111–120 of 156 posts
I'm leaning toward "hoax." Lulzsec has been reasonably competent writers so far, and the bizarre placement of "blissfully" makes that either incompetent or some kind of steganography. That, added to the lack of tweet, makes me doubt. Of course, it could still be some anon who actually does have the census data, and considers himself lulzsec-affiliated.
http://twitter.com/#!/LulzSec/status/83168314527981568 reply
See:
https://twitter.com/#!/LulzSec/status/83168314527981568
https://twitter.com/#!/LulzSec/status/83167715799470080
EDIT:
Those tweets were deleted. Here's the official word:
"Just saw the pastebin of the UK census hack. That wasn't us - don't believe fake LulzSec releases unless we put out a tweet first."
Earlier quoted context omitted.
It includes information on income and health, those are the really nasty bits to have leaked as far as I can remember. Apart from the obvious ID theft risk.
Name and DoB of everyone in a household alone can make it much easier for someone to pose as you to say a credit card company.
Oh well, just because we want to waste government and local authority investigation time: we hacked every website in the world. Enjoy!
11 minutes ago
LulzSec The Lulz Boat
I'm not seeing "we hacked the UK census" on our twitter feed or website... why does the media believe we hacked the UK census? #confusion
13 minutes ago
LulzSec The Lulz Boat
Not sure we claimed to hack the UK census or where that rumour started, but we assume it's because people are stupider than you and I.
Earlier quoted context omitted.
Yes, let's secure our databases against O'Reillys and AT&Ts submitting their funny names! It's not characters that get you, it's lack of escaping or escaping for the wrong context (e.g. magic_quotes won't work for HTML) • For SQL use prepared statements exclusively (never let "oh, it's just a number so I don't need to" fool you) • Escaping doesn't differ between "trusted" and "untrusted" data (and these boundaries ar…
> For SQL use prepared statements exclusively (never let "oh, it's just a number so I don't need to" fool you) I cannot vote this up enough. Also, depending on what database you are using (eg Oracle) if you don't use prepared statements (aka bind variables) you are guarantee killing your DB performance. People have argued with me in the past that for things like sorting the data they cannot use bind variables. In tha…
Earlier quoted context omitted.
If this is true (and it seems it's probably not) then the people to get angry with are the UK government and their contractors Lockheed-Martin. WTF are we using a US-based company for anyway?
Presumably they put it out for tender and got the best package that they could. Isn't that what we'd expect a Government to do? Tender jobs out to the private sector and choose the provider that offers the best value for money? It's not as if Lockheed Martin are a particularly insecure or untrustworthy company to hold private data.
If this is true then I am suing Lockheed Martin under the Data Protection Act.
There's jurisdiction for that?