31.10.2012 Views

We are anonymous inside the hacker world of lulzse

We are anonymous inside the hacker world of lulzse

We are anonymous inside the hacker world of lulzse

SHOW MORE
SHOW LESS

You also want an ePaper? Increase the reach of your titles

YUMPU automatically turns print PDFs into web optimized ePapers that Google loves.

Iceland and beyond.<br />

The following day, q and Assange wanted to talk to LulzSec again. Perhaps sensing that Topiary was still skeptical, q insisted on<br />

uploading ano<strong>the</strong>r video. It again showed his laptop screen and <strong>the</strong> IRC chat <strong>the</strong>y were having being updated in real time, <strong>the</strong>n a close-up <strong>of</strong><br />

Assange himself, head in hand again, but this time blinking and moving <strong>the</strong> track pad on his laptop, <strong>the</strong>n him talking to a woman next to him.<br />

The camera was <strong>the</strong>n walked around Assange before <strong>the</strong> video ended. The video had been filmed and uploaded in less than five minutes.<br />

Topiary, who was experienced with Photoshop and image manipulation, calculated that doctoring <strong>the</strong> IRC chat and Assange in <strong>the</strong> same<br />

video image within such a short space <strong>of</strong> time would have been incredibly difficult, and he veered toward believing this was all real.<br />

But q was not asking LulzSec to be hit men out <strong>of</strong> <strong>the</strong> goodness <strong>of</strong> <strong>the</strong>ir hearts. There was potential for mutual gain. q was <strong>of</strong>fering to give<br />

<strong>the</strong> group a spreadsheet <strong>of</strong> classified government data, a file called RSA 128, which was c<strong>are</strong>fully encrypted and needed cracking. q didn’t<br />

send it over, but he described <strong>the</strong> contents.<br />

“That’s pretty heavy stuff to crack,” Sabu told q. “Have you guys tried simple bruteforce?” q explained <strong>the</strong>y had had computers at MIT<br />

working on <strong>the</strong> file for two weeks with no success. Topiary wanted to ask if Assange was going to give <strong>the</strong> team o<strong>the</strong>r things to leak, but he<br />

decided not to. Part <strong>of</strong> him didn’t want to know <strong>the</strong> answer to that. It was already starting to look like LulzSec was on <strong>the</strong> road to becoming a<br />

black hat version <strong>of</strong> WikiLeaks. If WikiLeaks was sitting on a pile <strong>of</strong> classified data that was simply too risky to leak, <strong>the</strong>n it now had a<br />

darker, edgier cousin to leak it through.<br />

Topiary decided to mention that LulzSec had been <strong>the</strong> same team behind <strong>the</strong> HBGary attack. Assange said he had been impressed with <strong>the</strong><br />

HBGary fallout but added, “You could have done it better. You could have gone through all <strong>the</strong> e-mails first.”<br />

“<strong>We</strong> could have,” Topiary conceded, “but we’re not a leaks group. <strong>We</strong> just wanted to put it out as fast as possible.”<br />

“Yes but you could have released it in a more structured way,” Assange said.<br />

“<strong>We</strong> didn’t want to go through 75,000 e-mails looking for corruption,” Topiary countered again. He remembered how he had trawled<br />

through those e-mails looking not for scandal but for Penny Leavy’s love letter to Greg Hoglund and for Barr’s World <strong>of</strong> Warcraft character.<br />

The team decided to invite Assange and q over to <strong>the</strong>ir IRC network on Sabu’s server. Topiary created a channel for <strong>the</strong>m all to talk in and<br />

called it #IceLulz. q said he wished WikiLeaks could help <strong>the</strong> group more with things like servers or even advice, but <strong>the</strong>y didn’t want to link<br />

<strong>the</strong> organization too obviously to LulzSec. In fact, when Topiary told q to go ahead and send <strong>the</strong> RSA 128 file over any time, q seemed to<br />

back <strong>of</strong>f.<br />

“Yeah, maybe in <strong>the</strong> future we’ll see how this goes,” q said. He never did send <strong>the</strong> file, at least not to Topiary.<br />

Still, Sabu was “<strong>the</strong> most excited he had ever been,” Topiary later remembered, over <strong>the</strong> moon that WikiLeaks was asking for his help. It is<br />

unclear if Sabu was in reality haunted by <strong>the</strong> fact that he was now also helping to implicate Assange. Six months prior, he had believed so<br />

passionately in <strong>the</strong> WikiLeaks cause that he was willing to risk bringing his <strong>hacker</strong> name out into <strong>the</strong> public for <strong>the</strong> first time in nine years.<br />

Ano<strong>the</strong>r possibility: <strong>the</strong> FBI was encouraging Sabu to reach out to Assange to help ga<strong>the</strong>r evidence on one <strong>of</strong> <strong>the</strong> most notorious <strong>of</strong>fenders <strong>of</strong><br />

classified government data in recent times. It seems probable that if Sabu had helped, for instance, extradite Assange to <strong>the</strong> United States, it<br />

would have improved his settlement dramatically.<br />

“It’s our greatest moment,” Sabu told <strong>the</strong> crew. He and q started talking in more depth about various websites, and <strong>the</strong>n Sabu sent links to<br />

two government websites and a company to <strong>the</strong> rest <strong>of</strong> <strong>the</strong> team, tasking <strong>the</strong>m with finding a way to get into <strong>the</strong>ir networks and grab e-mails.<br />

Over <strong>the</strong> next few days, Topiary passed <strong>the</strong> job <strong>of</strong> staying in contact with WikiLeaks to Sabu, and for <strong>the</strong> next few weeks, Assange visited<br />

LulzSec’s chat network four or five more times.<br />

Topiary left <strong>the</strong> #IceLulz IRC channel open on his laptop and kept it open. Pretty soon, though, it became just ano<strong>the</strong>r one <strong>of</strong> <strong>the</strong> thirty<br />

o<strong>the</strong>r channels demanding his attention, ano<strong>the</strong>r page <strong>of</strong> flashing red text.<br />

Chapter 23<br />

Out with a Bang<br />

LulzSec was now so big that it made Anonymous and its fountainhead 4chan look like harmless pranksters. Over on 4chan, hardly anyone<br />

wanted to talk about <strong>the</strong> group. “Literally no one c<strong>are</strong>s about LulzSec enough to post about <strong>the</strong>m,” William noted at <strong>the</strong> time. “These guys<br />

<strong>are</strong> getting fame for <strong>the</strong> things that we’re used to getting fame for.” At one point, Topiary had made a /b/ thread asking what <strong>the</strong> locals<br />

thought <strong>of</strong> LulzSec. He got a fifty-fifty response, and <strong>the</strong> thread capped at 350 posts after a few minutes before disappearing. When he<br />

confirmed <strong>the</strong> legitimacy <strong>of</strong> <strong>the</strong> first post as OP from <strong>the</strong> LulzSec Twitter feed, <strong>the</strong> board was in uproar.<br />

But <strong>the</strong> newfags, <strong>the</strong> folks who were always eager to be part <strong>of</strong> a raid organized on 4chan and who were now angry that LulzSec was<br />

stealing <strong>the</strong>ir site’s thunder, wanted to lash out at <strong>the</strong> new champions <strong>of</strong> Internet disruption. When Topiary and Ryan saw a thread on /b/<br />

plotting to “hunt” <strong>the</strong> LulzSec <strong>hacker</strong>s, <strong>the</strong> board, which hated outsiders knowing that it existed, was <strong>the</strong> next to look like fresh meat.<br />

“Everyone go to /b/ and post stuff about Boxxy, LulzSec sending you <strong>the</strong>re, and triforces,” Topiary commanded <strong>the</strong> Twitter followers. He<br />

promised to publish several thousand assorted e-mail addresses and passwords in return, not mentioning it would come out <strong>of</strong> his personal<br />

collection. Going after 4chan didn’t mean LulzSec was hitting Anonymous, as a few blogs suggested. “That’s like saying we’re going to war<br />

with America because we stomped on a cheeseburger,” Topiary said.<br />

The image board was soon overrun by LulzSec fans. “As always, LulzSec delivers,” <strong>the</strong> account tweeted: “62,000 e-mails/passwords just<br />

for you. Enjoy.” Within about ten minutes Topiary’s database had been downloaded 3,200 times, and people were using it to hack random<br />

web accounts from Facebook to World <strong>of</strong> Warcraft. One person found an e-mail and password combination that had been reused on an Xbox<br />

account, PayPal, Facebook, Twitter, YouTube, and “The whole lot!” he cried on Twitter. “JACKPOT.”<br />

“Y’all were <strong>the</strong> inspiration I needed to mess with my roommate’s Facebook beyond all repair,” said ano<strong>the</strong>r.

Hooray! Your file is uploaded and ready to be published.

Saved successfully!

Ooh no, something went wrong!