Argonath RPG - A World of its own
Argonath RPG Community => Speakerbox => World and local news => Topic started by: LoHi on September 04, 2012, 08:30:26 am
-
http://redtape.nbcnews.com/_news/2012/09/10/13781440-exclusive-the-real-source-of-apple-device-ids-leaked-by-anonymous-last-week (http://redtape.nbcnews.com/_news/2012/09/10/13781440-exclusive-the-real-source-of-apple-device-ids-leaked-by-anonymous-last-week)
AntiSec Press Release: http://pastebin.com/DTKiSgL2 (http://pastebin.com/DTKiSgL2)
A small Florida publishing company says the million-record database of Apple gadget identifiers released last week by the hacker group Anonymous was stolen from its servers two weeks ago. The admission, delivered by the company’s CEO exclusively to NBC News, contradicts Anonymous' claim that the hacker group stole the data from an FBI agent's laptop in March.
Paul DeHart, CEO of the Blue Toad publishing company, told NBC News that technicians at his firm downloaded the data released by Anonymous and compared it to the company's own database. The analysis found a 98 percent correlation between the two datasets.
Old:
http://pastebin.com/nfVT7b0Z (http://pastebin.com/nfVT7b0Z)
During the second week of March 2012, a Dell Vostro notebook, used by Supervisor Special Agent Christopher K. Stangl from FBI Regional Cyber Action Team and New York FBI Office Evidence Response Team was breached using the AtomicReferenceArray vulnerability on Java, during the shell session some files were downloaded from his Desktop folder one of them with the name of "NCFTA_iOS_devices_intel.csv" turned to be a list of 12,367,232 Apple iOS devices including Unique Device Identifiers (UDID), user names, name of device, type of device, Apple Push Notification Service tokens, zip codes, cellphone numbers, addresses, etc. the personal details fields referring to people appears many times empty leaving the whole list incomplete on many parts. no other file on the same folder makes mention about this list or its purpose.
-
Apple Device UDID, Apple Push Notification Service DevToken, Device Name,
Device Type. =/= personal data
They haven't released any personal info.
-
They use the information as a negotiation tool. "If you don't do this, we'll do this." As this is a large amount of personal data the government and authorities will want to stop the information being released.
-
Apple Device UDID, Apple Push Notification Service DevToken, Device Name,
Device Type. =/= personal data
They haven't released any personal info.
http://corte.si/posts/security/udid-leak.html (http://corte.si/posts/security/udid-leak.html)
-
So? No Private info has been leaked yet.
-
So? No Private info has been leaked yet.
By using those bits of information you can get up to gather a lot of private information later on if you're skilled at it.
If you remember, people at 4chan basically tracked down the guy who stood on the TacoBell's salad and got him fired.
-
So? No Private info has been leaked yet.
Are you serious? I can identify your phone, what apps you have used, even access your Facebook/Twitter account, and you can say that?
-
Are you serious?
Yes.
I can identify your phone
Mine isn't in the list, so no, you can't. It's a UID, it has no identifying information.
what apps you have used
And? How is this personal info?
Aaccess your Facebook/Twitter account
No you can't.
and you can say that?
Exactly.
-
See, do not buy over priced crap from Apple.
-
See, do not buy over priced crap from Apple.
Are you serious? (http://i.fok.nl/s/emo.gif)
Like this could only happen with Apple products..
Are you serious? I can identify your phone, what apps you have used, even access your Facebook/Twitter account, and you can say that?
No you can't.
-
This is from a former breach.
The breach was not of the FBI as popularly told, but a third party contractor for the FBI that stores their data.
-
The FBI now denies any link saying there's "no evidence" that any material has been stolen through an agent's laptop.
-
Yes.
Mine isn't in the list, so no, you can't. It's a UID, it has no identifying information.
And? How is this personal info?
No you can't.
Exactly.
I apologise if it was hard to understand my statement. I did not mean YOU, but as an example, I still used the short word instead of using "someones". I don't know what is personal to you, but for me it's kind of a big deal if someone knows what I'm doing with my phone (like knowing what programs you use on your computer).
The vulnerabilities ranged from de-anonymization, to takeover of the user's gaming social network account, to the ability to completely take over the user's Facebook and Twitter accounts using just a UDID.
It seems that you didn't even read my arguments, but hopefully you can come up with something less embarrassing in reply.
This is from a former breach.
The breach was not of the FBI as popularly told, but a third party contractor for the FBI that stores their data.
Link the source and I'll update the first post.
-
This is from a former breach.
The breach was not of the FBI as popularly told, but a third party contractor for the FBI that stores their data.
The FBI trusts someone other than themselves with their information? Flawed agency..
-
The FBI trusts someone other than themselves with their information? Flawed agency..
More like blatant bullshit
-
Link the source and I'll update the first post.
A source is a trusted news location in this sense.
Also, Anonymous wasn't behind this as I am finding out after digging. The group behind this is AntiSec. While AntiSec is a movement by Anon, the activitst themselves are not part of the "global" anonymous movement and is a separate group. This is obvious cause in the pastebin link, one very important Anonymous trait is missing. While some news sites are generalizing them as Anonymous, they are incorrect. This tech news site bellow has their facts straight.
http://www.techhive.com/article/2000417/anti-security-group-claims-fbi-breach-posts-1-million-ios-udids.html (http://www.techhive.com/article/2000417/anti-security-group-claims-fbi-breach-posts-1-million-ios-udids.html)
-
A source is a trusted news location in this sense.
Also, Anonymous wasn't behind this as I am finding out after digging. The group behind this is AntiSec. While AntiSec is a movement by Anon, the activitst themselves are not part of the "global" anonymous movement and is a separate group. This is obvious cause in the pastebin link, one very important Anonymous trait is missing. While some news sites are generalizing them as Anonymous, they are incorrect. This tech news site bellow has their facts straight.
http://www.techhive.com/article/2000417/anti-security-group-claims-fbi-breach-posts-1-million-ios-udids.html (http://www.techhive.com/article/2000417/anti-security-group-claims-fbi-breach-posts-1-million-ios-udids.html)
Sadly I did not find any comments about the source not being FBI, but please do correct me if I'm being blind.
You are certainly correct about the group being AntiSec, but they published the list under Anonymous' name ( https://twitter.com/AnonymousIRC/status/242822072026398720 (https://twitter.com/AnonymousIRC/status/242822072026398720) https://twitter.com/AnonymousIRC/status/242823908082999296 (https://twitter.com/AnonymousIRC/status/242823908082999296) ) and I decided to use the more well-known name to help people understand who we are talking about here.
-
I am mistaken, I read the thing wrong. This attack was claimed against the FBI. However a few months ago, Anonymous did breach a third party storage center for the FBI. They are contracted by the government.
AntiSec and anon are pretty much the same thing, only AntiSec has structure and affiliations. Anonymous doesn't; AntiSec was the one who planned, executed and released this attack. The release was also under AntiSec, only as they are same pretty much, published under Anons Twitter which is fairly common.
-
By using those bits of information you can get up to gather a lot of private information later on if you're skilled at it.
If you remember, people at 4chan basically tracked down the guy who stood on the TacoBell's salad and got him fired.
Every picture taken by an iPhone contains EXIF data which contains location info by default. Really easy to track, unlike hacking into Apple servers.
-
Every picture taken by an iPhone contains EXIF data which contains location info by default. Really easy to track, unlike hacking into Apple servers.
Any modern camera really has it now.
However, this still doesn't really leak anything personal as this data doesn't record an exact address, only with in 25 meters. I mean, sure some determined psychopath could track someone down to their address with a picture of some agents house taken with the iPhone camera or anything modern, but who is honestly gonna take this much effort? and what are they going to do... give the agent a high five? Ask for an autograph? Have at it.
Reports have come out today, stating the stolen data was NOT from the FBI, but a company called "BlueToad Publishing". The company has taken blame as well as provides evidence to support themselves.
Source: http://mashable.com/2012/09/10/app-publisher-blame-apple-id-hack/ (http://mashable.com/2012/09/10/app-publisher-blame-apple-id-hack/)
This is why you should have gotten an Android.
-
Reports have come out today, stating the stolen data was NOT from the FBI, but a company called "BlueToad Publishing". The company has taken blame as well as provides evidence to support themselves.
Source: http://mashable.com/2012/09/10/app-publisher-blame-apple-id-hack/ (http://mashable.com/2012/09/10/app-publisher-blame-apple-id-hack/)
This is why you should have gotten an Android.
A news post with a bit more info: http://redtape.nbcnews.com/_news/2012/09/10/13781440-exclusive-the-real-source-of-apple-device-ids-leaked-by-anonymous-last-week (http://redtape.nbcnews.com/_news/2012/09/10/13781440-exclusive-the-real-source-of-apple-device-ids-leaked-by-anonymous-last-week)
Will update the first post once I get home.
-
The FBI vs Anonymous I see it as North Korea Vs South Korea, and if what CommanderX says is ture then Anon has "people" inside the FBI and thats a loose term and its quite obvious the FBI has infiltrated Anonymous since anyone can, however I wounder if the FBI is seeing this as a False Flag attack or making such plans.
-
The FBI vs Anonymous I see it as North Korea Vs South Korea, and if what CommanderX says is ture then Anon has "people" inside the FBI and thats a loose term and its quite obvious the FBI has infiltrated Anonymous since anyone can, however I wounder if the FBI is seeing this as a False Flag attack or making such plans.
I don't think its the FBI Vs Anonymous. Anonymous is a very unorganized group of criminals in short, while they're intentions are often for good protest (Hacktavist). They are still infringing the rights of others, and breaking the law. That is why FBI takes action against them.
A group before Anonymous, the G00ns was taken down by law enforcement by taking down its leadership. Anonymous has none, so the FBI knows it isn't possible to take the group down. As Anonymous name is just a mask to a group of anonymity. As you state, anyone can. However there is no rankings, you honestly just need to earn your way into the higher IRCs by earning respect of others. Even such, Anonymous members are anonymous to each other was well thus giving them "turn others in" deal out of the water.
-
AntiSec made a 'press release' (http://pastebin.com/DTKiSgL2) and I updated the first post.