31.10.2012 Views

We are anonymous inside the hacker world of lulzse

We are anonymous inside the hacker world of lulzse

We are anonymous inside the hacker world of lulzse

SHOW MORE
SHOW LESS

You also want an ePaper? Increase the reach of your titles

YUMPU automatically turns print PDFs into web optimized ePapers that Google loves.

<strong>the</strong>y added. “What did [Topiary] mean by that? Taking credit? Red herring?” Very few people outside <strong>of</strong> <strong>the</strong> LulzSec team and a few <strong>of</strong> <strong>the</strong>ir<br />

closest online friends knew that LulzSec was made up <strong>of</strong> <strong>the</strong> old HBGary <strong>hacker</strong>s, and <strong>the</strong> anagram question was quickly drowned out.<br />

Hundreds <strong>of</strong> people on Twitter were talking excitedly about this new hacking group and its audacious swoop on PBS. Many more started<br />

following <strong>the</strong> @LulzSec Twitter feed to hear communiqués directly from Topiary. Almost at once, he was getting tens <strong>of</strong> thousands <strong>of</strong><br />

followers.<br />

Chapter 19<br />

Hacker War<br />

The victory <strong>of</strong> <strong>the</strong> PBS attack had left Topiary in a daze <strong>of</strong> newfound fame and hubris. He knew he wasn’t leading <strong>the</strong> hacks or really even<br />

partaking in <strong>the</strong>ir mechanics, but acting as <strong>the</strong> mouthpiece for LulzSec certainly made it seem to him, and sometimes to <strong>the</strong> o<strong>the</strong>rs in <strong>the</strong><br />

group, like he was steering <strong>the</strong> ship. That meant speaking on behalf <strong>of</strong> LulzSec when he got into verbal tiffs with some <strong>of</strong>ten impassioned<br />

enemies on Twitter.<br />

The PBS hack had ushered a blast <strong>of</strong> attention from <strong>the</strong> media and earned <strong>the</strong> group a sudden wave <strong>of</strong> fans, with even <strong>the</strong> administrators <strong>of</strong><br />

Pastebin, <strong>the</strong> free text application that LulzSec was using to dump its spoils, app<strong>are</strong>ntly happy with <strong>the</strong> extra web traffic <strong>the</strong>y got with each<br />

release. But in a <strong>world</strong> already steeped in trolling, drama, and civil war, <strong>the</strong>re were plenty <strong>of</strong> eager detractors. Jennifer Emick flung a few<br />

diatribes at <strong>the</strong> LulzSec Twitter feed, as did <strong>the</strong> Dutch teenager Martijn “Awinee” Gonlag, who had been arrested in December <strong>of</strong> 2010<br />

when he used <strong>the</strong> LOIC tool against <strong>the</strong> Ne<strong>the</strong>rlands government without hiding his IP address.<br />

Awinee and many o<strong>the</strong>r “Twitter trolls” appe<strong>are</strong>d to align <strong>the</strong>mselves with The Jester, <strong>the</strong> ex-military <strong>hacker</strong> who had DDoS’d WikiLeaks<br />

in December <strong>of</strong> 2010, <strong>the</strong>n taken down <strong>the</strong> <strong>We</strong>stboro Baptist Church sites in February. He was never as dangerous as <strong>the</strong> actual police, but<br />

he was certainly a source <strong>of</strong> drama and distraction. The Jester hung out in an IRC channel called #Jester, on a network aligned with <strong>the</strong><br />

magazine 2600: The Hacker Quarterly.<br />

The name 2600 came from <strong>the</strong> discovery in <strong>the</strong> 1960s that a plastic toy whistle found <strong>inside</strong> certain boxes <strong>of</strong> Cap’n Crunch cereal in <strong>the</strong><br />

United States created <strong>the</strong> exact 2,600 hertz tone that led a telephone switch to think a call was over. It was how early <strong>hacker</strong>s <strong>of</strong> <strong>the</strong> 1980s,<br />

known as phone phreaks, subverted telephone systems to <strong>the</strong>ir desires. Unlike AnonOps IRC, on <strong>the</strong> 2600 IRC network, any talk <strong>of</strong> illegal<br />

activity was generally frowned upon. If people talked about launching a DDoS attack, <strong>the</strong>y were discussing <strong>the</strong> technological intricacies <strong>of</strong><br />

such an attack. If 2600 was a weapons store where enthusiasts discussed double- and single-action triggers, AnonOps was <strong>the</strong> bar in a dark<br />

alley where <strong>the</strong> desperadoes talked <strong>of</strong> who <strong>the</strong>y’d like to hit next.<br />

After hitting PBS, LulzSec’s founders decided that as attention to LulzSec grew, <strong>the</strong>y would eventually need <strong>the</strong>ir own IRC network just<br />

like AnonOps and 2600. Sabu also wanted to create a second tier <strong>of</strong> supporters, a close-knit network beyond <strong>the</strong> core six members that could<br />

help <strong>the</strong>m on hacks. The team had decided from <strong>the</strong> beginning that <strong>the</strong>ir core <strong>of</strong> six should never be breached or added to, and when Topiary<br />

heard Sabu’s plans, he felt skeptical. Just look what had happened in #HQ when Kayla had invited Laurelai. But Sabu argued <strong>the</strong>y needed at<br />

least a fluid secondary ring <strong>of</strong> supporters. These were people that Sabu already knew from <strong>the</strong> underground and trusted 100 percent or <strong>the</strong>y<br />

weren’t in. Sabu had started talking to some <strong>of</strong> his old crew and he invited <strong>the</strong>m into an IRC chat room <strong>the</strong>y had created for <strong>the</strong>se new<br />

supporters, called #pure-elite, named after a website he had created for his hacking friends in 1999. These were genius programmers and<br />

people with powerful botnets, veteran <strong>hacker</strong>s from <strong>the</strong> 1990s who had gotten into <strong>the</strong> networks at Micros<strong>of</strong>t, NASA, and <strong>the</strong> FBI. The<br />

combined skills <strong>of</strong> <strong>the</strong> group were almost frightening. Topiary reminded Sabu that he wasn’t comfortable with all <strong>the</strong> new people—it seemed<br />

risky. Who knew; one <strong>of</strong> <strong>the</strong>se people might leak logs, as Laurelai had done so devastatingly in #HQ. It also brought up <strong>the</strong> question <strong>of</strong> why<br />

Sabu even needed him anymore.<br />

All <strong>the</strong> same, he could hardly believe <strong>the</strong> company he was now in. He focused on picking up tips from <strong>the</strong> o<strong>the</strong>rs. If <strong>the</strong>y used <strong>hacker</strong><br />

terminology he didn’t understand, he would Google it: jargon like virtual machines, hacking methods like SQL injection, various types <strong>of</strong><br />

attack vectors and programming terminology. If he hit a brick wall, <strong>the</strong>y could give him a quick summary.<br />

Soon <strong>the</strong>re were eleven supporters in #pure-elite to learn from, plus <strong>the</strong> original six. Sabu was still <strong>the</strong> main person to ask about finding<br />

exploits; Kayla about securing yourself. AVunit and Tflow were still <strong>the</strong> experts in infrastructure. For Sabu, <strong>the</strong> extra supporters weren’t<br />

<strong>the</strong>re to teach him anything—he believed he and LulzSec were training <strong>the</strong>m. Sabu tended to think <strong>of</strong> everyone in <strong>the</strong> subgroup as a student<br />

and he told Topiary privately that he hoped this could lead to <strong>the</strong> start <strong>of</strong> ano<strong>the</strong>r anti-security, or Antisec, movement. The last time Antisec<br />

had been in <strong>the</strong> headlines was <strong>the</strong> early 2000s, when <strong>the</strong> <strong>We</strong>b’s disrupters were a few hundred skilled <strong>hacker</strong>s, as opposed to <strong>the</strong> thousands<br />

<strong>of</strong> Internet-savvy people joining Anonymous today.<br />

By now Kayla and <strong>the</strong> o<strong>the</strong>rs who had been scanning for big-name websites with security vulnerabilities had hundreds to work from. But<br />

each one had be checked out, first to see if it could be exploited so that someone could enter <strong>the</strong> network, and second to see if <strong>the</strong>re was<br />

anything interesting to leak from it. All <strong>the</strong>se things took time and were <strong>of</strong>ten done sporadically without roles being assigned. People would<br />

volunteer to check a vulnerability out. LulzSec now had a raft <strong>of</strong> much bigger targets beyond PBS and Fox that <strong>the</strong>y could potentially go<br />

after, some with .mil and .gov web addresses. None <strong>of</strong> <strong>the</strong>m corresponded to any particular <strong>the</strong>me or principle; if <strong>hacker</strong>s found a high-pr<strong>of</strong>ile<br />

organization that looked interesting, <strong>the</strong>y would go after it and explain <strong>the</strong>ir reasoning later. Knowing that Sabu had a tendency to inflate his<br />

rhetoric about targets, Topiary did not yet understand what hitting some <strong>of</strong> <strong>the</strong>se websites actually meant.<br />

The associates were <strong>hacker</strong>s like Neuron, an easygoing exploit enthusiast; Storm, who was mysterious but highly skilled; Joepie91, <strong>the</strong><br />

well-known and extremely loquacious Anon who ran <strong>the</strong> AnonNews.net website; M_nerva, a somewhat alo<strong>of</strong> but attentive young <strong>hacker</strong>;<br />

and Trollpoll, a dedicated anti–white hat activist. In <strong>the</strong> most busy periods <strong>of</strong> LulzSec, both <strong>the</strong> core and secondary crew were in #pure-elite<br />

or online for most <strong>of</strong> <strong>the</strong> day and sometimes through <strong>the</strong> night. Some were talented coders who could create new scripts for <strong>the</strong> team as <strong>the</strong>ir

Hooray! Your file is uploaded and ready to be published.

Saved successfully!

Ooh no, something went wrong!