81–90 of 102 posts
Earlier quoted context omitted.
they just haven't even done anything novel. Why should we expect them to now? Facebook is very unlikely to have the usual slough of easy sql injections. I am quite sure that someone good could find attacks against facebook. I am dubious that anonymous can.
Easily said, but do you know what 'attack surface' means in infosec? Facebook's is vast.
It's like, I may be able to find some way to force all the toilets at CIA Headquarters to back up. That's not the same thing as compromising their spies' identities. Not all exploits are equal.
Earlier quoted context omitted.
So if we assume these people have any idea what they're talking about, it's some kind of SQLi attack... presumably mySQL? I wonder at what point it'll occur to them that Facebook mostly serves data from memcached. Uh... did I get something wrong here? A correction or something would be nice.
"RefRef is a revolutionary DoS java site. Basically, by using an SQL and .js vulnerability, you can send a page request packet from your home computer with embedded .js file, because of the vulnerability in the SQL/Javascript engine on MOST websites, the site actually TEMPs the .js file on its own server. So now the .js is in place on the host of the site. Next since you still have the request, it picks up the .js fi…
first of all, there's no javascript "engine" on most websites. and every major vendor of SQL databases has it's own, so good luck in finding a vulnerability that works with MSSQL/Oracle/Mysql/Postgresql.
also, even if you manage to store a .js file in a temp directory (which would be handled by the web server, btw. nothing to do with sql/js) it's usually a very locked down directory (you can't even execute from /tmp by default in most GNU/Linux servers)
even so, you would still need to execute that .js file (and how? most servers can't run javascript)
I'm not saying this tool doesn't exist, but I'm pretty sure that's not how it works
Hahahahahaha. Hahahahahahahahahahahahaha. [breathe in] Haha. Hah. Hahahahaha. Best of luck, Anon! I'm not sure if Anon fully understands the level of infrastructure and the level of preparation Facebook has... They'll need to come up with something a lot more compelling than a bunch of guys at home with LOIC.
Gunpowder, treason and plot.
I see no reason why gunpowder, treason
Should ever be forgot...
First, they try to look united on twitter and to media, but they quite aren't. Second, they are INCREDIBLY naive. Third, they are OBSESSED with attention of the media.
They were actually planning the attack on #OpFacebook channel (so no, it was not fake - and the channel still exists, but they probably realized it is a joke so they turned it into a joke). After they realized they quite can't attack their servers, they thought it would be better to get people passwords by "botnet keylogger" (and I am not making it up), steal about 1 million accounts and then DEACTIVATE THEM ALL, which would I guess do something terribly evil to Facebook.
Someone brought the question if this doesn't give media and police the right to label them as terrorist, and someone else replied that "police and media are the real terrorists". After that sentence, I laughed too loud and had to leave the IRC.
edit: and apparently, it is still going on - http://pastebin.com/nzaNLWfF . Or maybe not, who knows
edit2: ....and they closed the channel for speaking now. Oh well, it was fun while it lasted.
Look at http://news.yahoo.com/anonymous-targets-norway-killers-manif... That's an attack on something, but not by technical means.
Maybe they are planning something they need lots of people to help with and so want the publicity in advance?
Not a clue what that could be tho.
(Yes, I have seen the tweet saying its fake but as others point out there are many anonymous, and in fact the whole anonymous thing is that everyone is anonymous, so who knows?)
Hahahahahaha. Hahahahahahahahahahahahaha. [breathe in] Haha. Hah. Hahahahaha. Best of luck, Anon! I'm not sure if Anon fully understands the level of infrastructure and the level of preparation Facebook has... They'll need to come up with something a lot more compelling than a bunch of guys at home with LOIC.
This attack is scheduled to come soon after anon switches from LOIC to a "new cannon" dubbed #RefRef ( http://anonops.blogspot.com/2011/08/new-hacking-tools-by-ano... ). They're probably way overconfident in their abilities (#RefRef's description is thoroughly unconvincing), but at least they don't think they're going to DDoS one of the best-prepared sites in the world, AFTER telling them exactly what day the attack…
If basically grabs a bunch of tor connects from a single machine and uses them to bombard the hosts.