Slashdot Mirror
Swede Hacks Embassy Account Information From Around the World
paulraps writes "A Swedish IT consultant has caused a stir in diplomatic circles after publishing a list of secret log-in details belonging to 100 embassies, public authorities and political parties around the world. Dan Egerstad said he wasn't trying to earn money, gain publicity or get a name for himself in hacking circles. Instead he claimed that publishing the list was easier than contacting the organizations individually — and that if he had handed it to the Swedish authorities then that would have been spying."
"Dan Egerstad said he wasn't trying to earn money, gain publicity or get a name for himself in hacking circles." ....whoops.
Then why not publish the list anonymously?
"The agriculture ministry is not in charge of Gundam" - Japanese ministry official.
Anonymously giving the list to a local newspaper would have achieved the stated objective.
I'm not sure what he was thinking when he decided that publishing the list would be the best way to draw the attention of the affected parties. Sure, calling 100 different embassies can be kind of a hassle, but he could just send out an email with a bunch of BCCs. I would assume he has an email address for each of them.
Maybe this guy just doesn't have the same sense of self preservation that I do, but in my work I tend to avoid doing things that have the potential to cause a major international incident.
If he DID publish the list anonymously, then the list could just as easily been dismissed (through political agreements) as completely inaccurate/wrong.
Here's a more detailed article on the subject, ending with a highly amusing quote from Dan Egerstad about his real reason for releasing the log-in info.
In the local jail. Why else would anyone do something so boneheaded?
Honestly, I can't think of any better way to get jailed than to embarrass and irritate the high-level diplomats of 100 countries.
Yes, it was easier than turning the list over to authorities, or contacting each of the embassies. So what? It could easily be argued that he had a duty of confidentiality with his client that he failed to observe.
Furthermore, he has actually made security worse by disclosing in this matter. Who knows how many embassies were already aware of the problem, and were in the process of tightening security? It is also likely that at least some of the embassies would have discovered the vulnerabilities independently of this consultant through internal audits, and would have fixed them silently.
Now, while this guy has stirred up a hornet's nest, he hadn't really done anything to improve the security of these embassies. Sure, they have to fix it now, but they might have done it anyway.
And what if the Swedes were aware of this and using this information for intel gathering? I don't think anyone is happy he did this.
The society for a thought-free internet welcomes you.
Their security is borked.
Slashdot Burying Stories About Slashdot Media Owned
Honestly, should I dig up something like that, I will make it as public as possible, with as much of my name on it as possible as well.
The reason is simple: When you're in the limelight, it doesn't go unnoticed when you suddenly "vanish". Post it anonymously and they will dig you up. Hand it to some journalist and the same will happen (just that one more person goes with you). You can't simply make someone disappear when he's in the center of attention. Unless you're Copperfield and want to vanish, but that's a different matter.
We used to have a Bill of Rights. Now, with the rights gone, all we have left is the bill.
Just because
"Dan Egerstad said he wasn't trying to earn money, gain publicity or get a name for himself in hacking circles..."
and has the technical ability and the altruistic motives doesn't make it right. Yet if the powers that be (pick you favorite governmental agency) can do this at will, that doesn't make it wrong either.
Kazakhstan is the greatest country in the world, all other countries are run by little girls. Kazakhstan is number one exporter of internet security, Other Central Asian countries have inferior internet security.
High Five!
"There are more things in heaven and earth, Horatio, than are dreamt of in your philosophy."
This has nothing to do with the Confidentiality of email, and everything to do with accessing other people's email accounts without authorization.
If you want news from today, you have to come back tomorrow.