How one man tracked down Anonymous—and paid a heavy price

[Roland99]

http://arstechnica.com/tech-policy/news/2011/02/how-one-security-firm-tracked-anonymousand-paid-a-heavy-price.ars

Aaron Barr believed he had penetrated Anonymous. The loose hacker collective had been responsible for everything from anti-Scientology protests to pro-Wikileaks attacks on MasterCard and Visa, and the FBI was now after them. But matching their online identities to real-world names and locations proved daunting. Barr found a way to crack the code.

In a private e-mail to a colleague at his security firm HBGary Federal, which sells digital tools to the US government, the CEO bragged about his research project.

"They think I have nothing but a heirarchy based on IRC aliases!" he wrote. "As 1337 as these guys are suppsed to be they don't get it. I have pwned them! :)"

But had he?

Interesting read.

[hobbit709]

1. He and the people he works for got what they deserved.

[xchrom]

2. +1

[backscatter712]

3. Karma's a bitch!

I hope Barr continues to be forced to deal with this for YEARS!

[siligut]

4. Last paragraph from page 1

"I am going to focus on outing the major players of the anonymous group I think," he wrote. "Afterall - no secrets right? :) We will see how far I get. I may focus on NSA a bit to just so I can give all those freespeech nutjobs something… I just called people advocating freespeech, nutjobs - I threw up in my mouth a little." Guy is an egotistical ass.

[progressoid]

5. This part is great...

The situation got so bad for the security company that HBGary, the company which partially owns HBGary Federal, sent its president Penny Leavy into the Anonymous IRC chat rooms to swim with the sharks—and to beg them to leave her company alone. (Read the bizarre chat log.) Instead, Anonymous suggested that, to avoid more problems, Leavy should fire Barr and "take your investment in aaron's company and donate it to BRADLEY MANNINGS DEFENCE FUND." Barr should cough off up a personal contribution, too; say, one month's salary?

As for Barr's "pwning," Leavy couldn't backtrack from it fast enough. "We have not seen the list and we are kind of pissed at him right now."

[Occulus]

6. Commandmentz of Teh Internetz

1. Thou shalt not fuck with Anonymous.
2. etc.

:D

What a fascinating article. This is why even security experts are wary of this group and never, ever say anything publicly against them.

Ladies and gentlemen, I believe we can safely call Anonymous the world's first !Organized paramilitary Internet group.

Loved the LOIC screenie; I've never seen the app before. IMMA CHARGIN MAH LASER, :rofl:

[rbixby]

8. Agreed!

You don't want to stir up that hornet's nest.

[rbixby]

7. He definitely let his ego get in the way

I guess he didn't realize that these type of people are not to be trifled with, they may be juvenile and immature, but they're very tech savvy and very idealistic. While I might not agree with all of their methods, I do have to laugh when some d-bag like this gets it all thrown back in his face. Nothing looks worse for an internet security firm than to have their website hacked into.
At the end of the day, I think its best to leave Anonymous alone unless you're looking for some serious backlash.

[femrap]

34. Barr seems to suffer from

Dunning-Kruger Syndrome....he's so stupid that he doesn't realize just how stupid he is.

Anonymous...maybe they could hack into Monsanto's evil workings!!! Hope you see this Anonymous! love ya!

[JackRiddler]

9. That's a very kind headline to someone who conspired in serious crimes against press and free speech

[ET Awful]

10. Yet another one of those people with an uncanny ability to underestimate their opponents.

It's the intellectual equivalent of taking a squirt gun to an artillery battle.

[snagglepuss]

39. How true.

BTW Quinn and Althea are indeed awesome :loveya:

[formercia]

11. Quite a worthwhile read.

I hope other 'Security Company' wannabes are taking note.

There's always someone better than you.

[EOTE]

15. And sometimes your better is a 16 year old girl.

I can't tell you how big of a grin I had on my face reading this article. I hope Barr is haunted by this for a long, long time.

[Occulus]

19. Oh, he WILL be.

From the chat log (read the bolded parts in sequence):

<06:12> <+CogAnon> please explain to me how I compromised peoples lives.
<06:12> <+Agamemnon> it is
<06:13> <+joepie91|coding> Your reputation, or the safety of others, including not just Anonymous, but also Gregs email
<06:13> <+joepie91|coding> ?
<06:13> <+c0s> CogAnon: greg said very clearly that his email getting out would cost millions and destroy the company
<06:13> <+Agamemnon> Aaron... back up so you dont hurt Penny and Greg ... how's that?
<06:13> <+c0s> CogAnon: they have his email and have not released it yet
<06:13> <+c0s> CogAnon: you are currently sitting here pissing them off, seemingly on purpose
<06:13> <+c0s> CogAnon: right in front of greg who is trying to convince them not to release it.
<06:14> <+c0s> CogAnon: make more sense now?
<06:14> <+CogAnon> social media provides huge vulnerabilities for everyone...nuclear power plants, military installations, and anonymous...
<06:14> <+CogAnon> this was about research.
<06:14> <@q> 05:12 <+CogAnon> please explain to me how I compromised peoples lives. <<< YOU SERIOUS?
<06:14> <+Agamemnon> and?
<06:14> <+c0s> You should really stop repeating that one
<06:14> <+c0s> It is actually going to piss people off more

The people from HBGary quite clearly did not understand who and what they were dealing with... and I'm thoroughly enjoying reading the pwnage.

:rofl:

[kayakjohnny]

12. Wow! What a story!

I was riveted the whole way through.

"How does it feel to be hacked by a 16 year old girl??

:wow:

[femrap]

35. That damn well better be true....

and if she's 16, she's no longer a girl.

This is so sexist...the implication being a 16 year old young woman couldn't do it...shit.


I think we should just have all wars done online...save a lot of lives and possibly no PTSD....but I bet Barr is suffering from it. At least no blood and no women, children, or elderly are killed or maimed.

[Rex]

13. He didn't get pwned...Barr got pooned!

Serves him right. I can't imagine a worse idea then sending in your CEO to plead with hackers...that has to be like giving them the keys to the city and a lifetime subscription to free money at the treasury! I just have a hard time feeling sorry for a pack of idiots.

[Oilwellian]

14. Anonymous in real time when they cracked HBGary's email

#
<03:30> <antivigilante> this idiot wasn't just SELLING bull to the FBI
#
<03:31> <+c0s> he was selling outright lies to them
#
<03:31> <+c0s> and he had to know it
#
<03:31> <antivigilante> he was SELLING it as an investigation protocol/standard
#
<03:31> <+c0s> that should be a punishable offense
#
<03:31> <RealNick> that is good
#
<03:31> <+c0s> isnt that fraud?
#
<03:31> <@BarrettBrown> yep. Push that point hard.
#
<03:31> <MGMX> what? selling fraud info the us gov would have been nice...
#
<03:31> <RealNick> you call it fraud, I call it easy money
#
<03:31> <ComradeBush> BLESSED BE
#
<03:31> <MGMX> don't car dealers do this all the time
#
<03:32> <esc_laptop> mgmx: nah, think of the people getting raided without any sense
#
<03:32> <+goober> spoiler alert: he was helping anon the whole time
#
<03:32> <blackjak__> lol like the govts contracts with dodge? LoL
#
<03:32> <antivigilante> he was Going to cause thousands of FBI rookies to do exactly the same quality investigation
#
<03:32> <+goober> causing chaos
#
<03:32> <MGMX> .119 available
#
<03:32> <_7of9_> OMG can't stop laughing
#
<03:32> <esc_laptop> guise, that's the best super sunday in history...y rly
#
<03:32> <rtrtrt555> he wouldn't have been able to sell it... let's be honest.. they would have seized it as evidence... ;)
#
<03:33> <blackjak__> Anonymous, I love you

Much more:
http://pastebin.com/x69Akp5L

[Occulus]

17. Consider yourself kissed.

That chat log is worth a gram of gold for every line. It's even timestamped. If a screenwriter hasn't obtained this yet, one should.

Ever see the 'new' Battlestar Galactica? There were several scenes throughout the series wherein the human-form Cylons were talking with each other about what they were going to do.

Anonymous, from the chat log, operates like that. Here, take a look (Greg and CogAnon are associated with HBGary and/or HBGFederal)):

<05:51> <+greg> do you guys realize that attacking a U.S. company and stealing private data is something you have never done before?
<05:51> <evilworks> do you really think so low of us?
<05:51> <+c0s> Gawker?
<05:52> <evilworks> to sell us to FBI
<05:52> <+c0s> greg: do you not follow the news when it comes to this?
<05:52> <evilworks> to establish yourself with them
<05:52> <+c0s> greg: that has happened a few times in fact
<05:52> <+c0s> by random people who have claimed to be anonymous, which is all it takes to be anonymous.
<05:52> <+joepie91|coding> hm, Mastercard, PayPal, VISA, Gawker....
<05:52> <+greg> no, I think you might have considered your public reputation - it doesn't look good.
<05:52> <+Agamemnon> Greg. Please answer: do you understand who we are and why we do what we do?
<05:52> <+greg> ddos attacks are plebian
<05:52> <+c0s> its not mine, i just deal a lot with the press
<05:52> <+CogAnon> I was never going to sell u have it wrong.
<05:52> <evilworks> we don't CARE about reputation
<05:52> <+Baas> Greg, are you familiar with the concept of a burn notice? (edit: :rofl:)
<05:52> <&Sabu> greg, our reputation is not at stake here. yours is.
<05:53> <Jeffrey> hmmm
<05:53> <+greg> i mean this was a real hack - and btw, i have to concede you really did hack us good
<05:53> <evilworks> we do what we think is right
<05:53> <+c0s> Greg: and the people here dont care about reputation, at all
<05:53> <evilworks> there are numerous ways to make us look bad
<05:53> <evilworks> we dont care
<05:53> <+c0s> Greg: in fact, that is about the least worried about thing of all
<05:53> <Neo> kayla: you hear that?
<05:53> <Neo> lol
<05:53> <@`k> yeh :)
<05:53> <&Sabu> kayla deserves the credit. shes 16 and owned your network
<05:53> <&Sabu> kinda sad isnt it?
09<05:53> * +Sneux gives Kayla a round of applause.

A bit later in the log, Greg actually commends Kayla for a hack well-done, which was just a goddamn fucking stupid thing for him to do, even if it's true. These kids live for that sort of accolade.

:rofl:

I know what I'm reading until bed today. Thanks a LOT!

[Edweird]

16. ROFL

[The Backlash Cometh]

18. I'm a bit confused about the comments on this thread.

Is/Are Anonymous good guys or bad guys? Or, are we ambivalent about them?

[Rex]

20. You have to feel the way you do toward Anonymous.

No group think here. How do you feel about Anonymous?

[The Backlash Cometh]

23. Since I support what Assange is doing (Just wish he would do it faster)

I guess a group like Anonymous would be necessary since there will obviously be an attempt to shut down the people who are supplying the information.

[hugo_from_TN]

38. No group think here?

Since when? Is this a new rule?

[Occulus]

21. Anonymous is like a force of nature on the Internet.

Sometimes they stir up some muck from the bottom, churn oxygen into the water, help the fish spawn, and so forth.

Sometimes they flood the rivers and streams and help to deposit rich, fertile new soil on land after the waters subside.

But sometimes, they come screaming in from a bleak, leaden, sleet-chilled sea with the howling voice of a thousand condemned souls, ripping apart all in their path and leaving destruction and tears in their wake. And sometimes- as in this case- the pwnage is well and richly deserved and the lulz are fast and fierce.

You should read the chat log Oilwellian linked to upthread; it's very revealing. That log was taken live, too, so you get to see the whole truth- or at least, as much as they were willing to discuss in the open room; I'm dead certain there were private chats going on the whole time- as it was happening.

The chat log is worth its weight in gold, seriously. It gives a good insight into how this group of people thinks.

[The Backlash Cometh]

22. Oh, well. Since you put it that way.

Seriously, nice metaphors.

[Occulus]

24. Why thank you.

I thought they were somewhat apt :D

[Roland99]

28. I concur

great way to describe them :)

[DirkGently]

32. Nice descriptive prose there. 8)

[Oilwellian]

42. Well well well

Someone would make a great screenwriter. Most excellent post. :D

[librechik]

27. I for one think they are def White Hats

I suppose opinions here will differ

[formercia]

29. I've had my ups and downs with them.

A few of them are real assholes, but, supposedly, they mean well. I would give them a C+.

[ellie]

25. That was a great read!

Thanks for posting. And bwahahahahahahaha!

[frylock]

26. this article is chock full of win!

"He seriously works at a security company?" :rofl:

[Initech]

30. 1st rule of teh internets: you don't fuck with teh internets.

[Monk06]

31. Boohakasha !!! Respek ............

[cottonseed]

33. The thing is, he didn't track them down. He put together a sham of a report containing

publically available information. He's a phony and was called out by Anonymous. These are the types of frauds pulling down millions/billions of federal contracts in this country.

[formercia]

36. This is one reason we are still in Iraq and Afghanistan.

Bush gang hired thousands of contractors just as bad or worse.

[tblue37]

37. He looks like Mitt Romney--like some sort of spiffy robot:

[RandomThoughts]

40. Thats intelligence.

But sophisticated intelligence. The 'anonymous' itself is an intelligence story, then a story about that story to give an impression.

Basically 'anonymous' was written about to try and create a point for people to follow, like the fake al'quieda leaders in Iraq.

Then at some point they tear down the fake anonymous to look like they did something.

And in all the articles they use buzz words that can be used to smear groups.


It is psyops.

If hackers get together in some group, they don't run around putting out press releases with some 'name' that would be a head. It is more people supporting concepts, if hackers did work together, it would be like the cabal of many corporatist only it would be with a different concept.

What is written about them has only enough truth to bait someone, or to smear a group.

Really basic stuff

Not sure who the group is that does that, or who hackers are, but they have nothing to do with those articles.


The Who - Eminence front
http://www.youtube.com/watch?v=GnHLgxKUsEA

Peter Gabriel - Games Without Frontiers
http://www.dailymotion.com/video/x13n1g_games-without-frontiers_music

Blinded by the Light by Manfred Mann's Earth Band
http://www.youtube.com/watch?v=Eg8cDmi7-U8

[Chimichurri]

41. fascinating article