Slashdot Mirror
LulzSec Announces That It Is Done
MaxBooger writes "LulzSec, the notorious hacker group that's been on a rampage, just announced that it's disbanding. This follows 50 days' chaos during which time it took down several websites (including CIA.gov at one point), exposed passwords, exposed documents of the Arizona penal system, and at one point threatened to hit Too Big To Fail banks. Obviously, it's possible that the group will not abide by its promise to quit. Nobody knows."
Quitting while they're ahead.
As much as I'm for protests and such, these kids were just out to cause harm because they could. They need to get a legitimate cause, and stop pissing on ( innocent ) people randomly, or be gone.
They give the rest of us a bad name.
---- Booth was a patriot ----
So, when the dust settles, what's left to ask is simply: Who benefits from it?
I predict some new laws...
We used to have a Bill of Rights. Now, with the rights gone, all we have left is the bill.
Once their names started coming out, and their chat logs started being dumped, they sure did tuck their tail and run away quickly.
So the government project is done? did the government funded attacks, spark enough outrage to get new laws passed by the senate and house regardless of their long term damage?
Sorry LulzSec, you may be quitting your game (at least publicly), but you all still committed major crimes and you will still be hunted down and prosecuted like the dogs you are. Hope you enjoyed your 'lulz' though.
What, life get too hard? Clearly someone got close to kicking them out of the game, and they ran before that would happen.
Win the war, not the battle.
Live to fight another day.
I can think of others. Basically sounds like a smart idea to me.
I don't remember them ever saying anything about limiting their hack-spree to 50 days. Sounds like they've pissed enough people off that they're starting to get ID'ed and arrested, and are hoping they can quit before it gets really bad. They're a bunch of weenies all right, but I don't think it's over for them. I for one will be lulzing my ass off when they all get caught and sent to pound-me-in-the-ass prison.
I don't reply to ACs
You knocked on the devil's door my friends.
My totally random guess here is that they are a group of people who probably knew each other well before creating this group. More than likely they have just stopped calling themselves LulzSec. They're just getting too much scrutiny most likely. I don't think this is the last we hear from them, just they won't be calling themselves LulzSec necessarily...
...is whether everyone else is done with Lulzsec. Unfortunately, they've likely pissed off the kinds of people who don't stop the game just because the opponent wants to quit.
maybe change their strategy and mix things up to evade capture, the world needs benevolent black/grey hat hackers to dig up dirty laundry on the establishment, let the government & police know that if they do wrong that it will be found out and exposed for all the world to see...
Politics is Treachery, Religion is Brainwashing
So they're going to win the war by quitting, have I got that right?
See a history book on Vietnam for an example of how well that works out in reality.
Pathetic really. The only thing different is that these idiots have big mouths. Which, I bet, will be their downfalls. Nothing they did on the hacking side is impressive at all. Competent black-hats know that one of the most dangerous things you can do is public bragging. Having an information-channel back is beyond stupid.
Fortunately, law-enforcement has very long memories and a lot of patience. It is just relatively slow. I predict that we will see them all begging for mercy. Might take months or years, but they were far to careless not to get caught.
Most ACs are not even worth the keystrokes to insult them. Be generically insulted by this and ignored otherwise.
Excellent analogy, wrong conclusion. Know your objective, how what you're willing to invest to achieve it, and exit when you've reached your goal or exceeded your costs. LulzSec made some headlines and embarrassed a few major organizations. Going to jail isn't worth a few more headlines.
BASIC Gorilla tactics 101
The tactics are to look at the wind-speed meter, consider elevation, and then try an angle and velocity that will strike the opponent with your explodo-banana. Refine your velocity and angle per the rules of "playing the odds" guess too much one way, and too little the other, then extrapolate the correct angle and velocity by interpolation.
A quick search turns up this website that has a flash implementation of the game (covered with a skippable ad) that you may use to refine your "BASIC Gorilla" skills.
Agreed. Right now everyone who is anywhere in security is most likely hyperaware. I know at my company (a large carrier) we've done security audits across the spectrum to ensure customer data was well protected, along with proprietary info. It makes sense if they let the waters die down a bit, and then hit when people are soft and inevitably get lazy again.
On June 21st a suspected member is arrested in the UK, on June 25th they call it quits. The prospect of life in a British arse pounding prison was certainly a factor.
The culture of institutionalised rape and its tacit endorsement as part of the punishment (*) is far more closely associated with the American prison system. I'm not saying it doesn't happen here, but it doesn't seem to be a factor to the same extent.
(*) Obviously unless you're the prison rapist, in which case it's more "get to pound some kid locked up for marijuana possession in the ass prison", but let's not think about the logic of it too much.
I'm surprised you're implying that these guys were bright.
They have made their point for now, isn't that sufficient?
The point is clearly that no system connected to the internet is secure, and that it can be cracked given enough skills. So the best protection against a very competent attack is to avoid angering people.
And even if you don't you shall design your systems with a multi-layered approach in mind to avoid massive breaches. Don't allow the presentation layer direct access to the database with sensitive information. Don't use the same authorization database for the web UI for administrative tasks. And if you run an application server (like tomcat) - run it under a security manager/policy that limits access to other services in case someone is able to install something malicious in the application server. You can apply a security policy to Tomcat, and that will at least slow down an attacker considerably since the attacker then needs to gain knowledge of the system. And if you add tripwires in the system that can block attackers automatically if tripped then you make things even harder. Three to five tries and the IP address is shut off for an hour.
If builders built buildings the way programmers wrote programs, then the first woodpecker would destroy civilization.
That would have been the point if there was any evidence that they had used particularly sophisticated attacks. The actual point seems to be that quite a few systems are secured in a fairly amateurish way and still subject to SQL injection, for example.
No, not the point at all. LulzSec is (was?) a vigilante group fighting organizations they perceive as evil. What they did to Sony was exactly the same thing Sony did to me, and Sony did it with no repercussions at all. The banks have been stealing from all of us for decades, and the government rewarded them with bailouts for it. I'm not sure I agree with the Arizona breaches, but most of what they did were good things.
Free Martian Whores!
Their point was never that 'nothing is secure'. They used simple well known attacks and a lot of humor.
I see their points as:
1) Validate user input.
2) Don't reuse passwords.
3) The first two rules apply to everyone including government contractors.
4) If we can get your details so can, and so have, other groups.
5) So called whitehats are corrupt by nature.
6) It's still possible to be anonymous on the internet if you know what you are doing.
7) Cloudflare works well.
8) We are laughing at you.
9) j3st3r ( or however you spell it ) is a script kiddie who writes very bad PHP.
10) Send us some cash via bitcoin.
11) PROFIT!