31.10.2012 Views

We are anonymous inside the hacker world of lulzse

We are anonymous inside the hacker world of lulzse

We are anonymous inside the hacker world of lulzse

SHOW MORE
SHOW LESS

You also want an ePaper? Increase the reach of your titles

YUMPU automatically turns print PDFs into web optimized ePapers that Google loves.

The Fate <strong>of</strong> Lulz<br />

LulzSec’s significance had not been completely manufactured. For those who spend most <strong>of</strong> <strong>the</strong>ir time in <strong>the</strong> <strong>world</strong> <strong>of</strong> breathable air,<br />

traffic lights, and bimonthly paychecks, it meant <strong>the</strong> companies that stored <strong>the</strong>ir personal details on flimsy databases reconsidered how well<br />

those details were protected. LulzSec had pointed to an important fallacy held by companies like Sony—that customer data was safe because<br />

<strong>the</strong>ir own IT specialists couldn’t hack into <strong>the</strong>m. Now any company could suddenly become a random target <strong>of</strong> someone else’s whims; it<br />

didn’t take an army <strong>of</strong> <strong>hacker</strong>s to steal more than a million passwords, but a merry crew <strong>of</strong> six. LulzSec was doing what full disclosure had<br />

done in <strong>the</strong> late 1990s: widely publicizing flaws that companies might have left b<strong>are</strong> and allowed black hats to steal from if <strong>the</strong>y hadn’t been<br />

embarrassed into patching <strong>the</strong>m up.<br />

For those who spend more time looking at screens, immersed in <strong>the</strong> <strong>world</strong> <strong>of</strong> browsers, IRC, and new web scripts, LulzSec had revived an<br />

interest in disrupting <strong>the</strong> <strong>We</strong>b. You didn’t need to wait for a raid interesting or funny enough to get a few hundred supporters on /b/ or for an<br />

incident like WikiLeaks to spark a cyber insurgency with thousands <strong>of</strong> participants. You just needed a handful <strong>of</strong> talented, motivated people<br />

with a few good connections in <strong>the</strong> black hat community. LulzSec had reminded Anonymous that small groups could make a lot <strong>of</strong> noise.<br />

They didn’t always need big resources or connections with <strong>the</strong> press. Topiary had journalists contacting him every day via Twitter, but he<br />

had given only a handful <strong>of</strong> interviews as LulzSec. He had not used any special s<strong>of</strong>tw<strong>are</strong>, just <strong>the</strong> <strong>anonymous</strong> web tools <strong>of</strong> Twitter and<br />

Pastebin, Notepad to write all his missives, and a simple, retro-designed website that used a design template borrowed from HBGary Federal.<br />

Anonymous, as an idea, had been around for thousands <strong>of</strong> years. At some point, a few cavemen must surely have sme<strong>are</strong>d buffalo blood<br />

over <strong>the</strong> rocks <strong>of</strong> a rival in <strong>the</strong> dead <strong>of</strong> night and <strong>the</strong>n run away giggling, Topiary thought. With <strong>the</strong> dawn <strong>of</strong> <strong>the</strong> Internet and <strong>anonymous</strong><br />

image boards, <strong>the</strong> process reached beyond a handful to dozens and <strong>the</strong>n to hundreds <strong>of</strong> people reacting, thinking, and contributing to a<br />

collective thought process within very short spaces <strong>of</strong> time. Anonymous had become a joint psychological state, a sanctuary where a person’s<br />

mind could be relieved <strong>of</strong> <strong>the</strong> responsibilities that came with identity, or <strong>of</strong> baggage like guilt and fear. It spawned a new wave <strong>of</strong> creativity—<br />

memes and figurative writing—unhindered by social conventions. When that hive-thought turned to action, it created energy, a mass force<br />

that could not be contained. A few could occasionally direct it, but for <strong>the</strong> most part that nebulous force, as Topiary called it, seemed to have<br />

a life <strong>of</strong> its own.<br />

For those who wanted more control and more glory, <strong>the</strong>re were <strong>the</strong> splinter groups. A month after LulzSec disbanded, several new <strong>hacker</strong><br />

groups had popped up to launch <strong>the</strong>ir own ops, <strong>of</strong>ten in <strong>the</strong> name <strong>of</strong> Antisec and web activism. In July a group called <strong>the</strong> Script Kiddies<br />

hacked into <strong>the</strong> Twitter feed <strong>of</strong> Fox News to say that President Barack Obama had been assassinated, and <strong>the</strong>n it defaced <strong>the</strong> Facebook page<br />

<strong>of</strong> drug giant Pfizer and claimed to have stolen data from Walmart. Groups from <strong>the</strong> Philippines, Colombia, Brazil, and Peru launched attacks<br />

in <strong>the</strong> name <strong>of</strong> Antisec, mostly publishing data <strong>of</strong> government or police <strong>of</strong>ficials. More groups followed suit. Through no clear objective <strong>of</strong><br />

<strong>the</strong>ir own, Topiary, Sabu, and Kayla had inspired a trend for anarchic hacktivism.<br />

It was <strong>of</strong>ten not to <strong>the</strong> benefit <strong>of</strong> <strong>hacker</strong>s, though. While Sabu had seemed disappointed with <strong>the</strong> end <strong>of</strong> LulzSec, <strong>the</strong> revival <strong>of</strong> Antisec<br />

meant that <strong>hacker</strong>s and script kiddies were still approaching him with vulnerabilities that he could pass on to <strong>the</strong> FBI. He was fast proving<br />

himself to be a valuable informant. Days after <strong>the</strong> final release from LulzSec, <strong>the</strong>re were more than six hundred people in <strong>the</strong> AnonOps chat<br />

room Antisec discussing both legal and illegal forms <strong>of</strong> protest against various targets. They were now looking to Sabu for direction, hanging<br />

on his every word, trying to impress him with <strong>the</strong>ir ideas for hacks.<br />

“I’m doing <strong>the</strong> same work, more revolutionary,” Sabu said in an interview on July 1, a few days after his bitter send-<strong>of</strong>f with <strong>the</strong> LulzSec<br />

team members, and <strong>of</strong> course now secretly working for <strong>the</strong> FBI. “No more ‘FOR THE LULZ’ as Topiary and Tflow turned it into. I’m<br />

doing real work with real motivations.” With Topiary out <strong>of</strong> <strong>the</strong> picture, Hector Monsegur’s alter ego Sabu could comfortably take <strong>the</strong> virtual<br />

reins <strong>of</strong> what looked like a resurgent global movement. Even if it was on false pretenses, he could continue living <strong>the</strong> life <strong>of</strong> a revolutionary.<br />

Perhaps in an act <strong>of</strong> self-justification for turning on his old colleagues, he pr<strong>of</strong>essed nothing but contempt for Topiary and Tflow. “They had<br />

me breaking laws and putting myself out <strong>the</strong>re, and when <strong>the</strong> heat got too hot for <strong>the</strong>m <strong>the</strong>y copped out,” he said. “They’re fucking frauds.”<br />

Sabu dismissed <strong>the</strong> idea that he had ever controlled Topiary with intimidation. It’s “bullshit,” he said. “Never once have I mistreated<br />

anyone. I…I feel if <strong>the</strong>y did get caught <strong>the</strong>y’d point all fingers at me. When in reality it’s <strong>the</strong>m organizing this bullshit. Don’t mind me. I’m<br />

just angry about this. I feel used.”<br />

If Sabu felt an ounce <strong>of</strong> guilt, he didn’t show it. It seemed that his perception <strong>of</strong> <strong>the</strong> <strong>world</strong> was that it had always been against him. In his<br />

version <strong>of</strong> events, <strong>the</strong> idea for LulzSec had started as a joke and to get <strong>the</strong> old crew back toge<strong>the</strong>r. Then Topiary had motivated him to get<br />

involved, <strong>the</strong>n it had turned into an organization, <strong>the</strong>n something far more serious, with a website, servers, and press releases. Then Topiary<br />

had turned himself into <strong>the</strong> leader <strong>of</strong> LulzSec and closed up shop.<br />

“They wanted me to hack for <strong>the</strong>m,” he said. “Then after I did that, <strong>the</strong>y got too sc<strong>are</strong>d. It’s that simple.” Ironically, he claimed that <strong>the</strong><br />

incident that hurt him <strong>the</strong> most was when he had gone <strong>of</strong>fline for more than a day, and Topiary had worried that Sabu had been raided. In<br />

retrospect, it seemed he hated <strong>the</strong> idea that his colleague on <strong>the</strong> o<strong>the</strong>r side <strong>of</strong> <strong>the</strong> Atlantic might have correctly suspected <strong>the</strong> truth.<br />

“The truth is for a few days I took a break because I needed one and my family had some issues,” he explained, now giving a different<br />

version <strong>of</strong> what really happened that day. “And [Topiary] concocted some story in his mind that I got raided or something more sinister. He<br />

hurt me deep with that act. I would love to speak to him, mainly to see him apologize.”<br />

Sabu claimed that he resented having to clean up <strong>the</strong> reputational mess Topiary had left behind in <strong>the</strong> <strong>hacker</strong> community, responding to<br />

comments that LulzSec members were “shit sc<strong>are</strong>d about being nailed by <strong>the</strong> authorities” and had “run away.” After a couple weeks, Sabu<br />

finally cooled down, and, perhaps unfortunately for Topiary, he reconciled with <strong>the</strong> Shetland teenager. The two started speaking to each<br />

o<strong>the</strong>r regularly on IRC. It was awkward at first, but both accepted that <strong>the</strong>y had been under tremendous pressure and tensions had been<br />

running high.<br />

Topiary had meanwhile taken a break from Anonymous and was trying to spend less time online. He was selling more <strong>of</strong> his stuff, things<br />

like his cooker, fridge-freezer, and bed frame, packing his books, playing his Xbox. His mo<strong>the</strong>r and bro<strong>the</strong>r had moved to a suburb in

Hooray! Your file is uploaded and ready to be published.

Saved successfully!

Ooh no, something went wrong!