LulzSec have posted a manifesto

[Triple Zero]

"Snitches getting various stitches" -- Lulzsec spilling the dox/info on a couple of other blackhats that snitches on Lulzsec (apparently leading to the arrest of Ryan the IRCop), apparently the blackhats were begging for mercy.
Lulzsec statement -- http://pastebin.com/MBEsm5XQ
Some article about it -- http://techland.time.com/2011/06/21/trouble-in-paradise-lulzsec-outs-two-apparent-snitches-to-the-fbi/#ixzz1Pwt7oST2


This + the extortion thing + actually endangering the lives of undercover policemen definitely puts them on the chaotic evil side of the spectrum, not so much the chaotic neutral they claim to be.

[Triple Zero]

interesting comment by some guy at BoingBoing

Something I wrote back in February, when Julian Assange was still the most dangerous man in the world:Julian Assange™
Wikileaks is kinda like Napster about 10 years ago, remember how Shawn Fanning was always being so cocky and wearing "shared" Metallica shirts and generally starting shit? But eventually Napster got shut down, and that was the end of file sharing, right?
Oh wait, I mean Napster was the tiny tip of a massive iceberg called BitTorrent, imagine what the thing that comes after Wikileaks is going to be like! CIA spooks will look back on the days when Assange was their biggest problem with fondness and bittersweet regret, they'll put flowers on his grave...

[Cramulus]

It's weird to see a group make Anonymous look relatively responsible, no?

[Doktor Howl]

I approve of all of this shit, mostly because I like the idea of real life whackjob conspiracies under every wet rock.

[Triple Zero]

Interesting comment buried in Schneier's blog:

http://www.schneier.com/blog/archives/2011/06/the_problem_wit_3.html#c553519

There's several other people that have recently been "doxed" as lulzsec members by th3j35t3r and some outfit called "Web Ninjas". See http://lulzsecexposed.blogspot.com/ and https://th3j35t3r.wordpress.com/2011/06/16/quick-n-dirty-just-for-clarification/ .

th3j35t3r alledgedly is a former military and lone wolf with massive amounts of bandwith (and some zero days) at his disposal which he regularly uses to DDoS jihadi and other religious fundamentalist websites (like WBC). Although he doesn't seem to have much of a problem with corporate hacks, he seems to turn on anyone messing with government infrastructure or that of outfits closely affiliated to it. Web Ninjas (duh !) equally profile themselves as cyber vigilantes.

For as far as Anonymous and its presumed spin-off Lulzsec are concerned, it is reasonably easy to get involved when hanging out on their IRC servers, preferably over a VPN since they block traffic from known Tor exit nodes. Most of the folks out there seem to be utter idiots indulging in all kinds of profanity and enjoying the delusion of elite status once they figure out how to use LOIC from their dads PC. I did however have some really intelligent conversations with a couple of channel operators when I DM'd them offering my services and explaining a bit of my IT background. Both tried to recruit me almost instantly to do some development work for them.

Personally, I believe that both Anonymous and Lulzsec are made up of a core of idealists on a mission with an army of unreliable goofy followers, while at the same time being heavily infiltrated, if not manipulated by groups and agencies with entirely different agendas. The same goes for these so-called cyber vigilantes. The shadow wars they both believe to be waging on their perceived enemies and each other are interesting to follow from a security angle as they so painfully expose many of the issues we have been warning about for ages, but ultimately may have the exact oposite effect of what they are trying to achieve.

We are already seeing numerous legislative initiatives everywhere to increase government control over the internet with as sole purpose the curtailing of free speech, free flow of information and right of assembly. To those behind them, Anonymous and Lulzsec are gifts from heaven as much as the ominous Chinese hackers we keep being told about.

Seems to suggest that th3j35t3r might actually be a government contractor, or something. Which is something I wondered about ever since he DDoSed Wikileaks.

Also interesting idea that LulzSec and Anon have been infiltrated and are directed by groups with their own agendas.

It's all just speculation anyhow.



BTW reading articles about these developments, I didn't really find any mention of the leaked Arizona Police files putting lives of undercover police or informants in danger. I suspect if it was in there we'd be hearing all about it by now, so I guess the leaked stuff didn't have info on that.

There are other tidbits though
http://www.deathandtaxesmag.com/109376/lulzsecs-arizona-hack-reveals-off-duty-marines-patrol-arizona-mexico-border-as-mercenaries/
http://www.theatlanticwire.com/national/2011/06/highlights-whats-been-found-lulzsecs-arizona-documents/39244/

[Cain]

The bit about infiltration and manipulation is almost certainly true.

"Cyberwarfare" is the new terrorism, and, well....

Strategy Of Tension.

Look it up.

[Triple Zero]

Going to read the Wikipedia article on it, thanks. I think I did before (?), but didn't finish it.


BBC News interviews LulzSec via online chat: http://www.bbc.co.uk/news/technology-13912836

[Cain]

It's even more complex than the Wikipedia article makes out, in the Italian case. 

But essentially you had circles within circles which always led back to national intelligence agencies, transnational military authorities and powerful financiers.

The fear of cyberwarfare has been hyped since early 2009, as Obama threatened to draw down the War on Terror (that never happened, but he did lose the rhetoric).  I have seen enough articles and interviews to convince me cyberwarfare is the latest manifestation of "military Keynesianism" intended to transfer responsibilities and funding to military and intelligence agencies and to enrich private contractors who supply for said agencies (most of which are run by former military and intelligence men).  It's a bubble, inflated by scary scenarios which do not make sense given the capabilities of most hackers.

Lulzsec come out of nowhere.  They are carrying out big hacks roughly once every four days.  They have a decentralized command and control structure that is vulnerable to infiltration by anyone armed with the correct signalling tools (ie; knowledge of Anonymous memes) and the low barrier for committing crimes on the internet and getting away with them make "inititation rituals" a poor deterrent.  They use Twitter to draw even more attention to themselves.

I wouldn't be surprised if at least some of their targets were chosen for reasons other than the ones they are aware of, to further certain objectives which they do not understand.  The above mentioned companies also make a good killing providing security contracting for various large corporations, since almost no-one has the in-house resources to deal with transnational hacking attempts.  Creating a climate of computer insecurity is no doubt leading to some hastily negotiated contracts.

[Faust]

"We are releasing hundreds of private intelligence bulletins, training manuals,
personal email correspondence, names, phone numbers, addresses and passwords
belonging to Arizona law enforcement."

Roger, is there any possibility PI relating to you could be published?

[Faust]

It's even more complex than the Wikipedia article makes out, in the Italian case. 

But essentially you had circles within circles which always led back to national intelligence agencies, transnational military authorities and powerful financiers.

The fear of cyberwarfare has been hyped since early 2009, as Obama threatened to draw down the War on Terror (that never happened, but he did lose the rhetoric).  I have seen enough articles and interviews to convince me cyberwarfare is the latest manifestation of "military Keynesianism" intended to transfer responsibilities and funding to military and intelligence agencies and to enrich private contractors who supply for said agencies (most of which are run by former military and intelligence men).  It's a bubble, inflated by scary scenarios which do not make sense given the capabilities of most hackers.

Lulzsec come out of nowhere.  They are carrying out big hacks roughly once every four days.  They have a decentralized command and control structure that is vulnerable to infiltration by anyone armed with the correct signalling tools (ie; knowledge of Anonymous memes) and the low barrier for committing crimes on the internet and getting away with them make "inititation rituals" a poor deterrent.  They use Twitter to draw even more attention to themselves.

I wouldn't be surprised if at least some of their targets were chosen for reasons other than the ones they are aware of, to further certain objectives which they do not understand.  The above mentioned companies also make a good killing providing security contracting for various large corporations, since almost no-one has the in-house resources to deal with transnational hacking attempts.  Creating a climate of computer insecurity is no doubt leading to some hastily negotiated contracts.

That makes sense, especially when you think about some of the government targets, the CIA front page goes down for a few hours and someone gets applauded for their work fighting the government.
A few hours earlier he could have just told then to pull the plug on the site, hell its not even a big interruption for them, government sites go down for maintenance for a few hours every so often anyway.

[Cain]

Yeah, the CIA front page is hosted on an entirely different server to the ones they use for their internal communications (and the much vaunted "intelligence wiki" for that matter).

All it does is mean members of the public couldn't email tip-offs to the CIA and read hilarious denials of involvement in the drug trade for a few hours.

[Doktor Howl]

"We are releasing hundreds of private intelligence bulletins, training manuals,
personal email correspondence, names, phone numbers, addresses and passwords
belonging to Arizona law enforcement."

Roger, is there any possibility PI relating to you could be published?

Possibly, but I doubt it.  I was a Barney Fife in a fucking podunk mining town not far from New Mexico.

ETA:  And who cares?  All my PI except my name has changed since then.

[Faust]

"We are releasing hundreds of private intelligence bulletins, training manuals,
personal email correspondence, names, phone numbers, addresses and passwords
belonging to Arizona law enforcement."

Roger, is there any possibility PI relating to you could be published?

Possibly, but I doubt it.  I was a Barney Fife in a fucking podunk mining town not far from New Mexico.

ETA:  And who cares?  All my PI except my name has changed since then.

I wasn't implying anything by it, it just occurred to me when I heard Arizona that we have people from Arizona who could be mentioned in some of those.

[Triple Zero]

Seems they made a peace offering

http://twitter.com/#!/LulzSec/status/84422195333447680

[Telarus]

 

I read somewhere that the AZ info comes from a single computer and was targeted to info in 7 LEO email accounts. Can't confirm that yet.