Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Someone please give lulzsec a job...

news.ycombinator.com

Post reply on HN
Print view View original

1–10 of 10 posts

Someone please give lulzsec a job...

#1

Post by sydlawrence »

Personally I think lulz security to be paid by governments to let companies be aware and advise to fix security holes, as online security is a MASSIVE issue of national security. Rather than be arrested and put away.

I would rather they hack for good than bad. After all their are non public hacker groups.

I mean look at the Citi bank hack... I know that is security 101, but COME ON.

Either that, or force the general public to use an openID run by a hack proof source.

Or is this just me?

Re: Someone please give lulzsec a job...

#5

Post by HRoark »

sydlawrence wrote: post #3
lysol wrote: post #2

OpenID is not a trust system.

I know it isn't a trust system, but some kind of similar solution

People don't start worrying until something actually happens. The general public is deluded when it comes to internet security, and Lulzsec exposed the internet's vulnerability. Yes, they did break the law, but they had the right intentions nonetheless.

Re: Someone please give lulzsec a job...

#7

Post by jcol »

peterwwillis wrote: post #6

Lulzsec is a bunch of psychotic kids playing with massive customer-driven online services the way a child plays with ants and a magnifying glass. And you want to give them government jobs?

Entirely agree with you. They are nothing but script kiddies. Anyone can download Metasploit, Nessus, Nikto, etc. and test for thousands of vulnerabilities. Then they either turn vulnerable servers into botnet zombies or steal their data and post it on the web. I've seen no sign they have any 0day exploits (which would make them the real deal), just some basic SQL injections, XSS, and brute forcing.

Not impressed.

Re: Someone please give lulzsec a job...

#9

Post by rufibarbatus »

jcol wrote: post #7
peterwwillis wrote: post #6

Lulzsec is a bunch of psychotic kids playing with massive customer-driven online services the way a child plays with ants and a magnifying glass. And you want to give them government jobs?

Entirely agree with you. They are nothing but script kiddies. Anyone can download Metasploit, Nessus, Nikto, etc. and test for thousands of vulnerabilities. Then they either turn vulnerable servers into botnet zombies or steal their data and post it on the web. I've seen no sign they have any 0day exploits (which would make them the real deal), just some basic SQL injections, XSS, and brute forcing. Not impressed.

What should be impressive at this point is that we're still not past SQL injections and XSS. Or URL tweaking. In banking. (Good God!...)
Post reply on HN