Slashdot Mirror
LulzSec Announces That It Is Done
MaxBooger writes "LulzSec, the notorious hacker group that's been on a rampage, just announced that it's disbanding. This follows 50 days' chaos during which time it took down several websites (including CIA.gov at one point), exposed passwords, exposed documents of the Arizona penal system, and at one point threatened to hit Too Big To Fail banks. Obviously, it's possible that the group will not abide by its promise to quit. Nobody knows."
Quitting while they're ahead.
As much as I'm for protests and such, these kids were just out to cause harm because they could. They need to get a legitimate cause, and stop pissing on ( innocent ) people randomly, or be gone.
They give the rest of us a bad name.
---- Booth was a patriot ----
Now we can finally bring the troops home.
So, when the dust settles, what's left to ask is simply: Who benefits from it?
I predict some new laws...
We used to have a Bill of Rights. Now, with the rights gone, all we have left is the bill.
Yes, and they had a document release planned for Monday. Something must have just happened.
What, life get too hard? Clearly someone got close to kicking them out of the game, and they ran before that would happen.
Win the war, not the battle.
Live to fight another day.
I can think of others. Basically sounds like a smart idea to me.
You knocked on the devil's door my friends.
My totally random guess here is that they are a group of people who probably knew each other well before creating this group. More than likely they have just stopped calling themselves LulzSec. They're just getting too much scrutiny most likely. I don't think this is the last we hear from them, just they won't be calling themselves LulzSec necessarily...
...is whether everyone else is done with Lulzsec. Unfortunately, they've likely pissed off the kinds of people who don't stop the game just because the opponent wants to quit.
Tyrell: The light that burns twice as bright burns for half as long - and you have burned so very, very brightly, Roy. Look at you: you're the Prodigal Son; you're quite a prize!
Batty: I've done... questionable things.
Tyrell: Also extraordinary things; revel in your time.
Batty: Nothing the God of biomechanics wouldn't let you into heaven for
"I say we take off, nuke the site from orbit. It's the only way to be sure."
maybe change their strategy and mix things up to evade capture, the world needs benevolent black/grey hat hackers to dig up dirty laundry on the establishment, let the government & police know that if they do wrong that it will be found out and exposed for all the world to see...
Politics is Treachery, Religion is Brainwashing
Pathetic really. The only thing different is that these idiots have big mouths. Which, I bet, will be their downfalls. Nothing they did on the hacking side is impressive at all. Competent black-hats know that one of the most dangerous things you can do is public bragging. Having an information-channel back is beyond stupid.
Fortunately, law-enforcement has very long memories and a lot of patience. It is just relatively slow. I predict that we will see them all begging for mercy. Might take months or years, but they were far to careless not to get caught.
Most ACs are not even worth the keystrokes to insult them. Be generically insulted by this and ignored otherwise.
Excellent analogy, wrong conclusion. Know your objective, how what you're willing to invest to achieve it, and exit when you've reached your goal or exceeded your costs. LulzSec made some headlines and embarrassed a few major organizations. Going to jail isn't worth a few more headlines.
BASIC Gorilla tactics 101:
No, basic gorilla tactics are to live in troops in tropical and subtropical forests in central Africa.
Sounds like they've pissed enough people off that they're starting to get ID'ed and arrested
Or their asses kicked.
---- Booth was a patriot ----
BASIC Gorilla tactics 101
The tactics are to look at the wind-speed meter, consider elevation, and then try an angle and velocity that will strike the opponent with your explodo-banana. Refine your velocity and angle per the rules of "playing the odds" guess too much one way, and too little the other, then extrapolate the correct angle and velocity by interpolation.
A quick search turns up this website that has a flash implementation of the game (covered with a skippable ad) that you may use to refine your "BASIC Gorilla" skills.
No, that's gorilla STRATEGY. Gorilla tactics is deciding who to fling poo at.
Agreed. Right now everyone who is anywhere in security is most likely hyperaware. I know at my company (a large carrier) we've done security audits across the spectrum to ensure customer data was well protected, along with proprietary info. It makes sense if they let the waters die down a bit, and then hit when people are soft and inevitably get lazy again.
The funny part is if they didn't disband and a significant number got nailed, everyone would be saying how stupid they were for not quitting while they were ahead.
Course that's not to say a significant number won't get nailed eventually anyway, just noting that crowds are fun
Win the war, not the battle.
Would that be the war against nintendo, minecraft, sega, or Eve Online?
They have made their point for now, isn't that sufficient?
The point is clearly that no system connected to the internet is secure, and that it can be cracked given enough skills. So the best protection against a very competent attack is to avoid angering people.
And even if you don't you shall design your systems with a multi-layered approach in mind to avoid massive breaches. Don't allow the presentation layer direct access to the database with sensitive information. Don't use the same authorization database for the web UI for administrative tasks. And if you run an application server (like tomcat) - run it under a security manager/policy that limits access to other services in case someone is able to install something malicious in the application server. You can apply a security policy to Tomcat, and that will at least slow down an attacker considerably since the attacker then needs to gain knowledge of the system. And if you add tripwires in the system that can block attackers automatically if tripped then you make things even harder. Three to five tries and the IP address is shut off for an hour.
If builders built buildings the way programmers wrote programs, then the first woodpecker would destroy civilization.
it's been a few beers in an airport, but still...
do you - downhole - personally feel that sexual abuse in prisons is appropriate ?
including all the innocents getting convicted (think movie witch hunt or other similar cases), all the minor convictions (smoked some weed) and so on ?
personally, i would not have guts to condemn a person who would in the end find the means to kill off those who got them in the prison wrongfully. and i believe we should not make prisons a place to breed people like that.
Rich
I see that many people here on /. seem very bitter and angry about those kids. First let me tell you that "laughing you ass off when they get raped in prison" only shows that you're a very mean and despicable individual. But apart from that those kind of hackers are really doing people a favor by exposing clearly to the general public how terrible the security of their personal data is. Rest assured that for every bragging Lulzsec there are ten quiet hackers from different governmental and criminal groups, silently collecting your data and placing back doors in your systems, and not saying a word about it. Without public exposure authorities and corporations will naturally do all they can to swipe the problem under the rug. The kind of very visible but mostly harmless actions from the likes of Lulzsec is what's necessary to have them move their ass and finally do something about the security issue. I for one see them more as the vaccine that will eventually help the Internet grow some real security than the hateful vandals that old grumps of your kind want to portray.
That would have been the point if there was any evidence that they had used particularly sophisticated attacks. The actual point seems to be that quite a few systems are secured in a fairly amateurish way and still subject to SQL injection, for example.
No, not the point at all. LulzSec is (was?) a vigilante group fighting organizations they perceive as evil. What they did to Sony was exactly the same thing Sony did to me, and Sony did it with no repercussions at all. The banks have been stealing from all of us for decades, and the government rewarded them with bailouts for it. I'm not sure I agree with the Arizona breaches, but most of what they did were good things.
Free Martian Whores!
Their point was never that 'nothing is secure'. They used simple well known attacks and a lot of humor.
I see their points as:
1) Validate user input.
2) Don't reuse passwords.
3) The first two rules apply to everyone including government contractors.
4) If we can get your details so can, and so have, other groups.
5) So called whitehats are corrupt by nature.
6) It's still possible to be anonymous on the internet if you know what you are doing.
7) Cloudflare works well.
8) We are laughing at you.
9) j3st3r ( or however you spell it ) is a script kiddie who writes very bad PHP.
10) Send us some cash via bitcoin.
11) PROFIT!