Cops Set Up Extortion Sting On Symantec's Source Code Thieves
Sparrowvsrevolution writes "Hackers linked with Anonymous leaked another 1.26 gigabytes of Symantec's data Monday night, what they say is the source code company's PCAnywhere program. More interestingly, also posted a long private email conversation that seems to show a Symantec exec offering the hackers $50,000 to not leak the company's data and to publicly state they had lied about obtaining it. Symantec has responded by revealing that in fact, the $50,000 offer had been a ruse, and the 'Symantec exec' was actually a law enforcement agent trying to trace the hackers. It adds that all the information the hackers have released, including a 2006 version of Norton Internet Security, is outdated and poses no threat to the company or its customers. Symantec says the Anonymous hackers began attempting to extort money from the company in mid-January, and it responded by contacting law enforcement, though it won't comment on the results of the fake payoff sting while the investigation is still ongoing."
FTFY
SJW: Someone who has run out of real oppression, and has to fake it.
But either way it's still fun to watch what Anonymous gets up to ;)
They would've taken the money. More likely they "offered" money whether it was in a sting or not in order to be able to claim extortion and put the Anonymous hackers in a bad light.
I don't think the hackers are interested in money as much as they are in the information. The fact is Symantec screwed up and they'll have to take it, if they can't protect themselves then why should we trust them?
Custom electronics and digital signage for your business: www.evcircuits.com
I do not recall, and quick search did not return any prior example of, anonymous extorting info/data for money. Why attach this now? To me it reads more like "Anonymous ignores bribes, cop sting failed". Granted there have been threats of various sorts, but I cannot recall there being a money sum attached to any of them.
The only extortion is the fact that you have to pay to not have software (That you already paid for) screwing up. On a serious note though, I didn't think Anonymous would ever be so stupid as to try and extort money from a big company. Execs would much rather see their family die than lose corporate profits.
Edited short version:
.... Anonymous leaked ... the source code company's PCAnywhere program... Symantec has responded ... all the information the hackers have released... poses no threat to the company....
Its like they're tempting the world to diff their source code up against GPLed prior art to find license violations. I think it would be hilarious if it turns out pcanywhere was just a wrapped version of one of the numerous GPLed VNC implementations or similar.
"Science flies us to the moon. Religion flies us into buildings." - Victor Stenger
Of course, anybody who's dealt with Anonymous knows they will try to get you to promise to sell out your customers or otherwise act in a way that's in your interests and detrimental to the interests of everyone you claim to 'protect'. They've done this multiple times. If I were an Anonymous target I would never agree to such a scheme because all that would happen would be that the conversation be published to make me look bad.
Of course, having it be a 'police sting operation' is a great way to make it look like you weren't really going to sell out your customers. And who knows, maybe it's even true. And maybe all that source code really is for 'old versions'.
But, the really incriminating evidence would be if there were emails showing that Symantec has been sponsoring or encouraging virus writers in some way. And I'm certain if Anonymous had that kind of evidence that it would be out in the open by now. So that means they don't. And maybe Symantec isn't as much of a sleaze bag company as I expected them to be.
Need a Python, C++, Unix, Linux develop
Considering MakeAFee AV engine still has 80% of the code matching the one which was there in more than ten years ago, sure, I believe Scamantec AV engine has been completely rewritten from 2006.
1.26 Gigabytes is one hell of a big virus. That's what Symantec make, right?
Security code should be open for review anyway, or it's probably full of bugs and worthless.
Symantec and FBI attempt to patch security vulnerability with cash.
Inheritance is the sincerest form of nepotism.
How would they receive the $50K anyway? Split it up between all members who are supposed to be anonymous? Symantec/Police: Who do we make this check out to? Anonymous: Cash. Symantec/Police: Damn, foiled again!
If annonymous actually wanted to make money off of it, they could have made a hundred times that by selling the source code to a rival.
And further, annonymous doesn't extort. They free private information and attack companies that piss them off.
And considering how much credit card information they've captured over the years, if any individual wanted $50'000, they could have had it by now.
You offered Anon 50k as a ruse and they declined. After they tried to extort that very sum out of you.
Yeah. Sure. I believe your story.
We used to have a Bill of Rights. Now, with the rights gone, all we have left is the bill.
Here's the business model of companies like Symantec:
1. Pay to have a "demo" of your software on every new PC.
2. Nag people who don't know how the hell to get rid of your crap into buying it.
3. Profit!
We used to have a Bill of Rights. Now, with the rights gone, all we have left is the bill.
It adds that all the information the hackers have released, including a 2006 version of Norton Internet Security, is outdated and poses no threat to the company or its customers
Let's be honest - even a 2012 version of Norton Internet Security is outdated. And yes, I realize the context of the quote is referring to customer data, but it had to be said.
As been pointed out already, this is a report of a FAILED sting. Which makes those doing the sting look stupid, and the hackers at least cautious.
It also brings to light that a security company that sells software to prevent people from being hacked, got hacked, had source code stolen, and perhaps extorted for money to cover it up.
I am not sure how you could possibly ruin your reputation any further than they have already done.
Give it a fscking rest with the moronic student "big business is eeeevil" groupthink. If you want real evil go visit somalia or join the taliban and watch some women being mutilated for not obeying some religious instruction. In the meantime stay in your playpen and let the adults have a proper discussion.
1. The code was actually old and there was no threat.
2. E-mails were just a ploy.
3. Anonymous (which is anyone who wants to call themselves that) was trying to extort money and publishes evidence themselves of the extortion.
All I see is a failed plan, but people are saying they were successful? I'm not following.
Wait, people still use PCAnywhere?
I'm a good cook. I'm a fantastic eater. - Steven Brust
I am anonymous.
They had already committed the crime, the sting was to get them to give away their identity so they could be prosecuted for it. It's a legitimate tactic.
If the money was a ruse, why not $5,000,000? No one will risk getting caught for a year's salary.
Symantec has been hacked a few times now. Not just the source code but Verisign was hacked. They were also guilty of inserting rootkits in their programs to track their customers. I have no trust in any Symantec programs or services now. Changing my customers and reporting to others they shouldn't use these products any longer.
... if it wasn't the case before, it sure is now that as distasteful as payoffs may be, they are no longer going to be an option, even if they might have been the best possible option for some corporation/entity.
Check your premises.
Do tell, oh nice Law Enforcement and Symantec Execs, what "links" this thieves with anonymous?
NO SIG
just anonymous hackers. big difference.
It's a good business model for computer repair outfits/people as well.
"For a successful technology, reality must take precedence over public relations, for nature cannot be fooled." Feynman
Old code that required current customers to patch their current software in order to be secure.
Wait, what?
"For a successful technology, reality must take precedence over public relations, for nature cannot be fooled." Feynman
The source is out there, so what? It's still protected by copyright, and most people won't be able to compile it.
It's not like anyone can use it, apart from doing security-analysis and either sending symantec patches, or hacking their customers. And in that respect, it's not different than any open source software.
(Well, of course, if you got a 10 year open source history, chances are your code is much better than if it gets accidentally released after years of bad practice. So this will hurt in the beginning; but pretty soon the quality will increase, either way...).
"The more prohibitions there are, The poorer the people will be" -- Lao Tse