Slashdot Mirror
HBGary Hack In Depth
Udo Schmitz writes "Heise's UK site has the English translation of an article from the latest issue of their magazine c't about Anonymous's HBGary hack. It shows that there was much more involved than just social engineering to get passwords, and how anonymous evolved following OpTunisia and OpEgypt."
HBGary's systems were just riddled with security holes. From URL parameters that weren't scrubbed to straight MD5 password hashing to using the same password for several (and possibly many) accounts on different systems (servers, email, Twitter, LinkedIn, etc). I'm sure glad something as important as our government didn't use their security services. Oh, wait ... D'oh!
Check out Ars Technica's coverage, much much better
I just wonder if Skynet can be powered by human brain cells.
Also a lot of other sci-fi stuff comes to mind, including Azimov's Foundation.
Why do I get the feeling HBGary is just filling the void left by SCO as Slashdot's "villain to post about in the absence of real news"?
The only surefire protection against Microsoft infections is abstinence. - The Onion
We can all be anonymous. It helps to really know what you're doing, it helps to have no "skeletons" in the closet, it helps to have some passion about what's happening in the world and to want to do something about it. Who's in control? Does that matter? We all can be anonymous.
---Jack O
They're not a Hydra, which is a monolithic monster with no single termination point and self-repair to incremental attacks.
They're a stand-alone complex, which is not even a single entity to begin with.
Which makes them even harder to kill, and, to established powers they oppose, even more fearsome. (OTOH, to the extent they can be developed and manipulated to suit one's ends, they're a most powerful weapon. You can bet the shadowier sides of governments have any number of would-be Kazundo Gouda types analyzing the phenomenon.)
Don't bother reading this article, it's horribly written and not particularly correct. They make it sound like HBGary Federal was some giant security company when in reality is was a small-time 4 person company. Oh my god you broke into a 4 person company's email and the idiot manager's twitter account!
So tired of seeing this "hack" replayed on Slashdot.
hbgary was foolish. hbgary got punked.
we all laughed.
NEXT!
"Why do you feel that Python is so bad? What do you find wrong with it?"
Seriously, Taco, just turn the site into an RSS portal with a comments section. The horrid summaries, old news and dupes are not helping.
Slashdot was ahead of the game 12 years ago, but now it's a dying horse. Time to try something new.
No sig for you!!
I was skimming the second half of your post, and "Kazundo Gouda" turned into "Kudzu". Let's go with "kudzu" instead of "hydra". It just fits so well. I mean, they're a pretty invasive species, and in the world of government intelligence operations, a fleet of teenagers in it for the lulz is pretty alien.
Bio questions? Ask me to start a Q&A journal. Computer analogies available for most topics!
Doesnt this spark anything in the minds of the local hackers and crackers out there? security in buisnessess are low. why? The fear of being hacked is unfeasible because people who dont know what they are doing trust people who say they know what they are doing but accually are being payed to watch the "ping" and "pong" of packets between two servers in the company. Time to start hacking again...make the government quake at the mention of hackers like what used to happen. My suggestion....packet flood a net of IP addresses in your local area so the "geek squad" is focused on that then...your sort of free.
MMMMM....Linux -_-Trolling is and Art!!