Slashdot Mirror


GhostShell Hackers Release Data From Exploiting NASA, FBI, ESA

An anonymous reader writes "The Register is reporting that the hacking collective GhostShell has announced it has [dumped] around 1.6 million account details purloined from government, military, and industry. The [hacking] group said in a statement: 'we have prepared a juicy release of 1.6 million accounts/records from fields such as aerospace, nanotechnology, banking, law, education, government, military, all kinds of wacky companies & corporations working for the department of defense, airlines and more.'"

69 of 124 comments (clear)

  1. Is it working now? by Anonymous Coward · · Score: 1

    Or is slashdot still broken?

    1. Re:Is it working now? by aggemam · · Score: 2

      Which problems were you encountering?

    2. Re:Is it working now? by azalin · · Score: 2, Informative

      OT: A few minutes ago I was unable to leave the front page. All article links simply loaded the front page. Seems to be working by now.

    3. Re:Is it working now? by Anonymous Coward · · Score: 1, Insightful

      Is it really appropriate to call someone a dimwit when you appear to be functionally illiterate?

    4. Re:Is it working now? by Anonymous Coward · · Score: 4, Insightful

      Which problems were you encountering?

      For a period of at least several hours, clicking on any link to a story simply loaded you back on the front page.
      Mods, quit wasting your points giving -1's to people complaining about the site not working properly. The OP in this thread did not deserve to be modded as "Flamebait", give it an Offtopic if you're that pissed about it.

    5. Re:Is it working now? by yahwotqa · · Score: 2

      Miy wits only appear dim because I want them to last, instead of burning out, you insensitive clod!

    6. Re:Is it working now? by SomePgmr · · Score: 1

      I know we're off topic here, but that hasn't been my experience, with an S2 skyrocket. I can scroll through it all just fine.

      Works in both stock browser and dolphin, running on ics.

    7. Re:Is it working now? by Threni · · Score: 1

      I'm on Jelly Bean. Not tried other browsers because...well, it has to work on chrome or I'm not using it, much like I never install apps to view websites when I can just view the website in a browser!

  2. Re:What's their motive? by ae1294 · · Score: 3, Insightful

    I'm confused about what their motive is... Is it to endanger American citizens? Reveal military tactics and endanger soldier's lives? Is it to further corrupt a country that is hanging by a thread? I see no purpose to these hacks other than to gloat around anonymously and/or to endanger people.

    It's all for the Lulz....

  3. Re:What's their motive? by somersault · · Score: 4, Insightful

    Some men just want to watch the world burn.

    --
    which is totally what she said
  4. Okay, but why? by Anonymous Coward · · Score: 1

    Can't I just look up their emails on their web page or their business card? *lookspuzzled*

  5. Re:is nasa developing a bot net? by Anonymous Coward · · Score: 1, Interesting

    That's just part of the line whole line is:

    "1","2004-08-11 17:43:14","595","thing of ","Try to determine if this is a person or a computer responding.","54041e7f42c444ce65298f70581d9b52"

    The corresponding items are:

    bot,enteredtime,id,input,response,uid

    It's a database dump.

  6. The NSA? Hehehe, okay. by girlintraining · · Score: 4, Interesting

    Yeah, they have the password for the usernames of their website. You know, the one that has only public information. Wow, I'm so impressed. In other news, government and private-sector agencies use passwords to prevent people from randomly updating their public websites, which contain no sensitive or terribly interesting information. It's like saying I hacked the whitehouse because I was able to get into the e-mail account of one of the assistant junior staffer's intern's. woo, look at me! :\

    Also, Protip: Don't embarass one of the few agencies in the world with the resources and inclination to track you down (ie, the NSA). They basically built a whole second internet to track all the traffic on the first internet, and then built a giant super data warehouse to warehouse all the other warehouses. Not exactly the kind of people who's cheerios you want to piss in.

    --
    #fuckbeta #iamslashdot #dicemustdie
    1. Re:The NSA? Hehehe, okay. by Anonymous Coward · · Score: 1

      You know, even at the NSA there's probably people using the same password on several accounts.

    2. Re:The NSA? Hehehe, okay. by Anonymous Coward · · Score: 3, Funny

      I tough Cheerios was ment to be pissed in? Aren't they? Then im in big trouble...

      No, you're thinking of urinal cakes. People often get those mixed up, due to their similar flavour.

    3. Re:The NSA? Hehehe, okay. by Jah-Wren+Ryel · · Score: 4, Insightful

      Also, Protip: Don't embarass one of the few agencies in the world with the resources and inclination to track you down (ie, the NSA). They basically built a whole second internet to track all the traffic on the first internet, and then built a giant super data warehouse to warehouse all the other warehouses. Not exactly the kind of people who's cheerios you want to piss in.

      I'm happy someone is doing it. The day no one is willing to tweek the nose of power is the day the human race stops being human.

      --
      When information is power, privacy is freedom.
    4. Re:The NSA? Hehehe, okay. by AmiMoJo · · Score: 2

      It's significant because many people use the same password for multiple sites, so access to a relatively "harmless" database like this one will inevitably open up access to more sensitive stuff.

      To take your example of the assistant junior staffer's intern's email access there was once a company called Media Defender. A group called Media Defender Defender got into one of their staff's personal Gmail accounts, which he had stupidly copied all his work email to automatically for years. The company was blown wide open and exposed as fraudulent.

      If these guys were not too dumb they could have done this untracably, but unfortunately for them they probably are too dumb...

      --
      const int one = 65536; (Silvermoon, Texture.cs)
      SJW, n: "Someone I don't like, and by the way I'm a fuckwit" - AC
    5. Re:The NSA? Hehehe, okay. by Threni · · Score: 4, Insightful

      Who mentioned the NSA? Apart from you, I mean?

    6. Re:The NSA? Hehehe, okay. by IceNinjaNine · · Score: 1

      You know, even at the NSA there's probably people using the same password on several accounts.

      I would be very surprised if the NSA didn't use dual factor authentication. Hell, my ex-wife was an engineer for Sun Microsystems and wherever they went they had an "Enigma Card" (secure token device). I would hope if Sun/Oracle is doing it (love it when they call them "snorkle" now) one would hope that agencies like the NSA is doing it.

    7. Re:The NSA? Hehehe, okay. by girlintraining · · Score: 2

      It's significant because many people use the same password for multiple sites, so access to a relatively "harmless" database like this one will inevitably open up access to more sensitive stuff.

      That still doesn't solve that pesky problem of their being no connection to the outside world. You can't hack the Gibson if there are no incoming lines. -_- I could give you the root password to my computer and it would do you zero good because there's no way to make a connection to my computer: You couldn't even get past the crappy wifi router. I would expect the NSA's super top secret networks would be at least as secure as my $15 linksys router in this regard.

      --
      #fuckbeta #iamslashdot #dicemustdie
    8. Re:The NSA? Hehehe, okay. by tehcyder · · Score: 2

      I tough Cheerios was ment to be pissed in? Aren't they? Then im in big trouble...

      No, you're thinking of urinal cakes. People often get those mixed up, due to their similar flavour.

      I find that a bit insulting to urinal cakes.

      --
      To have a right to do a thing is not at all the same as to be right in doing it
    9. Re:The NSA? Hehehe, okay. by tehcyder · · Score: 1

      No one. NASA was mentioned by name, together with the Pentagon and FBI. I assume NSA was whatever the reading equivalent of a typo is for NASA.

      --
      To have a right to do a thing is not at all the same as to be right in doing it
    10. Re:The NSA? Hehehe, okay. by girlintraining · · Score: 1

      Who mentioned the NSA? Apart from you, I mean?

      Ah yes Vanna, I'd like to buy a vowel please? Another 'A'.

      --
      #fuckbeta #iamslashdot #dicemustdie
    11. Re:The NSA? Hehehe, okay. by ahabswhale · · Score: 1

      You know, the NSA doesn't allow the really juicy stuff to be physically accessible via the internet (like the military).

      --
      Are agnostics skeptical of unicorns too?
  7. Re:What's their motive? by TapeCutter · · Score: 4, Insightful

    "sheeple" - If you think the government is bad now, it would be a lot worse if people who use that term had any real power.

    --
    And did you exchange a walk on part in the war for a lead role in a cage? - Pink Floyd.
  8. We better get... by Deus.1.01 · · Score: 2

    ...section 9 on the case.

    --
    My -1 Troll is actually a +1 funny. And my -1 flame is actually a +1 insightfull.
  9. Re:What's their motive? by Marble1972 · · Score: 1

    Study ancient history and find out.

  10. Re:What's their motive? by Anonymous Coward · · Score: 3, Insightful

    ^this^

    Look its all good and all that you are 'leet' hacker. Did you scrub the data? Or did you dump it in the raw because that would entailed too much work? What I am asking is did you screw up someones life. Other than some admins who did not know about your exploits or maybe has no power to fix it? Did you notify the agencies involved (least the ones who do not throw a fit)? Or did you just dump the data out?

    So you broke into NASA. Nice. They now have to take money that is already low and spend it on infrastructure instead of science. Way to go bonehead.

    So you broke into FBI. Yeah, those guys react oh so well to having someone b&e. You have earned yourself a special agent whos job it is to find you and lock you up.

    Or maybe you just did it because you are an ass who just wants people to look at them and pay attention to how screechy they are. Hey maybe on the other hand you would be a perfect politician. But good luck with that and "I was arrested for hacking" on your record. The 'sheeple' will see that and ignore you.

  11. Re:What's their motive? by Anonymous Coward · · Score: 3, Interesting

    According to my 94 year old venerable grandmother we are not free anymore: there are too many laws and rules for anyone to understand what is legal and what is not.
    No need go back to ancient history to find out what a civilised society with less regulation would be like, ask your +90 elders. You will learn that poverty and misery would be abundant but the peoples would be freer economically (you could trade beef for chicken with your neighbours without risking a visit from the food police) but the peer pressure fueled by the churches would reduce moral freedoms .

  12. Re:is nasa developing a bot net? by Dr_Barnowl · · Score: 1

    They are MD5 hashes.

  13. Re:What's their motive? by c0lo · · Score: 1

    Some men just want to watch the world burn.

    Sexist and discriminatory.

    (grin)

    --
    Questions raise, answers kill. Raise questions to stay alive.
  14. Re:What's their motive? by drinkypoo · · Score: 1

    Or maybe, just maybe, he's an asshole and NASA should have worked a little harder on their infrastructure. Since NASA is a military contractor, it's obviously interesting to access their data.

    --
    "You're right," Fisheye says. "I should have set it on 'whip' or 'chop.'"
  15. The Register by Xacid · · Score: 1

    Are they even a real site? No, really.

    Just by quickly looking at what's on their site I can't tell if they want to be taken seriously or not.

    Headlines?
    "App designed for safe sending of naughty selfies is rife with risks. Teenager subtitles: App makes selfies safe BLAH BLAH BLAH "
    "Data cops seek 'urgent clarification' on new Facebook advertiser plans. We advertise to you next to your own content ... bitch "

    1. Re:The Register by ledow · · Score: 1

      You've never heard of The Reg? Come on, you're joking right?!

      They are a site that hosts both satirical, comic and serious articles on a range of IT topics. Home of things like the BOFH and Verity Stob "funnies", tongue-in-cheek-but-serious projects (like sending a Playmobil toy figure into space using some of the latest IT kit), and serious editorial on IT news.

      In good British tradition, even the most serious of IT events is reported with humour, to lessen the blow and provide a bit of humanity, and there's a lot of mocking of others (everything from satirising newspaper headlines of IT related news events to absolute piss-takes of, say, Apple announcements of why their maps don't work). And perhaps 99% of the entertainment is actually in the comments, not the article.

      Think "what Slashdot should have always been", and make it a little more British (i.e. we can happily take the piss out of our own "commentards" - as they call them - and they'll take it in good humour).

    2. Re:The Register by x3CDA84B · · Score: 2

      I think that's what The Register used to be. I stopped reading it years ago when it became impossible to tell if they were reporting actual news in a comical way, or completely fabricating a particular story.

    3. Re:The Register by tehcyder · · Score: 1

      Wow, you are possibly the most humourless person on slashdot. Good work fella, you've got some stiff competition.

      --
      To have a right to do a thing is not at all the same as to be right in doing it
    4. Re:The Register by Xacid · · Score: 1

      You're supposed to post as AC if you're going to belittle someone while avoiding answering a question. Don't you know the rules here?

    5. Re:The Register by Xacid · · Score: 1

      Yeah...it's that blending of the two types of "reporting" that threw me off. At least w/ the onion I know where I stand. With this group...I have no clue what they're after or who their audience even is. It feels like those well crafted spam emails that are almost coherent but just not quite.

    6. Re:The Register by fuzzywig · · Score: 1

      See that .co.uk in the URL? That means that there's a chance of irony and sarcasm being deployed.

  16. Re:What's their motive? by girlintraining · · Score: 1

    "sheeple" - If you think the government is bad now, it would be a lot worse if people who use that term had any real power.

    I don't think our government's going to get any better or worse based solely on what words our elected officials use. I only say this based on over a decade in IT, where the names of everything have changed many, many times, but the problems haven't.

    --
    #fuckbeta #iamslashdot #dicemustdie
  17. Re:What's their motive? by somersault · · Score: 3, Interesting

    The original question was

    I wonder what it would be like to live in a world that simply relies and trusts in the goodness of your neighbors.

    I don't think that existed 100 years ago. I don't think that exists anywhere. Not in our society, nor in the animal world. Anything that trusts too much gets wiped out sooner or later.

    100 years ago the world may have been more free economically, but issues of race and gender were a lot worse than what we have in most of today's supposedly "civilised" society.

    --
    which is totally what she said
  18. Re:What's their motive? by kelemvor4 · · Score: 1

    "sheeple" - If you think the government is bad now, it would be a lot worse if people who use that term had any real power.

    I don't think our government's going to get any better or worse based solely on what words our elected officials use. I only say this based on over a decade in IT, where the names of everything have changed many, many times, but the problems haven't.

    In that case you should be well aware that they're issues, not problems. Sheesh!

  19. Re:What's their motive? by kelemvor4 · · Score: 1

    Exactly, what part of "anarchy" is not clear here? I wonder what it would be like to live in a world that simply relies and trusts in the goodness of your neighbors.

    Ask your parents what it was like.

  20. Re:is nasa developing a bot net? by kelemvor4 · · Score: 1

    https://privatepaste.com/17c37f360e

    "Try to determine if this is a person or a computer responding.","54041e7f42c444ce65298f70581d9b52""

    what are those letters/numbers after every sentence?

    Nasa's been trying to decode the language of the martians for a few years and that's as close as they've come to succeeding.

  21. Re:What's their motive? by gmuslera · · Score: 1

    Maybe with this some anonymous person could show up a bit more of US dirty laundry without going to a martial court or being suicidal in practical terms. It should not be needed, but unfortunately is.

  22. Moronic Morons by zakeria · · Score: 1

    nuf said

  23. Re:What's their motive? by Anonymous Coward · · Score: 1

    From Miriam Webster:

    patriot
      noun \p-tr-t, -ät, chiefly British pa-tr-t\
    Definition of PATRIOT
      : one who loves his or her country and supports its authority and interests

    That doesn't sound like what these guys are doing can be defined as "patriots". Please explain how this is in the best interests of the country. Or better yet, please explain how this does anything other than steal technical data and post it online. Who benefits? What wrong is righted? How is the public better off? And please don't use some bogus idealistic explanation such as "the people are better off with more transparency!". I'm more concerned with actual concrete facts, like these people were being deluded, and now their lives are better because these documents were made public.

  24. Re:What's their motive? by Quiet_Desperation · · Score: 1

    Ooo, yeah, lets go back to the era of polio, typhoid and smallpox! People forget about stuff like that.

    ask your +90 elders.

    I did that once. She muttered something about not having "all them uppity coloreds" and "a good woman knew her place."

    Now get back to your factory shift, kid, or it's the coal mine for you! You fail that, and it's medical experiments for the lot of you.

    (QD cuffs AC up side the head)

  25. Re:What's their motive? by tehcyder · · Score: 1

    "sheeple" - If you think the government is bad now, it would be a lot worse if people who use that term had any real power.

    Presumably if you're one of the Randian sheeple-using libertarians you wouldn't be able to accept a job in government without your head exploding.

    --
    To have a right to do a thing is not at all the same as to be right in doing it
  26. NASA, FBI, ESA by Dunge · · Score: 1

    If even them are not protected enough, how can we trust them with our own security?

    1. Re:NASA, FBI, ESA by nedlohs · · Score: 1

      You don't. You trust (well the idea anyway) one of them to mainly investigate crimes after the fact and the other two to do various things related to reseach and exploration of deep space and aerospace.

  27. Re:What's their motive? by khallow · · Score: 2

    Is it to further corrupt a country that is hanging by a thread?

    I'd have to say this part is probably not correct. Corruption tends to lead to things like lax security and other cases of not doing the job. While this attack probably doesn't have much effect, I'd rather these guys be trying out the security rather than someone with more sinister motives. And maybe that embarrassment will get someone to do their job.

  28. Re:you cant hack by Impy+the+Impiuos+Imp · · Score: 2

    It only seems that way now, now that everybody knows about it.

    --
    (-1: Post disagrees with my already-settled worldview) is not a valid mod option.
  29. WARNING: The spook agencies are... by 3seas · · Score: 1

    .... watching your posts on slashdot for clues and tips....

    1. Re:WARNING: The spook agencies are... by tqk · · Score: 1

      ... watching your posts on slashdot for clues and tips

      We wish.

      Have you seen the stories on ProPublica about the US military losing battlefield operations data, going back to WWII?

      --
      "Tongue tied and twisted, just an Earth bound misfit ..." -- Pink Floyd.
  30. Sophisticated not, Government phishing attempt by sebo2000 · · Score: 3, Informative

    This is nothing more then Gov phishing attempt. I spent about 4 hours and went through most of the data, spotted few people I know, they have never had accounts on servers as those dumps claimed, I told them their “passwords” they had no clue what I was talking about, there was no wow how did you know! Reaction. Tried about 5000 user/password attempts none of them worked. Text strings from most of the Nasa/gov/contractors are public, you can google them. This whole crap of data looks like giant text scraping in attempt to generate legitimate looking “hacked” data. This was posted yesterday today noting works: http://pastebin.com/RdC0LZqW And those “super hackers” xl3gi0n have even they own facebook page please who buys this?? Another one post same dump GrenXparta_Hacker Just an example Todays dump http://pastebin.com/RdC0LZqW has following hash: MGHkLGt3ZQExBGZ2ZGt2MwD2ZmZ5LGSvZ2H5A2H0LzR= Quick search for this hash shows it showed up Sep 12 2012 on some Russian page: http://forum.insidepro.com/viewtopic.php?t=17101&sid=962d5d41e1b8225c223283ab91908b66 Some guy asks in Russian security forum what that hash is and someone says that it looks like SHA-256, but it misses / + so it is not. Or search for this: AGL2ZmEuL2HmAJL1AmVmMwVkLJRkAGL5BGtkZ2EyZTL= Every single one of those hashes is searchable on the net, most of them (from today) are from http://www.itpints.com/?sources%5B%5D=Twitter&q=Alexis%20Wright What is this? Real time search engine that generates hashes the same as in “leaked” docs claiming to be passwords? It screams FAKE. There is probably quite a few hashes\hot spots included that government is monitoring and checks who searches for what, also they will phish all the idiots that will share their work related data with “anonymous” install pin point them malware on their PC and monitor them further. At list what I would do :)

    1. Re:Sophisticated not, Government phishing attempt by Volastic · · Score: 1

      The E-mail address are good or real at least the ones from http://slexy.org/view/s21jyUzcUb spammers wet dream.
      Also Richard Clayton has blocked himself from search engines at bericotechnologies.com he works there http://i.imgur.com/m7feh.png
      Just the few I've played with.

      My post look like crap as I appear to be a bot.

  31. What will it get us... by hesaigo999ca · · Score: 1

    I guess this could also just be the chinese under mask, trying to expose the ongoings to seed more mistrust and win at the cyber war they are wagering...
    Please replace chinese with your favorite cyber-advanced anti-US country....

    1. Re:What will it get us... by sebo2000 · · Score: 1

      This is US trying to scare citizen, so they can apply full monitoring measures on the internet. Continuation of war on terror. Data that is posted has no value but regular fools do not see it, they think someone is attacking us, and we need more internet laws and control.

  32. Re:What's their motive? by Pubstar · · Score: 1

    What about hippie communes?

  33. Re: What's their motive? by Urza9814 · · Score: 1

    "The duty of a true patriot is to protect his country from its government."
      - Thomas Paine ...which is exactly what is being done.

  34. Re:What's their motive? by Johann+Lau · · Score: 1

    Endangering those that endanger American citizens on a real big scale is technically "endangering American citizens"... maybe shove your wordplay/sophistry up your as and see if that helps you understand this at all.

  35. Re:Hmmm... by Johann+Lau · · Score: 1

    Appeasement doesn't work; how often do you have to get fucked until that dawns on you?

    And how about "this is nowhere near enough" instead of "this is too much"?

    If you don't deal with politricks, politricks will deal with you. So the very least you can do is to support those with more balls than you, while trying to grow a pair of your own.

    (and no, I don't know or care about the details of this, I'm dealing with the convenient "let's crawl up the ass of power and patronize the people outside" crowd that always shows up in articles such as this)

  36. Re:Hmmm... by mbkennel · · Score: 1

    Vandalism works even worse than appeasement.

  37. Re:What's their motive? by aNonnyMouseCowered · · Score: 1

    "The original question was

    'I wonder what it would be like to live in a world that simply relies and trusts in the goodness of your neighbors.'

    I don't think that existed 100 years ago. I don't think that exists anywhere. Not in our society, nor in the animal world. Anything that trusts too much gets wiped out sooner or later."

    Any group where the members fear each other too much would soon disintegrate or worst descend into internecine conflict. Yes, some form of "trust" is necessary in any animal society, even in species where the dominant social unit is the lone wolf or tiger.

    Fearing too much is as worst as trusting too much. I'd rather trust my neighbor, whom I've observed for a few weeks, than an amorphous entity called the government, even if that government has been existence for decades or even centuries. There are exceptions. My neighbor could well be a government agent!

  38. Re:What's their motive? by somersault · · Score: 1

    Of course. Either extreme is likely to end up in failure. But "simply trusting" will never work long term in any non-trivial social structure.

    --
    which is totally what she said
  39. GhostShell is gov't shill by THE_WELL_HUNG_OYSTER · · Score: 2

    This fake info was posted by a government shill. The point of the post is no different than Operation Fast & Furious--find those behind the lines.

  40. Re:Hmmm... by tqk · · Score: 1

    Vandalism works even worse than appeasement.

    When Andrei Sakharov and friends were passing Samizdat around to all their friends, the Soviets saw that as vandalism. It was one of the most powerful factors dragging down the Soviet Union. It was as powerful as the Internet in those days.

    Note, I'm not equating these GhostShell jerks with the likes of Sakharov et al. Going after individual service members is damned sick I think. Their masters are the ones they ought to be screwing over if anyone deserves it. Leon Panetta sounds like an idiot (but I think I still would love to work for him; maybe I could help him fix his !@#$).

    --
    "Tongue tied and twisted, just an Earth bound misfit ..." -- Pink Floyd.
  41. Re:you cant hack by tqk · · Score: 1

    sql injection attacks is not hacking ...

    It only seems that way now, now that everybody knows about it.

    Those whose data was stolen don't appear to know about it.

    --
    "Tongue tied and twisted, just an Earth bound misfit ..." -- Pink Floyd.