full-disclosure - Third issue of the Zone-H Comics

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

Message-ID: <Pine.LNX.4.63.0509271416220.28923@forced.attrition.org>
Date: Tue Sep 27 19:40:09 2005
From: jericho at attrition.org (security curmudgeon)
Subject: Third issue of the Zone-H Comics

: Not if the U.S security services decide to have a "war on cyber terror 
: sites".

You aren't from the US are you? The idea that "U.S security services" can 
arbitrarily shut down a site outside the US, and that the FBI or anyone 
else *would* shut down a site, even in the US is a bit silly. Almost as 
silly as thinking defacing or defacement mirrors are "cyber terrorism" 
under any definition of the word.

When the attrition mirror was being maintained, our #1 visitors were 
security companies and law enforcement. The FBI (and other agencies) used 
our mirror to track computer crime, and eventually figured out they could 
subpoena us for records that potentially helped their investigation. They 
knew that some defacers would not clean the logs of systems they attacked, 
and they knew that the defacers would view their work on our site, as well 
as contact us directly (often from hotmail, with x-originating-ip) giving 
them a nice trail back to the person who comitted the crime. So, one 
subpoena, conviction in a box practically. You think the FBI would close 
that kind of resource?

As KF and str0ke said, there will always be a defacement mirror. There was 
one before Attrition, several during, and several since. Instead of 
deciding they should all be shut down for whatever reason, you should be 
calling for the mirrors to act as professionally and ethically as 
possible. If you question this comment or can't figure out what would 
distinguish defacement mirrors in this way, then do a little reading 
on the topic for background.