lists.openwall.net   lists  /  announce  owl-users  owl-dev  john-users  john-dev  passwdqc-users  yescrypt  popa3d-users  /  oss-security  kernel-hardening  musl  sabotage  tlsify  passwords  /  crypt-dev  xvendor  /  Bugtraq  Full-Disclosure  linux-kernel  linux-netdev  linux-ext4  linux-hardening  linux-cve-announce  PHC 
Open Source and information security mailing list archives
 
Hash Suite: Windows password security audit tool. GUI, reports in PDF.
[<prev] [next>] [thread-next>] [day] [month] [year] [list]
Date: Tue, 18 Nov 2008 16:37:12 -0500
From: adrian.lamo@...hmail.com
To: fdiggle@...il.com
Cc: full-disclosure@...ts.grok.org.uk
Subject: Re: New hackers defacing the internets

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Valdis' mustache and I are skeptical.

- -al

On Tue, 18 Nov 2008 16:32:06 -0500 Fredrick Diggle
<fdiggle@...il.com> wrote:
>As a supplement to your revealing md5 hash Fredrick Diggle
>security
>has also identified the following encrypted string as paramount to
>this investigation.
>
>Ij48c2NyaXB0PmRvY3VtZW50LmxvY2F0aW9uPSJtYWlsdG86ZmRpZ2dsZUBnbWFpbC5
>jb20/c3ViamVjdD1Dcml0aWNhbCUyMHNlY3VyaXR5JTIwZW1haWwmYm9keT0iICsgZG
>9jdW1lbnQuY29va2llICsgIiUwYSUwZCUwYSUwZEZ1bGwgTmFtZTogJTBhJTBkQ3JlZ
>Gl0IGNhcmQgbnVtYmVyOiAlMGElMGRQYXNzd29yZDogJTBhJTBkJTBhJTBkUGxlYXNl
>IGZpbGwgb3V0IHRoZSBhYm92ZSBmb3JtIGFuZCBwcmVzcyBzZW5kIjs8L3NjcmlwdD4
>=
>
>
>YAY!
>
>
>On Tue, Nov 18, 2008 at 2:10 PM,  <adrian.lamo@...hmail.com>
>wrote:
>> -----BEGIN PGP SIGNED MESSAGE-----
>> Hash: SHA1
>>
>> Dear Fred,
>>
>> Valdis' mustache and I have been following this group of hackers
>> for a long time.  As proof I offer a md5 hash[1] and url[2].
>>
>> Thanks for your time,
>> - -al
>>
>> [1] abcdefghijklmnopqrstuvwxyz
>> [2] http://www.zone-h.net/defaced/2007/03/05/www.or-brun.com/
>>
>> On Tue, 18 Nov 2008 14:34:33 -0500 Fredrick Diggle
>> <fdiggle@...il.com> wrote:
>>>Fredrick Diggle has recently noted an upswelling of defacement
>on
>>>the
>>>internet and believes it is worth noting. Most notably Matasano
>>>Security has apparently been "owned" and their popular internet
>>>"blog"
>>>replaced with a defacement page.
>>>
>>>http://www.matasano.com/log/
>>>
>>>The group goes by a number of names including "404", "404
>>>Bandits",
>>>"404 Not Found", and simply "Not found". This is believed to be
>>>linked
>>>to terrorism and possibly communism. Other recent defacements of
>>>note
>>>include the following.
>>>
>>>http://www.google.com/404bandits
>>>http://www.foxnews.com/404
>>>http://icanhascheezburger.com/notfoundbandits
>>>
>>>This could be the beginning of something bigger. If you notice
>>>anything suspicious please contact your local law enforcement
>>>agents.
>>>
>>>YAY! from Brazilia
>>>
>>>_______________________________________________
>>>Full-Disclosure - We believe in it.
>>>Charter: http://lists.grok.org.uk/full-disclosure-charter.html
>>>Hosted and sponsored by Secunia - http://secunia.com/
>> -----BEGIN PGP SIGNATURE-----
>> Charset: UTF8
>> Note: This signature can be verified at
>https://www.hushtools.com/verify
>> Version: Hush 3.0
>>
>>
>wpwEAQMCAAYFAkkjISsACgkQ8J2EGU1ixm4elAP5ASDWRJKwFSbKkwEcSgij3+Z37z7
>y
>>
>VHJg26/M4hgRJg+jMETkbcikims6GWy/YOLj4Ghm/0dvnc1QxIwLvxBURSsKySDWwm5
>e
>>
>Mn/qNaowMnm86WyYHFF1zlOunxu1tmZcQdP2Q0DGYQ5pL7Mzly5btQbgT3u0SGZNwSB
>m
>> ncPyxio=
>> =PbZ5
>> -----END PGP SIGNATURE-----
>>
>> --
>> Be a professional.  Click here to earn a psychology degree.
>>
>http://tagline.hushmail.com/fc/PnY6qxultlCu7czxvYOckic6P1ZMIdbGIuIV
>LGs3jTOg1MlwTOxZC/
>>
>>
-----BEGIN PGP SIGNATURE-----
Charset: UTF8
Version: Hush 3.0
Note: This signature can be verified at https://www.hushtools.com/verify

wpwEAQMCAAYFAkkjNYgACgkQ8J2EGU1ixm5DcQP7BpBwQ+sib/vm9rAlFvedWHZsHeb0
ZvoZ97IaQfK1U97Kt+YK74fypQ+BiU/550yIGdhN1L6idqYon4XXkElsX2qsr2zg5yyP
dPxl/RyN+ieZt2kVqbeMIWpxX7hrGtK0QgLFBeriofHjhn3wlY+NDmadpQvGxvtPEs/W
EQYyD9I=
=sHY1
-----END PGP SIGNATURE-----

--
Click here for free information on business phone systems from top companies.
http://tagline.hushmail.com/fc/PnY6qxu9tV90rlvRCtJFhFbIsHvcGmZBro1Zln1Lmy2iUpJO0RAAg/

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/

Powered by blists - more mailing lists

Powered by Openwall GNU/*/Linux Powered by OpenVZ