4 ms·

Given LulzSec seems to post their hacks on twitter, that there's no way of validating who posted the PasteBin item and that the Office of National Statistics ha

by ElliotH 15y ago

Given LulzSec seems to post their hacks on twitter, that there's no way of validating who posted the PasteBin item and that the Office of National Statistics hasn't reported the loss, its probably best to wait and see something a little more convincing.

ZeroMinx 15y ago
I haven't seen "Census" mentioned in their twitter feed (yet), so as far as I know the only source is a bit of anonymous text on pastebin. Anyone could put that there.
- 46Bit 15y ago
  They are mentioning something they've got though, in similar language to the pastebin. I think it unlikely they'd have managed to acquire the full census, but I think it's probably quite possible they've got ones submitted online.
m4tt 15y ago
I wrote the article and have been trying to trace the authenticity of the release. I am still waiting to hear back from the Office of National Statistics, which at the time were unaware of who LulzSec even were. I contacted them a little over two hours ago, I haven't received a response, yet.
- ErrantX 15y ago
  Knowing a little of the internals of ONS... It may take them a while to figure out what a "computer" is and how it might be "hacked". You could be waiting some time :) ahem.
  - m4tt 15y ago
    Just got off the phone to them. Issuing a statement very soon. Will update both the article and on HN.
    - m4tt 15y ago
      In related news, the "Mastermind" behind LulzSec has been arrested: http://thenextweb.com/industry/2011/06/21/suspected-lulzsec-mastermind-arrested/ http://thenextweb.com/industry/2011/06/21/suspected-lulzsec-...
- Peroni 15y ago
  Looks like Sophos are instigating PR damage control already: https://twitter.com/#!/gcluley/status/83121318723194880 https://twitter.com/#!/gcluley/status/83121318723194880
- deleted 15y ago
  [deleted]
mikle 15y ago
It also has the Bethesda and US senate links in the end, making this look more like copy-paste of an older release. This is inconclusive though since the real LulzSec might copy paste from an older release to get all the ascii art.
- crocowhile 15y ago
  Yes, also the phone number is wrong. That number doesn't work anymore.
nitrogen 15y ago
I've wondered how many individuals and groups out there post things in the name of other security groups to distract attention from (or direct it toward) themselves. Maybe everyone should start signing their releases with a private key.
- JonnieCache 15y ago
  Goodbye plausible deniability...
gazrogers 15y ago
http://twitter.com/#!/c4marcus/status/83135821351370752 http://twitter.com/#!/c4marcus/status/83135821351370752
- m4tt 15y ago
  Full statement: We are aware of the suggestion that census data has been accessed. We are working with our security advisers and contractors to establish whether there is any substance to this. The 2011 Census places the highest priority on maintaining the security of personal data. At this stage we have noevidence to suggest that any such compromise has occurred.

by ElliotH 15y ago

ZeroMinx 15y ago

I haven't seen "Census" mentioned in their twitter feed (yet), so as far as I know the only source is a bit of anonymous text on pastebin. Anyone could put that there.

46Bit 15y ago
They are mentioning something they've got though, in similar language to the pastebin. I think it unlikely they'd have managed to acquire the full census, but I think it's probably quite possible they've got ones submitted online.

m4tt 15y ago

I wrote the article and have been trying to trace the authenticity of the release. I am still waiting to hear back from the Office of National Statistics, which at the time were unaware of who LulzSec even were. I contacted them a little over two hours ago, I haven't received a response, yet.

ErrantX 15y ago
Knowing a little of the internals of ONS... It may take them a while to figure out what a "computer" is and how it might be "hacked". You could be waiting some time :) ahem.
- m4tt 15y ago
  Just got off the phone to them. Issuing a statement very soon. Will update both the article and on HN.
  - m4tt 15y ago
    In related news, the "Mastermind" behind LulzSec has been arrested: http://thenextweb.com/industry/2011/06/21/suspected-lulzsec-mastermind-arrested/ http://thenextweb.com/industry/2011/06/21/suspected-lulzsec-...
Peroni 15y ago
Looks like Sophos are instigating PR damage control already: https://twitter.com/#!/gcluley/status/83121318723194880 https://twitter.com/#!/gcluley/status/83121318723194880
deleted 15y ago
[deleted]

mikle 15y ago

It also has the Bethesda and US senate links in the end, making this look more like copy-paste of an older release. This is inconclusive though since the real LulzSec might copy paste from an older release to get all the ascii art.

crocowhile 15y ago
Yes, also the phone number is wrong. That number doesn't work anymore.

nitrogen 15y ago

I've wondered how many individuals and groups out there post things in the name of other security groups to distract attention from (or direct it toward) themselves. Maybe everyone should start signing their releases with a private key.

JonnieCache 15y ago
Goodbye plausible deniability...

gazrogers 15y ago

http://twitter.com/#!/c4marcus/status/83135821351370752 http://twitter.com/#!/c4marcus/status/83135821351370752

m4tt 15y ago
Full statement: We are aware of the suggestion that census data has been accessed. We are working with our security advisers and contractors to establish whether there is any substance to this. The 2011 Census places the highest priority on maintaining the security of personal data. At this stage we have noevidence to suggest that any such compromise has occurred.