LulzSec

korindabar said:
Don't confuse what I'm saying. I'm not saying they aren't criminals and I'm not saying they shouldn't be caught and brought to justice. Perhaps I have a more personal interest in their shenanigans because I've done a lot of work with web security in particular. I can point to their pastebin entries and say, "Look, that's what happens.".

Just within my own company I've reported serious vulnerabilities in our platform to management and engineering teams and it would take months for them to roll out a service release for it or consider it anything higher than low priority.

and here is why there are so many of these flaws.

it would take a lot of effort to fix all these problems and fixing problems does not really bring in income as much as the next version would.

so rather than management making security a real concern, they say "oh well, we will patch it eventually but we need feature G added to the software and we can sell more copies!"

patching and bugfixing does not generate more income. problem is eventually you wont have income because nobody will want your product with numerous well known security flaws.

i have lots of stories about issues like this.

your dev team can spend 6 months squashing bugs and closing security loop holes, or spend 6 months working on the next version of the software and maybe incorperate some of those fixes in that. ask a manager which he would rather do.

ask an accountant which would help their bottom line more.
 
Wintermind said:
I don't get how some people can think that absolutely no good can come of what they did.

I once saw a little old lady about to step into the street in front of an oncoming car. I had to act! Leaping forward, I punched her in the gut as hard as I could and she collapsed on the sidewalk. Saved! Some people started shouting at me but I think they're never ever happy.
 
Wintermind said:
I don't get how some people can think that absolutely no good can come of what they did.
It's good, in that it has provided me with entertainment for the past couple weeks. Reading about black hats who like to showboat waaay too much for their own good is entertaining, especially when they get creative (it takes some serious balls to open your own switchboard and take hacking requests in the open). And the whole "OMG, all our internets are fucked! We've gotta fix 'em!" going on at the various companies and institutions that they hit. But they're not getting sainthood for it. That would have been contacting the companies privately, and discussing their vulnerabilities elsewhere.

And it seems Phase 3 has started: LulzSec and Anonymous Team Up, Cyber War I Begins
 
Am I the only one who thinks it is Lulz that they team up with anonymous now, after they wanted to battle anonymous first?

My guess is that they just want to try to get under in the mass again, before the FBI party van is coming to take them.
 
What's 'Anonymous'? How do you team up with it/them? I always assumed that was just a word to express 'the hive mind' or 'anonymous people of the Internet', not an actual group.

I know nothing of this 'underground' world (though it seems to be pretty open knowledge) and even less about hacking. Read about DDOS the other day, that was pretty cool. Seems a bit of a lame way to break something though.
 
It's kinda both? It's intentionally vague? To be, y'know, Anonymous? I can't think of a good way to put it in words.
 
Lexx said:
Am I the only one who thinks it is Lulz that they team up with anonymous now, after they wanted to battle anonymous first?

My guess is that they just want to try to get under in the mass again, before the FBI party van is coming to take them.

Nah, Anonymous is that protest arm of 'the Internet' that has been on the human rights and freedom of information tear for the last 8 months. /b/ are the ones that were at war with LulzSec, of which some might be comprised in Anonymous. Sorta funny if you think about it, now both are going to be doing chaotic good, instead of just for the lulz.
 
How much damage have the Lulz guys actually done?

I'm asking because I wanna know how much they could potentially be charged with and how much actual provable harm they've caused to their victims and their clients.
 
hacking into a private network is illegal

publicizing it is also illegal

publicizing that you hacked into a private network creates a loss of revenue for that private network

releasing information verifying how deep you got further enhances the above


the actual damage in leaked information does not have to be anything consequential. the fact they hacked in, publicized it, and even proved it, makes them liable for any even potential losses the company endures.
 
SkuLL said:
What's 'Anonymous'? How do you team up with it/them? I always assumed that was just a word to express 'the hive mind' or 'anonymous people of the Internet', not an actual group.

I know nothing of this 'underground' world (though it seems to be pretty open knowledge) and even less about hacking. Read about DDOS the other day, that was pretty cool. Seems a bit of a lame way to break something though.
I think Anonymous is more something like a movement. Comparable to the "Punk" movement or something like that. If you believe in their ideals. You could probably see your self as part of Annoyingimus.

Nology5890 said:
Sorta funny if you think about it, now both are going to be doing chaotic good, instead of just for the lulz.
I dont think there is anything "good" about their actions. They are criminals. As simple as that. But we had that point already.

Though what I find questionable is that they get sued like "Anonymus" or "lulzec" even though those are groups and you can not sue them more then like you could sue "punks" because it is a movement/phylosophy - at least in the case of Anonymus. There are many which probably believe in their ideals without doing anything wrong. Yet. It is just "they did it and they are all bad". Dont get me wrong. I want to see those criminals in jail like veryone. But only those which actually hacked the servers which has not always even to be the group which was blamed by the victims (the case with Sonny for example was rather strange ... I mean how to really know it was anonymus ?).
 
http://twitter.com/#!/LulzSec/status/83244937847652352

"Ryan Cleary is not part of LulzSec; we house one of our many legitimate chatrooms on his IRC server, but that's it. "
 
yes korin, it sounds like they are trying to distance them from that ryan guy.

isnt that a pretty common practice? if one of your crew gets caught, distance yourself.
 
so much to the "we want to change the world" shits.

Yeah. Everyone wants to be the Robbin Hood. But no one wants to hang on the gibbet.

I hope some of them at least realize that their actions have consequences.
 
TheWesDude said:
yes korin, it sounds like they are trying to distance them from that ryan guy.

isnt that a pretty common practice? if one of your crew gets caught, distance yourself.

It could be true but that presupposes that this Ryan guy actually has anything to do with them. Kind of like that's what they would say no matter whether he was related or not. Though they recently turned out two other members who 'leaked' some information about the group's activities and didn't seem too worried about them knowing Lulzsec IRL.

Another article I read said they found a "mind-boggling" amount of data on his hard drives, so we'll likely see whether there is a connection soon. He also has ties to anonymous and other criminal activities apparently.
 
korindabar said:
Another article I read said they found a "mind-boggling" amount of data on his hard drives

They weren't talking about the porn?
 
Haha, they didn't specify what kind of data. Only that it would 'take a very long time to sift through'. So, maybe, yes.
 
Back
Top