Saudi Arabian Hackers Leak Credit Card Details of 400,000 Israeli Citizens • Hacker News Board

Re: Saudi Arabian Hackers Leak Credit Card Details of 400,000 Israeli Citizens

#41

Post by noduerme » Tue, Jan 03, 2012, 12:47 AM UTC

pjscott wrote: post #34

waffle_ss wrote: post #26

I have a very hard time resolving how this type of attack could fall under the umbrella of Anonymous. Saudis specifically attacking Israel implies a nationalistic attitude, given their history. They also affiliate their hacker group with Wahabbism, which is a strict branch of Islam that most would brand as fundamentalist (and sometimes extreme). I can't really see the ideals of Anonymous coexisting with nationalism a…

It's inspired by the Anonymous style: find someone you dislike, attack their computers somehow (e.g. private information theft, DDoS, web site defacing), and brag about it online. The ideals are very different, but the method is pretty similar.

The difference being that the people involved wouldn't be aware there was oil under their feet if our country hadn't invented the market for it, told them it was there and given them the equipment to drill it. Left to their own devices, the only thing they'd be hacking right now would be the back end of a camel. What do you think the chances are that their brute force method wasn't one of a million snippets written by someone in the west? Or in Israel, for that matter? How about the computers they used to get on the network they benefit from, but didn't create? Reckon the intel chips were made in Israel?

After all the petty bullshit, Saudis like to party too. The problem is their government and society is repressive as hell, and they're so scared to confront it, they have to go into this whole make-believe world where they act as heroes by attacking Israeli servers. It's pretty funny. I'm sure Israelis will recover. The Saudis on the other hand still live in a medieval hellhole where women can't drive a car... and this really doesn't do much to change anything. Their time and energy would be better spent trying to bring civilization to their own wasteland.

[Edit] I should add, the fact that if you did this in your own country, you'd probably have your hands cut off, is a powerful motivation to go after somebody with more liberal values.

Re: Saudi Arabian Hackers Leak Credit Card Details of 400,000 Israeli Citizens

#42

Post by teyc » Tue, Jan 03, 2012, 12:48 AM UTC

jacquesm wrote: post #31

teyc wrote: post #22

Don't VISA et al require some kind of PCI compliance for storing credit card details?

PCI compliance is worth as much as the party that signs off on you being compliant, in most cases that is you. Audits are few and far between, lots of places have shoddy security but claim they are Fort Knox. PCI compliancy is quite meaningless unless the people that implement it take their job seriously. That's very frequently not the case, it is just seen as a small obstacle in the way of doing business.

Thanks. Odd that VISA would let the third party auditors get away with it, until they don't... which I'd hope so in this case.

Re: Saudi Arabian Hackers Leak Credit Card Details of 400,000 Israeli Citizens

#43

Post by tcas » Tue, Jan 03, 2012, 12:52 AM UTC

yuvadam wrote: post #14

I just gave a talk last week at 28C3 [1,2] about how all the personal details of Israeli citizens are up for grabs for anyone inclined enough to get them. I'm ashamed to see that we've learned nothing in the past 10 years. [1] - http://www.youtube.com/watch?v=ow7cvZOzp6w [2] - http://speakerdeck.com/u/yuvadm/p/28c3-data-mining-the-israe... EDIT: Israeli media now claims that 400K is an exaggerated number, and the act…

Does anybody know the legality of checking these lists? I'm always concerned that the access logs are sent to various authorities.

Re: Saudi Arabian Hackers Leak Credit Card Details of 400,000 Israeli Citizens

#44

Post by hackly » Tue, Jan 03, 2012, 1:15 AM UTC

noduerme wrote: post #41

pjscott wrote: post #34

Earlier quoted context omitted.

It's inspired by the Anonymous style: find someone you dislike, attack their computers somehow (e.g. private information theft, DDoS, web site defacing), and brag about it online. The ideals are very different, but the method is pretty similar.

The difference being that the people involved wouldn't be aware there was oil under their feet if our country hadn't invented the market for it, told them it was there and given them the equipment to drill it. Left to their own devices, the only thing they'd be hacking right now would be the back end of a camel. What do you think the chances are that their brute force method wasn't one of a million snippets written b…

Ironic how despite all this, the american government finds it fit to support this repressive regime, while demonizing countries like Syria where citizens (or at least women) enjoy greater freedoms. One could say it all depends on your stance vis-a-vis Israel. The fact of the matter is that, countries like Saudi Arabia, Jordan, Yemen, old Egypt, North Korea etc. have normalized or at least neutral relations with Israel (despite the hypocritical rhetoric to appease the masses), and hence are supported or allowed to have their way (even their bombs).

I think this hacking incident is a mere accident, and the ruling Saudis will be quick to repress it and assure Israel none of this will happen again.

Re: Saudi Arabian Hackers Leak Credit Card Details of 400,000 Israeli Citizens

#45

Post by usaar333 » Tue, Jan 03, 2012, 1:20 AM UTC

When I went to Israel a few years back I could not believe my eyes when I noticed that my entire CC number was printed on every receipt.

I don't imagine online CC security being much better..

Re: Saudi Arabian Hackers Leak Credit Card Details of 400,000 Israeli Citizens

#46

Post by pdeuchler » Tue, Jan 03, 2012, 1:24 AM UTC

runn1ng wrote: post #29

Ohadr wrote: post #27

Anonymous just declared that they are not responsible for this: https://twitter.com/anonyops/status/153969476277248000 "We have no love for Israeli gov't but targeting 1000s for being Israeli? Sorry, you are not #Anonymous pastebay.com/148920"

Heh. I like how Anonymous keep on repeating how are they "decentralized" and the only thing really needed to join is to call yourself Anonymous - and at the same time keep on telling trough semi-official twitter accounts, how this Wahhabi attack or that Stratfor attack was not official Anonymous and blah blah blah. Hypocrisy on hypocrisy.

I would argue that the purpose of allowing anyone to call themselves "Anonymous" places the group's identity on their actions, not who they say they are. It's kind of the whole point of calling themselves "Anonymous" and leads right into the "we are legion" bit. There is no individual, only the movement.

However, by performing actions that are contrary to the Anonymous ideology the Saudi attackers distanced themselves farther from Anonymous than any name could

Re: Saudi Arabian Hackers Leak Credit Card Details of 400,000 Israeli Citizens

#47

Post by jonhendry » Tue, Jan 03, 2012, 1:28 AM UTC

pdeuchler wrote: post #46

runn1ng wrote: post #29

Earlier quoted context omitted.

Heh. I like how Anonymous keep on repeating how are they "decentralized" and the only thing really needed to join is to call yourself Anonymous - and at the same time keep on telling trough semi-official twitter accounts, how this Wahhabi attack or that Stratfor attack was not official Anonymous and blah blah blah. Hypocrisy on hypocrisy.

I would argue that the purpose of allowing anyone to call themselves "Anonymous" places the group's identity on their actions, not who they say they are. It's kind of the whole point of calling themselves "Anonymous" and leads right into the "we are legion" bit. There is no individual, only the movement. However, by performing actions that are contrary to the Anonymous ideology the Saudi attackers distanced themselve…

But what is "Anonymous' ideology" if anyone is part of Anonymous?

Maybe Anonymous should have chosen a different name. Other groups could then remain anonymous, without being assumed to be Anonymous.

Re: Saudi Arabian Hackers Leak Credit Card Details of 400,000 Israeli Citizens

#48

Post by GiraffeNecktie » Tue, Jan 03, 2012, 1:31 AM UTC

pm90 wrote: post #38

Attacking the general (innocent) populace for the faults of their government/military? That's the definition of terrorism... and not activism.

Good grief. Hassling the populace with a run of the mill credit card theft is not TERRORism. Terrorism is either violence or the threat of violence. Get a grip.

Re: Saudi Arabian Hackers Leak Credit Card Details of 400,000 Israeli Citizens

#49

Post by jonhendry » Tue, Jan 03, 2012, 1:31 AM UTC

samstave wrote: post #2

Faction warfare. EDIT: I got downvoted, without a reply. So, explain how doing this sort of thing is not faction warfare? The details of israeli credit is leaked by anons from the house of Saud. This is clearly a faction issue. It is not likely government sponsored (though likely condoned) and as a religious rift exists between jews and muslims, the word faction applies perfectly. Jews, muslims, christians; all facti…

I think the term is 'sectarian'.

Re: Saudi Arabian Hackers Leak Credit Card Details of 400,000 Israeli Citizens

#50

Post by rdtsc » Tue, Jan 03, 2012, 1:35 AM UTC

waffle_ss wrote: post #26

I have a very hard time resolving how this type of attack could fall under the umbrella of Anonymous. Saudis specifically attacking Israel implies a nationalistic attitude, given their history. They also affiliate their hacker group with Wahabbism, which is a strict branch of Islam that most would brand as fundamentalist (and sometimes extreme). I can't really see the ideals of Anonymous coexisting with nationalism a…

> I have a very hard time resolving how this type of attack could fall under the umbrella of Anonymous

Well the hackers have not identified themselves by name so they are ... anonymous. Isn't that the idea behind Anonymous, that anyone who is anonymous can claim to be Anonymous?