e n t e r a t y o u r o w n r i s k Januar y2012,I ssue08
ery v a u o y ngs ri b s w e n er thehack
! R A E Y W E N Y HAPP
TheHackerNewst houghtt hebe s twayt obr i ngy out hehappi e s tof Ne w Ye ar swast obr i ngt oge t he rt hebe s t ,t hebr i ght e s t ,andt hemos t c ompe t e ntofs e c ur i t ye xpe r t si nt hef i e l d.Ours pe c i ale di t i onJanuar y Magaz i nedoe sj us tt hatandy ouwi l lf i ndi tc hoc abl oc kf i l l e dwi t hs e c ur i t yne ws ,i nf or mat i on,i ns t r uc t i onandj us tpl ai nf un! Wee xt e ndour mos t gr ac i ous t hanks t o Securi t yShel l ,SecMani ac,Korben, Securi t yFAQ’ sandSect echnof orpr ov i di ngs uc hac ompr e he ns i v e l ookati nt e r ne ts e c ur i t y ,i t si s s ue s ,i t sgr owt handi t spos s i bi l i t i e s . ForTheHac ke rNe ws , t hepas ty e arwasf ul l ofs ur pr i s e s , andmanyoft he ac c ompl i s hme nt swemadewe r ebe c aus eofy ou.Wear egr at e f ulf orour l oy alr e ade r s hi pandwe l c omene wr e ade r sandc ont r i but or s . TheHac ke r ne wshast r ac ke dt hee v e nt soft hel as ty e arandwear eamaz e datt he t al e ntandf i ne s s eof“ Te c hi e ”pe opl eal lov e rt hewor l dwhoc anbr e ak i nt ot hemos tc ompl i c at e dands ophi s t i c at e ds y s t e ms .Wel ov er e por t i ng y ourhac ki ngne wsandl e t t i ngt hewor l dknowwhatc apabi l i t i e st hehac ki ngwor l dhasandwhatt he yar edoi ngt oaf f e c tc hangei nt hec y be rs e c ur i t ywor l d. Aswel ookbac kwes mi l ewhe nwet hi nkt hati ni t i al l ywebe ganasa Cy be r Awar e ne s spr oj e c t( e s t abl i s he di nNov e mbe r201 0)byac ol l e ge s t ude nt .I nOney e arTheHac ke rNe ws( THN)hasbe c omeal e adi ng s our c eofpr ov i di ngi nf or mat i onandr e s our c e st os e c ur i t ye xpe r t sand hac ke r swor l dwi de .TheHac ke rNe wshase v ol v e dt owor kc l os e l ywi t h andwi t hi nt hec y be rs e c ur i t yc ommuni t i e si nane f f or tt omaket hei nt e r ne tmor es e c ur e .Wehav ee xpande di nt opr ov i di ngc y be rs e c ur i t yc l as s e s andhav ehe l pe dmanyc or por at i onsandl oc algov e r nme nt st i ght e nt he i r s e c ur i t ys y s t e ms .
Aswee ndt hi sy e arandl ookt ot hene xt ,wet hanky ouf orbe i ngs uc hde v ot e df ansofTHN andappr e c i at i ngoure f f or t sandpr ov i di nguswi t h y ourFe e dbac k, Ne wsUpdat e sandDonat i ons .Manyofy oube e nwi t hus t hr ought hehar dt i me sandt hehi ght i me s ,andIhav eaf e e l i ng201 2wi l l br i ngt onsofgr e atc ont e nt !
Al s ot hi spas ty e arwer e l e as e d7I s s ue sofTheHac ke rNe wsMagaz i ne . THNMagaz i nei saf r e emont hl ymagaz i nede s i gne dt os pr e adawar e ne s s andknowl e dgeaboutc y be rs e c ur i t y . Ourgoali st opr ov i det hemos tupt odat ei nf or mat i ononawi dev ar i e t yoft opi c st hatr e l at et ohac ke r sand s e c ur i t ye xpe r t swor l dwi de .Bys har i ngourf r e emagaz i newi t hy our f ami l y ,f r i e nds ,c owor ke r sandot he rs e c ur i t ye xpe r t s ,y ou’ r ehe l pi ngt o pr omot eawar e ne s saboutgl obals e c ur i t yi s s ue s . Thee di t or i als t af fatTheHac ke rNe wswi s he sy ouandy ourf ami l i e st he happi e s tofNe wYe ar sandwel ookf or war dt oane xc i t i ngande v e re v ol v i ngl ookatc y be rs e c ur i t yi s s ue s .
Wec annote ndourNe wYe ar sme s s agewi t houtas pe c i alt hanksandac knowl e dge me ntt oANONYMOUS.Wehav es e e nAnony mousgr owand r e f i net he i runde r s t andi ngoft he i rwor t handi nf l ue nc ei nt hepol i t i c al mov e me nt st aki ngpl ac et hr oughoutt hewor l d.
Weknownowt hatAnony mouswi l lbeahi s t or ymaki ngi de nt i t yt hatwi l l br i ngc or por at egr e e dandgov e r nme ntt y r annyt oi t skne e s .Anony mous wi l lmos tl i ke l ys i ngl ehande dl yr e t ur ngov e r nme ntt ot hepe opl e ,whe r e i tbe l ongs .
Vi v aLaAnony mousandal lwhowor kt or e s t or ehumandi gni t yamongs t gov e r nme ntandt he i rpe opl e .
Mohi tKumar Founde rTHN &Chi e fEdi t or Pat t iGal l e Edi t or ,THN
THN Team Pr i y ans huSahay Ki s l ayBhar dwaj
Rai s i ngy ourki dst ohav e c y be rs e c ur i t yawar e ne s s
Theonet hi ngt hati sgr e ataboutt hei nt e r ne ti st hatj us tl i kemanyoft he ot he rmaj orme di ame di umsi thasc ont e ntf oral ldi f f e r e ntt y pe sofage gr oups . I ft he r ear eol de rpe opl ewhowantt obee nt e r t ai ne d, t hei nt e r ne t pr ov i de spl e nt yoff un,game sande duc at i on.I fy ouhav ey ounge rki ds t haty ouhav et oe nt e r t ai nt he ny ouwi l lf i nds ome t hi ngf ort he m aswe l l . Butunl i ket heot he rmaj orme di umss uc hasTV, y ouhav eamor edi v e r s e s t oc kf r om whi c ht opi c kf r om.Wi t ht hei nt e r ne ty ouar ege t t i ngc ont e nt f r om al lar oundt hewor l dandnomat t e rwhi c hagegr oupy oune e dt o e nt e r t ai n, y ouwi l l beabl et of i nds ome t hi ngf ort he mt owat c hunt i l t he i r he ar ti sc ont e nt . Si nc et hei nt e r ne tdoe shav et heabi l i t yt oe nt e r t ai nc hi l dr e nt hatme ans t hatt he r ei sagoodc hanc et haty ourc hi l dwi l lwantt ous et hec omput e r al l oft het i me . Jus tl i kei nt he90’ swhe napar e ntwoul dus et heVCRand t heTVasababys i t t e r ,t he yar enows t ar t i ngt odot hes amet hi ngwi t ha c omput e rt hati sc onne c t e dt ot hewe b. I ns t e adofhav i ngt ot r yt of i ndac t i v i t i e st odot ooc c upyt hec hi l d' st i met he yj us ts i tt he mi nf r ontoft he c omput e randl e tt hatc ont e nte nt e r t ai nt he m. 3THN-Magaz i ne|J anuar y2012
www. t hehac k er news . c om |I s s ue08
Butt he r ei sani nhe r e ntpr obl e m wi t ht hi st y peofac t i v i t y .Mos tpar e nt s t he s eday shav eonl ybe e ne xpos e dt ot hei nt e r ne tf oras mal lpor t i onof t he i rl i v e s .Thi sme anst hatt he yhav enotgr ownupar oundt hei nt e r ne t . Thi sme anst hatt he r ei sagoodc hanc et hatt he yar eunawar eoft hedange r st hatar eont hene tf orc hi l dr e n. Sur e , t he ymi ghthav eage ne r al i de a ofwhati sdange r ousont hei nt e r ne t-i t e mss uc hasv i r us e sandot he r t y pe sofmal war ege tt hebul kofme di aat t e nt i on-butwhataboutt he ot hert ypesofdangerst hatcanhappenont hei nt ernet ?How doyouhel pprot ectyourki dsf rom t hat ?
Prot ect i ngyourchi l df rom cyberdanger I fy ou’ r egoi ngt oal l owy ourc hi l dt ous et hec omput e ral l oft het i met he n y oune e dt obeawar eoft hedange r st hatar eoutt he r ef ort he mt of ac e . Youhav et oe duc at ey our s e l fi nor de rt opr ot e c tt he m.
Fi r s tofal l , wewi l l t al kaboutt hedange r ss uc hasmal war et hatc anaf f e c t t he ml at e ri nt hear t i c l e . Forr i ghtnowwewi l l f oc usont hemor edange r oust hr e at sofme e t i ngs t r ange r sont hei nt e r ne t .Somepe opl et hi nkt hat t heonl ywayt hatt he i rc hi l di sgoi ngt ome e tupwi t has t r ange ri st o wande ri nt os omeadul tc hatr oom andt al kt ot hewr ongpe opl e .Thati s nott r ueatal l .The r ear emor eway st hant hatt ome e tupwi t hs t r ange r s . The r ear eadul t swhowi l lt aket het i meands t al kki dwe bs i t e sandac t l i ket he yar eoneoft he m. Whe nt he ygai nt heki d' st r us tt he ywi l l t he nt r y t os e tupame e t i ng.Wedon’ te v e nhav et oe xpr e s showbadt hati s .Thi s i swhyy ouhav et omoni t orwhaty ourki dsar edoi ngont hei nt e r ne tal l oft het i me .Don’ tgi v et hebadguy sac hanc et os t r i ke .
Butge t t i ngbac kt omal war e ,y e st hati sapr obl e mf ory ourki dsaswe l l . Hav i ngt hewr ongmal war epopupc annotonl ywr e c ky ourc omput e r , buti tc anal s oc aus ey ourc hi l dt os ur fonwe bs i t e st hatar enotme antt o bef orc hi l dr e n’ se y e s .Sot oke e pt hi sf r om happe ni ngy oune e dt omake s ur et haty ourc hi l d’ sc omput e rhast hel at e s tant i v i r usandot he rs e c ur i t yt ool s .I fy ourc hi l di sgoi ngt obeont hec omput e rf orl ongpe r i odsof t i met he natl e as tmakes ur et he yar es af e . Aboutt he Aut hor:Lee I vesi san i nt e r ne ts e c ur i t ybl ogge rf r om London,Engl and.ht t p: / / www. s e c ur i t y f aqs . c om 4THN-Magaz i ne|J anuar y2012
www. t hehac k er news . c om |I s s ue08
“ CyberChi na”
Fr om Ope r a t i onAur or at oChi naCybe rAt t ac ksSyndr ome Whe nwet hi nkofChi nai nr e l at i ont oc y be rwar f ar e , wei magi neanar my ofhac ke r shi r e dbyt hegov e r nme nti nac omput e rr oom r e adyt os uc c e s s f ul l yat t ac kanypot e nt i alt ar ge t .Chi nai spe r c e i v e dasac y be rpowe rand r e adyt omar c hagai ns tanyi ns ur mount abl eobs t ac l eus i nganyme ans . I n t hi sc onne c t i onwer e ade v e r y t hi ngandi t soppos i t e ,andwear er e adyt o bl ameal ls or t sofc y be rt hr e at st ot heCount r yoft heRi s i ngSun. Thet r ut h,howe v e r ,i squi t edi f f e r e nt ,atl e as ti nmyopi ni on,andunde r s t andst hatt heChi ne s epe opl ebe f or eot he r shav eunde r s t oodt hei mpor t anc eofas t r at e gi che ge monyi nc y be rs pac e .Howe v e r ,manydoubt sar e be gi nni ngt ogat he ront her e al t e c hnol ogi c al c apabi l i t i e sofChi na.I tc e r t ai nl yhasahi ghpot e nt i al f orc y be rof f e ns i v ebuti t squal i t yi sr e al l yar guabl e . Chi nahast hemos te xt e ns i v ec y be r war f ar ec apabi l i t i e s .I tbe gan t o i mpl e me ntanI nf or mat i onWar f ar es t r at e gyi n1 995c onduc t i ngahuge quant i t yofe xe r c i s e si nwhi c hc omput e rv i r us e shav ebe e nus e dt oi nt e r r uptmi l i t ar yandpr i v at ec ommuni c at i ons .I n2000, Chi nae s t abl i s he da s t r at e gi cI nf or mat i onWar f ar euni t ,Ne tFor c e ,whi c hi sr e s pons i bl ef or “ wagec ombatt hr oughc omput e rne t wor kst omani pul at ee ne myi nf or mat i ons y s t e mss panni ngs par epar t sde l i v e r i e st of i r ec ont r olandgui d anc es y s t e ms . ”TodayThePLAGSDThi r dDe par t me ntandFour t hDe par t me nt sar ec ons i de r e dt obet het wol ar ge s tpl ay e r si nChi na‘ sbur ge oni ngc y be r i nf r as t r uc t ur e .
5THN-Magaz i ne|J anuar y2012
www. t hehac k er news . c om |I s s ue08
I nNov e mbe r201 1 ,De s mondBal l ,apr of e s s ori nt heSt r at e gi candDe f e ns eSt udi e sCe nt r eatAus t r al i a' sNat i onalUni v e r s i t yar gue st hatt he Chi ne s eof f e ns i v ec apabi l i t i e st odayar epr e t t yl i mi t e dandhehasal s ode c l ar e dt hatt hei nt e r nals e c ur i t yhasabunc hofv ul ne r abi l i t i e s .
Bal l s ay st hatChi na' sc y be r war f ar ec apabi l i t i e sar e" f ai r l yr udi me nt ar y " , andi sac t ual l yabl et oor gani z emas s i v eat t ac ks( e . g.DDoSat t ac ks )wi t h l i t t l es ophi s t i c at i on.Thet e c hnol ogys ol ut i onsbe hi ndt hemal war eus e d ar er e al l ypoorandt hi smake st he mr e al l ys i mpl et ode t e c tandr e mov e be f or eanydamagehasbe e ndoneordat as t ol e n.Thec apabi l i t i e ss hown c annotbes uf f i c i e ntt ope ne t r at ehi ghl ys e c ur ene t wor ksorc ov e r t l ys t e al orf al s i f yc r i t i c aldat a.
Arewereal l ysuret hatbehi ndt heat t acksareChi na' shackers? Ac c or di ngc y be ranal y s t s ,hac ke r si nChi naandt he i rat t ac kshav edi f f e r e ntdi gi t alf i nge r pr i nt s ,e as i l yr e c ogni z abl ebyanal y z i ngt heus e dc omput e rc ode ,ands t udy i ngt hec ommandandc ont r olc omput e r st hatt he y us e dt omov et he i rmal i c i ouss of t war e .
Nodoubt ,anal y s t sar ec onv i nc e dt hatat t ac ksar ec omi ngf r om t heChi ne s egov e r nme nt ,be c aus et he yhav et r ac ke de noughi nt r us i onst os pe c i f i cl oc at i onst obec onf i de ntt he yar el i nke dt oBe i j i ngc y be rs t r uc t ur e s . Cons i de rt hatt het hr e atwaspe r s i s t e nt ,s pr e adi ngmal war ei nt ar ge t c omput e rne t wor ksagai nandagai nov e rt hec our s eofs e v e r almont hsor e v e ny e ar s . ht t p: / / www. s e c ur i t y c hal l e nge s . or g. au/ Ar t i c l e PDFs / v ol 7no2Bal l . pdf W hi charet hecount ri esbei ngt arget edbyChi naandwhoare t herealt arget soft heseat t acks.
Manyc y be r i nt e l l i ge nc eope r at i onshav ebe e nc onduc t e dagai ns tnume r ousc ount r i e s ,i nc l udi ngt heUni t e dSt at e s ,UK,Aus t r al i a,Ne wZe al and, Canada,Ge r many ,Fr anc e ,t heNe t he r l ands ,Por t ugal ,Japan,Sout h Kor e a,Tai wan,I ndi a,Paki s t an,I r an,Thai l and,t hePhi l i ppi ne sandI ndone s i a. 6THN-Magaz i ne|J anuar y2012
www. t hehac k er news . c om |I s s ue08
Cons i de rt hatac c or di ngt owhathasbe e npubl i s he di nt heOf f i c eoft he Nat i onalCount e r i nt e l l i ge nc eExe c ut i v er e por t ,pr e v al e ntus ageofc y be r ope r at i onsi sr e l at e dt oat t e mpt i ngt ogai nbus i ne s sandi ndus t r i als e c r e t sf r om c ompani e s ,i nt hi sc as ef r om Ame r i c ans . Compani e sar ef r us t r at e dt hatt hegov e r nme nti s n' tdoi nge nought o pr e s s ur eChi nat os t opt heat t ac kswhi c ht heChi ne s egov e r nme nthasof f i c i al l ybe e n pr ov i di ngpr ot e c t i on and anony mi t yt ot hos egr oupsof hac ke r s .I nt hel as tt e ny e ar st heat t ac kshav ei nc r e as e ddr amat i c al l y br oade ne dt ot ar ge tde f e ns ec ompani e s ,c r i t i c ali ndus t r i e s ,maj orf i r ms al s oi nc l udi ngc r i t i c ali nf r as t r uc t ur e .
Chi na i sc ons i de r e d one oft he mos tdange r ouspl ay e r sofc y be r e s pi onageope r at i onsagai ns twor l dwi debus i ne s s . For e c as t sf ort hene xt y e ar sar e n’ te nc our agi ngbe c aus et hegov e r nme ntofChi nawi l lmai nt ai n anaggr e s s i v eappr oac handbec apabl eofc ol l e c t i ngs e ns i t i v ee c onomi c , mi l i t ar yandi ndus t r i ali nf or mat i onr e l at e dt of or i e gnnat i ons . Togi v ey ouani de aoft hehugequant i t yofat t ac ksr e por t e di n201 1f or whi c hChi nawasdi r e c t l yori ndi r e c t l yc ons i de r e dr e s pons i bl eIs ubmi t ani nt e r e s t i ngt abl epr e par e dbyt hes e c ur i t ye xpe r tPaol oPas s e r i .The l i s ti nc l ude spr omi ne ntv i c t i mss uc hasRSA.Obv i ous l ywedonothav e t ot alc e r t ai nt yont hear r ayofat t ac ks ,butt hee v i de nc es ugge s t st hat be hi ndal loft he s eope r at i onst he r ei sas i ngl epe r f or me r ,Chi na. Jus tl as twe e kJul i anAs s angehasde c l ar e dt hatChi ne s ei nt e l l i ge nc epe ne t r at e di nt ot hei nt e l l i ge nc es y s t e m oft heI ndi angov e r nme nti nc l udi ng t heI ndi ane qui v al e ntofFBI ,t heCe nt r alBur e auofI nv e s t i gat i on.Thi s e v e ntbr i ngst ot hef or et hene e df orgov e r nme nt st ohav eanappr opr i at e c y be rs t r at e gys ot hatNat i onalSe c ur i t yc annotbeaf f e c t e dbys uc hat t ac ks .Thee c onomi cde v e l opme ntofanat i onc annol onge ri gnor et he s e c y be rat t ac ksr e gar dl e s sofi t sawar e ne s soft hec y be rt hr e at . ht t p: //i bnl i ve. i n. com/news /chi nahackedi ndi as i nt el net wor kas s ange / 2084603. ht ml
7THN-Magaz i ne|J anuar y2012
www. t hehac k er news . c om |I s s ue08
Bas e dont heabov ef ac t s ,Ibe l i e v ei ti swr ongt oc ons i de rt he s eat t ac ks r udi me nt ar yast hee f f e c t sde mons t r at et hatt he yar er e al l ydange r ous ande f f i c i e nt . Anot he re r r one ousbe l i e fi st hatt heChi ne s egov e r nme ntus e sal ar ge gr oupofhac ke r st omaket heat t ac k.Ac c or di ngt oar e por ts uppl i e dby t heAs s oc i at e dPr e s st hemaj or i t yoft heat t ac kse manat i ngf r om Chi na ar ec onduc t e dbyaf e w asadoz e ngr oupsofhac ke r sunde rt hec ont r ol andc oor di nat i onoft heChi ne s egov e r nme nt . W hati st heeconomi ci mpactofcyberat t acksont heU. S. ? Cons i de r i ngar e por tr e c e nt l yr e l e as e dbyt heUni t e dSt at e sOf f i c eoft he Count e r i nt e l l i ge nc eExe c ut i v e( ONCI X)s e v e r al bi l l i onsofdol l ar sar el os t i ni nt e l l e c t ualpr ope r t yandc l as s i f i e di nf or mat i ondi s c l os ur ee v e r yy e ar duec y be re s pi onage . ht t p: / / www. nc i x. gov/ publ i c at i ons / r e por t s / f e c i e _al l / For e i gn_Ec onomi c _Col l e c t i on_201 1 . pdf Wear ewar ne dt hatt hec ons t antbar r ageofc y be rat t ac ksagai ns te c onomi candc r i t i c als y s t e mswi l lr e qui r eauni f i e de f f or tbygov e r nme nt andt hepr i v at es e c t ort oi mpr ov es e c ur i t yf ol l owi ngawe l lde f i ne dc y be r s t r at e gyaddr e s s e dbyt hec e nt r alGov e r nme nt s .Cy be rwar f ar ehasj us t be gun,s t ays har p.
W ri t t enBy: Pi e r l ui giPagani ni Se c ur i t ySpe c i al i s t CEH -Ce r t i f i e dEt hi c alHac ke r ,ECCounc i l Se c ur i t yAf f ai r s(ht t p: / / s e c ur i t y af f ai r s . c o/ wor dpr e s s) pi e r l ui gi . pagani ni @s e c ur i t y af f ai r s . c o 8THN-Magaz i ne|J anuar y2012
www. t hehac k er news . c om |I s s ue08
Ame r i c anhi s t or i anCl ar e nc eCr aneBr i nt onpoi nt e doutv e r ydi s t i nc t l yi n hi sbook“ Anat omyofaRe v ol ut i on�t hemos tr e l i abl eandc ommont ake n pat hi nal ls oc i e t i e st or e v ol ut i on.Thepr e r e qui s i t ef ors uc c e s s f ulr e v ol ut i on,Br i nt onmai nt ai ne d;ar ewi de s pr e adf e e l i ngsofe nt r apme ntandde s pai r , unf ul f i l l e de xpe c t at i ons , auni f i e ds ol i dar i t yi noppos i t i ont oas mal l powe re l i t e ,di s c ont e ntt hataf f e c t sne ar l yal ls oc i alc l as s e s ,ar e f us alby s c hol ar sandt hi nke r st oc ont i nuet ode f e ndt heac t i onsoft her ul i ngc l as s , ani nabi l i t yofgov e r nme ntt or e s pondt ot hebas i cne e dsofc i t i z e ns ,a s t e adyl os sofwi l lwi t hi nt hepowe re l i t ei t s e l fandde f e c t i onsf r om t he i nne rc i r c l e ,andac r i ppl i ngi s ol at i ont hatl e av e st hepowe re l i t ewi t hout anyal l i e sorout s i des uppor tand,f i nal l y ,af i nanc i alc r i s i s .
Cur r e nt l y ,wor l dwi det e nsofmi l l i onsofy oungpe opl ear ehav i ngt he i r hope sanddr e amss hat t e r e d.I nl ar ge randl ar ge rnumbe r s ,t hey out hof t odayar ebe c omi ngpr ogr e s s i v e l ymor ee duc at e dt ot hef ac t st hatt hee c onomi cc r i s i st he yar ef ac i nghasbe e npe r pe t r at e dbyc or r uptgov e r nme nt s andpol i t i c i ansandbyi nt e r nat i onalbanksandc or por at i ons ,t hepowe r e l i t e .They out hoft odayar ef ac i ngl owe rpay ,t hev i l i f i c at i onofwor ke r pr ot e c t i v euni onsr e s ul t i ngf e we rs af e t yr i ght sandhumanr i ght s ,t han t hos eofpr e v i ousge ne r at i ons .Andt hemas s i v eandpe r s i s t e ntl ongt e r m une mpl oy me ntt he yar ef ac i nghasi nc r e as e dc ompe t i t i ont he r e f or edr i v i ngdownwage s ,i nc r e as i ngt e mpor ar ywor kandhasmadei tpos s i bl ef or e mpl oy e r st ohi r eandf i r eatwi l l ,be c aus et he r ear ehundr e dsofappl i c ant sf ore v e r yav ai l abl ej ob.Thes oc i e t yt hathasbe e npas s e dt ot oday ' s y oungpe opl ei sac ut e l ydamage dandi nne e dofar adi c alov e r haul . 9THN-Magaz i ne|J anuar y2012
www. t hehac k er news . c om |I s s ue08
I ti sy oungpe opl ewhoar ebe ar i ngt hebr untofaf ai l e dandgr e e dor i e nt e d s y s t e m.The yar eangr ynotonl ybe c aus eoft hemas s i v eune mpl oy me nt butt he i rs e e t hi ngangr ys t e msf r om t her e al i z at i ont hatt he yar et hege ne r at i ont hati st her e c i pi e nt sofde s t r oy e dhope s ,dr e ams ,mi s t r e at me nt , e xpl oi t at i onandi nj us t i c e .Thebl uepr i ntf orr e v ol ut i ont hatwasl ai dout s oc l e ar l ybyCl ar e nc eCr aneBr i nt onhasnow c omet opas s .Thepowe r e l i t eoft hewor l dt hi nkt he yc anc ont ai nt hi sboi l i ngpotofy out hf ulr age , butt he yar emi s t ake n.The i rl i v e l i hoodi sde pe nde ntont hec y c l eofc ons umpt i onofknowl e dgebas e dt e c hnol ogywhi c hi sf ue l e dbyt hemas s e s . Unabl et opar s eorr e s t r i c tt hi subi qui t ousknowl e dge ,t her abbl ear ei nc r e as i ngl ymadeawar eoft hei nj us t i c e sandt heobv i ouss ol ut i ons .The r e i snone e dt oke e pt hewor l dhungr yandpoor ;i sani de at hatuni v e r s al l y r e s onat e s .Equal l y ,i de nt i f i abl ei st her ootc aus eoft hedi l e mma;al lt hat r e mai nsi showt or e s ol v emat t e r s ,whoandwhatpr i c emus tbepai d.
Sat e dwi t ht hef e r v orofy out handmor eorl e s sf r e eofr e s pons i bi l i t i e s , t he y oungar ec us t omar i l yt hege ne r at i onmos taptt oque s t i ont hes t at usquo andaut hor i t y .Looki ngbac katt he1 960’ sonec ans e ehowt hey out hor i e nt e dac t i v i s m oft he60’ swasbas e donhope f ul ne s sandanopt i mi s t i c c onv i c t i ont hatt he yc oul dr e al l yc hanget hewor l df ort hebe t t e r . Howe v e r t hes e e t hi ngy out hac t i v i s m wear ewi t ne s s i ngar oundt hewor l dt odayi s c ompl e t e l ydi f f e r e ntandi sde e pl yr oot e di nt hes oulde s t r oy i nghi ghr at e ofy out hune mpl oy me nt .Soc i e t i e se v e r y whe r ear ef ai l i ngt ode l i v e ron t he i rpr omi s et ot he i ry oungpe opl e .Today ’ sy oungpe opl ewe r et ol dt hat i ft he ywor ke dhar d,at t e nde ds c hool ,andke ptoutoft r oubl e ,t he yc oul d hav eac omf or t abl eands at i s f y i ngl i f e . Butnow, mi l l i onsuponmi l l i onsof y oungpe opl ear oundt hewor l df i ndt he ms e l v e si nawor l dt hatbr oke t hos epr omi s e s .Youngpe opl ear eal i e nat e dandar et ur ni ngt he i rbac ks ont hes y s t e mt hatf ai l e dt he m. Thec ol l e c t i v epai nofanunj us ts y s t e m dr ov ey oungpe opl et os t andupands pe akout .
Thr oughouthi s t or ywehav es e e ny oungpe opl eofc onv i c t i onandc our age s t andupandat t e mptt obr i ngaboutc hanget hatwoul dc r e at emor ec ompas s i onat e , e mpat hi candj us ts oc i e t i e s . Fr om c i v i lr i ght sl e ade r st os oc i al r e f or me r sofI ndi at oAf r i c anAme r i c anabol i t i oni s t s ,f e mi ni s t s ,oppone nt sofs l av e r y ,pol i t i c aldi s s i de nt sands uf f r agi s tweal ls t andont he i r l e gac yofs ac r i f i c e . 10THN-Magaz i ne|J anuar y2012
www. t hehac k er news . c om |I s s ue08
I nt hey e ar201 1y oungpe opl eoft hewor l de xhi bi t e dabr av ewi l l i ngne s s t obeatt hef or e f r ontoft hes t r uggl eagai ns ti nj us t i c eandt heunf ai r s y s t e mt hatf ai l e dt he m. 201 1wast hebe gi nni ngofamas s i v e , wi de s pr e ad wor l dwi der e s i s t anc et ot hebr ut al i t yofac ol l e c t i v ec or r upts y s t e mt hat haspl ac e dt he i rv e r yl i v e satr i s k.They out hoft hewor l dowei tt ot he ms e l v e st oge ti nv ol v e d,s t ayi nv ol v e dandt aket he i rs t r uggl et ot hene xt l e v e li n201 2.AsChr i sHe dge s ,t heAme r i c anj our nal i s t ,aut hor ,andwar c or r e s ponde nt ,r e c e nt l ywr ot e ,“ We l c omet ot her e v ol ut i on.Oure l i t e s hav ee xpos e dt he i rhand. The yhav enot hi ngt oof f e r . The yc ande s t r oybut t he yc annotbui l d.The yc anr e pr e s sbutt he yc annotl e ad.The yc ans t e al butt he yc annots har e . The yc ant al kbutt he yc annots pe ak. The yhav eno i de as ,nopl ansandnov i s i onf ort hef ut ur e � .
Bewar ne dandbepr e par eawor l dwi dec l ar i onc al lhasbe e ns ounde df or c hange .Ther ageoft hey out h ar oundt hewor l dc annotbec ont ai ne dbe c aus e~Whe nYouHav eNot hi ng,YouHav eNot hi ngt ol oos e !
-Pat t iGal l e , Edi t or,THN
1 1THN-Magaz i ne|J anuar y2012
www. t hehac k er news . c om |I s s ue08
1 )DuQu Thi sy e arwasr e al l yhotf ormal war edi s c ov e r yandanal y s i ss oi ti shar d t os e l e c tf i v emal war e st hatar et hemos ts i gni f i c ant .Mode r nmal war e s mai ngoali sbus i ne s swi s eandt he i rmai nobj e c t i v ei smaki ngmone y wi t hnor e ali nv e s t me nt .Someoft he m al s ohav eapol i t i c alobj e c t i v e andar enotj us tbr oadc as t i ng,butar el ooki ngt ohar mc y be rus e r s . Le t ’ ss t ar tt hel i s twi t hDuQuwhi c hi st hef i r s tknownne t wor kmodul ar r oot ki t .DuQuhasf l e xi bi l i t yf orhac ke r sasi the l pst or e mov eandadd ne wf e at ur e squi c kl yandwi t houts pe c i ale f f or t .Kas pe r s kys e c ur i t yl ab ( gr aphf ol l owi ng)f ol l owe dDuQuandpos t e das e r i e sofar t i c l e sabout t he i rf i ndi ngs .CommandandCont r ols e r v e r swe r ehos t e di ns e v e r al c ount r i e si nc l udi ngI ndi a,Vi e t nam,Ge r many ,UKandmor e . Somee xpe r t shav edoubt sont her e l at i onbe t we e nt heSt uxne tand DuQuc r e at or sast he yus et hes amev ul ne r abi l i t yt hate xpl oi tMS08067andbot hai mf ors t e al i ngandc ol l e c t i ngdat ar e l at e dt oI r ani an age nc i e sac t i v i t i e s .Whe nanal y z e di ts howst hatr e v e r s i ngmal war e s c anl e adt odi s c ov e r i ngne wbugsi nope r at i ngs y s t e ms . Thef l e xi bi l i t yi n DuQuhe l pst hebot ne tc ont r ol l e rt oupgr adet he i rs y s t e mr e mot e l y wi t ht heabi l i t yt oe v e nc he c kt hec ur r e ntv e r s i on.Fore xampl e ,aVi e t nam s e r v e ranal y s i ss howe dhowahac ke rwi t ht het i mef r amemanage d t or e pl ac eOpe nSSH 4. 3wi t hv e r s i on5. 8.Thi swoul dhe l pt os e c ur e c ommuni c at i on and add GSSAPIAut he nt i c at i on f ors t r onge re nc r y pt e daut he nt i c at i on. 12THN-Magaz i ne|J anuar y2012
www. t hehac k er news . c om |I s s ue08
Anot he rv e r yi nt e r e s t i nganal y s i saboutDuQu,c onduc t e dbySy mant e c ( f ol l owi ng)de s c r i be sane xpl oi t e ds t r uc t ur et hats howe dv ul ne r abi l i t y i nMi c r os of twor dt oi nf e c tt heor gani z at i on.Anal y z i ngt hei nc i de nt ,i t wasunc ov e r e dt hatDuQuc onf i gur at i onf i l e sons omes y s t e msc ont ai n s e t t i ngst hatdonots e r v ei nadi r e c tc onne c t i ont oc ont r ols e r v e r sbut t hepr ogr am us e sas pe c i alpr ot oc olf ors har i ngf i l e swi t hanot he rc ompr omi s e ds y s t e ml oc al l yt hathav eac c e s st ot hec ommand& c ont r ol s e r v e r . So, i thasbe e nasabr i dges e r v e rbe t we e ni nt e r nal ne t wor ks e r v e r sandr e mot ec ommandandc ont r ols e r v e r s .
1THN-Magaz i ne|J anuar y2012
www. t hehac k er news . c om |I s s ue08
Thi se nabl e sat t ac ke r st oc onne c tt oani nf e c t e dDuQus y s t e mi ns i det he s af ez onewi t ht hehe l pofr e mot ec omput e r sf r om t hei nt e r ne t ,andus e t he m aspr oxy . Af t e rr e por t i ngt hev ul ne r abi l i t y ,Mi c r os of ti s s ue dadv i s or i e sandpr ov i de dawor kar oundf ort hez e r odayv ul ne r abi l i t y .Thi si sanot he re xampl eofhow r e v e r s i ngmal war ehe l psi nf i ndi ngne wv ul ne r abi l i t i e s andwec ane xpe c thowmanyz e r oday se xi s ti nanye nv i r onme nt . 2)TDL4 Thes e c ondmal war ei sTDL4.Wec al li taboot ki tasi tl oadsdi r e c t l y af t e rt heMBR( Mas t e rBootRe c or d) .Themal war el oadsbe f or et heope r at i ngs y s t e m andi tby pas s e sal lOSs e c ur i t yme as ur e sandmake sant i v i r us e shar dt ode t e c torr e mov e st he m asi tr unsi nas e par at epar t i t i onf r om t heope r at i ngs y s t e m.I fwee xe c ut et hemal war ewewi l l hav e t hef ol l owi ngs c e nar i o:
14THN-Magaz i ne|J anuar y2012
www. t hehac k er news . c om |I s s ue08
• I nanywi ndowsbas e dope r at i ngs y s t e m dur i ngt hei ns t al l at i ont he r e wi l lbeunpar t i t i one ds pac el e f tatt hee ndoft hehar ddr i v e . • Bye xe c ut i ngt hemal war ei twi l lc r e at eane w par t i t i on wi t hout modi f y i ngt heMBR ( Mas t e rBootRe c or d)whi c hwi l lbeboot i ngt he s amewayasMBRbutc al l e dVBR( Vol umeBootRe c or d)ands t or et he mal i c i ouspr ogr am ( i ft he r ei snos uc hs pac eTDL4wi l lr e por tt ot he C&Cs e r v e randt e r mi nat et hee xe c ut i on) . • I fwes c ant heope r at i ngs y s t e m wewi l l f i ndnot r ac eofmal i c i ousac t i v i t y . • Ne xtTDL4wi l lr e s t ar tt hes y s t e m ands t ar tt ohookal lOSi ns t r uc t i onswi t houtbe i ngde t e c t e dorpr e v e nt e d. 3)ZeuS Thet hi r dmal war eont hel i s ti sZe us .I nToday ’ sc y be r s pac ee v e r y t hi ng c anbepur c has e donl i ne , s oy ouj us tor de rwhaty ouar el ooki ngf orand maket het r ans ac t i ononl i nedi r e c t l yf r om t hebank.I fy ouhav eZe uS i ns t al l e dony ourc omput e rors mar t phoney ouc anl os eal ly ou’ r es ol d i naf e wmi nut e s . Ze uSai mst ogr abf i nanc i al i nf or mat i onandus e ss e v e r al f or mst oi nf e c t us e r s ,f ore xampl ei tus e sFac e bookf r i e ndr e que s t st oi nv i t ev i c t i msi ns t al l i ngj av as c r i ptt hatc ont ai nst hemal i c i ousc odeorus i ngs pammi ng me s s age swi t hs oc i ale ngi ne e r i ngt e c hni que st oc onv i nc et hev i c t i mt o i ns t al lt hemal war e . I n201 1t het e am be hi ndZe uShadbe e nv e r yac t i v eandmodi f i e ds our c e c odes e v e r alt i me st oby pas sant i v i r us e sands e c ur i t ys of t war e .The r ei s av e r s i ondi s c ov e r e dbyTr e ndmi c r oAVl ab( f ol l owi ng)Ze uS2. 3. 2. 0,i t updat e si t s e l fast heAV s i gnat ur e s . Butf ort hi sv e r s i on t he r ei sa c hangei ne nc r y pt i onf r om RC4t one wunknownal gor i t hms . 4)Fakeant i v i r us e sc ont i nuet oe v ol v eandt odaymal i c i ouswe bs i t e sar e s t i l li nc r e as i ng;t hei de abe hi ndf akeAVi st oi nf e c tc omput e randal e r t v i c t i m aboutani nf e c t i ont hatc anber e mov e donl ybypur c has i ngc e r t ai nl i c e ns eonl i ne .He r et hev i c t i m wi l lmaket het r ans ac t i ondi r e c t l y f r om t hei nf e c t e dc omput e randc r i mi nalc ange tt hebankc r e de nt i al s . 15THN-Magaz i ne|J anuar y2012
www. t hehac k er news . c om |I s s ue08
Somene w way shav ebe e nadde dt of akeant i v i r usi st ohav eonl i nes uppor tt oas s i s tus e r sandmaket hev i c t i m mor ec onv i nc e dbyt hec r i mi nal s e r v i c e s .He r ey ouc anf i ndas c r e e ns hotf oraFake AV.
Sobev i gi l antwi t ht he s eope r at i onsandc ont ac tat r us t e ds e c ur i t ye xpe r t i fy ouf e e lt haty ouar ei nas i mi l arc as e .
5)Tr oj anpr oxi e sar eamongt hebi gge s tt hr e at sast he yal l owhac ke rt ous e t hev i c t i msc omput e rasapr oxyatanyt i me .Themal war el aunc he san HTTPpr oxys e r v e ront heTCPpor tnumbe rXXXX andSOCKSpr oxy s e r v e ronTCPpor tXXXX.Ne xtt heat t ac ke rwi l lbet r ac ke dondi f f e r e nt we bs i t e sasv i c t i mi nf or mat i on.
I nt hee nd,e v e r yy e arwehav ene w mal war e swi t hmor ec ompl e xi t yi n t he i rc odeandt e c hni que s , t hi si sduet ot hec hangei nt e c hnol ogi e sandi n t hewaywede al wi t hi nf or mat i on. Nowwehav ene ws e c ur i t ys of t war et hat i sgoi ngde e pt os e c ur et heMBRbutt hi sf ors ur ewi l l br i ngne wc hal l e nge s anddi f f e r e ntway st oby pas st hi spr ot e c t i on. 16THN-Magaz i ne|J anuar y2012
www. t hehac k er news . c om |I s s ue08
Ref erence: ( 1 )Fi gur e1 :updat i ngope nSSH Se r v e r‘ A’ –Vi e t nam ht t p: / / www. s e c ur e l i s t . c om/ e n/ bl og? t opi c =1 99380362
( 2)Fi gur e2:Count r i e swi t hr e por t e dDuqui nf e c t i ons .Re dr e pr e s e nt s c onf i r me di nf e c t i ons ,or anger e pr e s e nt sunc onf i r me dr e por t s http: //www. symantec. com/connect/w32-duqu_statusupdat e s _i ns t al l e r z e r oday e xpl oi t ( 3)Fi gur e 3:Har d di s k par t i t i onsbe f or e and af t e rTDL4 e xe c ut i on ht t p: / / bl og. e s e t . c om/ 201 1 / 1 0/ 1 8/ t dl 4r e boot e d ( 4)Ze uS Ge t sAnot he rUpdat eht t p: / / bl og. t r e ndmi c r o. c om/ z e us ge t s anot he r updat e /
W ri t t enBy:Mour adBe nLakhouai sanI nf or mat i onSe c ur i t ypr ac t i t i one r .Admi natwww. s e c t e c hno. c om |i nf o@s e c t e c hno. c om
16THN-Magaz i ne|J anuar y2012
www. t hehac k er news . c om |I s s ue08
De f Campi sanat i onali ni t i at i v et hatt r i e st ode v e l opf orpe opl es ki l l s aboutc omput e rs e c ur i t ybyc r e at i ngas t i mul at i nge nv i r onme ntwhi c h al l owsof f l i neandonl i nee xc hange sofknowl e dgebe t we e nunde r gr ound s e c ur i t ys pe c i al i s t s , ac ade mi c sandc or por at i onsi nRomani a. De f Campi s f oc us e donpr e s e nt i ngt e c hni c ali nf or mat i onr e l at e dt ot hes e c ur i t yand i ns e c ur i t yofv i r t ual andr e ale nv i r onme nt s .De f Campe me r ge df r om ade s i r et ouni t ef ort he f i r s tt i mei nRomani apr ov i di ngc y be rs e c ur i t ye xpe r t sani nf or male nv i r onme ntt oe nabl et he mt oknow andpar t i c i pat ei nc ompe t i t i onswi t h e ac hot he r .Al s o,t omakef r i e ndsandal l owt he mt oi nv e s t i gat et hene ar f ut ur ef r om whi c ht ode v e l opandgr ow. Hi st ory Thei de ac amei nav i r t uale nv i r onme ntandj oi ni ngs e v e r aldi s c us s i ons t hatIhadwi t hs e v e r al pe opl e .I nl i nki ngal l t he s edi s c us s i onsi twasc onc l ude dt hatRomani al ac ksaof f l i ne" f r ame wor k"t hatwoul dbr i ngt oge t he rande nc our ages har i ngofv ul ne r abi l i t i e s ,e xpl oi t sand0day s . Thus ,i nSpr i ngt hef i r s tdi s c us s i onus i ngt het e r m" De f Camp"be gant o appe ar . 17THN-Magaz i ne|J anuar y2012
www. t hehac k er news . c om |I s s ue08
De f Camp@Br an,t hef i r s tnat i onalc y be r s e c ur i t yc onf e r e nc ei nRomani a,washe l di nBr anbe t we e n30Se pt e mbe r-2Oc t obe r .Al mos t70 hac ke r sgat he r e dt ot al k,s har ee xpe r i e nc eandhav ef un.Thee v e ntgat he r e dpe opl ef r om al lov e rt hec ount r ywhowant e dt oknow,whowant e d t os e ewhatwasr e al l yhappe ni ngi nt hi sar e a,whowant e dt of e e lc omf or t abl ewi t hot he rpe opl ewi t hs amei nt e r e s t sandpas s i ons .Many l e f t t he r ewi t hne wf r i e ndst hat ,f i nal l y ,wi l ll i nkne ws t r ongpr oj e c t sand s t ar tt oputpoi nt sonRomani awhe ns ome oner e f e r st oEas t e r nEur ope . Thee v e ntwasf ors omea72hourmar at hon.Thet hr e e daye v e ntwas s uppor t e dbynume r ouspr e s e nt at i onsf r om s omeoft hemos tpopul ar y oungpe opl et hathav es e c ur i t yi nf or mat i oni nt he i rbl ood.Thes e c ond dayoft hee v e nthasbe e nc har ac t e r i z e dbyac ompe t i t i onofov e r8hour s off or e ns i c s . De f CampFor e ns i cCont e s t201 1 .Be t we e nof f i c i alac t i v i t i e s ,t he r ewe r e s omet hatpl ay e ddi f f e r e ntgame swhi l eot he r swhe r es har i ngort r y i ngt o pe nt e s tdi f f e r e nts e r v i c e sr andoml yc hos e n.Pus he df or war dbyt hes uc c e s soft hef i r s te di t i onandbyt hef e e dbac kf r om par t i c i pant s ,wear e s oar i ngt hi st i mei npr omot i ngt hee v e nti nt hemai nr e gi onsofRomani a. Thef i r s toft hr e ewasMol dov at hr ough i t shi s t or i cc e nt e r ,I as i .The “ Ghe or gheAs ac hi �Te c hni c al Uni v e r s i t yi nI as i , Romani a, hos t e df i r s tr e gi onale di t i onoft hehac ki ngandI NFOSECc onf e r e nc eDe f CamponDe c e mbe r1 7,whe r eunde r gr ound,ac ade mi cande nt e r pr i s es e c ur i t ys pe c i al i s t ss har e dt he i ri ns i ghtons omeoft hehott opi c st hatc ur r e nt l yaf f e c t bot hi ndi v i dual sandc ompani e s .Att hi se v e ntwer ai s e dt hebaront he numbe rofpar t i c i pant sandqual i t yofpr e s e nt at i ons .I twasane v e ntof ne ar l y1 0 hour sl oade d wi t h nume r ouspr e s e nt at i onsofs pe c i al i s t s c omi ngbot hf r om t hec or por at ee nv i r onme ntaswe l lasi nde pe nde nts e c ur i t ye xpe r t s .Anumbe rofpr e s e nt at i onsf r om I as iwe r eappr e c i at e dby t hei nt e r nat i onalpr e s s .Amongt hepr e s e nt at i onst he r ewe r et he or e t i c al , POC' s ,0dayandl as tbutnotl e as t ,mi s t ake sf r om s omewhowor kwi t h c ompl e xne t wor ki nf r as t r uc t ur e s .Thi st i me ,t he r ewe r eov e r1 70at t e nde e s . 18THN-Magaz i ne|J anuar y2012
www. t hehac k er news . c om |I s s ue08
Fol l owup Thee v e ntwi l lnots t ophe r eandl ongt e r m wantt ot ouc hpar t i c i pant s ands pe ake r sf r om al lov e rEas t e r nEur opeatane v e ntwi t hani nt e r nat i onali mpac t . Ye ar201 2wi l lbev e r yi mpor t antf ort hec onf e r e nc ef ut ur e ands ur pr i s e sar eal lr e adyt oe me r ge .
submi t t edBy: Av r am Mar i usGabr i e l ,whowor ksunde rt heps e udony m" d3v 1 l " ,i sa we l l knownf i gur ei nt hei nt e r nat i onals e c ur i t yc ommuni t y . Hehasi de nt i f i e ds e v e r alv ul ne r abi l i t i e si nc ommonl yus e dappl i c at i ons ,he l pi ngt o i mpr ov et hes e c ur i t yoft hos eappl i c at i onsf ormi l l i onsofus e r s . ht t p: / / s e c ur i t y s h3l l . bl ogs pot . c om
19THN-Magaz i ne|J anuar y2012
www. t hehac k er news . c om |I s s ue08
SOPA
TheHackerNewssay“ NO WAY” TheSt opOnl i nePi r ac yAc t( SOPA) , orH. R. 3261 , i sabi l lt hatwasi nt r oduc e donOc t obe r26,201 1i nt heUni t e dSt at e sHous eofRe pr e s e nt at i v e s ,byr i ght wi ngTe xasRe publ i c an,Re pr e s e nt at i v eLamarSmi t hand t we l v ei ni t i alc os pons or s .TheSt op Onl i nePi r ac yAc tdr amat i c al l y br oade nst hec apac i t yofUni t e dSt at e sl aw e nf or c e me ntandc opy r i ght hol de r st of i ghtonl i net r af f i c ki ngi nc opy r i ght e di nt e l l e c t ualpr ope r t y andc ount e r f e i tgoods .Pr opone nt sofbi l lH. R.3261s t at eSOPApr ot e c t s t hei nt e l l e c t ualpr ope r t ymar ke tandr e l at e di ndus t r y ,j obsandr e v e nue , andi se s s e nt i alt or e i nf or c eands t r e ngt he ne nf or c e me ntofc opy r i ght l awspar t i c ul ar l yagai ns tf or e i gnwe bs i t e s .Oppone nt soft hebi l lf or c e f ul l yde e mt hatt hebi l li nf r i nge sonFi r s tAme ndme ntr i ght s ,i se f f e c t i v e l yI nt e r ne tc e ns or s hi p,andi nf ac twi l lc ompl e t e l yande f f e c t i v e l y hobbl et heI nt e r ne t .Andmor ei mpor t ant l y ,oppone nt ss t r ongl ybe l i e v e SOPA wi l ls i gni f i c ant l yi nt i mi dat e ,t hr e at e nandf r i ght e nal lpot e nt i al whi s t l e bl owe r sand adv e r s e l ye f f e c tmanyi mpor t antas pe c t soff r e e s pe e c h. Todat e ,al ar gepor t i onoft hemos ti mpor t antandi nnov at i v eI nt e r ne t i ndus t r i e sand a v e r ys i gni f i c antpe r c e nt ageofI nt e r ne tus e r shav e s hownr obus tpubl i coppos i t i ont oI nt e r ne t r e l at e dl e gi s l at i onandSOPA i snoe xc e pt i on.Publ i c al l yar gue dbyt opI nt e r ne ti nnov at or ss uc has Cr ai gNe wmar kf ounde rofCr agi s t sLi s t ,Se r ge yBr i n,c of ounde rof Googl e ,Re i dHof f man,c of ounde rofLi nke dI nandmanyot he rpr i nc i palI nt e r ne ti ndus t r yl e ade r st hatSOPA put st heUni t e dSt at e sona pl anewi t ht hemaj or i t yoft y r anni c aland oppr e s s i v enat i onsi nt he wor l d,The yal s of i r ml ybe l i e v et hatSOPAwi l lgi v et heFe dse xc e s s i v e andunac c e pt abl epowe randaut hor i t yt oc e ns ort heWe b.( Che c kout t hegr owi ngandupdat e dl i s tofi mpr e s s i v eoppone nt s . ht t p: / / goo. gl / i SkQh 20THN-Magaz i ne|J anuar y2012
www. t hehac k er news . c om |I s s ue08
At t e mpt i ngt omaket he i rc onc e r nsknownonNov e mbe r1 5, 201 1al e t t e r of“ gr av ec onc e r n”wass e ntt opr i nc i palme mbe r soft heUni t e dSt at e s Se nat eandt heUni t e dSt at e sCongr e s sands i gne dby ,e Bay ,Moz i l l a, Yahoo,AOL Twi t t e r ,Zy nga,Li nke dI n,Googl e ,andFac e books t at i ng howt he ys t r ongl ybe l i e v eSOPAwoul de s t abl i s h" as e r i ousr i s kt oouri ndus t r y ' sc ont i nue dt r ac kr e c or dofi nnov at i onandj obc r e at i on, aswe l l as t oournat i on' sc y be rs e c ur i t y . "I ti sy e tt obes e e ni ft he i rc onc e r nswi l l be t ake ni nt oc ons i de r at i onornot .Butonet hi ngi sc r y s t alc l e ar ,t heI nt e r ne t ' smos twe l l l i ke ds i t e ss uc hasFac e book,Twi t t e r ,e Bay ,andGoogl e , r e gar dt he“ Hol l y wood”s pons or e dc opy r i ghtl e gi s l at i onasar e aland dange r oust hr e at . Ar oundt hewor l doppos i t i on i sgr owi ngt owhati sv i e we daUni t e d St at e sr e pr e s s i v ec or por at el e adat t ac kont hef r e e dom oft hei nt e r ne t . TheEur ope anPar l i ame nt( t hedi r e c t l ye l e c t e dpar l i ame nt ar yi ns t i t ut i on oft heEur ope anUni on)r e c e nt l yadopt e dar e s ol ut i ons t r ongl ywor de d ands t r e s s i ng" t hene e dt opr ot e c tt hei nt e gr i t yoft hegl obal I nt e r ne tand f r e e dom ofc ommuni c at i onbyr e f r ai ni ngf r om uni l at e r alme as ur e st o r e v okeI Paddr e s s e sordomai nname s . "Thi sbodyi sc ompos e dof736 Me mbe r soft heEur ope an Par l i ame nt ,whos e r v et hes e c ondl ar ge s t de moc r at i ce l e c t or at ei nt hewor l d( af t e rI ndi a)andt hel ar ge s tt r ans nat i onalde moc r at i ce l e c t or at ei nt hewor l dwhi c hi swe l lov e r375mi l l i one l i gi bl ev ot e r s .For t y onegl obalHumanRi ght sOr gani z at i onshav e j oi ne dt oge t he re xpr e s s i ngt he i rc onc e r nwi t hSOPAandPr ot e c tI PAc t , s t at i ng” Thr oughSOPA,t heUni t e dSt at e si sat t e mpt i ngt odomi nat ea s har e dgl obalr e s our c e .Bui l di nganat i onwi def i r e wal landc r e at i ngbar r i e r sf ori nt e r nat i onalwe bs i t eands e r v i c eope r at or smake sapowe r f ul s t at e me ntt hatt heUni t e dSt at e si snoti nt e r e s t e di npar t i c i pat i ngi na gl obali nf or mat i oni nf r as t r uc t ur e . Al s o,ani mpor t ant l y ,ane v e ri nc r e as i ngnumbe rofLaw pr of e s s or sar e v oi c i ngt he i rappr e he ns i onandar ebe gi nni ngt oadv anc enume r ousl e gal c onc e r nsaswe l laspr omi ne ntHar v ar dl aw pr of e s s orandaut horof Ame r i c anCons t i t ut i onalLaw,Laur e nc eTr i be .Tr i bei smai nt ai ni ngt hat SOPAi sunc ons t i t ut i onalbe c aus e ,i fe nac t e d," ane nt i r eWe bs i t ec ont ai ni ngt e nsoft hous andsofpage sc oul dbet ar ge t e d;i fonl yas i ngl epage we r eac c us e dofi nf r i nge me nt . " 21THN-Magaz i ne|J anuar y2012
www. t hehac k er news . c om |I s s ue08
Tr i beal s os t at e di nhi swr i t t e nc r i t i c i s mt ot heUSCongr e s s“ Butpr oc l ai mi ngt hebi l l t obec ons t i t ut i onal doe snotmakei ts o–anymor et han r e mi ndi nge v e r y oneofapr opos e dl aw’ sgoodi nt e nt i onsr e nde r st hatl aw i mmunet oFi r s tAme ndme nts c r ut i ny .The r ei snow al oudl ygr owi ng c r i t i c alc hor usf r om wi t hi nandwi t houtt heUSofne gat i v er e ac t i onst o t heSt opOnl i nePi r ac yAc t( H. R.3261 )aswe l lasi t sSe nat ec ount e r par t , t hePr ot e c tI PAc t( S.968) . Thepowe randc ons i de r abl ewr at hofoppone nt sofSOPAwasr e c e nt l y l e v e l e dagai ns tI nt e r ne tdomai nr e gi s t r arandWe bhos t i ngc ompanyGo Daddy .GoDaddyi sc ur r e nt l yt hel ar ge s tI CANNac c r e di t e dr e gi s t r ari n t hewor l d.Thepr ot e s ts t ar t e df r om as i ngl et hr e adappe ar i ngont he s oc i alne wswe bs i t eRe ddi tonDe c e mbe r22,201 1 .Thet hr e addi s c us s e d t hei de nt i t yofs uppor t e r soft heUni t e dSt at e sSt opOnl i nePi r ac yAc t ( SOPA)andi de nt i f i e dGoDaddyasanar de ntSOPAs uppor t e r .Ge t t i ng wor doft hei nt e r ne tdus t upGoDaddydoubl e ddownands oonaf t e rr e l e as e daddi t i onals t at e me nt sv e r i f y i ngt he i rs uppor tofSOPA,c aus i ng manyc ompani e st oi mme di at e l yc l os et he i rGO Daddyac c ount s .The wor dofGoDaddySOPAs uppor tqui c kl ys pr e adac r os st hei nt e r ne tand wasr api dl yf ol l owe dbyapr opos e dGoDaddyBoy c ot tdayonDe c e mbe r 29,201 1 .Soonaboy c ot tandt r ans f e rofdomai nswaspr opos e dand qui c kl yc aughtf i r e . Thes t r onge s tandmos tv oc al s uppor t e roft hi sac t i onwasCEOBe nHuh, ofChe e z bur ge rNat i on.Huh i mme di at e l ypl e dge dt hathi sc ompany woul dr e mov eov e r1 , 000domai nsf r om GODaddyi ft hec ompanyc ont i nue dt he i rs uppor tofSOPA.Huh’ st hr e atwasf ol l owe dqui c kl yby Ji mmyWal e s ,Wi ki pe di af ounde rannounc i ngt hatal lWi ki pe di adomai nswoul dber e mov e df r om GoDaddyast he i rpos i t i ononSOPAwas " unac c e pt abl e ” .Soont heac t i onofHuhandWal e swasf ol l owe dwi t h ac t i onbyAl anSc haaf ,I mgurowne rt r ans f e r r i nghi swe bs i t easwe l l .I n s ol i dar i t yt hec ol l e c t i v ehac ke rgr oupAnony mousr e l e as e dav i de o,c ont ai ni nganomi nouswar ni ngt oGoDaddy“ Toge t he r , wewi l l s t r at e gi c al l y r e mov eGoDaddyf r om t hei nt e r ne t . ” AndonDe c e mbe r25,201 1asa r e s ul toft heboy c ot tandi nt e r ne tac t i onsGoDaddyl os t1 6, 1 91domai ns .
22THN-Magaz i ne|J anuar y2012
www. t hehac k er news . c om |I s s ue08
OnDe c e mbe r26,201 1 ,aGoogl ebombwass t ar t e dagai ns tGoDaddyt o r e mov et he m f r om t he numbe rone pl ac e on Googl ef ort he t e r m " Domai nRe gi s t r at i on"i nr e pr i s alf ors uppor t i ngSOPA.
OnDe c e mbe r23, 201 1goDaddyCEO;War r e nAde l manc l ai me dt ohav e pul l e dGoDaddys uppor tf orSOPA. GoDaddyof f i c i al l yr e l e as e das t at e me nts ay i ng" GoDaddywi l l s uppor tSOPAwhe nandi ft heI nt e r ne tc ommuni t ys uppor t si t .Ade l mans t at e dhef e l tt hatt hepubl i cs t at e me ntr e mov i ngGoDaddys uppor twoul dbee noughf ornow.I ti sy e tt obes e e n i fGoDaddyi ss i nc e r ei ndi s av owi ngt he i rs uppor tofSOPA.I tmaybe wor t hnot i ngt hatwhi l emanyI nt e r ne ts i t e swoul dbes ubj e c tt os hut downsunde rSOPA,Te xasRe publ i c anLamarS.Smi t h,SOPAs pons or , s pe c i f i c al l yname dGoDaddyi naname ndme ntt ot hebi l lasbe i nge xc l ude df r om pe nal t i e sf r om t heac t . Al t hought he r ei sal ar geandf i e r ys t or m ofpr ot e s tagai ns tSOPAunf or t unat e l ywhe r ei tmat t e rmos tt he r ei sonl yas mal lbutgr owi ngoppos i t i oni nt heUSCongr e s sandt heSe nat et oSOPA.Ar e c e ntl e t t e rs i gne d byCal i f or ni ac ongr e s s i onalDe moc r at sZoeLof gr e n,andAnnaEs hoo, al ongwi t hRonPaul , t heTe xasRe publ i c anandc ur r e ntpr e s i de nt i al c andi dat et e nac i ous l ypr e di c t i ngt hepas s ageofSOPAwi l li nv i t e" ane xpl os i onofi nnov at i onki l l i ngl aws ui t sandl i t i gat i on. "AndNanc yPe l os i , t he Hous eDe moc r at i cl e ade rr e c e nt l yt we e t e dt hat“ Abe t t e rs ol ut i ont han SOPAne e dst obef ound. ” 23THN-Magaz i ne|J anuar y2012
www. t hehac k er news . c om |I s s ue08
Bute v e nast heoppos i t i ont oSOPAgr owst hes uppor tf orPr ot e c tI Pi s s ur pr i s i ngl ybr oadi nt heUni t e dSt at e sSe nat e ,andf orSOPAs uppor ti s s l i ght l yl e s ss o.Sof ar ,SOPAhasonl y24c os pons or s ,buti thas n' tbe e n ar oundqui t easl ong.As t udyf unde dbyt heRe c or di ngI ndus t r yAs s oc i at i onofAme r i c a( RI AA)amai ns uppor t e randl obby i s tf orPr ot e c tI Pand SOPAs t at e st hatof1 , 900bi l l si nt r oduc e di nt heSe nat e ,onl y1 8ot he r bi l l sboas tt hes amenumbe rofbi par t i s anc os pons or sasPr ot e c tI P.I t appe ar st hatt hi ss t udy , pl ac e sSOPAi nt het op1pe r c e ntofmos t popul ar bi l l se v e r ,atl e as tbyt hi sme as ur e me ntofc ongr e s s i onale nt hus i as m.Of Pr ot e c tI P' ss pons or si nt heSe nat e , ands ur pr i s i ngl yov e r60pe r c e ntar e De moc r at s . The r ear et hr e ev e r ypowe r f ulor gani z at i onst hathav ebe e nbr 0adl yout s poke ni nt he i rs uppor tofSOPA,TheMot i onPi c t ur eAs s oc i at i onof Ame r i c a,I nc .( MPAA) ,t heRe c or di ngI ndus t r yAs s oc i at i onofAme r i c a, ( RI AA)andt heU. S.Chambe rofComme r c e .Re c e nt l yr e l e as e ddoc ume nt ss howt hat“ Hol l y woodCoal i t i on”hasout s pe ntt heSi l i c onVal l e y Te c hnol ogys e c t ormor et hant e nt i me sonl obby i s t si nt hepas tt woy e ar s andt heUSChambe rofComme r c ehaspl ac e di t sc ons i de r abl ec or por at e we i ghtandmone ybe hi ndSOPA.I nal e t t e rt ot hee di t orofTheNe w Yor kTi me s ,TheU. S.Chambe rofComme r c ev oi c e dt he i rwhol ehe ar t e d ande nt hus i as t i cs uppor tofSOFAwi t ht her at i onal et hatr oguewe bs i t e s t hats t e alAme r i c a' si nnov at i v eandc r e at i v epr oduc t sat t r ac tmor et han 53bi l l i onv i s i t say e arandt hr e at e nmor et han1 9mi l l i onAme r i c anj obs . I thasbe e nr e por t e dt hatYahoohasc anc e l l e di t sme mbe r s hi pwi t ht he U. S. Chambe rofComme r c ebe c aus eoft heChambe r sf e r v e nts uppor tf or SOPAandhasas kot he r st odot hes ame . Theout l ookf ort hos et hatwantt oSt opNe tNe ut r al i t yandKe e pt heI nt e r ne tFr e ei sl ooki ngr at he rgl um TheUSSe nat eJudi c i ar yCommi t t e e af t e rat wodayde bat ewas t e dl i t t l et i mei npas s i ngt hePr ot e c tI P.I ti s appar e nt l yc l e art hats uppor tofSOPAhasanunas s ai l abl emaj or i t yon t heSe nat eJudi c i ar yCommi t t e e .Sopai se xpe c t e dt obeappr ov e dwhe n Congr e s sr e c onv e ne si n201 2. Asf arasPr ot e c tI P, i thasal r e adybe e nappr ov e dbyt heUSSe nat eJudi c i ar yCommi t t e eandi si nque uef oraJanu ar y24f l oorv ot e . 24THN-Magaz i ne|J anuar y2012
www. t hehac k er news . c om |I s s ue08
Unf or t unat e l y ,att hi st i me ,t he r ear enoi ndi c at i onst hatwoul ds i gnal anyf ur t he rhe ar i ngs . Publ i cKnowl e dge ,oneoft hemanygr oupst hathasv oi c e dc r i t i c i s m and hasdi f f i c ul t ywi t ht heSOPAc al l e di t“ ov e r br oad,r i pef orabus eandbad i nt e r nat i onalpr e c e de nt ” .Ev e nt houghPubl i cKnowl e dge ,l i kemos tof SOPAde t r ac t or ss uppor t sc ombat i ngonl i nepi r ac y , t he yal s obe l i e v et hi s par t i c ul arbi l li sde f i ni t e l ynott hewayt oc onf r ontt hepr obl e m." The r e f or et heque s t i onmus tbeas ke d, i st hi si ne ptbi l l wor t ht her i s kofpe r mane nt l ydamagi ngas pe c t soff r e es pe e c handf or e v e rdamaget hef unc t i on oft heI nt e r ne t ?ToSOPATheHackerNewssays“NO W AY” Pl e as egot ot hi ss i t eanddoasmanyoft heac t i onsasy ouc an.Thi sbi l l hass t r ongc or por at i onsbe hi ndi t ,butt oge t he rwear es t r onge r ht t p: / / ameri cancensorshi p. org/
W ri t t enBy: Pat t iGal l e Edi t or-TheHac ke rNe ws[ THN] 25THN-Magaz i ne|J anuar y2012
www. t hehac k er news . c om |I s s ue08
Tr eas ur eofFi r ef oxAddons Fi r e f oxhasbe e nt hede v e l ope r ’ s f av or i t ebr ows e rf oral ongt i me , t hankst oi t samaz i ngc ol l e c t i onof addons .Thi s al s o made i tt he awar eus e r sandpe nt e s t e rbr ows e r s .That ' st he r e as on why I ' v e pi c ke dy ouupas e l e c t i onofs e c ur i t yt ool st ot e s ty ourWe bs i t eand pr ot e c ty our s e l fwhe ns ur f i ng. Toaudi tyourW ebsi t esecuri t y: -I fy ou' r edoi ngy ourt e s t st hr oughpr oxi e s , gi v eFoxy Pr oxyat r y . Foxy Pr oxyal l owsy out os wi t c he as i l ybe t we e npr oxi e s:ht t p: / / goo. gl / 8Sz r w -Re f Spoofass ay si t snameal l owsy out os poofy ourr e f e r r e rURL.I t ' s pr e t t yhandyt oby pas sRe f e r r e rbas e ds e c ur i t yc he c ki ngormakea We bmas t e rbe l i e v eany t hi ngy ouwant:ht t p: / / goo. gl / WnRFH -I fy oune e dt oe nc r y ptorhas hs omec ont e nt ,Fi r e Enc r y pt e ri sav e r y handyt oolt oge te v e r y whe r ewi t hy ou.:ht t p: / / goo. gl / y RE9T -Domai nChe c ke ral l owsy out ol e ar nal mos te v e r y t hi ngaboutt he s e r v e randt hedomai nnamey ou' r epe nt e s t i ng:ht t p: / / goo. gl / qxc qj -I fy ou' r et e s t i ngXSSf l awsandSQLi nj e c t i on, Hac kBari sahi ghl yr e c omme nde d al li n one t ool t o audi ty our We bs i t es e c ur i t y: ht t p: / / goo. gl / kKEhE -Gr oundSpe e dwi l lhe l py out oc hangeanyf or my ou' r eac c e s s i ngon anyWe bs i t e:ht t p: / / goo. gl / ZMt 1 I -I fy ou' r el ooki ngf orXSSs ampl e s , XSSe dSe ar c hwi l ladde v e r ys i ngl e XSS s e ar c h e ngi ne ar ound i n y our Fi r e f ox s e ar c h bar : ht t p: / / goo. gl / g4I 3l 26THN-Magaz i ne|J anuar y2012
www. t hehac k er news . c om |I s s ue08
-I nt hes amev e i n,Se c ur i t y Foc usSe ar c hal l owsy out odi r e c t l ydi gi nt o Se c ur i t y Foc us dat abas e f or e xi s t i ng s of t war e v ul ne r abi l i t i e s . ht t p: / / goo. gl / 6Fj uH
-Chi c ke nf ooti sav e r yhandye xt e ns i ont hatal l owsy out or unJav aSc r i pt mac r osi nFi r e f oxs oy ouc anaut omat es omet as ks ,ormakes omes i t e s y ou' r ev i s i t i ngdot he mf ory ou:ht t p: / / goo. gl / I UI Mi -Cr y pt of oxi sanamaz i ngt oolhe l pi ngy out obr e akmd5e nc r y pt e d s t r i ngus i ngr ai nbowt abl e sl i kedat abas e s:ht t p: / / goo. gl / 6Gi 3t
- SQLI nj e c t Me al l ows y ou t o e as i l y t e s t SQL i nj e c t i on : ht t p: / / goo. gl / uNMV1
-XSSMewor kst hes amewayasSQLI nj e c t MebutonXSSv ul ne r abi l i t i e s:ht t p: / / goo. gl / ZMt 1 I
-Tampe rdat aal l owsy out or e adandupdat eHTTP/HTTPShe ade r s and t e s ty our appl i c at i on s e c ur i t y by updat i ng POST dat a : ht t p: / / goo. gl / 1 AES9 -URLFl i ppe ral l owsy out odoURLs e que nc epr e di c t i onwhe nbr ows i ng doi ngpar amsi nc r i mi nat i on:ht t p: / / goo. gl / YDdz X
-Fi r e s he e pt ur nsy ourFi r e f oxi nas ni f f e r . Youwi l lknowwhe ns ome one t r i e st oc onne c tonaWe bs i t ewi t houtus i ngHTTPSande v e nt ual l yge t s hi sc r e de nt i al:ht t p: / / c ode but l e r . gi t hub. c om/ f i r e s he e p/
-Us e rAge ntPr oxySwi t c he ral l owsy out oe as i l yc hangey our" us e r age nt " ,t hat ' st os ayy ourbr ows e rf i nge r pr i nt .Thi sal l owsy out omakea s e r v e r y ou' r e s ur f i ng f r om an i Phone or ar e Googl e Bot : ht t p: / / goo. gl / CEt m -ShowI Pi sas mal lFi r e f oxAddont hatal l owst ol oc at et hes e r v e rwhe r e t hes i t ey ou' r ebr ows i ngi s:ht t p: / / goo. gl / 42o5e 27THN-Magaz i ne|J anuar y2012
www. t hehac k er news . c om |I s s ue08
-Jav aSc r i ptDe obf us c at ori sobv i ous l yaJav aSc r i ptde obf us c at or .And i t ' squi t eus e f ult oo:ht t p: / / goo. gl / u80Va
-DoIr e al l yne e dt oi nt r oduc eFi r e bug?Thi saddonal l owsy out oanal y z e We b page ss our c ec ode ,i nc l udi ng CSS and Jav aSc r i pt : ht t p: / / goo. gl / ht 3c o -Modi f yHe ade r sal l owsy out oc hangeorbl oc kHTTPhe ade r ss e ntt o t hes e r v e rhos t i ngt heWe bs i t ey ou' r es ur f i ng:ht t p: / / goo. gl / MLVoR
-Cooki eManage rPl usal l owsy out omodi f y ,de l e t eorf or geanyc ooki e: ht t p: / / goo. gl / oPMc 8 -Fl as hBugi saFl as hde bugge r ,andi spr e t t yhandywhe ni tc ome st o l ookf orFl as hbas e dv ul ne r abi l i t i e s:ht t p: / / goo. gl / q1 NEl Prot ectyoursel f : -Nos c r i ptaut omat i c al l ybl oc ksJav as c r i pt s ,Jav aappl e t s ,Fl as h and ot he rpot e nt i al l ymal i c i ousorhar mf ulpl ugi ns:ht t p: / / goo. gl / 1 VbNM
-HTTPSEv e r y whe r ei sapl ugi nc r e at e dbyt heEl e c t r oni cFr ont i e rFoundat i ont hatal l owsy out of or c eHTTPSone v e r yWe bs i t ey ou' r ev i s i t i ng: ht t p: / / goo. gl / 1 VbNM
-Se ar c he ngi ne ss uc hasGoogl ec anc r e at eav e r ypr e c i s epr of i l eofy our br ows i nghabi t sj us tbyanal y z i ngy ours e ar c he s .Tr ac kMe Noti st hepe r f e c te xt e ns i on t o l ur e t hi s pr of i l i ng s e ndi ng f al s e que r i e s : ht t p: / / goo. gl / ae kf W -FoxTorandTor But t onal l owsy out ous eTore nc r y pt e dne t wor kwi t h Fi r e f ox f or anony mous s ur f i ng. ht t ps : / / addons . moz i l l a. or g/ e nUS/ f i r e f ox/ addon/ f oxt or /orht t ps : / / www. t or pr oj e c t . or g/ t or but t on/
-Pe r s pe c t i v e spr e v e nt smani nt hemi ddl eat t ac ksus i ngs e l fs i gne dor hac ke dc e r t i f i c at e s whe n ac c e s s i ng a We b page t hr ough HTTPS : ht t p: / / goo. gl / 1 VbNM 28THN-Magaz i ne|J anuar y2012
www. t hehac k er news . c om |I s s ue08
- Gmai l S/ MI ME make s Gmai l e mai l s e nc r y pt i on e as y : ht t p: / / goo. gl / e OAdW -I fy ouwantt oav oi dke y l ogge r s ,us eKe y Sc r ambl e ri ni t sf r e ev e r s i on e nc r y pt se v e r y t hi ngy out y peon y ourke y boar di n Fi r e f ox.I ti sv e r y handyt oav oi dpas s wor ds t e al i ng:ht t p: / / goo. gl / G6X73
-Fi r e ke e pe ri sI DS( I nt r us i onDe t e c t i onSy s t e m)andas e c ur i t yt oolf or Fi r e f ox.I tde t e c t s ,bl oc ks ,andwar nst heus e raboutmal i c i ous ,har mf ul andi nf e c t i ousWe bs i t e s:ht t p: / / f i r e ke e pe r . moz de v . or g/
-Tr as hmai l ne ti sa1c l i c kt e mpor ar ye mai lc r e at orFi r e f oxaddon : ht t p: / / goo. gl / OLTTv
-SSLBl ac kl i s tde t e c t se xpi r eandwe akSSLc e r t i f i c at e s ,l i kec e r t i f i c at e s us i ngv ul ne r abl eMD5c i phe r:ht t p: / / goo. gl / l 1 kB5 -WOTi sac ommuni t ybas e daddont hatal l owst ogi v eat r us tr ankt o v i s i t e dWe bs i t e s .I ft hes i t ei sc ons i de r e dasmal i c i ous ,y ou' l lbewar ne d be f or eac c e s s i ngi t .Amus thav e !ht t p: / / goo. gl / r Lhf
-Ghos t e r yof f e r st obl oc kanyt r ac ki ngs c r i pt ,i nc l udi ngAnal y t i c s ,Fac e bookoradv e r t i s e me nt:ht t p: / / goo. gl / l 5Be I
W ri t t enby: Manue lDor ne , Admi n-ht t p: / / kor be n. i nf o 29THN-Magaz i ne|J anuar y2012
www. t hehac k er news . c om |I s s ue08
Conf us i ngAt t ac ke r swi t hAr t i l l e r y <-ByDav eKe nne dy( Re L1 K)>
I ’ v et r adi t i onal l ybe e nont heof f e ns i v es i deofs e c ur i t yt hr oughmy c ar e e r .Wi t ht ool st hatI ’ v e de v e l ope dl i ke Fas t Tr ac k and The Soc i al Engi ne e rTool ki t( SET) ,i t ’ spr i mar i l yf oc us e dont heat t ac k f r ont .Awhi l ebac kIhadani de aofc r e at i ngamor ede f e ns i v et ool ar oundbot hWi ndowsand* ni xs y s t e msandke e pt hi ngsope ns our c e asus ual . Is t ar t e dAr t i l l e r yaboutt hr e emont hsagowi t ht hei nt e ntof de v e l opi nganope ns our c epr oj e c tt hatdoe sabi tofe v e r y t hi ng.
Thename“ Ar t i l l e r y ”s pawnsf r om oneofmyf av or i t et e c hnobands I nf e c t e dMus hr oom ande nhanc e st heov e r al ls e c ur i t yofwhat e v e r t ouc he si t .Ar t i l l e r ys uppor t sbot h Li nuxand Wi ndowsand i sa pur e l yope ns our c e / f r e et ool s e t .Thec onc e pti sr e l at i v e l ys i mpl e ; c ombi nemul t i pl eav e nue st ohar de nanov e r al lpl at f or m.Ar t i l l e r y hasmul t i pl emodul e s ,t hef i r s ti st heac t i v ehone y pott e c hni que whi c hs e t supanumbe rofpor t s( c onf i gur abl e )ont hegi v e ns e r v e r . I f as t abl eTCPc onne c t i oni se s t abl i s he dwi t ht her e mot epor t ,t heoppos i ngI Paddr e s si sbl oc ke d.Thes e c ondpor t i oni st hef i l e i nt e gr i t y moni t or i ngwhi c hmoni t or sc onf i gur e ddi r e c t or i e st os e ei fc hange s oc c ur r e d( s i mi l art oOSSECHI DS) . Thel as tpor t i onmoni t or sc e r t ai n f i l e sf orc onf i gur at i onf l aws ,f ore xampl ede f aul tSSH por t s ,i ns e c ur e PHPc onf i gur at i onsandot he ras pe c t s .
I nst al l i ngArt i l l ery Ar t i l l e r yi spr ogr amme dpur e l yi npy t honandhasnat i v es uppor tf or Li nuxandWi ndows . Thusf ar , t he r ear enoe xt e r nal de pe nde nc i e sr e qui r e d.Somef e at ur e sar enotf ul l yf unc t i onalwi t hi nt heWi ndows pl at f or m howe v e rAr t i l l e r yi ss t i l li nal phamode .I nor de rt oi ns t al l Ar t i l l e r y ,s i mpl yr unpy t honi ns t al l . pyi ns t al l .Thi swi l li ns t al las e r v i c ewi t hi n/ e t c / i ni t . d/ .OnWi ndows ,i t ’ st hes amei ns t al lhowe v e r ne e dt omanual l ys t ar tAr t i l l e r y .As e r v i c et hatr unse ac ht i mei si n de v e l opme ntands houl dbef i ni s he ds hor t l y . 30THN-Magaz i ne|J anuar y2012
www. t hehac k er news . c om |I s s ue08
Act i veHoneypot Onc eAr t i l l e r yi sl aunc he d,y ouc anc onf i gur et hepor t si nt heAr t i l l e r yc onf i gf i l e .Youc anaddasmanypor t sasy ouwant .Ar t i l l e r y c ome swi t has e l e c ts e tofde f aul t( andc ommonl yat t ac ke d)por t son whi c hi tl i s t e nson.Doi ngas i mpl ene t s t atâ&#x20AC;&#x201C;ant p|gr e pLI STEN s howst hepor t sac t i v e l yr unni ng: r oot @bt : ~/ De s kt op/ ar t i l l e r y #ne t s t atant p|gr e pLI STEN t c p 0 00. 0. 0. 0: 1 35 0. 0. 0. 0: * LI STEN 2031 9/ py t hon t c p 0 00. 0. 0. 0: 5800 0. 0. 0. 0: * LI STEN 2031 9/ py t hon t c p 0 00. 0. 0. 0: 3306 0. 0. 0. 0: * LI STEN 2031 9/ py t hon t c p 0 01 27. 0. 0. 1 : 587 0. 0. 0. 0: * LI STEN 91 6/ s e ndmai l :MTA: t c p 0 00. 0. 0. 0: 5900 0. 0. 0. 0: * LI STEN 2031 9/ py t hon t c p 0 00. 0. 0. 0: 1 1 0 0. 0. 0. 0: * LI STEN 2031 9/ py t hon t c p 0 00. 0. 0. 0: 1 0000 0. 0. 0. 0: * LI STEN 2031 9/ py t hon 31THN-Magaz i ne|J anuar y2012
www. t hehac k er news . c om |I s s ue08
t c p 0 00. 0. 0. 0: 8080 0. 0. 0. 0: * LI STEN 2031 9/ py t hon t c p 0 00. 0. 0. 0: 53 0. 0. 0. 0: * LI STEN 2031 9/ py t hon t c p 0 00. 0. 0. 0: 21 0. 0. 0. 0: * LI STEN 2031 9/ py t hon t c p 0 00. 0. 0. 0: 22 0. 0. 0. 0: * LI STEN 2031 9/ py t hon t c p 0 01 27. 0. 0. 1 : 631 0. 0. 0. 0: * LI STEN 1 225/ c ups d t c p 0 00. 0. 0. 0: 1 337 0. 0. 0. 0: * LI STEN 2031 9/ py t hon t c p 0 00. 0. 0. 0: 1 433 0. 0. 0. 0: * LI STEN 2031 9/ py t hon t c p 0 01 27. 0. 0. 1 : 25 0. 0. 0. 0: * LI STEN 91 6/ s e ndmai l :MTA: t c p 0 00. 0. 0. 0: 44443 0. 0. 0. 0: * LI STEN 2031 9/ py t hon t c p 0 00. 0. 0. 0: 1 723 0. 0. 0. 0: * LI STEN 2031 9/ py t hon t c p 0 00. 0. 0. 0: 3389 0. 0. 0. 0: * LI STEN 2031 9/ py t hon t c p 0 00. 0. 0. 0: 445 0. 0. 0. 0: * LI STEN 2031 9/ py t hon t c p6 0 0: : 1 : 631 : : : * LI STEN 1 225/ c ups d r oot @bt : ~/ De s kt op/ ar t i l l e r y #
Any t hi ngl abe l e dwi t hpy t honwoul dbeAr t i l l e r yr unni ng.Whe nanat t ac ke rat t e mpt st oc onne c tt ot hepor t ,ar andom s e tofdat ai ss e ntbac k t ot heat t ac ke r( t omakei tl ookl i keaf unkypr ot oc ol )andt he nt hec onne c t i oni st e r mi nat e dandt heat t ac ke rbanne d. at t ac ke r mac i ne : ~r e l i k$nc1 92. 1 68. 235. 1 291 35 s ? ? m| ? ? Й ? ? 5? ? ? ? ? ? ? ? VK@) ? +? 7? [ V s * ? D ? ? ? 6 ? ? ? ? > ,? ? b & ? .? x ? ? ?0 ?w???Bo??] +?7p?qxZ???G?k?>?#?Sv???Y??b???S?IU5?<??9?5?`Ї?3? G?E"?g?l }l =2?????7?=?^f Ydw??6l ?y+zK?A??l ?6??4?D??}\?2?@S?Y ? ` ? ? g? : ? ? j ? O6? O~? Z? ? ? wj &? ? ? i ? ? j ? <s ni p>
Looki ngbac katt heAr t i l l e r ymac hi ne ,y ouc annow s e et hes y s t e mi s bl oc ke dandc annol onge rc onne c twi t ht hemac hi ne : r oot @bt : ~/ De s kt op/ ar t i l l e r y #i pt abl e sL Chai nI NPUT( pol i c yACCEPT) t ar ge t pr otopts our c e de s t i nat i on ARTI LLERY al l-any whe r e any whe r e Chai nFORWARD( pol i c yACCEPT) t ar ge t pr otopts our c e de s t i nat i on Chai nOUTPUT( pol i c yACCEPT) t ar ge t pr otopts our c e de s t i nat i on Chai nARTI LLERY( 1r e f e r e nc e s ) t ar ge t pr otopts our c e de s t i nat i on DROP al l-1 92. 1 68. 235. 1 any whe r e 32THN-Magaz i ne|J anuar y2012
www. t hehac k er news . c om |I s s ue08
Conf i gurat i onChanges
Ar t i l l e r yc ande t e c tc hange si nf i l e sont heope r at i ngs y s t e m ands pe c i f i c di r e c t or i e st hatar ede f i ne di nt hec onf i g. I nor de rt oe di tt hec onf i g, he ad ov e rt ot hede f aul ti ns t al lpat hov e rat/ v ar / ar t i l l e r y .Edi tt hec onf i g,and t he r ear eopt i onsy ouc anc onf i gur ef ormoni t or i ng:
#DETERMI NEI FYOUWANTTOMONI TORORNOT MONI TOR=NO # # THESE ARE THE FOLDERS TO MONI TOR,TO ADD MORE,JUST DO " / r oot " , " / v ar / " ,e t c . MONI TOR_FOLDERS=" / v ar / www" , " / e t c / " # #BASEDONSECONDS,2=2s e c onds . MONI TOR_FREQUENCY=60 # # EXCLUSE CERTAI N DI RECTORI ES OR FI LES. USE FOR EXAMPLE: / e t c / pas s wd, / e t c / hos t s . al l ow EXCLUDE=
Youc ane xc l udedi r e c t or i e sorf i l e st hatof t e nc hangeanddonâ&#x20AC;&#x2122; twantt o moni t or .Youc anal s oi nc l udedi f f e r e ntdi r e c t or i e s .Byde f aul t ,Ar t i l l e r y wi l lmoni t or/ v ar / www and/ e t c /f ormaj orc onf i gur at i onc hange s .The moni t or _f r e que nc yi sal s os e tt oade f aul te v e r y60mi nut e s .Theway SETpe r f or mst hec onf i gur at i onc hange si si tge ne r at e shas hv al ue sus i ng SHA51 2ands t or e st he mi nal oc aldat abas e . I fc hange soc c urt ot hef i l e s y s t e m,t hes i gnat ur e smi s mat c handt r i gge ranal e r t .I fac t i v enot i f i c at i onsar es e nt ,ane mai lwi l lbede l i v e r e dt ot hei ndi v i dual ,ot he r wi s ei t wi l ls t or ei tl oc al l yonal oc all og.
33THN-Magaz i ne|J anuar y2012
www. t hehac k er news . c om |I s s ue08
Art i l l erycandet Feat ures Ar t i l l e r yi ss t i l lhe av i l yunde rde v e l opme nt .Cur r e nt l y ,i ts uppor t sbe i ng abl et os e ndGMAI Lal e r t st owhome v e rwhe nanI Paddr e s si sbl oc ke d, c onf i gur at i onshav ec hange d,SSH br ut ef or c eat t ac ks ,ori ns e c ur ec onf i gur at i onshav ebe e nde t e c t e d.The r ei sal s oant i dospr ot e c t i onbui l t i nt oAr t i l l e r ybyl i mi t e dt heamountofac t i v ec onne c t i onspe rI Paswe l l asal e r tons pe c i f i cDOSat t ac ks .Ar t i l l e r yi ss t i l lawor ki npr ogr e s sand s t i l li nane ar l yal phar e l e as e .Theov e r al lgoalwi t hAr t i l l e r ywast ode v e l opanope ns our c epl at f or mt hatc ombi ne dac t i v er e s pons e s ,l e adi n at t ac ke r swi t hf al s edat a, andul t i mat e l ymoni t ort heov e r al l he al t hoft he s y s t e m. Thi ngst ocome Ar t i l l e r yi sas i depr oj e c tIs t ar t e dal ongwi t ht heSoc i al Engi ne e rTool ki t . I t â&#x20AC;&#x2122; sawor ki npr ogr e s sandanumbe roff e at ur e sar eal r e adyi nde v e l opme nt .A f e w of t he s e ar eaf ul l f l e dge d wi ndows s e r v i c ef or moni t or i ng/ s t ar t i ngAr t i l l e r yf orWi ndowsbas e ds y s t e ms .Theabi l i t yt o us eot he re mai lpr ov i de r sory ourowne mai ls e r v e rv e r s usonl ybe i ng abl et ous eGMAI L. Mov eof fdi f fandus et henat i v epy t hondi f f l i bl i br ar i e sf ordoi ngt hef i l ec ompar i s ons .Addmor ei nt e gr i t yc he c ksi nt oLi nux andWi ndowsbas e ds y s t e msl ooki ngf ori ns e c ur ec onf i gur at i ons .
W ri t t enby: Dav eKe nne dy( Re L1 K)
As e c ur i t yni nj a&pe ne t r at i ont e s t e r
34THN-Magaz i ne|J anuar y2012
www. t hehac k er news . c om |I s s ue08
L i s t ent oy ouri ns t i nc t swheni t c omest ot heweb
Whe ny ouar eont hewe bt hebe s tt hi ngt haty ouc andoi st ogowi t hy our i ns t i nc t s . I nr e all i f e , whe nwewal kar ound, weus ual l ygowi t hourgutt o makes ur et hatwes t ayoutofdange r .I fs ome t hi ngdoe snots e e mr i ght weus ual l y“ s e ns e ”i tf orl ac kofabe t t e rt e r m.Thi si snots ome t hi ngt hat i sne w.Thi si showwes ur v i v e di nt hewi l de r ne s sal loft hos emanyy e ar s ago.Wemades ur et hatwes t ay e ds af ebyf ol l owi ngouri ns t i nc t sand doi ngt her i ghtt hi ng.Al loft he s ey e ar sl at e randt hats ameadv i c es t i l l hol dupt obet r ue . Butl i kewes ai di nt hepr e v i ouspar agr aph,y ouhav et owor r yaboutf ol l owi ngy ouri ns t i nc t swhe ny ouar eont hewe baswe l l .The r ear emany di f f e r e ntki ndsofpi t f al l st haty ouc ane nc ount e rwhe ny ouar eont he we b.I tdoe s n’ tmat t e rwhe t he ri ti sme e t i ngt hewr ongt y peofpe r s onor i ti sdownl oadi ngt hewr ongt y peoff i l e . Thedange r st haty ouf ac eont he we bc angobe y ondv i r t ualandc ane as i l ybe c omes ome t hi ngt haty ou de alwi t hi nr e all i f e . W hatyouri nst i nct scanhel pyouavoi d The r ear es e v e r aldi f f e r e ntt y pe sofmal war et hatf l oatar oundt hei nt e r ne tonadai l ybas i s .The yj us ts i toutt he r ewai t i ngf ore i t he ry out odi s c ov e rt he m orf ory out omakeami s t akeandge tc aughtdownl oadi ng t he m. Butdonotmaket hemi s t akeandt hi nkt hatal l oft hemal war e sout t he r ear et hes ame . No, t he yar eal l di f f e r e nt . Theone st haty ouc anr e al l y av oi dwi t ht hehe l pofy ourgutar et heone st hatar ede l i v e r e dt hr ough s oc i almani pul at i on. Pe opl et hi nkt hathac ke r sar epe opl ewhodonotl i ket oi nt e r ac twi t h ot he r s . Thati sonl yas t e r e ot y peandi snott r ueatal l . Mos toft heat t ac ks t haty ous e eont hewe bar ei ni t i at e dbys oc i ali nt e r ac t i on.Whi l ey e s , mos toft hes oc i ali nt e r ac t i onoft he s eat t ac ksi st hr ought hewe bi tdoe s notal way ss t ayt hatway . Someoft he s eat t ac ksar es c he me st ot r yandge t y out ogi v eupmone yori nf or mat i on.Thi sme anst hatt he ywi l lt r yand ac t ual l yt al kt oy out hr ought heus eofwe bc amsort hr ought heus eof t al ks of t war es uc hasSky pe .I fy ouar ei nt hes amear e at he ywi l lac t ual l y t r yt ome e twi t hy ou. Thi si sc al l e ds oc i al hac ki ngandi ti ss ome t hi ngt hat i spr ac t i c e dal l oft het i me . Asamat t e roff ac t , oneoft hemos twe l l known hac ke r sofal lt i me ,Ke v i nMi t ni c k,bi gge s ts t r e ngt hwashi sabi l i t yt o s oc i alhac k. 36THN-Magaz i ne|J anuar y2012
www. t hehac k er news . c om |I s s ue08
Buts oc i alhac ksar enott heonl yone st haty ouc anav oi dt hr ought heus e ofy ourgut .Youc anal s oav oi dt e c hbas e dhac ksaswe l l .Youc andot hi s byl i s t e ni ngt oy ouri nne rs e l fwhe ni tc ome st owhatl i nkst oc l i c konand whatf i l e st odownl oad.I fy ouar euns ur eaboutac l i c k,t he nmos toft he t i mey ous houl dnotdoi t .Thi si se s pe c i al l yt r uei fy ouar eonawe bs i t e t haty ouhav ene v e rv i s i t e dbe f or e .Bute v e nwe l lknownwe bs i t e sc an gi v ey out hi sf e e l i ngaswe l l . I fy ouar eonas i t el i keFac e bookandt hel i nk t haty ous e es e e mswe i r dt he ndonotc l i c ki t . Li s t e nt oy ourgutandav oi d al loft hepr obl e mst hatnotl i s t e ni ngc anbr i ng. Youdonothav et obeac omput e rge ni ust odoal i t t l ec omput e rs e c ur i t y . Mos toft hepr obl e mst haty our unac r os sc anbeav oi de de nt i r e l ybyj us t doi ngas i mpl el i t t l et hi ngl i kef ol l owi ngy ouri ns t i nc t s .
Aboutt heAut hor: LeeI vesi sani nt e r ne ts e c ur i t ybl ogge rf r om London,Engl and.He s t ar t e dhi swe bs i t eac oupl eofy e ar sagoasame ansofc ommuni c at i ng s e c ur i t yt opi c st ot heav e r agei nt e r ne tus e ri nawayt hatt he ywoul dunde r s t and.Cont r ar yt os omepe opl e ' se xpe c t at i onshewor ksi nr e t ai land nott hes e c ur i t yi ndus t r ywhi c hgoe st os howhowj us taboutany onec an ac c umul at eagr e atde alofknowl e dgeabouthowt opr ot e c tt he ms e l v e s onl i nei ft he yar epr e par e dt ol ookf ort heans we r s . Fort hos ewhoar et oo bus yt ol ook,manyans we r sc anbef oundonhi ss i t eat: ht t p: / / www. s e c ur i t y f aqs . c om
37THN-Magaz i ne|J anuar y2012
www. t hehac k er news . c om |I s s ue08
NoTur ni ngBa ck
201 2
Re be l l i onsar emos tal way sr oot e di nac al lf orj us t i c e , de c e nc yandmor al i t y .Wor l dhi s t or yi sf ul lofc ount l e s sr e be l l i onsagai ns tde s pot sand ot he r swhodi dnotc onf or mt ot hewi l loft hepe opl e .Andasi ne qual i t y gr owst oabs ur d ne w he i ght sar ound t hewor l d and i ns t i t ut i onsof powe rar ec ons i de r e df undame nt al l ydi s hone s t , c or r upt , andl e ade r sno l onge rc ommandt her e s pe c tandc onf i de nc eoft hepe opl et he ny ou hav es oc i e t i e swhe r es oc i aluphe av ali si ne v i t abl e .Re be l l i onss pr i ngup agai ns tf r audul e ntpowe randaut hor i t y ,andi ti sgr ounde di nr e alout r ageagai ns tmas smur de r( ne oi mpe r i al i s m,ne oc ol oni al i s m) ,v i ol at i onofhumanr i ght s( t or t ur e ,warc r i me s ) ,wi de s pr e adl y i ngandhy poc r i s y ,e nde mi cpol i t i c alc or r upt i on,unr e s t r ai ne dt hi r s tf ormone y andpowe r , andunpr e c e de nt e dgr e e d, whi c hal l l e adt oe c onomi cc haos . The r e f or e ,whe nc r i t i c almas s e sofpe opl ef e e lpr of oundl yaggr i e v e d, t he yr i s eupi nange randde mand“ Change ” . Thev e hi c l ebywhi c hape opl e ’ sr e be l l i onor i gi nal l ymani f e s t si t s e l fi s mos tal way smat e r i ali nnat ur e . I tmayappe art hatt heAr abSpr i ngwas aboutr i s i ngf oodpr i c e sort heOc c upyWal lSt r e e tpr ot e s t s , t heLondon r i ot s ,t her i ot i ngi nGr e e c e ,Spai nandChi l ear eaboutmone yandj obs , butt he s ec aus e sar eme r e l yt hes par kst hathav ei gni t e dabonf i r egl obal l y ,abonf i r et hathasbe e ny e ar si nc r e at i on.I fwel ookc l os e ri ti s s i mpl et ounc ov e rt hec or er e as onf ort hes i mme r i ngdi s c ont e ntt hati s nowe ngul f i ngt hegl obe .I ti st hatt hey out hoft hewor l dc annote nv i s i onorr e c ogni z eaf ut ur ei nt hee xi s t i ngc or r upt e dwor l ds y s t e m. Thewor l dwi dee c onomi cc r i s i shaspr oduc e dunt ol dl e gi onsofune mpl oy e dy out h wor l dwi de .Ev e rs i nc et hebe gi nni ngoft hee c onomi c c r i s i s ,2007t o2009,y out hune mpl oy me nti nc r e as e dby7. 8mi l l i onon agl oball e v e l( 1 . 1mi l l i oni n20072008and6. 6mi l l i oni n20082009) . 38THN-Magaz i ne|J anuar y2012
www. t hehac k er news . c om |I s s ue08
Put t i ngt he s ef i gur e si nt ope r s pe c t i v e ;ov e rt hec our s eoft het e ny e ar pe r i od pr i ort ot he c ur r e ntc r i s i s( 1 9961 997 t o 20062007) ,t he numbe rofune mpl oy e dy out hi nc r e as e d,onav e r age ,by1 92, 000pe r y e ar .Butby2009t he r ewe r e80. 7mi l l i onbe l e ague r e dy oungpe opl e s t r uggl i ngt of i ndwor k.Re c e nts t udi e shav epr oj e c t e dt hatame r e1 pe r c e nt agepoi nti nc r e as ei nune mpl oy me nti nt heUni t e dSt at e sr e s ul t si na6t o7pe rc e ntde c r e as ei nt hewage sofc ol l e gegr aduat e s .And whi l et hewagec os tl e s s e nswi t ht i me ,i ts t i l lr e mai nss t at i s t i c al l ys i gni f i c ant1 5y e ar sl at e r .Andt hel e ngt ht i mei tt ake st of i ndaj obi si nc r e as i ngasmor et hanonei nf i v eune mpl oy e dy out hi nGe r many , Spai n andt heUni t e dKi ngdom hav ebe e nune mpl oy e df orl onge rt hanone y e ar . Andwear ewi t ne s s i ngmor eandmor ey oungpe opl ei ne v e r yc ount r yof t hewor l dbe c omei nc r e as i ngl ydi s c our age dandar el e av i ngt hel abor mar ke tf orgood.I naddi t i on,y oungpe opl ear oundt hewor l dar ewi t ne s st ot he i rownpar e nt sbe i ngl ai dof f ,c aus i ngf ami l i e st oc ol l aps ef i nanc i al l y .They out hoft hewor l dar enow s e e i ngt hatt he yhav ebe e n r obbe dofav i abl ef ut ur e .Wear ewi t ne s s i ng,onanunpr e c e de nt e d gl obals c al e , agr as s r oot sr e be l l i onl e adandi ns pi r e dbyt hey out hoft he wor l d;ar e be l l i on bi r t he ds pont ane ous l youtofmanyhe ar t r e ndi ng c r i e sf orj us t i c eande qual i t y ;butIbe l i e v et hatt hi s“ s pont ane ous ”r e be l l i onhasbe e nde c ade si nt hemaki ng,andhaswi de r angi nganda de e pi nt e l l e c t ualf oundat i onandt hatt hef i nalc hapt e ri ss t i l le xt r e me l y unc e r t ai nandmanyde v e l opme nt sgoodandbadc ant akepl ac ebe f or e af i nalc hapt e ri swr i t t e nandane we r ae me r ge s . Changehappe nswhe nas uf f i c i e ntamountofpe opl ear r i v eatt hebe l i e f t hatt hemat e r i al i s t i c ,gr e e dye l i t eandc or por at i onshav et ake nc ompl e t ec ont r oloft he i rs oc i e t i e sandt he i rgov e r nme nt s . The yar eal s o anni hi l at i ngandde v as t at i ngt hewhol ewor l dande v e r y one ’ sf ut ur ei n t hepr oc e s smaki ngar e c i pef ormor et han“ Pas s i onat ePr ot e s t s . ” Now y ouhav e“ Re be l l i on. ”Wel i v ei nav ol at i l et i mewhe noure nt i r epl ane t f i ndsi t s e l fi nt het hr oe sofanongoi ngpr ot e s tt hati st e e t e r i ngont he br i nkoff ul l s c al eRe be l l i on. Thi sr e v ol ut i onwi l l l as toutt hede c adeand r e v ol ut i oni z et hewor l dandwi l lhav eat r ans f or mat i v ei mpac ts oc i al l y , pol i t i c al l yande c onomi c al l ywor l dwi deaswef ac eane we r a. 39THN-Magaz i ne|J anuar y2012
www. t hehac k er news . c om |I s s ue08
Ihopewi t hal lmyhe ar t ,att hi spoi nti nwor l dhi s t or y ,t haty oung pe opl eal lov e rt hewor l dar ewake ni ng,andi nl ar genumbe r sar epr e par i ngt he ms e l v e st or i s et ot hei mme ns ec hal l e ngef ac i ngusandal l c i t i z e nsoft hewor l d. Andt oe v e r y onet hewor l dov e r. . . . . Tot hey oung andt ot heol d, t ome nandt owome nandt oe ac hande v e r yc hi l d~â&#x20AC;&#x153; I nac t i oni snotanopt i onâ&#x20AC;? . Cons i de r i ngt heal t e r nat i v e s ,ot he rt hans e r v i t ude ,whatdowehav et o l os e ?
-Pat t iGal l e 40THN-Magaz i ne|J anuar y2012
www. t hehac k er news . c om |I s s ue08