... and do we need to be concerned?"

Answer.  "Lots.  And, Not as long as we don't piss any of them off.  And we will.  So...  Yes."

[Prince Glittersnatch III]

Start with "Wise Beard Man Is Wise", and work backwards from there.

First Draft just went out...

First response from CISO:

"So how many of these 'Stand Alone Complex' groups are out there now... and do we need to be concerned?"

Tell them theres thousands, more then they could ever imagine.

[Triple Zero]

For anyone thinking Anonymous went too far, also Wired does WOMP:



http://www.wired.com/threatlevel/2011/02/spy/all/1

Seriously that Aaron is one fucked up fucker. Scary calls to his family? Well he did at least as worse. Sure, his family had nothing to do with it, but in the same sense as somebody married to a organised crime member doesn't really deserve it when work is brought home. Okay that's a bit harsh, I don't really believe that. But it does clear some of Anonymous's actions a littlebit IMO.

Also, Glenn Greenwald wrote yet another summary with some new insights, especially on the subject of hypocrisy, how it's perfectly okay to do this when it's in line with Gov./Inc. and abhorrent when you're not.

http://www.salon.com/news/opinion/glenn_greenwald/2011/02/11/campaigns/index.html

[The Good Reverend Roger]

Start with "Wise Beard Man Is Wise", and work backwards from there.

First Draft just went out...

First response from CISO:

"So how many of these 'Stand Alone Complex' groups are out there now... and do we need to be concerned?"

Warn him about HIMEOBS.

[LMNO]

Oh yes.  Please, yes.

[The Good Reverend Roger]

Oh yes.  Please, yes.

The beauty of this is that HIMEOBS has an ED entry, etc, so he can make up any ridiculous shit he likes, with no chance of getting in trouble.

"Nobody is sure what HIMEOBS stands for.  One rumor is "His Imperial Majesty's Elite Orbital Bombing Squadron", while others say it means "Hate Is Making Every One Better Soldiers".  Regardless, they are a distinct cyber threat, as they conduct all manner of attacks without claiming credit, and solely for the chaos created by the attack...Ergo, they cannot be bought off or placated, since they have no actual agenda other than mayhem for its own sake."

[Icey]

Oh yes.  Please, yes.

The beauty of this is that HIMEOBS has an ED entry, etc, so he can make up any ridiculous shit he likes, with no chance of getting in trouble.

"Nobody is sure what HIMEOBS stands for.  One rumor is "His Imperial Majesty's Elite Orbital Bombing Squadron", while others say it means "Hate Is Making Every One Better Soldiers".  Regardless, they are a distinct cyber threat, as they conduct all manner of attacks without claiming credit, and solely for the chaos created by the attack...Ergo, they cannot be bought off or placated, since they have no actual agenda other than mayhem for its own sake."

Hide HIMEOBS Propeganda around office for maximum power.