31.10.2012 Views

We are anonymous inside the hacker world of lulzse

We are anonymous inside the hacker world of lulzse

We are anonymous inside the hacker world of lulzse

SHOW MORE
SHOW LESS

Create successful ePaper yourself

Turn your PDF publications into a flip-book with our unique Google optimized e-Paper software.

2011, however, we held our first real interview on IRC and he became more forthcoming.<br />

It is unclear if “Christopher Ellison,” <strong>the</strong> name associated with AVunit in Backtrace’s final document, was correct or not. There have<br />

been no press reports or police announcements related to <strong>the</strong> arrest <strong>of</strong> someone connected to <strong>the</strong> nickname, and no information about<br />

<strong>the</strong> whereabouts <strong>of</strong> <strong>the</strong> real AVunit as <strong>of</strong> mid-April 2012.<br />

The study by Francois Paget was published on October 21, 2011, in a McAfee blog post entitled “The Rise and Fall <strong>of</strong> Anonymous.”<br />

The detail about <strong>the</strong> FBI contacting Jennifer Emick comes from conversations with Emick. The additional point that <strong>the</strong> FBI needed to<br />

wait to corroborate Sabu’s identity and ga<strong>the</strong>r enough evidence to threaten him with a long sentence was sourced from <strong>the</strong><br />

FoxNews.com report “Infamous International Hacking Group LulzSec Brought Down by Own Leader,” published on March 6,<br />

2012.<br />

Laurelai Bailey hadn’t been <strong>the</strong> only log leaker. Less damaging, though still embarrassing, was a leak from freelance television and <strong>We</strong>b<br />

journalist Mat<strong>the</strong>w Keys, who had been given access to #InternetFeds from December <strong>of</strong> 2010 to January 6, 2011, when he was<br />

banned after <strong>the</strong> channel’s members suspected him <strong>of</strong> leaking information to <strong>the</strong> Guardian. Sabu later claimed that Keys had given<br />

away administrator access to <strong>the</strong> online publishing system <strong>of</strong> Tribune, his former employer, in return for <strong>the</strong> chance to “hang out in<br />

our channel.” Keys denies this.<br />

A note on making IRC channels: generally, <strong>the</strong> person who comes up with <strong>the</strong> idea for a channel is <strong>the</strong> person who creates <strong>the</strong> channel.<br />

Creators can make channels more secure by adding commands like +isPu and +k to gain more control <strong>of</strong> who comes in. But<br />

sometimes <strong>the</strong> best way to make a channel secure is to make it completely open, with no invite policy at all, and to keep switching<br />

between different channels every day or two. Making a channel “invite only” is “like holding a red flag in front <strong>of</strong> a bull,” according<br />

to AVunit, who added that this was why he and his <strong>the</strong> team avoided invite-only policies. To find each o<strong>the</strong>r, team members would<br />

use normal IRC queries, check which channel was active, or just type in <strong>the</strong> relevant channel in IRC and rejoin <strong>the</strong> discussion.<br />

It’s worth noting that Backtrace itself was <strong>the</strong> subject <strong>of</strong> numerous doxing episodes. From at least <strong>the</strong> spring <strong>of</strong> 2011, a number <strong>of</strong><br />

Anonymous supporters unveiled its members as Jennifer Emick, Jin-Soo Byun, and John Rubenstein, publishing <strong>the</strong>ir home<br />

addresses, telephone numbers, some family details, and o<strong>the</strong>r online pr<strong>of</strong>iles on <strong>the</strong> web tool Pastebin.<br />

Chapter 15: Breaking Away<br />

The descriptions <strong>of</strong> “three ways to respond to a dox” were derived from my conversations with Topiary and my observations <strong>of</strong> <strong>the</strong> way<br />

Anonymous supporters, such as Ryan Cleary, reacted to having <strong>the</strong>ir true identities unveiled. Fur<strong>the</strong>r details about “drama” in<br />

Anonymous and <strong>the</strong> culture bred through <strong>the</strong> morass <strong>of</strong> channels on IRC were sourced from my conversations with adherents <strong>of</strong><br />

Anonymous and my own observations. The detail about Aaron Barr’s idea for getting into private coding channels, as well as <strong>the</strong><br />

description in this chapter <strong>of</strong> “No,” come from Topiary’s testimony. The details <strong>of</strong> Renee Haefer’s FBI raid were sourced from an<br />

interview that Haefer gave to Gawker for an online story entitled “An Interview with a Target <strong>of</strong> <strong>the</strong> FBI’s Anonymous Probe,”<br />

published on February 11, 2011. Details on <strong>the</strong> five Britons arrested on January 27 <strong>are</strong> sourced from a Metropolitan Police<br />

announcement and from news reports.<br />

The paragraphs detailing Topiary’s elaborate getaway were sourced from interviews with Topiary himself. I have edited <strong>the</strong> faked log<br />

substantially for brevity; <strong>the</strong> log had mentioned that Topiary’s wireless router had been left on. This was meant to cause fur<strong>the</strong>r<br />

confusion among <strong>the</strong> hundreds <strong>of</strong> regular users on AnonOps, because routers were <strong>the</strong> number one item that was looked for in a raid.<br />

The ruse almost got too elaborate. One online female friend was already freaking out so much that she had tried contacting Topiary’s<br />

<strong>the</strong>n-girlfriend, a Canadian girl he had met online about three years prior. Problematically, this friend <strong>the</strong>n let slip to o<strong>the</strong>rs that<br />

Topiary’s girlfriend existed. Until <strong>the</strong>n, he had been trying to insulate his girlfriend from his activities with Anonymous, so that she<br />

would not be roped in as a co-conspirator if he were ever arrested. To fix this problem, he wrote up ano<strong>the</strong>r faked message, this time<br />

from his girlfriend, hinting that she was suddenly jealous <strong>of</strong> <strong>the</strong> worried female friend. The suggestion distracted <strong>the</strong> girl enough from<br />

suspecting <strong>the</strong> truth: that Topiary had not been arrested but had broken away from Anonymous.<br />

Quotes from <strong>the</strong> Anonymous press release directed at Sony were sourced from <strong>the</strong> press release itself, which is still available on<br />

AnonNews.org. Details <strong>of</strong> William’s involvement in OpSony come from interviews with him. William also e-mailed me a link to<br />

some <strong>of</strong> <strong>the</strong> handiwork <strong>of</strong> SonyRecon, including Sony CEO Howard Stringer’s old and current home addresses in New York, his<br />

wife’s name, <strong>the</strong> names <strong>of</strong> his children, and <strong>the</strong> name <strong>of</strong> his son’s old school. The post is still online at JustPaste.<br />

The details about Sony’s lawsuit against George Hotz come from various mainstream news reports.<br />

“Angering millions <strong>of</strong> gamers around <strong>the</strong> <strong>world</strong>” is my interpretation <strong>of</strong> myriad angry comments on forums for gamers as well as on <strong>the</strong><br />

<strong>of</strong>ficial PlayStation Network website, which contains statements showing that <strong>the</strong> PSN is used by tens <strong>of</strong> millions <strong>of</strong> people.<br />

Sony’s eight-page letter to <strong>the</strong> U.S. House <strong>of</strong> Representatives dated May 3, 2011, is viewable on Flickr.<br />

The publication <strong>of</strong> 653 nicknames and IP addresses on AnonOps was pasted in a public document online, which I have seen and which<br />

was brought to light by various news reporters, including by Forbes’s Andy Greenberg. His story “Mutiny Within Anonymous May<br />

Have Exposed Hackers’ IP Addresses” was published on May 9, 2011. I made <strong>the</strong> point that “AnonOps IRC became a ghost town”<br />

as a result <strong>of</strong> my own and Topiary’s observations <strong>of</strong> <strong>the</strong> network. The statement by various AnonOps operators that <strong>the</strong>y were<br />

“pr<strong>of</strong>oundly sorry for this drama” was posted and reposted on various blogs. The original post also mentioned that AnonOps would<br />

“stage a comeback and return to full strength eventually.” Ryan Cleary, who was behind <strong>the</strong> IP leak, gave an interview to <strong>the</strong> tech<br />

blog thinq_, saying that <strong>the</strong> operators behind AnonOps were “publicity hungry” and had “begun engaging in operations simply to<br />

grab headlines” and “feed <strong>the</strong>ir own egos.” “They just like seeing things destroyed,” thinq_ quoted Ryan as saying.<br />

I saw <strong>the</strong> dox file about Ryan when it was first posted online. It included his real address in Wickford, Essex, his cell phone number,<br />

and <strong>the</strong> names and ages <strong>of</strong> his p<strong>are</strong>nts. The dox page said that Ryan had been “owned” by Evo, adding “Who’s <strong>the</strong> ‘pet’ now, bitch?”<br />

The document also gave “shouts,” or acknowledgments, to Sabu, Kayla, Owen, #krack, and all <strong>of</strong> AnonOps.<br />

The assertion that Anonymous was “starting to look like a joke” comes from my own observations as well as discussions with

Hooray! Your file is uploaded and ready to be published.

Saved successfully!

Ooh no, something went wrong!