Hacker News new | past | comments | ask | show | jobs | submit login

Ahhhh, we've come full circle. Back from the days when script kiddies would DoS a site or 'crack' a telnet password, then deface and claim they have street cred.

I would love to find someone who has actual street cred and had their account information released by these chuckleheads, and put them in a room together.

This isn't about politics. I doubt these losers even know anything about the companies they attacked. Fucking douchebags.

However, I should also blame the companies involved here. If they can afford $1000 for some kind of web app firewall they probably could have detected sqlmap raping their site with faulty queries.




That behavior never stopped, in fact it's so common that it's not news anymore which is probably why you haven't heard of it in a while. http://news.cnet.com/Defaced-site-archive-retires/2100-1001_... Who said it was about politics? I should also blame the companies involved... Exactly, this is about making unsafe companies feel unsafe.


I don't find their actions particularly praiseworthy, but if this can be done by a bunch of scriptkiddies, I'm not sure they did anything but slightly move up the inevitable, since organized criminal groups are also running similar scripts.


Organized criminal groups are more scrupulous. They just want your money, or to be information brokers. They won't publish your name, address, phone, social and god knows what else to the world.

I could give an extreme example and say that this kind of information disclosure puts stalking victims at risk, but there's a million more reasons we protect the privacy of individuals. Criminals simply have no reason to do this kind of thing, but the script kiddies think it's hilarious.


At least if the data is published you can search and see if you need to go in to your bank and shout at the manager.


Your bank manager does not make IT policy. Please do not shout at him.

The lamers who released the information could have easily blacked out parts of all of any sensitive information, or disseminated other kinds of proof of their attack. Then you could still be angry at your bank without getting people's personal information.




Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: