Live data from Hacker News

Saudi Arabian Hackers Leak Credit Card Details of 400,000 Israeli Citizens

pastebay.com

71–80 of 86 posts

Re: Saudi Arabian Hackers Leak Credit Card Details of 400,000 Israeli Citizens

#71
I find it odd they call themselves “Wahhabis.” For starters, that term isn't something a “Wahhabi” would call himself. I've never been able to trace when it was first used. However, it's often used by western scholars to refer to “the Saudi guys” when classifying Muslims.

Does anyone know more about this group?

Re: Saudi Arabian Hackers Leak Credit Card Details of 400,000 Israeli Citizens

#73
post #14

I just gave a talk last week at 28C3 [1,2] about how all the personal details of Israeli citizens are up for grabs for anyone inclined enough to get them. I'm ashamed to see that we've learned nothing in the past 10 years. [1] - http://www.youtube.com/watch?v=ow7cvZOzp6w [2] - http://speakerdeck.com/u/yuvadm/p/28c3-data-mining-the-israe... EDIT: Israeli media now claims that 400K is an exaggerated number, and the act…

That was a great talk. It seemed like maybe you were a little unprepared for the questions at the end. Have you found someone (or more) who gave up their Israeli citizenship between the leak dates to test the questioners hypothesis? And though it is trivial, I'm definitely still curious about the most popular name. I couldn't parse the names you said. Are you going to release your tools?

And then there's the big question: what do you do now that the data is out there? (and putting biometrics in the database isn't the answer)

Re: Saudi Arabian Hackers Leak Credit Card Details of 400,000 Israeli Citizens

#74
post #60
post #23

Earlier quoted context omitted.

what's the password of the rar inside the rar? the page referenced in the "readme" file is unavailable

At least the file, hosted on hacked sites, called israeli.rar, is without a password.

I downloaded one of the files yuvadam posted (not sure if it's the same one there now - the post was edited) and it had a password protected rar in a rar

Re: Saudi Arabian Hackers Leak Credit Card Details of 400,000 Israeli Citizens

#75
post #69
post #56

Earlier quoted context omitted.

It is mostly to cover their behinds not really to protect your data. When it comes to litigation they basically want to point to a piece of paper with your signature on it and say "see they agreed to be compliant" it is not our fault, we did all we could.

I saw an Australian company offering tokenising solutions for credit card transactions. Glancing briefly, they talked about replacing credit card number with "tokens" that can be stored on the customer's premises, while the actual card numbers are securely stored on theirs. To me it seems to be a sensible approach to reducing the attack surface or auditable surface. Is this what Stripe does?

Visa has the "visa verify" and it is a web service that basically asks extra security questions during authorization. That works online only. Relies on the merchant to provide the extra security.

Another thing is temporary one-use credit card numbers. My Discover card as that feature. Of course then it also relies on me to assess the risk of a merchant and go through the steps of getting that number.

Re: Saudi Arabian Hackers Leak Credit Card Details of 400,000 Israeli Citizens

#76
post #22

Don't VISA et al require some kind of PCI compliance for storing credit card details?

Believe it or not, there are entire industries that get a sweetheart deal on PCI compliance where companies can be certified compliant without actually complying with the rules. Think airlines and ancient mainframes that can't handle real disk or network encryption.

Oh dear. And I thought the internet is a safe place for credit cards. Why would hackers want to execute MOTM when servers are sitting ducks?

Re: Saudi Arabian Hackers Leak Credit Card Details of 400,000 Israeli Citizens

#77
post #53
post #38

Attacking the general (innocent) populace for the faults of their government/military? That's the definition of terrorism... and not activism.

> Attacking the general (innocent) populace for the faults of their government/military? Generally agree but with one exception -- in places were the government claims it represents the people and most people agree with that. Then everyone who votes basically shares the guilt of what the government does.

Most democracies I know are usually divided between conservatives of some sort and liberals of some sort, who agree and nothing, and usually just over 50% of the voters if not less, agree with their government's policies.

I totally disagree with the Israeli gov's policies and often protest them. Guess what? My personal info was inside those files (deprecated credit card and email though).

Attacking citizens of democracies because they are inseparable from their government and responsible for its actions, is a common argument for terrorism, btw.

Re: Saudi Arabian Hackers Leak Credit Card Details of 400,000 Israeli Citizens

#78
post #58

Earlier quoted context omitted.

I would say this whole thread took a wrong turn with noduerme's deeply rude, ignorant, arrogant an plain racist post. We would all have gained something had it never existed.

"We would all have gained something had it never existed." Fuck off, Mr. Wannabe Censor. Progress requires unfettered conversation of all types, not just the ones of which you approve. "... noduerme's deeply rude, ignorant, arrogant an[d] plain racist post." It was none of those things. What he said is basically correct, and it reminded me of 2005's Syriana, in which there was a conversation between Matt Damon as Bry…

> Fuck off, Mr. Wannabe Censor

I'm not one who wants to impose restraint on others. I merely suggest a little bit of tact makes dialog possible. Or, more important, that its lack may make dialog impossible.

> Progress requires unfettered conversation of all types, not just the ones of which you approve.

It also requires the conversation itself, which may be rendered unproductive by the kind of comment made upstream.

> it reminded me of 2005's Syriana, in which there was a conversation between Matt Damon as Bryan Woodman, an energy analyst, and Alexander Siddig as Prince Nasir Al-Subaai

Is all your knowledge in Middle East affairs derived from a movie?

Re: Saudi Arabian Hackers Leak Credit Card Details of 400,000 Israeli Citizens

#79
post #58
post #57

Earlier quoted context omitted.

>>demonizing countries like Syria How can you "demonize" that type of brutal regimes? What more can you say about them? That Assad eats children? >>One could say it all depends on your stance vis-a-vis Israel. >>the ruling Saudis will be quick to repress it and assure Israel none of this will happen again Sigh, so Saudi Arabia is pro Israel? :-) http://en.wikipedia.org/wiki/Antisemitism_in_the_Arab_world#... This is…

I would say this whole thread took a wrong turn with noduerme's deeply rude, ignorant, arrogant an plain racist post. We would all have gained something had it never existed.

Sure. I'm the racist. Not the guys who posted this on pastebin: "Judaism.txt, it includes 65 Zionist people who purchased stuff from Judaism web site"

Certainly sounds racially motivated to me.

Let's say we accept, for a moment, that not all Jews are Zionists, that "criticism of Israel" isn't motivated by anti-semitism. Let's even pretend for a second that stealing civilians' credit card numbers is a valid form of criticism against a state or government. Let's forget that Saudi schoolbooks call Jews the "children of apes and pigs." Why not. Even so, why would buying something from a "Judaism web site" make someone a Zionist (or even an Israeli, for that matter)? For all we know some of those people could have been the next Noam Chomsky or (insert other groveling apologist here).

And what do you think they're hoping people will do with this list of Jewish names? Why the fuck is it acceptable to be making lists of Jewish names anyway? If that's not racist, I don't know what is. We'd be better off if that had never existed; but at least it proves plainly that nothing about this hack qualifies as a legitimate political statement.

Re: Saudi Arabian Hackers Leak Credit Card Details of 400,000 Israeli Citizens

#80
post #58

Earlier quoted context omitted.

I would say this whole thread took a wrong turn with noduerme's deeply rude, ignorant, arrogant an plain racist post. We would all have gained something had it never existed.

Sure. I'm the racist. Not the guys who posted this on pastebin: "Judaism.txt, it includes 65 Zionist people who purchased stuff from Judaism web site" Certainly sounds racially motivated to me. Let's say we accept, for a moment, that not all Jews are Zionists, that "criticism of Israel" isn't motivated by anti-semitism. Let's even pretend for a second that stealing civilians' credit card numbers is a valid form of cr…

All you managed to demonstrate is that you are not the only racist in the world. I'm also relieved you didn't question the rest of the assessment, and agree your comment was deeply rude, ignorant and arrogant. That's a start.

I never said the release was warranted, fair, right or anything close to that. In fact, I did not even manifest an opinion about it. I only pointed out your message was not up to our standards (http://ycombinator.com/newsguidelines.html) and that it was full of telling misconceptions.

Post reply on HN