Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Saudi Arabian Hackers Leak Credit Card Details of 400,000 Israeli Citizens

pastebay.com

Post reply on HN
Print view View original

51–60 of 86 posts

Re: Saudi Arabian Hackers Leak Credit Card Details of 400,000 Israeli Citizens

#51

Post by rdtsc »

krembo wrote: post #21
Ohadr wrote: post #7

Earlier quoted context omitted.

I also have three of them... I think once that file was online even for a few minutes, the card numbers mentioned in it are not safe anymore. It will be leaked again. If it's not some kind of provocation (files with false data) then this is a pretty big crisis. I'm going to have to monitor my credit card logs closely in the next few weeks...

Since i found my CC details over there I assume this is not false data. Can we call it a cyber terror attack?

> Can we call it a cyber terror attack?

We can. How will that help? It won't put the cat back in the bag.

Re: Saudi Arabian Hackers Leak Credit Card Details of 400,000 Israeli Citizens

#52

Post by pvarangot »

tcas wrote: post #43
yuvadam wrote: post #14

I just gave a talk last week at 28C3 [1,2] about how all the personal details of Israeli citizens are up for grabs for anyone inclined enough to get them. I'm ashamed to see that we've learned nothing in the past 10 years. [1] - http://www.youtube.com/watch?v=ow7cvZOzp6w [2] - http://speakerdeck.com/u/yuvadm/p/28c3-data-mining-the-israe... EDIT: Israeli media now claims that 400K is an exaggerated number, and the act…

Does anybody know the legality of checking these lists? I'm always concerned that the access logs are sent to various authorities.

I'm mostly certain no one could really give you a determining answer pertaining the legality of just browsing trough the list.

From my own experience in this matters, security forces may eventually get the logs, but are then going to cross check them against other information before even asking an ISP about information pertaining the IP addresses they get. If I were worried that someone with powerful connections in security forces would be determined enough to get me into trouble, I would use Tor to open them from a securely wipeable VM and won't save them in my hard disk.

I always click them from my PC... but in any case things get nasty I am currently working for a recognized information security company, and clicking this stuff is sort of part of my job.

Re: Saudi Arabian Hackers Leak Credit Card Details of 400,000 Israeli Citizens

#53

Post by rdtsc »

pm90 wrote: post #38

Attacking the general (innocent) populace for the faults of their government/military? That's the definition of terrorism... and not activism.

> Attacking the general (innocent) populace for the faults of their government/military?

Generally agree but with one exception -- in places were the government claims it represents the people and most people agree with that. Then everyone who votes basically shares the guilt of what the government does.

Re: Saudi Arabian Hackers Leak Credit Card Details of 400,000 Israeli Citizens

#54

Post by [deleted] »

noduerme wrote: post #41
pjscott wrote: post #34

Earlier quoted context omitted.

It's inspired by the Anonymous style: find someone you dislike, attack their computers somehow (e.g. private information theft, DDoS, web site defacing), and brag about it online. The ideals are very different, but the method is pretty similar.

The difference being that the people involved wouldn't be aware there was oil under their feet if our country hadn't invented the market for it, told them it was there and given them the equipment to drill it. Left to their own devices, the only thing they'd be hacking right now would be the back end of a camel. What do you think the chances are that their brute force method wasn't one of a million snippets written b…

[deleted]

Re: Saudi Arabian Hackers Leak Credit Card Details of 400,000 Israeli Citizens

#55

Post by runn1ng »

jonhendry wrote: post #47
pdeuchler wrote: post #46

Earlier quoted context omitted.

I would argue that the purpose of allowing anyone to call themselves "Anonymous" places the group's identity on their actions, not who they say they are. It's kind of the whole point of calling themselves "Anonymous" and leads right into the "we are legion" bit. There is no individual, only the movement. However, by performing actions that are contrary to the Anonymous ideology the Saudi attackers distanced themselve…

But what is "Anonymous' ideology" if anyone is part of Anonymous? Maybe Anonymous should have chosen a different name. Other groups could then remain anonymous, without being assumed to be Anonymous.

Well, actually, Anonymous didn't really chose the name - it was a joke made on default "Anonymous" username on 4chan. And it really grew somehow organically into this point.

That's what I don't like about people saying "You are not true Anonymous". First hackers under the name "Anonymous" posted other people MySpace passwords on 4chan and put blinking lights on epilepsy website. And the whole scientology movement was first meant as a joke, as a reaction to the leaked Tom Cruise video.

Really, people calling other people "not true Anonymous" are hypocritical. I think.

Re: Saudi Arabian Hackers Leak Credit Card Details of 400,000 Israeli Citizens

#56

Post by rdtsc »

teyc wrote: post #42
jacquesm wrote: post #31

Earlier quoted context omitted.

PCI compliance is worth as much as the party that signs off on you being compliant, in most cases that is you. Audits are few and far between, lots of places have shoddy security but claim they are Fort Knox. PCI compliancy is quite meaningless unless the people that implement it take their job seriously. That's very frequently not the case, it is just seen as a small obstacle in the way of doing business.

Thanks. Odd that VISA would let the third party auditors get away with it, until they don't... which I'd hope so in this case. Related: http://serverfault.com/questions/293217/our-security-auditor...

It is mostly to cover their behinds not really to protect your data. When it comes to litigation they basically want to point to a piece of paper with your signature on it and say "see they agreed to be compliant" it is not our fault, we did all we could.

Re: Saudi Arabian Hackers Leak Credit Card Details of 400,000 Israeli Citizens

#57

Post by berntb »

hackly wrote: post #44
noduerme wrote: post #41

Earlier quoted context omitted.

The difference being that the people involved wouldn't be aware there was oil under their feet if our country hadn't invented the market for it, told them it was there and given them the equipment to drill it. Left to their own devices, the only thing they'd be hacking right now would be the back end of a camel. What do you think the chances are that their brute force method wasn't one of a million snippets written b…

Ironic how despite all this, the american government finds it fit to support this repressive regime, while demonizing countries like Syria where citizens (or at least women) enjoy greater freedoms. One could say it all depends on your stance vis-a-vis Israel. The fact of the matter is that, countries like Saudi Arabia, Jordan, Yemen, old Egypt, North Korea etc. have normalized or at least neutral relations with Israe…

>>demonizing countries like Syria

How can you "demonize" that type of brutal regimes? What more can you say about them? That Assad eats children?

>>One could say it all depends on your stance vis-a-vis Israel.

>>the ruling Saudis will be quick to repress it and assure Israel none of this will happen again

Sigh, so Saudi Arabia is pro Israel? :-)

http://en.wikipedia.org/wiki/Antisemitism_in_the_Arab_world#...

This is a model of what happens there without conspiracy theories:

Saudi Arabia is needed as an ally by the US. It is called "realpolitik" -- all countries, including democracies, use it and lie about it. (The difference with democracies is that they do support human rights, as long as it doesn't cost too much.)

North Korea sells/sold nuclear tech to Syria/Iran; are you really claiming they have "neutral" relations with Israel?

And so on... please don't write this kind of thing on HN.

Re: Saudi Arabian Hackers Leak Credit Card Details of 400,000 Israeli Citizens

#58

Post by rbanffy »

berntb wrote: post #57
hackly wrote: post #44

Earlier quoted context omitted.

Ironic how despite all this, the american government finds it fit to support this repressive regime, while demonizing countries like Syria where citizens (or at least women) enjoy greater freedoms. One could say it all depends on your stance vis-a-vis Israel. The fact of the matter is that, countries like Saudi Arabia, Jordan, Yemen, old Egypt, North Korea etc. have normalized or at least neutral relations with Israe…

>>demonizing countries like Syria How can you "demonize" that type of brutal regimes? What more can you say about them? That Assad eats children? >>One could say it all depends on your stance vis-a-vis Israel. >>the ruling Saudis will be quick to repress it and assure Israel none of this will happen again Sigh, so Saudi Arabia is pro Israel? :-) http://en.wikipedia.org/wiki/Antisemitism_in_the_Arab_world#... This is…

I would say this whole thread took a wrong turn with noduerme's deeply rude, ignorant, arrogant an plain racist post. We would all have gained something had it never existed.

Re: Saudi Arabian Hackers Leak Credit Card Details of 400,000 Israeli Citizens

#59

Post by eternalban »

noduerme wrote: post #41
pjscott wrote: post #34

Earlier quoted context omitted.

It's inspired by the Anonymous style: find someone you dislike, attack their computers somehow (e.g. private information theft, DDoS, web site defacing), and brag about it online. The ideals are very different, but the method is pretty similar.

The difference being that the people involved wouldn't be aware there was oil under their feet if our country hadn't invented the market for it, told them it was there and given them the equipment to drill it. Left to their own devices, the only thing they'd be hacking right now would be the back end of a camel. What do you think the chances are that their brute force method wasn't one of a million snippets written b…

> The difference being that the people involved wouldn't be aware there was oil under their feet ...

In the modern sense of appreciating its immense value, possibly, but factually incorrect as a general statement:

http://en.wikipedia.org/wiki/History_of_petroleum#Early_hist...

http://www.cyberistan.org/islamic/islmoil1.html

Re: Saudi Arabian Hackers Leak Credit Card Details of 400,000 Israeli Citizens

#60

Post by runn1ng »

maayank wrote: post #23
yuvadam wrote: post #14

I just gave a talk last week at 28C3 [1,2] about how all the personal details of Israeli citizens are up for grabs for anyone inclined enough to get them. I'm ashamed to see that we've learned nothing in the past 10 years. [1] - http://www.youtube.com/watch?v=ow7cvZOzp6w [2] - http://speakerdeck.com/u/yuvadm/p/28c3-data-mining-the-israe... EDIT: Israeli media now claims that 400K is an exaggerated number, and the act…

what's the password of the rar inside the rar? the page referenced in the "readme" file is unavailable

At least the file, hosted on hacked sites, called israeli.rar, is without a password.
Post reply on HN