Slashdot Mirror


Anonymous Hack One Gigabyte of Data From NATO

GeekTech.in writes "The AnonymousIRC hacking organization have claimed this afternoon that they have hacked into NATO servers. As one of their tweets says: ' Yes, #NATO was breached. And we have lots of restricted material. With some simple injection. In the next days, wait for interesting data :) '"

58 of 304 comments (clear)

  1. Again ? by Chuby007 · · Score: 4, Funny

    This is happening so often that better make a hack.slashdot.org and just add the site that was hacked and when... this is getting old...

    1. Re:Again ? by Shrike82 · · Score: 3, Insightful

      This is happening so often that better make a hack.slashdot.org and just add the site that was hacked and when... this is getting old...

      Agreed, but what I haven't seen is follow up stories about these breaches. I though Anonymous or LulzSec were due to release loads of News of the World/News International e-mails they'd obtained? Did I miss a story or are they still holding onto it?

      --
      You can advertise in this sig from as little as £99.99 a month!
    2. Re:Again ? by bberens · · Score: 4, Informative

      Say what you want about wikileaks but they understood media/marketing. Releasing so much stuff so frequently makes it difficult for the media to absorb and create a media frenzy, which is the only way the plebes ever even hear about stuff like this.

      --
      Check out my lame java blog at www.javachopshop.com
    3. Re:Again ? by History's+Coming+To · · Score: 5, Informative

      From their Twitter account: "We think, actually we may not release emails from The Sun, simply because it may compromise the court case."

      --
      Please consider this account deleted, I just can't be bothered with the spam anymore.
    4. Re:Again ? by GooberToo · · Score: 4, Interesting

      Say what you want about wikileaks but they understood media/marketing. Releasing so much stuff so frequently makes it difficult for the media to absorb and create a media frenzy, which is the only way the plebes ever even hear about stuff like this.

      That used to be true. Its not longer true. The largest media outlets created data warehousing applications which allow them to not only comb through these large data releases, but allows them to locate and follow trails of subject matter in which they are interested. It even allows them to discover sub topics, and so on.

      Literally, if these groups claim they are not releasing all of their information because media can't digest it, its a lie and is only self serving.

      Anyone else notice a lot of shit which Wikileaks was suppose to release was never released in spite of the fact people are still manning the shop? Wikileaks existed solely to benefit, blackmail, extort, and steal information. The fact the information was never released seems to hint it was sold to the highest bidder. Otherwise, according to their claims, a lot of CEOs should be jail by now.

    5. Re:Again ? by blackraven14250 · · Score: 3

      They probably, for the most part, really want the lawsuit to go forward, as they have no problems with corruption being punished.

    6. Re:Again ? by rwven · · Score: 2

      Most of this is just due to the ineptitude of IT in general, and lazy/bad coding techniques. Preventing SQL injection is elementary, yet LULZSEC and Anon seem to get a huge portion of their data by using it. The majority of the remainder of their data seems to come from social engineering, which IT departments should have weeded out a decade ago. The simple college computer lab support I did back in 2002 had explicit requirements for verification of identify before I did anything concerning accounts, security, etc.

      While I don't believe that the users/customers themselves deserve to have their data exposed by the irresponsible practices of companies, I do believe these companies get exactly what's coming to them when stuff like this happens. This really isn't rocket science...

    7. Re:Again ? by kevinNCSU · · Score: 2

      Did the bank of america stuff ever get released? Wasn't that supposed to shed light on the whole economic meltdown and put people in jail and save the world and shit? Or did it get released and the news never picked up on it?

    8. Re:Again ? by GooberToo · · Score: 2

      No, it was never released. Or I should say, if it has, I sure never read anything about it and I've been watching and looking. One thing I can tell you I'm absolutely sure of, if they have proof of collusion behind the economic meltdown, without a doubt, all roads lead to Goldman Sachs.

  2. I thought they arrested anonymous by i+kan+reed · · Score: 3, Funny

    Like all of them, ever. Not posting as AC because I'm not currently in jail.

    1. Re:I thought they arrested anonymous by bruce_the_moose · · Score: 5, Insightful

      They arrested a few people stupid enough to use Low Orbit Ion Cannon to participate in the DDOS attack against PayPal and MasterCard/Visa sponsored by Anonymous. The mainstream media probably does think that's all of them.

      --
      To reduce crime, make fewer things against the law.
    2. Re:I thought they arrested anonymous by taiwanjohn · · Score: 4, Interesting

      One gets the impression that this new hack is a direct response to the arrest reports. It certainly makes the feds look foolish claiming to have nabbed them.

      --
      XML is like violence. If it doesn't solve your problem, you're not using enough of it. --AC
    3. Re:I thought they arrested anonymous by guspasho · · Score: 2

      Except that NATO didn't arrest anybody, the FBI did. However, NATO is engaged in an illegal and very prominent bombing campaign in Libya. That is the more likely motivation.

  3. This is getting sad by Gr33nJ3ll0 · · Score: 5, Insightful

    Really if a bunch of vigilantes can do it, imagine what the gov't sponsored Chinese hackers can do!

    1. Re:This is getting sad by RazorSharp · · Score: 5, Insightful

      Really if a bunch of vigilantes can do it, imagine what the gov't sponsored Chinese hackers can do!

      More like, if a bunch of vigilantes can do it, imagine what the gov't sponsored Chinese hackers do!

      --
      "From the depths of my skeptical and rationalist soul, I ask the Lord to protect me from California touchie-feeliedom."
    2. Re:This is getting sad by Xest · · Score: 3, Interesting

      I hear this sentiment a lot, but it would imply that the Chinese government is more competent than Western governments who allow for this type of fuck up in the first place.

      Is there any evidence that Chinese public sector is somehow more competent than that in the West?

      It's quite possible that the opposite is true, that the Chinese are managing to acquire fuck all, and that Chinese government systems themselves are equally vulnerable.

    3. Re:This is getting sad by Sir_Eptishous · · Score: 2

      The fact that their government is communist(funded by loads of capitalist cash) leads one to believe that their "command and control" in regard to cyber-espionage is probably very tight.

      --
      We play the game with the bravery of being out of range
    4. Re:This is getting sad by Anonymous Coward · · Score: 2, Interesting

      A recent Chinese military airshow featured a brand new stealth fighter (flying prototype), with features and performance of amazing similarity to our US F-22 Raptor. Ooops.

      I think we've already seen what govt sponsored Chinese hackers can do!

  4. Re:Again by asto21 · · Score: 5, Informative

    Of course it is! The US Govt commands such things all the time!

  5. Cloud by StripedCow · · Score: 4, Insightful

    I certainly don't want to provoke anyone, but I wonder how long it will take until they hack gmail and other cloud-based services, and put all the data into the open?
    Thanks to these guys, I'm not so sure anymore whether I like this idea of the cloud.

    --
    If Pandora's box is destined to be opened, *I* want to be the one to open it.
    1. Re:Cloud by Aladrin · · Score: 4, Insightful

      You do realize that the things these guys do aren't that spectacular, right? They're little better than script-kiddies.

      Real hackers are out there right now doing much, much more. And they aren't telling you about it.

      So what you are essentially saying is that you feel perfectly safe, no matter the real situation, unless someone starts describing reality to you.

      Anonymous/LulzSec has done a great job of showing people what the internet is really like. It's a very scary place.

      --
      "If you make people think they're thinking, they'll love you; But if you really make them think, they'll hate you." - DM
    2. Re:Cloud by Scott64 · · Score: 3, Insightful

      Your information is every bit as safe as it ever was. Which, as it turns out, might not be as safe as you thought it was.

    3. Re:Cloud by fuzzyfuzzyfungus · · Score: 3, Funny

      Thankfully hacking is still a fully manual enterprise and email servers aren't remotely distinctive on automated scans, or of any value if compromised, so obscurity should keep you nice and safe...

    4. Re:Cloud by Anonymous Coward · · Score: 3, Funny

      Real hackers are out there right now doing much, much more. And they aren't telling you about it.

      Wait, if no one knows what "real hackers" are doing then how do you know they are doing anything?

  6. Re:1GB hummm by cowboy76Spain · · Score: 2, Funny

    I am betting on porn... I always bet on porn.

    --
    Why can't /. have a rich-text editor? Editing your own HTML is so XXth century.
  7. Re:1GB hummm by rommi04 · · Score: 3, Insightful

    In a volatile market the only stable investment is porn

  8. Big hairy deal. by SquirrelDeth · · Score: 2

    Everyone is hacking into government computers and learning the secrets of the government oh noes. I have government data on my computer maybe more than some of these hackers claim to have liberated here is the catch. Gov data is very boring. For example my latest gov communique was plans for a building with a rotten roof. Yes I have to look at it and bid on repairing.
    I think the government is running out of terrorist and need a new batch of international terrorists with computers. You are not safe they can get the government they can get you. I think this stuff is all a ploy to try and push stricter rules concerning your rights online. And a way to make nerds everywhere potential terrorist suspects. Soon that laptop bag will be just as bad as a turban and a dynamite vest.

    1. Re:Big hairy deal. by Opportunist · · Score: 2

      Well, eventually the feds caught on. They noticed that adding "with computers" to whatever is being done changes everything. For reference, see laws.

      --
      We used to have a Bill of Rights. Now, with the rights gone, all we have left is the bill.
    2. Re:Big hairy deal. by Anonymous Coward · · Score: 2

      Average citizen: "It's just not normal to carry around a computer all the time! It makes me feel less secure." *proceeds to check i-phone*

  9. NATO Hacking by Anonymous Coward · · Score: 5, Interesting

    I know, it's a stupid question but I have to ask it. Why are government and military servers and computers that store sensitive data connected to the internet at all. Shouldn't they be on isolated local networks only?

    1. Re:NATO Hacking by KarrdeSW · · Score: 4, Insightful

      Can't reach TFA due to high traffic right now but from TFS it doesn't really say whether anything they stole was that expensive, just that there was "One Gigabyte" of it.

      It could just be cafeteria menus.

      It'll be a dark day when NATO's enemies hear about next Tuesday's Salisbury steak.

    2. Re:NATO Hacking by KarrdeSW · · Score: 4, Funny

      sensitive, not expensive, damn my lack of coffee.

    3. Re:NATO Hacking by Nidi62 · · Score: 2

      I know, it's a stupid question but I have to ask it. Why are government and military servers and computers that store sensitive data connected to the internet at all. Shouldn't they be on isolated local networks only?

      Because government agencies cooperate and share information routinely over very large distances with their personnel in different states and with agencies of other states as well. NATO is a very large organization comprising of 28 states. This means the military and intelligence agencies of 28 states cooperate with at least a fair degree of regularity, often across the ocean. Each state more than likely has their own internal information and communication system, yes. But to get each member state to agree on one type and model of communication system to be put in place at every single military installation, command center, or intelligence/analysis agency/department is a logistical and bureaucratic nightmare. However, just about any computer can connect to the internet these days, even the most basic of field computers. The question isn't why are these servers attached to the internet, the question is why haven't they been secured as much as possible, if they are holding classified information.

      --
      The only thing necessary for evil to triumph is for it to be pitted against a slightly greater evil
    4. Re:NATO Hacking by Andy+Dodd · · Score: 2

      It's either not that sensitive, or someone REALLY fucked up.

      Actual classified data is supposed to be airgapped, or protected by NSA Type I crypto. If these guys broke an approved Type I system, that would be some of the biggest news in crypto history.

      --
      retrorocket.o not found, launch anyway?
    5. Re:NATO Hacking by halivar · · Score: 2

      Yep. Remember that Wikileaks needed someone on the inside to get the information. I find it highly unlikely that Anonymous got any really important documents. Sure, maybe they were marked classified. That doesn't mean shit.

    6. Re:NATO Hacking by CapnStank · · Score: 3, Insightful

      Or:

      They *don't* have sensative data stored on networks accessable to the internet. I certainly believe its possible for a NATO web server to contain 1GB of documents... The same kind of crap that you find on publicly owned company intranets, documents and documents of rambling and meeting minutes and useless garbage stored because they're being transparent to the public. For all we know at this point Anonymous *hacked* a bunch of files that were accessible by a internal search engine to the site.

  10. Wha.... by AngryDeuce · · Score: 2

    How is it that all these different sites keep getting hacked? I mean, NATO doesn't have access to experts in internet security that are able to defend against these attacks?

    I'm not in the field, obviously, and I know that things are always evolving, but it seems to me that there needs to be more layers in web security. Also, why is there not more encryption on sensitive data? Is encryption more costly if it's more complex?

    I can understand when a corporation gets hacked, they're going cheap on web security because of the costs. But one would think that truly sensitive information with major geopolitical players would be buttoned up pretty damn tight.

    1. Re:Wha.... by flonker · · Score: 3, Interesting

      The thing is, they are not picking targets and then hacking them, rather they are mass scanning to see what is vulnerable then picking through the list to find stuff they find interesting. With that said, you would expect a military organization not to be the "low hanging fruit".

    2. Re:Wha.... by blueg3 · · Score: 2

      Keep in mind most of their targets are large organizations with tons of Internet-connected computers -- one of those machines is bound to have a vulnerability.

  11. Re:Again by nschubach · · Score: 4, Interesting

    Makes you wonder though... what would the world be like if people were actually held responsible for their actions and were not able to do things anonymously. Wouldn't that mean that Anonymous should eventually be self exposing?

    (I'm not saying it's right/wrong/etc. Just wondering.)

    --
    Every time I start to have faith in humanity, I ruin it by driving to work between 7 and 8 am.
  12. Re:there must be some undisclosed SQL exploit by GameboyRMH · · Score: 2

    The rumor is that they have an unknown Apache exploit.

    --
    "When information is power, privacy is freedom" - Jah-Wren Ryel
  13. Glad to learn that the boys aren't discouraged by by ArsenneLupin · · Score: 3, Insightful

    Glad to learn that the boys aren't discouraged by the arrests!

  14. Re:Again by jimmerz28 · · Score: 3, Insightful

    Makes you wonder what would happen in the world if people in the armed forces were actually held responsible for their actions and were not able to do whatever they wanted.

    http://www.collateralmurder.com/

  15. Re:Shares by UninformedCoward · · Score: 2

    They probably are a security company.

  16. Re:Again by kilfarsnar · · Score: 4, Insightful

    I know you're AC, but seriously, the US government kills innocent people every day of the week. And yet people are concerned about whether the release of a given set of information (perhaps about said killing) will get one person killed. Can I get a re-working of priorities up in here?

    --
    "What the American public doesn't know is what makes them the American public." -Ray Zalinsky (Tommy Boy)
  17. Re:Again by mmcuh · · Score: 2

    Or just don't start any.

  18. Re:1GB hummm by Sulphur · · Score: 3, Informative

    I am betting on porn... I always bet on porn.

    That's classified. Non classified material cannot get into classified places.

    Seriously, if they want security, then they should have "Tiger Teams" , that is people who try to breach security to FIND OUT if it is any good.

  19. Why keep secrets in the first place? by IAmAI · · Score: 2

    If governments were more open and didn't try to keep so many secret, it wouldn't be so bad if they got hacked. By definition, if there were no secrets, they'd be nothing to hack. Perhaps this a motivation behind the attacks by Anonymous: they want to show governments that keeping secrets is no longer worthwhile.

    I think future governments have three choices: 1. Pay the cost of maintaining highly secure systems to keep their secrets (which can never be guaranteed) 2. endure the costs of their secrets being discovered/revealed by hackers or enemy states or 3. learn to make do without secrets.

    It might seem that governments that keep secrets have an upper hand against those who do not. However, this advantage is entirely dependant on maintaining those secrets and maintaining secrets has an associated cost. The cost of maintaining secrets may very well be rising as cracking techniques become more sophisticated. However, by giving up on secrets, you are letting go of the associated costs. Perhaps in some ways you are giving up everything so that there's nothing left to loose. Though if the costs of keeping secrets becomes high enough, nations without secrets may have the overall advantage.

  20. Government paranoia by the_raptor · · Score: 3, Insightful

    "Restricted", "sensitive", and "secret" material is low level. That is the level of material that everyone in the military and government bureaucracy has access to. It is the sort of stuff that is either not very sensitive (ie enemy agents could figure it out easily just from observing a base or similar) or has only a small window in which it is useful (ie by the time the enemy could react it would be too late).

    These days with the adversarial government/media relationship tons of material is classified like this just to discourage the media from baking scandals, and to prevent citizens from finding out about legitimate scandals (at least in the short term).

    What was accessed in this case was probably some boring inter-NATO administrative emails, with the most interesting stuff being up-coming exercises and the like.

    The stuff that Wikileaks released that inspired this spate of hackings WAS from an air-gapped computer.

    --

    ========
    CINC, 4th Penguin Legion
  21. Re:Again by SilentStaid · · Score: 4, Insightful
    I'm biased. I was in the US Army. Now that that's out of the way -

    Plenty of people join with nothing but the best intentions; if you think the guys actually pulling the trigger in that video don't lose sleep over it I don't think you know many soldiers. If you simply must condemn someone for that video, by all means - go after the people who attempted to cover it up. Not the poor guys who had to find out after watching the news that they killed innocent men.

    War is cruelty. There is no use trying to reform it. The crueler it is, the sooner it will be over. - William T. Sherman

  22. Re:Again by perpenso · · Score: 4, Insightful

    Seeig as this data is probably along the lines of how many crates of dried parsley some air base is requisitioning doesn't strike me as a life or death matter.

    You need to read up on Bletchley Park and Ultra. Mundane information about military units and individuals turned out to be amazingly useful.

  23. Some reference... by SCHecklerX · · Score: 4, Informative

    For those of you who don't understand the military's networks. And there are a lot of you, it seems.

    http://en.wikipedia.org/wiki/SIPRNet
    http://en.wikipedia.org/wiki/NIPRNet
    http://en.wikipedia.org/wiki/Sigint

  24. Re:I don't understand.. by ceoyoyo · · Score: 2

    For really important stuff, that's what dedicated lines are for. For the rest, SSH tunnels and VPNs.

    It's this habit of putting your secret documents on the same machine that serves your website that's getting people in trouble.

  25. Re:Again by dgatwood · · Score: 4, Insightful

    A reasonable state should provide for decreasing levels of privacy as your power increases. For example, those with significant power to sway opinion—politicians, celebrities, etc.—should have much less right to privacy than Joe Random. Indeed, this is the way our privacy laws are structured today.

    Where our privacy laws break down is when it comes to corporate privacy and government privacy—the privacy of large groups acting as a single hive mind. These groups should have almost no privacy because they have much greater power than the average citizen. Unfortunately, this is seldom the case, and this is the problem that needs to be fixed—not reducing the privacy of individuals, but rather reducing the privacy of individuals in their official capacity while working together in large groups. That's not very easy to do, though, at least without decreasing their privacy as individuals, which is why things go horribly wrong (whether because you gave them too much privacy and got corruption or too little privacy and got MonicaGate absurdity).

    I tend to lean on the side of targeted laws in this area—sunshine laws, open records laws, open meetings laws, etc. When these are insufficient, the flaws should be corrected. When these are ignored, the perpetrators should do jail time to serve as an example to others. If this were happening consistently, we'd have a lot fewer problems with our democracy.

    --

    Check out my sci-fi/humor trilogy at PatriotsBooks.

  26. Re:Again by jimmerz28 · · Score: 4, Interesting

    Of course the majority of people have nothing "but the best intentions" at heart.

    However, my point was if we're going to start attempting to make these "anon" people start owning up for their actions let's start with the ones committing actual atrocities. You know the ones covering up the things Anon uncovers.

    And I'm not sure if we watched the same video, but the boys in that one firing the guns didn't seem too hesitant about killing those people. I don't think they're losing any sleep.

    My boyfriend is in the marines (gay), so I know a few people in the forces (now that that's out of the way).

  27. Re:Again by SilentStaid · · Score: 2, Informative

    That's awesome, actually. Well, thank him for /that/ particular service, has to be rough if he's open about it.

    Like I said... I'm biased... I look at a lack of hesitation as good training. I heard a saying in basic - "Ready, aim, fire, yours, theirs, bodycount and regrets - in that order." and while we could argue all day about the morality of striking targets with no feasible means of fighting back (foot vs chopper) they did everything according to procedure - a procedure that's designed to protect your significant other and my friends when they've got boots on the ground, so... that's a win in my book.

    It sucks... but war isn't pretty and it never will be. I would butcher 100 to save 1000 - and our ROE save lives every day - don't forget it.

  28. problem/reaction/solution by bender183 · · Score: 2

    i dont buy for a second anonymous is legit at all, this is a CIA front creating problems to garner a reaction from the public so legislation can be passed to further restrict internet usage. I can smell scams like this @ this point in my life from a mile away. And I know alot of people who share my opinion. You cant fool all the people all the time you fucks. As an american citizen the constitution gives us the right to revolution in the case which the government becomes corrupt. Never forget that, and question everything.

  29. Re:Again by jimmerz28 · · Score: 2

    I agree on lacking hesitation: people die from hesitation.

    The glee, enjoyment and frivolity displayed by these men, however, seems to add to the reasons why these incidents are covered up.

    And again I agree with punishing those who covered it up, but that frivolity is sickening.