So, after I was strongarmed into filling out the damn thing, now all my identity data is in the wild. I will be joining in a suit of Lockheed if this is true.
LulzSec supposedly claims its biggest coup yet: The entire UK 2011 Census
91–100 of 156 posts
Re: LulzSec supposedly claims its biggest coup yet: The entire UK 2011 Census
#92So, after I was strongarmed into filling out the damn thing, now all my identity data is in the wild. I will be joining in a suit of Lockheed if this is true.
There is already a guide on how to take a case under the Data Protection Act:
http://www.ico.gov.uk/upload/documents/library/data_protecti...
Re: LulzSec supposedly claims its biggest coup yet: The entire UK 2011 Census
#93Earlier quoted context omitted.
I don't remember salary being requested on the UK census...
It did ask for the household annual income. It also asks for the job title of the various householders so with a small bit of market info you could easily discern who earns what. Regardless, salary info would be the least of my concerns.
And what is exactly that is of your concern?
Re: LulzSec supposedly claims its biggest coup yet: The entire UK 2011 Census
#94They're going to piss a lot of people off if they do this. Like every single UK citizen. Exposing security flaws and embarrassing govt is one thing, but to put un-redacted personal data online is quite another.
Supposedly, census data should be anonymous. This means the records should be anonymized as soon as possible and should not just be stored.
It can't be totally anonymous, otherwise there's no way of enforcing the legal requirement to complete it.
Each census form had a unique ID, which is obviously linked to your address as it was sent to you through the post.
Re: LulzSec supposedly claims its biggest coup yet: The entire UK 2011 Census
#95I'm leaning toward "hoax." Lulzsec has been reasonably competent writers so far, and the bizarre placement of "blissfully" makes that either incompetent or some kind of steganography. That, added to the lack of tweet, makes me doubt.
Of course, it could still be some anon who actually does have the census data, and considers himself lulzsec-affiliated.
Re: LulzSec supposedly claims its biggest coup yet: The entire UK 2011 Census
#96With the amount of hacking that is flooding the news recently, I would like to learn about database security. What are some good books/tutorials/videos on how to make databases more secure?
I believe that most databases are secure, especially the open source ones. What you should be careful about is the things surrounding the database: the .php files (or whatever) that read/write the database, and the system it is running on. Basic security practice for the web: NEVER trust user input: check and recheck all the GET/POST variables, check that numbers are numbers, that strings are correct strings (they ha…
Actually, it's not easy. It's incredibly difficult to have a webapp with a wide range of functionality that doesn't leak data to SQL injections. There's plenty of stuff that can get past the precautions you listed[1][2], although pornel is closer to the mark.
[1]http://ha.ckers.org/sqlinjection/
[2]https://docs.google.com/viewer?url=http://www.ihteam.net/pap...
Re: LulzSec supposedly claims its biggest coup yet: The entire UK 2011 Census
#97I'm leaning toward "hoax." Lulzsec has been reasonably competent writers so far, and the bizarre placement of "blissfully" makes that either incompetent or some kind of steganography. That, added to the lack of tweet, makes me doubt. Of course, it could still be some anon who actually does have the census data, and considers himself lulzsec-affiliated.
The writing style does seem different, sentences in this release aren't terminated in some cases, whereas those from officially corroborated releases always are.
Re: LulzSec supposedly claims its biggest coup yet: The entire UK 2011 Census
#98I'm leaning toward "hoax." Lulzsec has been reasonably competent writers so far, and the bizarre placement of "blissfully" makes that either incompetent or some kind of steganography. That, added to the lack of tweet, makes me doubt. Of course, it could still be some anon who actually does have the census data, and considers himself lulzsec-affiliated.
Also according to their twitter the number listed in the pastebin has been suspended, and they have a new one (not in the pastebin).
Re: LulzSec supposedly claims its biggest coup yet: The entire UK 2011 Census
#99Given LulzSec seems to post their hacks on twitter, that there's no way of validating who posted the PasteBin item and that the Office of National Statistics hasn't reported the loss, its probably best to wait and see something a little more convincing.
I wrote the article and have been trying to trace the authenticity of the release. I am still waiting to hear back from the Office of National Statistics, which at the time were unaware of who LulzSec even were. I contacted them a little over two hours ago, I haven't received a response, yet.
[deleted]
Re: LulzSec supposedly claims its biggest coup yet: The entire UK 2011 Census
#100So what's the worst possible outcome here in terms of the UK government's reactions? Fast-tracked arcane legislation to make security tools illegal like they are in .de ? Broadening the terms of hacking and increasing the legal penalties? If LulzSec aren't trolling the world and they do indeed have these records I would imagine there is going to be one hell of a shitstorm in the coming weeks.
I don't think so, this is the government that wants to pass the Freedom Bill: http://freedom.libdems.org.uk/
Hilariously, that url returns "403 forbidden."
Google doesn't seem to return anything on that domain.
Here's the text of the freedom bill:
http://www.libdems.org.uk/siteFiles/resources/PDF/The_Freedo...
Seems pretty nice. I dread to think what they'll have to trade the tories for it though.