LulzSec: A less entertaining, but more informative outlook.
After Jack’s creative dismissal of LulzSec, and after extensive research into the matter, I’d like to present my own take on the group, their current state and their future. Before you read on, I’d like to remind you once again - don’t let uncontrolled rage, one action or the media form your opinion. Do some research, check some sources and form your own. That’s what I did, and the result was this post.
I’d also like to point out that due to the anonymous nature of the subject matter, there is very little solid evidence to any of the story. Everything here is speculative and based off sources that may or may not be accurate. LulzSec could actually be a jazz quartet for all I know.
After raking the web and reading article after article, it seems that notorious hacking group LulzSec are already in steep decline and are heading towards their swift and painful end. Multiple sources suggests that while they deny any repercussions taken towards their membership, they’re already suffering and are trying to maintain a “game face”. Several members have allegedly been arrested, and a few others have left the group due to the attention they are receiving. While the crew deny it, it seems that this is a rather pathetic attempt to outwit their opposition. Whether or not Ryan Cleary, recently arrested teenager, is sailing upon the Lulz Boat is under much debate. LulzSec claim he merely operates the server they host their IRC chat on, while opposition claim that he is actually a key member, and LulzSec are fabricating their story to dishearten their enemies.
The most interesting discovery however, was that LulzSec might not even be in it for “the lulz” any more. This statement from Unveillance CEO Karim Hirazi reports that LulzSec contacted him in an attempt to extort money and botnet information in return for their silence. The usernames in the article - Ninetales and hamster-nipples do not appear anywhere else among LulzSec’s antics. Since LulzSec always operate under their chosen usernames, and Sabu nor Topiary (the most prominent members, and the ones most likely to carry out such a shakedown) are anywhere to be seen, this suggests that these might be imposters, trying to score a quick buck off LulzSec’s reputation. The fact that LulzSec are inspiring others to turn to criminal activities is worrying and shameful.
After repeatedly provoking “The Jester” - renowned patriotic “hacktivist for good” - he has turned his sights on the group, meeting their arrogance and insults with simple, calm warnings followed up with some legitimate skills (as opposed to DDoS and SQL injection), already revealing a few LulzSec members’ identities in just a few days. LulzSec continue to deny, but based on the facts I’m going to take Jester’s word over theirs.
After reading LulzSec’s 1,000th tweet celebratory statement, I hate to admit it but I found myself developing respect and admiration for the crew. In the statement, they are fully aware that their time will come to an end, and it will not be pretty. They plan to fight to the end, at which point they will accept their fate. When someone is this dedicated to their beliefs and ready to make this sacrifice, I can’t help but admire them, regardless of what it is they stand for. However, the most important part of the statement is this harrowing truth:
“Do you think every hacker announces everything they’ve hacked? We certainly haven’t, and we’re damn sure others are playing the silent game. Do you feel safe with your Facebook accounts, your Google Mail accounts, your Skype accounts? What makes you think a hacker isn’t silently sitting inside all of these right now, sniping out individual people, or perhaps selling them off? You are a peon to these people. A toy. A string of characters with a value.”
LulzSec are by no means the first hacking collective and they certainly won’t be the last. But the near silence on the matter until now is worrying. Their point rings true - we may never know that we’re the victims of cybercrime. By telling everyone what they’ve done and by turning it into a big joke, LulzSec have actually brought this issue into the spotlight, and are helping to teach people the harsh truth of the internet: nothing is safe. If somebody can write software to protect your data, then someone else can certainly circumvent it. We need to find our own comfort level at the data that we put online. If we’re unhappy with people potentially stealing our personal information, then simply don’t upload it in the first place. The fault should not however lie entirely with the user - any system that stores sensitive data should not be cracked wide open by a simple SQL injection - something any angsty kid could learn via Google.
Regardless, the whole saga has been an interesting, highly valuable and at times entertaining lesson in internet security, privacy and ethical hacking. Yes, they might have DDoS’d one of your favourite websites, but don’t let blind rage and media hype form your opinion. I honestly hope that this battle was worth it for LulzSec - these guys have likely thrown away their freedom in defiance of bureaucratic bullshit and secrecy. In a quest for better security for our privacy and information. In a noble attempt to unite frustrated and downtrodden everyday people under one cause.
In the name of lulz.
