31.10.2012 Views

We are anonymous inside the hacker world of lulzse

We are anonymous inside the hacker world of lulzse

We are anonymous inside the hacker world of lulzse

SHOW MORE
SHOW LESS

You also want an ePaper? Increase the reach of your titles

YUMPU automatically turns print PDFs into web optimized ePapers that Google loves.

or online for most <strong>of</strong> <strong>the</strong> day and sometimes through <strong>the</strong> night. Some were talented coders who could create new scripts for <strong>the</strong> team as <strong>the</strong>ir<br />

own side projects; Pwnsauce, for instance, had been working on a project to create a new type <strong>of</strong> encryption.<br />

In <strong>the</strong> end, Topiary never invited anyone he knew into #pure-elite, and while Kayla had recommended a few friends, Sabu wasn’t<br />

comfortable with letting <strong>the</strong>m in ei<strong>the</strong>r. According to Topiary, about 90 percent <strong>of</strong> <strong>the</strong> <strong>hacker</strong>s who ended up in #pure-elite were Sabu’s<br />

friends or acquaintances from <strong>the</strong> underground. The #pure-elite chat room was an invite-only hidden command center, but <strong>the</strong> original<br />

founders would occasionally retreat to an even more secretive core channel to talk about <strong>the</strong> new recruits, <strong>the</strong> enemies, and, on r<strong>are</strong><br />

occasions, strategy. The atmosphere in #pure-elite was <strong>of</strong>ten buzzing as <strong>the</strong> crew celebrated over <strong>the</strong> latest attack and resultant media<br />

attention. When M_nerva entered <strong>the</strong> room, he seemed to be noticing this for <strong>the</strong> first time.<br />

“Lots <strong>of</strong> news coverage,” he said on <strong>the</strong> evening <strong>of</strong> May 31.<br />

Topiary showed him a photo <strong>of</strong> <strong>the</strong> front page <strong>of</strong> <strong>the</strong> Wall Street Journal’s Marketplace section. The lead story had <strong>the</strong> headline “Hackers<br />

Broaden Their Attacks” and <strong>the</strong> subtitle: “Almost Anyone Is a Target.’“ Underneath it was a large image <strong>of</strong> <strong>the</strong> cartoonish Nyan Cat image<br />

<strong>the</strong>y had uploaded to <strong>the</strong> PBS website, and <strong>the</strong> LulzSec monocled man. Above <strong>the</strong> rainbow emanating from Nyan Cat’s butt as it flew<br />

through space was <strong>the</strong> Internet meme “All your base <strong>are</strong> belong to LulzSec.” It was a most surreal combination <strong>of</strong> old media and Internet<br />

subculture.<br />

“Fucking Wall Street Journal printed a Twitter name and a fucking cat in space,” said Topiary, incredulous.<br />

The group was shooting <strong>the</strong> breeze mostly, chatting about <strong>the</strong> technical intricacies <strong>of</strong> Internet browsers, while Topiary would drop updates<br />

on <strong>the</strong> group’s Bitcoin donations. Participants would report on leaks <strong>the</strong>y were being <strong>of</strong>fered by o<strong>the</strong>r <strong>hacker</strong>s outside <strong>the</strong> group and,<br />

increasingly, on what LulzSec’s enemies were up to. These antagonists were made up <strong>of</strong> online colleagues Backtrace and <strong>hacker</strong>s like The<br />

Jester; both camps <strong>of</strong>ten chatted toge<strong>the</strong>r on <strong>the</strong> 2600 IRC network. There was no requirement to being invited into <strong>the</strong> #pure-elite room and<br />

no rules o<strong>the</strong>r than <strong>the</strong> obvious one to keep everything that was said <strong>the</strong>re secret. The channel topic, set by Sabu, always said: “NO LEAKS<br />

—RESPECT EACH OTHER—RESEARCH AND EXPLOIT DEV!” The one policy <strong>of</strong> #pure-elite was that no one was to store chat logs<br />

from <strong>the</strong> channel.<br />

The secondary crew generally knew <strong>the</strong>ir place, aw<strong>are</strong> that directions would come from Sabu, Topiary, and Kayla, and <strong>the</strong>y were meant to<br />

be followed. Overall, <strong>the</strong>y were happy to be coming along for <strong>the</strong> ride, though a few were shocked at <strong>the</strong> backlash LulzSec was getting.<br />

“By <strong>the</strong> way,” Storm said one evening. “FailSec? WTF is this shit?” He was referring to ano<strong>the</strong>r Twitter account with a few hundred<br />

followers that had been set up to publicly heckle LulzSec with messages like “Load fail cannons!” and ominous hints that <strong>the</strong> team would<br />

soon be in jail.<br />

“Storm, we’ve had stalkers like that for months,” said Topiary. “They follow us everywhere we go. They monitor everything we do. They<br />

make parodies <strong>of</strong> our accounts.” He thought for a moment <strong>the</strong>n added, “<strong>We</strong>’re kind <strong>of</strong> like a rock band.” With stardom came infamy. Some<br />

<strong>of</strong> <strong>the</strong>ir detractors were so obsessed with heckling LulzSec that when Topiary blocked one on Twitter, <strong>the</strong> detractor would create two or three<br />

more accounts to keep talking.<br />

Kayla pointed out that Adrian Lamo, <strong>the</strong> <strong>hacker</strong> who claimed to have outed <strong>the</strong> WikiLeaks alleged mole, Private Bradley Manning, had<br />

even registered <strong>the</strong> web address LulzSec.com to stop <strong>the</strong> team from using it as a website. Lamo, age thirty and diagnosed with Asperger’s<br />

syndrome, had been called <strong>the</strong> “<strong>world</strong>’s most hated <strong>hacker</strong>” for passing information on Manning to military intelligence.<br />

Storm <strong>of</strong>fered to find a different URL, but Topiary declined. He and Tflow were already designing a simple-looking <strong>of</strong>ficial site for<br />

LulzSec in <strong>the</strong>ir sp<strong>are</strong> time. Naturally, <strong>the</strong> background would be <strong>of</strong> <strong>the</strong> Nyan Cat flying in space and would borrow <strong>the</strong> design template <strong>of</strong><br />

HBGary.com.<br />

“Night guiz,” M_nerva suddenly said.<br />

“Night,” said three <strong>of</strong> <strong>the</strong> o<strong>the</strong>rs. M_nerva signed <strong>of</strong>f. It was nighttime in <strong>the</strong> United States, but LulzSec and its supporters were bored and<br />

looking for things to do.<br />

“Wanna find something to hit?” Topiary asked <strong>the</strong> room.<br />

“Sure,” said Storm.<br />

“There’s a shit cool site, FBI.gov,” said Topiary jokingly. There was a pause.<br />

“Are you really that open to just going to jail?” Storm said.<br />

“I suppose we could piss <strong>of</strong>f some IRC for lulz,” said Topiary, pointing to a less risky target.<br />

“Sure,” Storm said. Topiary and Kayla decided that, high on <strong>the</strong>ir victory against PBS, it was time to go after <strong>the</strong>ir biggest detractor, The<br />

Jester. They would not just spam his channel #Jester and boot <strong>of</strong>f his so-called Jesterfags but flood <strong>the</strong> entire 2600 chat network with junk<br />

traffic and take all <strong>of</strong> it <strong>of</strong>fline. It may have housed hundreds <strong>of</strong> participants, but it was still The Jester’s hideout, and Topiary hoped that <strong>the</strong><br />

result would be <strong>the</strong> 2600 admins getting angry not at LulzSec but at The Jester for provoking <strong>the</strong>m. Topiary was sure that The Jester’s<br />

supporters included people like Emick and Byun from Backtrace and considered sending spies into his channel at some point to see what<br />

<strong>the</strong>y were up to, maybe pr<strong>of</strong>ile some <strong>of</strong> its members. If Jester’s people were trying to provoke, it was working. Topiary and <strong>the</strong> o<strong>the</strong>rs had<br />

become increasingly irritated by The Jester over <strong>the</strong> past few days and now were set on attacking his crew for both fun and revenge.<br />

“Best thing to do when bored,” said Kayla in #pure-elite, “go to 2600 irc and just cause drama :D.”<br />

“Should we just go on over to 2600, flame <strong>the</strong>m, and <strong>the</strong>n packet it?” Topiary said, already getting ready for <strong>the</strong> action. He connected to<br />

<strong>the</strong> 2600 network to get a firsthand view <strong>of</strong> <strong>the</strong> network going down.<br />

Storm’s role was to launch a Denial <strong>of</strong> Service (DoS) attack on <strong>the</strong> 2600 network. This was like a DDoS but without <strong>the</strong> extra D for<br />

“distributed,” since Storm was sending junk packets from a single computer or server, not from multiple machines. (It was a loose term in any<br />

case—if your computer was running a virtual machine, or VM, and you launched a DoS attack, that could be considered more than one<br />

computer and thus a DDoS attack.) How could one computer launch a DoS attack against an IRC network? It would need a server or two to<br />

help amplify <strong>the</strong> data transfer. Sabu had used a similar method for his attack on <strong>the</strong> Tunisian government, though to a much greater degree,<br />

with <strong>the</strong> help <strong>of</strong> broadcast servers that he’d claimed to secretly hijack from a hosting company in London. Storm rented a basic server, so<br />

while his attack wasn’t as powerful, it could easily take down a small IRC network. Many people in Anonymous and in <strong>hacker</strong> circles,<br />

particularly those who acted as operators for AnonOps IRC, rented or owned servers. Controlling a server was more common than<br />

controlling a botnet; it was like owning a nice car. You paid good money for it but were happy to let o<strong>the</strong>r people ride in what was a status<br />

symbol as much as a useful tool.

Hooray! Your file is uploaded and ready to be published.

Saved successfully!

Ooh no, something went wrong!