ars provides a breakdown of anon's hbgary takedown

[complacent]

if you're following security research, you're going to love this article.

short version: security researcher claims he can correlate publicly used information to identify the "leaders" of anonymous. says so publicly. he and his company get torn a new one.

bad, bad stuff all around. very interesting read.

and for every story that is told, there's always at least two other sides that never see the light of day.

[Raven]

They really did take a bat to the hornets nest with that one.

[Mr Kleen]

Hours later, the attack escalated from some odd DDoS traffic to a full-scale break-in of HBGary Federal systems, one that showed tremendous skill. "What amazes me is, for a security company - you had such a basic SQL vulnerability on your website," wrote one Anonymous member later.

Days afterward, the company has still not managed to restore its complete website.

[chicken n waffles]

i delayed an important meeting to read this in its entirety this morning.

i was not disappointed.

[PGT]

http://arstechnica.com/tech-policy/news ... -hack.ars/

[Sabre]

I just read both Ars articles. Very interesting. I've met a ton of people like Aaron, most of them bright enough not to go public with this kind of information. You would have thought after seeing the power that Anonymous has been wielding that he would have been a little more careful.

[complacent]

update: aaron barr steps down from hbgary.

ouch...

anon: 1
hbgary: 0

[PGT]

[PGT]

should mention that we got caught up in this too

[Sabre]

You did? How the hell? PM me...

[complacent]

oh man, this just keeps getting worse! now congress wants to investigate some of hbgary's practices.

sorry for the focus... but this is like a damn train-wreck! i can't look away.

[chicken n waffles]

something stick something hornet's nest

[Sabre]

The are F*CKED.

"Ars Technica has sifted through the contents of the HBGary emails leaked last week in the attack by Anonymous and posted an interesting story about some of the things they were up to (which include rootkit development, selling rootkits to the private sector, and an entire list of 0-day exploits in a variety of OSes and other software, among a variety of other devious plans)."

[zaxrex]

Ben, you would not be Anonymous, would you?

Submitted by Anonymous (not verified) on Mon, 02/28/2011 - 4:43pm.

Anonymous. In it for the lulz.

I would post something about not to stick your penis in a hornet's nest, but can't think of any funny way to put it.

* reply

[complacent]

The are F*CKED.

"Ars Technica has sifted through the contents of the HBGary emails leaked last week in the attack by Anonymous and posted an interesting story about some of the things they were up to (which include rootkit development, selling rootkits to the private sector, and an entire list of 0-day exploits in a variety of OSes and other software, among a variety of other devious plans)."

that's right, real "white-hats."

[ElZorro]

that's right, real "white-hats."

White hat vs black hat isn't a matter of what you do, its a matter of who is paying.

[PGT]

You did? How the hell? PM me...

sent

[chicken n waffles]

Ben, you would not be Anonymous, would you?

Submitted by Anonymous (not verified) on Mon, 02/28/2011 - 4:43pm.

Anonymous. In it for the lulz.

I would post something about not to stick your penis in a hornet's nest, but can't think of any funny way to put it.

* reply

one easy way to tell that isn't me.... the use of proper capitalization .

[PGT]

BoA's site down http://voices.washingtonpost.com/faster ... l?hpid=top

[complacent]

BoA's site down http://voices.washingtonpost.com/faster ... l?hpid=top

they've also implemented a complete site redesign. that might have had something to do with it.

[PGT]

sure, but hbgary, palantir and BoA were in cahoots apparently so it might be something else too

[Sabre]

^^^ Speaking of BoA...
Anonymous Leaks Internal Bank of America Emails

Reportedly the information Wikileaks was set to disclose about a particular bank back from December, "a massive batch of internal Bank of America emails" has been leaked. While the site hosting it seems to currently be down due to the obviously gigantic amount of traffic interested in this leak, the leak is said to pertain to the Bank of America's improper foreclosure on homes. "The report came from a former employee with Balboa Insurance — a risk management and insurance firm. The employee reportedly corresponded with Bank of America employees and was told to falsify loan numbers on documents to force Bank of America to foreclose on homeowners.

[Mr Kleen]

That sounds like the behavior of a Teacher's Union, not an upstanding Financial Institution.

[complacent]

That sounds like the behavior of a Teacher's Union, not an upstanding Financial Institution.

[Sabre]

HBGary's nemesis is a '16-year-old schoolgirl'

A key part of the hack against HBGary involved the impersonation of Barr in an exchange of emails with an IT administrator (Nokia security specialist Jussi Jaakonaho) in order to gain access to HBGary's servers. The hacker, who used social engineering trickery to persuade Jaakonaho to drop security defences and allow in-bound connections, has since identified herself as a 16-year-old girl called Kayla in an interview with Forbes.

Kayla supposedly got into computers at the age of around 14, chiefly because her father is a software engineer. She told Forbes that she had learned the basics quickly and soon began to take an interest in computer security, which led her towards learning how to hack databases. Kayla said she then went on to hack the content management system on 4chan's notorious /b/ channel, the web home of weird smut.

Forbes Article on this..