Page 1 of 2

ars provides a breakdown of anon's hbgary takedown

Posted: Thu Feb 10, 2011 12:20 pm
by complacent
if you're following security research, you're going to love this article.

short version: security researcher claims he can correlate publicly used information to identify the "leaders" of anonymous. says so publicly. he and his company get torn a new one.

bad, bad stuff all around. very interesting read.

and for every story that is told, there's always at least two other sides that never see the light of day.

Re: ars provides a breakdown of anon's hbgary takedown

Posted: Thu Feb 10, 2011 2:21 pm
by Raven
They really did take a bat to the hornets nest with that one. :lol:

Re: ars provides a breakdown of anon's hbgary takedown

Posted: Thu Feb 10, 2011 8:28 pm
by Mr Kleen
Ars wrote:Hours later, the attack escalated from some odd DDoS traffic to a full-scale break-in of HBGary Federal systems, one that showed tremendous skill. "What amazes me is, for a security company - you had such a basic SQL vulnerability on your website," wrote one Anonymous member later.

Days afterward, the company has still not managed to restore its complete website.
:wiggle:

Re: ars provides a breakdown of anon's hbgary takedown

Posted: Fri Feb 11, 2011 8:43 am
by chicken n waffles
i delayed an important meeting to read this in its entirety this morning.

i was not disappointed. :rolllaugh:

Re: ars provides a breakdown of anon's hbgary takedown

Posted: Thu Feb 17, 2011 9:08 am
by PGT

Re: ars provides a breakdown of anon's hbgary takedown

Posted: Thu Feb 17, 2011 10:09 am
by Sabre
I just read both Ars articles. Very interesting. I've met a ton of people like Aaron, most of them bright enough not to go public with this kind of information. You would have thought after seeing the power that Anonymous has been wielding that he would have been a little more careful.

Re: ars provides a breakdown of anon's hbgary takedown

Posted: Mon Feb 28, 2011 6:18 pm
by complacent
update: aaron barr steps down from hbgary.

ouch...

anon: 1
hbgary: 0

Re: ars provides a breakdown of anon's hbgary takedown

Posted: Mon Feb 28, 2011 6:50 pm
by PGT
:poke:

Re: ars provides a breakdown of anon's hbgary takedown

Posted: Mon Feb 28, 2011 6:56 pm
by PGT
should mention that we got caught up in this too :buttkick:

Re: ars provides a breakdown of anon's hbgary takedown

Posted: Tue Mar 01, 2011 11:18 am
by Sabre
You did? How the hell? PM me...

Re: ars provides a breakdown of anon's hbgary takedown

Posted: Tue Mar 01, 2011 2:56 pm
by complacent
oh man, this just keeps getting worse! now congress wants to investigate some of hbgary's practices.

sorry for the focus... but this is like a damn train-wreck! i can't look away. :lol:

Re: ars provides a breakdown of anon's hbgary takedown

Posted: Tue Mar 01, 2011 3:21 pm
by chicken n waffles
something stick something hornet's nest

Re: ars provides a breakdown of anon's hbgary takedown

Posted: Tue Mar 01, 2011 4:11 pm
by Sabre
:shock: The are F*CKED.
"Ars Technica has sifted through the contents of the HBGary emails leaked last week in the attack by Anonymous and posted an interesting story about some of the things they were up to (which include rootkit development, selling rootkits to the private sector, and an entire list of 0-day exploits in a variety of OSes and other software, among a variety of other devious plans)."

Re: ars provides a breakdown of anon's hbgary takedown

Posted: Tue Mar 01, 2011 4:22 pm
by zaxrex
Ben, you would not be Anonymous, would you?
Submitted by Anonymous (not verified) on Mon, 02/28/2011 - 4:43pm.

Anonymous. In it for the lulz.

I would post something about not to stick your penis in a hornet's nest, but can't think of any funny way to put it.

* reply

Re: ars provides a breakdown of anon's hbgary takedown

Posted: Tue Mar 01, 2011 5:24 pm
by complacent
Sabre wrote::shock: The are F*CKED.
"Ars Technica has sifted through the contents of the HBGary emails leaked last week in the attack by Anonymous and posted an interesting story about some of the things they were up to (which include rootkit development, selling rootkits to the private sector, and an entire list of 0-day exploits in a variety of OSes and other software, among a variety of other devious plans)."
that's right, real "white-hats." :roll:

Re: ars provides a breakdown of anon's hbgary takedown

Posted: Tue Mar 01, 2011 6:54 pm
by ElZorro
complacent wrote:that's right, real "white-hats." :roll:
White hat vs black hat isn't a matter of what you do, its a matter of who is paying.

Re: ars provides a breakdown of anon's hbgary takedown

Posted: Tue Mar 01, 2011 7:07 pm
by PGT
Sabre wrote:You did? How the hell? PM me...
sent

Re: ars provides a breakdown of anon's hbgary takedown

Posted: Tue Mar 01, 2011 7:58 pm
by chicken n waffles
zaxrex wrote:Ben, you would not be Anonymous, would you?
Submitted by Anonymous (not verified) on Mon, 02/28/2011 - 4:43pm.

Anonymous. In it for the lulz.

I would post something about not to stick your penis in a hornet's nest, but can't think of any funny way to put it.

* reply
one easy way to tell that isn't me.... the use of proper capitalization :rolllaugh: .

Re: ars provides a breakdown of anon's hbgary takedown

Posted: Tue Mar 01, 2011 9:29 pm
by PGT

Re: ars provides a breakdown of anon's hbgary takedown

Posted: Wed Mar 02, 2011 10:41 am
by complacent
they've also implemented a complete site redesign. that might have had something to do with it.

Re: ars provides a breakdown of anon's hbgary takedown

Posted: Wed Mar 02, 2011 10:48 am
by PGT
sure, but hbgary, palantir and BoA were in cahoots apparently so it might be something else too

Re: ars provides a breakdown of anon's hbgary takedown

Posted: Mon Mar 14, 2011 3:19 pm
by Sabre
^^^ Speaking of BoA...
Anonymous Leaks Internal Bank of America Emails
Reportedly the information Wikileaks was set to disclose about a particular bank back from December, "a massive batch of internal Bank of America emails" has been leaked. While the site hosting it seems to currently be down due to the obviously gigantic amount of traffic interested in this leak, the leak is said to pertain to the Bank of America's improper foreclosure on homes. "The report came from a former employee with Balboa Insurance — a risk management and insurance firm. The employee reportedly corresponded with Bank of America employees and was told to falsify loan numbers on documents to force Bank of America to foreclose on homeowners.
:evil:

Re: ars provides a breakdown of anon's hbgary takedown

Posted: Mon Mar 14, 2011 7:32 pm
by Mr Kleen
That sounds like the behavior of a Teacher's Union, not an upstanding Financial Institution. :crazy:

Re: ars provides a breakdown of anon's hbgary takedown

Posted: Mon Mar 14, 2011 10:03 pm
by complacent
Mr Kleen wrote:That sounds like the behavior of a Teacher's Union, not an upstanding Financial Institution. :crazy:
:rolllaugh:

Re: ars provides a breakdown of anon's hbgary takedown

Posted: Fri Mar 18, 2011 5:51 pm
by Sabre
HBGary's nemesis is a '16-year-old schoolgirl'
A key part of the hack against HBGary involved the impersonation of Barr in an exchange of emails with an IT administrator (Nokia security specialist Jussi Jaakonaho) in order to gain access to HBGary's servers. The hacker, who used social engineering trickery to persuade Jaakonaho to drop security defences and allow in-bound connections, has since identified herself as a 16-year-old girl called Kayla in an interview with Forbes.

Kayla supposedly got into computers at the age of around 14, chiefly because her father is a software engineer. She told Forbes that she had learned the basics quickly and soon began to take an interest in computer security, which led her towards learning how to hack databases. Kayla said she then went on to hack the content management system on 4chan's notorious /b/ channel, the web home of weird smut.
:rolllaugh: :rolllaugh: :rolllaugh:

Forbes Article on this..