Live data from Hacker News

How one man tracked down Anonymous—and paid a heavy price

arstechnica.com

81–90 of 162 posts

Re: How one man tracked down Anonymous—and paid a heavy price

#81
post #69

Reading the story, time and time again his programmer warned him about anonymous, and said he shouldn't be messing with them. Then what do you know, he gets attacked by anonymous. Do you think maybe his programmer is in anonymous? :)

You don't have to have anything to do with Anonymous to have some idea of what they're capable of when they're poked with a stick.

Re: How one man tracked down Anonymous—and paid a heavy price

#82
post #72

I've resisted discussing this but I think it's late enough after the event to chime in. First off, disclaimer: We sell HBGary's products in the UK, I know Greg and Penny personally, as well as Jussi (who runs rootkit.com but as far as I'm aware does not work for HBGary). I'm not claiming to speak for anyone or company, just for myself on a purely personal level. After looking into this, what happened is that HBGary i…

HBGary is a good company with some insanely great technology

Insane would be to trust security-related products or advice from a company that can't even secure its own mailserver.

Re: How one man tracked down Anonymous—and paid a heavy price

#83
post #38

Earlier quoted context omitted.

> The most accurate definition for Anonymous is "a subset of users of Xchan". That's not a very good definition, especially if you want to go around and pin DDOS and whatever else on individual people. I mentally replace "Anonymous" with "protesters" whenever they're protesting anything. It makes it a lot more clear and it's more accurate. We already have amorphous groups of people who protest various things, and thi…

I would guess that such groups are being manipulated by exceptionally smart people for specific ends, some significant fraction of the time.

I would guess that such groups are being manipulated by exceptionally smart people for specific ends, some significant fraction of the time.

I think that's a tempting theory to have. Explains a lot and is easy to understand, but I think it gives individuals too much credit.

I would guess exceptionally smart people drift in and out at random and attempt to use the group for specific ends. I think their success rate is slim and random.

By "random" I actually mean the group may go along if it thinks it would be "lulz". Notice I said "may", it also may not - lots of random noise in the hive mind.

What this means is that trying to control or predict the actions of the group is a fool's game. At best you may be able to influence them occasionally in some small way, its pure chaos theory.

Re: How one man tracked down Anonymous—and paid a heavy price

#86
post #61

Earlier quoted context omitted.

So, a human powered botnet that follows commands at random based on how much fun they are?

If it's based on how fun they are, then it's not random (unless fun is randomly distributed).

And assuming fun is not randomly distributed, then it should be possible to identify possible Anon targets by judging the amount of fun it would be for them to take on. Of course, this being Anonymous, it would be unfeasible to survey the full range of targets, because they seem to select those at random.

Re: How one man tracked down Anonymous—and paid a heavy price

#87
post #82
post #72

I've resisted discussing this but I think it's late enough after the event to chime in. First off, disclaimer: We sell HBGary's products in the UK, I know Greg and Penny personally, as well as Jussi (who runs rootkit.com but as far as I'm aware does not work for HBGary). I'm not claiming to speak for anyone or company, just for myself on a purely personal level. After looking into this, what happened is that HBGary i…

HBGary is a good company with some insanely great technology Insane would be to trust security-related products or advice from a company that can't even secure its own mailserver.

We don't know if the security of the mailserver was at stake here. A web app was compromised through SQL injection, then lateral movement was used to get to the mailserver (which may or may not have been on the same box).

The rootkit.com mail server has nothing to do with HBGary AFAIK.

To put it in perspective, HBGary's (not HBGary Federal) technology is a thing called Digital DNA that cuts down the amount of time it takes to analyse memory fragments. That's their focus.

I could understand your reference if they were a company that wrote mail server software and were compromised through their mail server, but your point is a bit of an apple to oranges comparison.

The thing is, people get owned all the time. Even security companies. Heck, we get targeted attacks on us fairly routinely, and when something comes in we have (I think, and unlike most we have actually been able to test it's effectiveness) reasonably good methods for detecting bad stuff coming in and going out, but I'd never say that one day our emails won't end up spread across the Internet, and I wouldn't be so bold as to suggest that someone that has had systems compromised didn't do a proper job just because they were compromised.

The attacker only needs one way in. The defender has to protect against everything. That's not a level playing field.

Re: How one man tracked down Anonymous—and paid a heavy price

#88
FTA, from one of Barr's e-mails: "... accept during hightened points of activity..."

Did this drive anyone else bonkers? I think "accept" or "hightened" alone wouldn't have bugged me. But for some reason the juxtaposition of the two in this sentence made me nerdrage.

Re: How one man tracked down Anonymous—and paid a heavy price

#89

Based on my own minimal experience, the majority of these IRC channels are just a small group of "Anonymous" doing whatever they want, different channels will get publicised at different times through different means, "Anonymous" doesn't exist in any way beyond being a label people use, I guess it could be compared to "emo" or "jock" in high school; they have no "leadership" but people join these groups and label the…

Q is probably a reference to Star Trek character's Q: http://memory-alpha.org/wiki/Q

I don't know what the chances are that Barr's actually that stupid/crazy, but Citricsquid is saying there's a reasonable chance the IRC admin Barr "tracked down the real identity of" was actually a bot.

Re: How one man tracked down Anonymous—and paid a heavy price

#90
post #44
post #34

A great read. It's amazing how Aaron Barr completely believed his hunches even when his programmer said that the data doesn't backup his analysis. He is a business man trying to get paid big bucks from FBI for his hunches.

Sadly, were he rewarded with a continuing money stream, he would likely justify the innocent names as "collateral damage" as the money would have been a mark of success. Aaron Barr fancies himself a modern-day witch-hunter, and it's good he was hoisted on his own petard.

Gives one pause to think about the attractiveness of the career "witch-hunter" when the witches actually do have magic powers.
Post reply on HN