Slashdot Mirror
FBI Raids Texas ISP For Anonymous DDoS Info
jcombel writes with this link to The Smoking Gun, which says "As part of an international criminal probe into computer attacks launched this month against perceived corporate enemies of WikiLeaks, the FBI has raided a Texas business and seized a computer server that investigators believe was used to launch a massive electronic attack on PayPal."
Computerworld has a story, as well.
It was a bloody IRC server that's all. It was used by LOIC to get targets, etc...
I'm sure they were scraping and recording all of the chat logs from each IRC channel that was used, and THOSE logs are the ones with the money info, like who was participating, or at least their IP at the time. Snatching the IRC servers themselves is relatively useless.
The tree of liberty must be refreshed from time to time with the blood of patriots and tyrants.
You have to get a license to legally make a street protest which shuts down traffic, in most places.
"You're right," Fisheye says. "I should have set it on 'whip' or 'chop.'"
I get the feeling we're about to see Weather Underground 2.0. FBI and friends rounding up subversives, cooking up various stories/evidence/results and both sides getting more and more serious until things go bad.
Anonymous will, I suggest, become the 21st century hippies once more and more tangential interests come aboard, and before you know it a few radical offshoot groups will take on the government in a serious way. Cyberthreats the like of government talk are bullshit, but people with technical knowhow and a bit of time can scuttle bureacracy gone bad, ala various leakings. I don't properly (beyond some scrapings of the history) know the who or what of 1969 onward and how right each side of the government-hippy fence was.. but I'm around for this fight, I'm a witnessing some disturbing trends that displease me greatly and can't say I side with the government being right.
In the cosmic irony department, the captcha for this post is "unfair".
use the fbi to do your dirty work
http://en.wikipedia.org/wiki/Joe_job
intellectual property law is philosophically incoherent. it is your moral duty to ignore it or sabotage it
What could possibly go wrong?
Paypal: the "bank" that somehow gets away with not having to be regulated like a bank and treated like a bank, despite looking like a bank and acting like a bank.
DDoS attacks suck but in this case, nothing of value was lost.
... the server did not actually send those TCP requests, but was hosting an IRC server. The flooding software allows the user to turn his computer in a voluntary "botnet member". The software then connects to a specific IRC server (can be changed easily in case the server goes out of commission), connects to a specific channel and then a bot in this channel responds to commands by the software and passes the IP address of the target.
This allows the masterminds behind the attacks to coordinate the computers effectively and paralyze sites with an instant flood of requests, instead of having each user configuring the software with a new target I.P. and having the load on the target increase gradually, making it easier to react.
There's nothing that says PayPal couldn't have joined in with Anonymous and DDoS themselves... all it would take is a network admin to join the attack and watch the packets. All of a sudden, he becomes and "investigator"- making it sound like PayPal has their own black ops team, working hand-in-hand with the FBI. Of course, the FBI could do the same, or be wiretapping the data center without a warrant, and claim it was PayPal that gathered the info.
So I'm assuming that we are going to see a probe by authorities into the "patriots" behind the wikileaks DDOS attacks next?
Union strike and protest can also damage the economy. Let put all these peoples behind bars. Who the fuck they think they are? Damaging sort term profit of the all powerful corporations!
WH says DDOS is not a crime
I don't see that in either you quote or in the article.
People who have plead guilty to DDOS attacks have done so under this law:
Specifically 18 U.S.C. 1030 (a) (5) (A) (i), (B) (i).
I would be curious to see this challenged in the case of a single person with a single machine. The efforts of a single individual is not enough to take down a server. In fact, odds are they don't have proof that any of the packets the individual sent even reached the server in question or had any effect on it.
First mistake: They list the IP in the affadavit OUTSIDE of the logs twice as 72.9.153.42 instead of 72.9.153.142 as it should be. One could assume that they could have now raided the wrong server in Tailor Made's farm.
Second mistake: "root" is just an IRC nickname on AnonOPs, and this person does NOT have root access on the IRC server that was raid as falsely assumed in the affadavit. They have oper with override privileges, and that was what was logged. The raid on the server at Tailor Made Servers was made under false pretenses.
Third mistake: Those logs show... [Thu Dec 9 11:14:27 2010] - OVERRIDE: root(root@72.9.153.142) TOPIC #loic '!lazor default targethost=api.paypal.comsubsite=/ speed=3 threads=15 method=tcp wait=false random=true checked=false message=Good_night_paypal_Sweet_dreams_from_AnonOPs port=443 stop' ... if anyone here has looked at LOIC's topic parsing, there's two mistakes the FBI made there. The first is that there's no space between targethost=api.paypal.com and subsite=/. The second is that this person "root" is STOPPING the attacks by adding "stop" at the end of the topic. Unless they can show logs of this "root" person throwing "start" in the topic instead of stop, this person is doing exactly the opposite of "willingly and knowingly" executing commands to start a DDoS attack.
Isn't it amazing that the FBI can get their arses into gear over Anonymous, while allowing thousands of other criminal operations to use US based servers without disturbance. I am constantly horrified by the number of malicious sites operating out of the mainland US that are clearly operating in plain sight.
Never email donotemail@WeAreSpammers.com
You mean there ARE banks which were are required to do business with
... you're confusing FDIC insurance and the accompanying regulations with being bailed out, which are completely different things.
No, I don't mean that and you know it. But if you want to do business with a bank that, for example, offers you FDIC protected checking accounts, then you looking for a different sort of service provider. PayPal isn't in that line of work.
And, on your other comment
Don't disappoint your bird dog. Go to the range.