Live data from Hacker News

Anonymous Pledges to Take Down Facebook

news.cnet.com

61–70 of 102 posts

Re: Anonymous Pledges to Take Down Facebook

#61

Having seen their previous releases, for me this doesn't sound like Anonymous. I might be wrong, but it smells like faked for me.

Conspiracy theory in play: discredit Annon being all mighty if they fail in this Facebook attempt. Anyone can claim to be Annon, it is also a way to spot the real Annon.

Re: Anonymous Pledges to Take Down Facebook

#62
post #39

I would hope the real Anon understands the magnitude the challenge they just set before themselves. "Facebook has been selling information to government agencies and giving clandestine access to information security firms so that they can spy on people from all around the world. Some of these so-called whitehat infosec firms are working for authoritarian governments, such as those of Egypt and Syria." ^ Besides, if A…

Totally agree. This would be quite a coup causing self-destruction.

Re: Anonymous Pledges to Take Down Facebook

#63
post #37
post #21

Earlier quoted context omitted.

This attack is scheduled to come soon after anon switches from LOIC to a "new cannon" dubbed #RefRef ( http://anonops.blogspot.com/2011/08/new-hacking-tools-by-ano... ). They're probably way overconfident in their abilities (#RefRef's description is thoroughly unconvincing), but at least they don't think they're going to DDoS one of the best-prepared sites in the world, AFTER telling them exactly what day the attack…

So if we assume these people have any idea what they're talking about, it's some kind of SQLi attack... presumably mySQL? I wonder at what point it'll occur to them that Facebook mostly serves data from memcached. Uh... did I get something wrong here? A correction or something would be nice.

"RefRef is a revolutionary DoS java site. Basically, by using an SQL and .js vulnerability, you can send a page request packet from your home computer with embedded .js file, because of the vulnerability in the SQL/Javascript engine on MOST websites, the site actually TEMPs the .js file on its own server. So now the .js is in place on the host of the site. Next since you still have the request, it picks up the .js file, and all of the requesting for packets power happens on the server, not the requestee. I send two packets from my iphone, and everything else happens on the server. Basically eats itself apart, because since both are on the server, its all a local connection."

"The tool is very effective, a 17-seconds attack from a single machine resulting in a 42-minute outage on Pastebin yesterday. As expected, the Pastebin admins weren't very happy with their platform being used for such tests and tweeted 'Please do not test your software on us again.'"

"The effectiveness of RefRef is due to the fact that it exploits a vulnerability in a widespread SQL service. The flaw is apparently known but not widely patched yet. The tool's creators don't expect their attacks to work on a high-profile target more than a couple of times before being blocked, but they don't believe organizations will rush to patch this flaw en masse before being hit."

http://www.thehackernews.com/2011/07/refref-denial-of-servic...

Re: Anonymous Pledges to Take Down Facebook

#64

I really don't buy this as a... 'full force,' if you will, attack by Anonymous. I would want to see this confirmed by sources like https://twitter.com/#!/anonymousirc before I believed it to really be an 'Anonymous' 'movement.' Of course, their strength is also their weakness. Without any names, what is and is not 'Anonymous' can forever be questioned. Like others, I want to say "they are too smart for this," but the…

AnonOps said it's a fake: https://twitter.com/#!/anonops/status/101152229087657984

Re: Anonymous Pledges to Take Down Facebook

#67
Hi anonymous, I work at facebook. If you manage to hack us and grab our data, perhaps you'd like to apply for a job? It's not trivial getting the data even with full access, so you could really help our team! Plus the free lunches are pretty good.

Re: Anonymous Pledges to Take Down Facebook

#68
post #67

Hi anonymous, I work at facebook. If you manage to hack us and grab our data, perhaps you'd like to apply for a job? It's not trivial getting the data even with full access, so you could really help our team! Plus the free lunches are pretty good.

Apparently it's a fake: https://twitter.com/#!/anonops/status/101152229087657984

Re: Anonymous Pledges to Take Down Facebook

#69
post #34
post #16

Earlier quoted context omitted.

Like I said, this is not Anon. Think about it. Anon aren't stupid. And going up against Facebook is stupid.

Isn't "Anonymous" anyone who claims to be it?

You must work for congress, quick, lets make being anonymous illegal. That'll stop this!
Post reply on HN