21 ms·
Hacking Team hacked, attackers claim 400GB in dumped data
- nickpsecurity 11y agoPoetic justice. Serves the bastards right. I'm sure hackers are flocking to the download in search of awesome tools. If they're there, then we might see independent, malware authors building some interesting things to produce headaches with. Interesting times continue. Note that many of us in INFOSEC said years ago that these offensive, cyber companies developing weapons was a risk to us if they double-dealed or got breached. Their weapons which we (and others) funded might get turned against us. Depending on what's in the torrent, that scenario might begin playing out.
- themartorana 11y agoLooks like they're double dealing, too. Invoices to Egypt and other oppressive governments have already been found in the torrent dump. Christopher Soghoian on Twitter: "Just from Torrent File listing, Hacking Team's customers includes South Korea, Kazakhstan, Saudi Arabia, Oman, Lebanon, and Mongolia." https://mobile.twitter.com/csoghoian/status/617862879405064192 https://mobile.twitter.com/csoghoian/status/6178628794050641... Edit - just read Christopher Soghoian's entire Twitter stream for the juicy bits. It's bad news for Hacking Team: https://mobile.twitter.com/csoghoian https://mobile.twitter.com/csoghoian
- nickpsecurity 11y agoI posted a link to his stream with the rest on Schneier's blog. The stream is... Hacking Team's own answer to Failblog. I only wish I had 400GB of storage handy with a good network in case it gets taken down or something. Hope people are copying the shit out of it. Note: There torrent is so big and has so much stuff that this laptop I'm using (few years old) was lagging on scrollbar with fan on full blast. Had to close it lol.
- deleted 11y ago[deleted]
- jessaustin 11y agoOMG "I'm going to save @HackingTeam the trouble of hiring Mandiant." then the pic of Bejtlich with "DEAR @HACKINGTEAM IT WAS CHINA". Ha!
- JoachimS 11y agoOh noes, pissing off abusive regimes to make a few bucks more, I'd say they deserve all they get and should have been part of their business risk assessment.
- JoachimS 11y agoNot only for those reasons, but also for creating a malware market driven by nation state money. The way we have found and fixed vulnerabilities in civilian IT systems has been turned into a market where the end result are less secure persons, companies, organizations and states. A fabulous way to spend tax money aim to protect us imho...
- veddox 11y agoI'm not usually happy to see somebody hacked, but in this case I'll make an exception :-) But their software is a risk now, I agree.
- sarciszewski 11y agoGood. Serves them right. Normally I'm a bit more reserved when a company I dislike gets hacked, but take a look at Hacking Team's history and you'll probably want to celebrate too.
- nickpsecurity 11y agoNot just hacked: this is almost on the Sony level. They got... H A C K E D !!!!! Maybe we'll get lucky and they'll face bankruptcy with their stuff available for free now. :)
- sarciszewski 11y agoI'm also hoping for criminal charges ;)
- nickpsecurity 11y agoIf we're lucky. They are in Italy and defense contractors after all with what that entails...
- deleted 11y ago[deleted]
- deleted 11y ago[deleted]
- bjterry 11y ago> ...Hacking Team's customers include South Korea, Kazakhstan, Saudi Arabia, Oman, Lebanon, and Mongolia. Yet, the company maintains that it does not do business with oppressive governments. I was curious if those were all oppressive governments, especially since South Korea was included. According to a couple indices on Wikipedia [1] South Korea is pretty free (only the press freedom index is lower than America's), and Mongolia's not so bad (political freedom, but weakness in press and economic freedom). Pretty hard to lump South Korea in with Saudi Arabia or Kazakhstan. 1: https://en.wikipedia.org/wiki/List_of_freedom_indices https://en.wikipedia.org/wiki/List_of_freedom_indices
- delbel 11y agoI had to read that twice and figured I missed last week's Two Minutes of Hate.
- agopaul 11y agoOrwell's 1984?
- Zigurd 11y agoSouth Korea is fairly recently free-ish. Up until 1987 South Korea had a heavily US-influenced authoritarian government with a token legal opposition. The US still has a very strong influence in South Korea. There are also recent incidents that betray a lack of confidence in democracy: http://www.wsj.com/articles/south-korea-court-dissolves-left-wing-political-party-1418960046 http://www.wsj.com/articles/south-korea-court-dissolves-left... It's a perfectly nice place to visit. People there apparently feel free to talk about everything: The war, the Park era, etc. Unions can be quite militant. But they are not as free as Americans.
- the_ancient 11y agoYes but 'Merica is freedom... I know because we just had 72 hours of colorful explosions declaring the freedom....
- justinjlynn 11y agoDirect link to the announcement tweet https://twitter.com/hackingteam/status/617852091390935040 https://twitter.com/hackingteam/status/617852091390935040
- mikeyouse 11y agoThey were stonewalling a UN investigation into selling their services to Sudan during the civil war.. Unbelievable.. https://twitter.com/csoghoian/status/617892200618291200 https://twitter.com/csoghoian/status/617892200618291200
- dev-da0 11y agoThey're profiteers off deaths, abuse and repression of people, plain and simple. The whole lot of these folks should be in jail.
- contingencies 11y agoYes. However, the cynic in me suggests that those who sell weapons to nation-states tend to receive protection from nation-states. Which percentage of their customers will not be pissed off enough to watch them burn over sticking their neck out to help, though? Probably only the most corrupt, if an appropriate amount of funds are dispersed to support rapid processing.
- wslh 11y agoJust looking at the torrent I found Coca Cola, Google, Carrefour, and Movistar. I would love to see an index of this information to quickly search the content.
- randomguy400 11y agoIm trying to load "hackedteam.torrent" into uTorrent and Frostwire but neither will work with it.. Although frostwire does show me the internal files, but it simply wont add the torrent.
- Veratyr 11y agoI had a look at the contents of the files I grepped with Google in the name and it appears most of them are invoices and contracts for things like Maps, Earth and Adwords. My guess is they use Google Maps for finding addresses from GPS or vice versa. Or something like that.
- kiproping 11y agohttp://ht.musalbas.com/ http://ht.musalbas.com/
- curiousjorge 11y agoDavid Vincenzetti will forever go down in history as a piece of shit.
- middleclick 11y agoGot a link or two I can read about?
- mikeyouse 11y agohttp://www.telegraph.co.uk/technology/8899353/The-spies-behind-your-screen.html http://www.telegraph.co.uk/technology/8899353/The-spies-behi...
- keithpeter 11y ago"The licences, which cost €200,000 (£171,228) per annum, are never sold to states that are under EU or UN arms embargoes or to private companies or individuals." Quote from the Telegraph article seems to provide the definition of 'ethical government' that the company was using. https://www.gov.uk/current-arms-embargoes-and-other-restrictions https://www.gov.uk/current-arms-embargoes-and-other-restrict... The list is quite short.
- curiousjorge 11y agoHow can you miss his devilish good looks under the hoodie? https://www.youtube.com/watch?v=R63CRBNLE2o https://www.youtube.com/watch?v=R63CRBNLE2o Just look at how seductively he lifts his hoodie to reveal his face in the darkness, 10/10 would buy exploit again.
- dev-da0 11y agoNormally I'm not one for ad hominems but he comes off as a huge poser dbag. The only things missing were the duck grimace and Donald Trump pluging his 2016 campaign.
- gruez 11y agomagnet link: magnet:?xt=urn:btih:51603bff88e0a1b3bad3962614978929c9d26955
- wowuyan 11y ago能下载？
- wowuyan 11y ago能下载？
- randomguy400 11y agoCheers. It's working with the magnet link.
- randomguy400 11y agoList of trackers udp://coppersurfer.tk:6969/announce udp://9.rarbg.me:2710/announce http://mgtracker.org:2710/announce http://mgtracker.org:2710/announce http://bt.careland.com.cn:6969/announce http://bt.careland.com.cn:6969/announce udp://open.demonii.com:1337 udp://exodus.desync.com:6969 udp://tracker.leechers-paradise.org:6969 udp://tracker.pomf.se udp://tracker.blackunicorn.xyz:6969
- HackersLovers 11y agoWhere is magnet link?
- ahofmann 11y agoI'm on windows trying to download this. qBittorent gives an error message on import, utorrent does nothing (0% metadata loaded) and transmission loads metadata to 100 % and then starts over. In the logfile it says: "[ERROR] Hacked Team: Invalid metadata entry "path"". Transmission version is 2.84 (14386). Is there anyone loading this torrent on windows?
- liviu- 11y agoTixati on Windows, Transmission on Linux.
- curiousjorge 11y agoSouth Korea? Well I'm not surprised. Beneath the veil of democracy is a nanny state, forcing kids to install surveillance tool on their mobile phones, forcing bank and military to use IE and wonderfully secure ActiveX (required to do just about anything private and sensitive in Korea), requiring social insurance number to sign up for any website, use your real name so they can take you away if you write a blog post in Korean about smoking marijuana in Amsterdam, insanely bizarre Korean defamation law, polarized view of 'right' and 'left', with left being persecuted and painted in the same light as North Koreans, oppression of laborers, workers working for family owned conglomerates, indecency law (make Korean porno in Canada and get arrested once in Korea), hiding Gwangju massacre (officially a north korea inspired rebellion), silence and censorship of poor treatment of foreign workers (especially poorer Asian countries), east & west regionalism that creates discriminating policies based on lineage, the shit list far too long to go on. It's no North Korea or Saudi Arabia, but there is active surveillance which seems to be readily tolerated along with nepotism and corruption, because Confucius says you should do what someone with an earlier birth date or higher social status. To go against this machine is to give up the government's version of Korean identity, a constant victim of passed aggressions of neighboring countries which happened because Korea has never been blessed with a great government or kings that always put the country in such predicaments.
- meric 11y agoConfucius says you should do what someone with an earlier birth date or higher social status That's categorically false. In one example in an old confucian book I read - if you are the ruler of the country, and your parents committed a murder, you should first send an arrest order against your parents - even if they protest otherwise, and then abdicate and help your parents escape the law. This example directly contradicts your generalised assertion[1]. In confucianism - you must try to fulfil your roles at all times. Yes you must respect your elders, but in no way you should obey their commands without considering your own position - and even if you wish to, do not obey them blindly to the point of betraying the responsibilities of your other roles. Don't murder your brother just because your parents told you to do so. The "in confucianism you must obey your elders at all times" is a convenient myth perpetrated by various governments and parents throughout history. [1] According to confucianism, the parent always has higher social status than the child, and, the parent could also be a visiting ruler of a much larger country.
- eyeareque 11y agoThe screen shots of the email showed they didn't use pgp it seems. Whoops. Time to break out the popcorn.
- woodman 11y agoI don't know how it is over there, but legally mandated record keeping requirements are a pretty good excuse for not using public key encryption on corporate mail servers. There are products that act as middlemen that transparently convert between keys that are public and self generated... but that kind of defeats the purpose of public key encryption.
- HappyTypist 11y agoNot at all. Just securely store a copy of all work keys on a non-networked, "cold storage" server and back it up for redundancy. Record keeping is preserved while you gain the full benefits of PGP.
- woodman 11y agoYou're right about the cold storage aspect, I was thinking about some of the transparent encryption gateway products that are out there. Email sent to folks without PGP would still be unencrypted when it goes through the corporate MTA, but a copy encrypted with the sender's public key would be stored long term.
- drannex 11y agoWhy do I always find it funny (and sad) when this happens? Interesting to see that they do in fact work with oppressive governments...
- infinitysgame 11y ago400GB dump?! Can't imaging how many 'accomplices' will get sucked into this!
- cinquemb 11y ago"regulations are annoying, it cuts into our profit margin when we have to find a reseller and give them a percentage"[0] Well this could certainly shed light on the role that contractors operate in ways we have yet to see from the snowden "leaks" (of which most still remains unleaked[1])… RE: "Media practice of consulting with governments on what to publish or withhold of material disclosed by risk takers, is anti-democratic, unconsitutional, venal, protective of privilege and betrayal of public trust."[2] [0]: https://twitter.com/hackingteam/status/617892908583243776 https://twitter.com/hackingteam/status/617892908583243776 [1]: http://cryptome.org/2013/11/snowden-tally.htm http://cryptome.org/2013/11/snowden-tally.htm [2]: http://thecryptosphere.com/2014/07/24/cryptome-kills-the-kickstarter-an-interview-with-john-young/ http://thecryptosphere.com/2014/07/24/cryptome-kills-the-kic...
- bitmapbrother 11y agoHow can a security firm even be taken seriously when they don't even employ two factor authentication at the very least.
- bitmapbrother 11y agoThey should now change their name to Hacked Team.
- buren 11y agoThey've changed get their display name to just that: https://mobile.twitter.com/hackingteam https://mobile.twitter.com/hackingteam
- palmer_eldritch 11y agoThey're probably not the ones who made that change though...
- chris_wot 11y agoYou think?
- giancarlostoro 11y agoIt's been quite a while, surprised Twitter hasn't caught on to this and stepped in or something? I guess it's not necessarily their responsibility though.
- lawnchair_larry 11y agoThis is actually really bad, happy as I am to see this company get ruined. People with an agenda are going to latch on to this to further push bad legislation like Wassenar, and criminalize security research, or worse, make it "terrorism", because Soghoian runs his mouth and policy makers don't understand how things really work.
- tptacek 11y agoBy "runs his mouth", you mean, "says things people like us disagree with"? This whole "demonize Soghoian" strategy simply isn't working. People who engage in it sound petulant, not persuasive. My guess is more than half of HN readers would sympathize with his positions.
- sarciszewski 11y agoI've previously had disagreements with Soghoian before, but he's generally reasonable. He's not exactly cartoon villain material.
- hacktivistic 11y agoGenerally reasonable? You've gotta be kidding. The guy launches into Twitter rants daily, often blasting away with ad hominems. On balance, I think he probably does more good than harm for our community. But it's a very close call.
- sarciszewski 11y agoYeah, Twitter's not exactly a medium that promotes civility.
- dewyatt 11y agoLooks like libtorrent-rasterbar based clients are not able to handle the dump (bencoded item limit). Transmission is working (slowly).
- deleted 11y ago[deleted]
- kristofferR 11y agoDamn, this hack is massive. This seems to include all their deals/financial data, the full source code to everything (including some novel things like EFI malware and possibly some Office/Flash 0days), all their mail, badges of every employee, personal screenshots/porn habits etc etc. It's not possible to get hacked harder than this.
- chinathrow 11y agoEFI malware novel? https://www.youtube.com/watch?v=5BrdX7VdOr0 https://www.youtube.com/watch?v=5BrdX7VdOr0 Anyway, serves them right.
- Jugurtha 11y agoWhat if it was a deliberate effort from Hacking Team itself to fake a breach, produce a torrent file to be downloaded and compromise whoever is downloading it? The size would need to be large enough that whoever trying to download it will have to stay a relatively long time.
- blfr 11y agoIt's very easy to spin up rTorrent on some machine not attached to you so this doesn't seem like a very good plan, especially considering the PR damage. Maybe if they managed to embed malware in some commonly trusted file format but that again doesn't seem likely since there are too many viewers, and security researchers will generally be careful.
- rjaco31 11y agoThe massive PR hit they're taking means their company will most likely die. And "compromising" someone merely by letting one download stuff is at best a gamble, any decent infosec professional will examine this stuff with the same precautions as when analyzing malware.
- Jugurtha 11y agoThis is exactly what I'm talking about: What I'm being downvoted for and what each comment is doing is rationalizing why this simply can't happen. Everyone is confident about what Hacking Team is or isn't doing/thinking. How can someone be so sure what an entity is thinking or doing? Yes, it's not likely. Yes, it's risky.. but what if they were really bold? The PR hit is a non issue if it is the case, since they can simply say what happened: "Basically, here's how to own a huge number of very sophisticated people". Make nice slides, and show them at Black Hat or something like that. It's "research". The icing on the cake would be to present this material to the very security researchers who've been ownd. This would be a huge PR stunt since it's basically security researchers who will download the file.. And if security researchers are as confident as most people that this simply can't be a con, then all the better :) It is still not likely, but it would be beautiful. PS: Something like that happened at NASA many, many, years ago. There was a security breach and instead of shutting it down, the security team uploaded a ton of bogus classified files, plans, and reports to keep the guy coming and unsuspecting. Until they got him.
- johansch 11y agohttps://twitter.com/hackingteam/status/617951037954125824 https://twitter.com/hackingteam/status/617951037954125824 "Our network security staff hard at work while 5 MB/s is transferred out of our internal network through his computer." along with presumably is a screenshot of said staff watching youtube and reading facebook.
- liviu- 11y agoHis personal twitter got compromised as well http://i.imgur.com/OojV7zc.png http://i.imgur.com/OojV7zc.png Also, various content: https://github.com/hackedteam https://github.com/hackedteam (repo with their malware source code) https://twitter.com/Viss/status/617950211239837696 https://twitter.com/Viss/status/617950211239837696 http://i.imgur.com/26jLFmH.png http://i.imgur.com/26jLFmH.png (torrent content) http://i.imgur.com/XtVUiI8.png http://i.imgur.com/XtVUiI8.png (torrent content) http://i.imgur.com/W4mzsHa.png http://i.imgur.com/W4mzsHa.png (emails) http://i.imgur.com/tdAKXFD.jpg http://i.imgur.com/tdAKXFD.jpg (emails) http://i.imgur.com/3ALTFdB.jpg http://i.imgur.com/3ALTFdB.jpg (their customers) https://archive.is/SYrgc https://archive.is/SYrgc
- chinathrow 11y agoThey regained control over their twitter feed. Sad.
- haakon 11y agoHe tweeted > The torrent contains a virus, it's best to let the authorities examine the evidence and stop seeding and spreading false info. Yes, the hackers fabricated 400GB of lies and please don't look at them.
- jacquesm 11y agoThat Outlook window has a header labeled 'product activation failed'. http://i.imgur.com/tdAKXFD.jpg http://i.imgur.com/tdAKXFD.jpg
- liviu- 11y ago
- deleted 11y ago[deleted]
- chinathrow 11y agoWhat I want so see now is legal action, anything else is not relevant.
- thomasrossi 11y agodo you think there was some help from the inside? Or just overruled?
- danr4 11y agoI'm actually surprised this doesn't happen more often. I think it's hacking organizations like Anonymous that steer away people from "justice" hacking into populism hacking. We need more of these shady & dirty secrets to come to light.
- tgif1759 11y agoDo you need hackers for hire? Do you need to keep an eye on your spouse by gaining access to their emails? As a parent do you want to know what your kids do on a daily basis on social networks ( This includes facebook, twitter , instagram, whatsapp, WeChat and others to make sure they're not getting into trouble? Whatever it is, Ranging from Bank Jobs, Flipping cash, Criminal records, DMV, Taxes, Name it, We can get the job done. We're a group of professional hackers with 10 Years+ experience. Contact at tgif3188@gmail.com ... Send an email and Its done. Its that easy, try us out today.
- ionised 11y ago'Professional' hackers soliciting clients via a gmail address eh?
- tgif1759 11y agoDo you need hackers for hire? Do you need to keep an eye on your spouse by gaining access to their emails? As a parent do you want to know what your kids do on a daily basis on social networks ( This includes facebook, twitter , instagram, whatsapp, WeChat and others to make sure they're not getting into trouble? Whatever it is, Ranging from Bank Jobs, Flipping cash, Criminal records, DMV, Taxes, Name it, We can get the job done. We're a group of professional hackers with 10 Years+ experience. Contact at tgif3188@gmail.com ... Send an email and Its done. Its that easy, try us out today.
- yAnonymous 11y agoNot sure how EU directives translate into Italian law, but I think what they're doing would be illegal in Germany and other EU member states. http://eur-lex.europa.eu/legal-content/EN/TXT/?uri=CELEX:32013L0040 http://eur-lex.europa.eu/legal-content/EN/TXT/?uri=CELEX:320...
- mikecb 11y agoDirectives are generally binding, but leave implementation to member states.
- nohostname 11y agoi wonder who is behind this massive hack, is it a positive or even worst group? i wouldn't want to be in the private pictures leaked once the world knows you are responsable for torture and murder of potential innocent people, very nasty karma
- ikeboy 11y agoAccording to https://twitter.com/lorenzoFB/status/618060756198772736 https://twitter.com/lorenzoFB/status/618060756198772736, it's the same guy who hacked finfisher a year ago.
- ikeboy 11y agoAnd now a follow up article http://motherboard.vice.com/read/hacker-claims-responsibility-for-the-hit-on-hacking-team http://motherboard.vice.com/read/hacker-claims-responsibilit...
- evilDagmar 11y agoWhat I find most entertaining is that they've gone to get help from the police. Seriously, guys? Live by sword, die by the sword.
- Fede_V 11y agoI do not want to sound shockingly naive, but I wonder how these people can sleep at night. You've just sold software to some of the most brutal governments in the world, who will use your technology to track down and brutally torture incredibly brave human rights activists. How can you do this, and still get up in the morning while looking at yourself in the mirror? I can understand petty crime if the alternative is watching your family starve, but these are all skilled software developers, it's not like they will have a hard time finding a job. The people who are involved in this should be forced to watch videos of what those friendly governments do to the civil rights activists they catch.
- FLUX-YOU 11y agoBecause they're disconnected from the consequences of their actions. I really doubt they're getting back business case studies talking about how they tracked down some dude and tortured him thanks to the information gleaned from their products (but now we can find out if they did get these).
- a3n 11y ago> I wonder how these people can sleep at night. These people are not you. They don't care. We should be mindful that there is a large fraction of people who care only about their own well being, regardless of consequences.
- astrodust 11y agoA lot of people fail to understand what sociopaths are like. They do not, can not care in the way that most people do. The best they can do is pretend to care.
- JabavuAdams 11y agoWe should be very careful about labeling selfish people as sociopaths. It's easier to believe that there are incurable monsters among us, because this lets us be self-righteous in containing and punishing them. IMHO simply realizing that there is a scale of selfishness that extends way beyond where you think the limits are is more predictive and actionable.
- bobcostas55 11y agoSomeone is uploading things to github: https://github.com/hackedteam/ https://github.com/hackedteam/ Take a look at the GeoTrust repo... This is a very interesting file, too: https://github.com/hackedteam/rcs-common/blob/master/lib/rcs-common/evidence/file.rb#L17 https://github.com/hackedteam/rcs-common/blob/master/lib/rcs...
- HoochTHX 11y agoThat program appears to creates evidence on the target machine. I hope there will be a way to link this to the parallel construction group. Don't like the guy, plant evidence!/s
- doki_pen 11y agoLooks like they are actively distributing child pornography. They should be charged.
- chris_wot 11y agoHow do you figure that?
- doki_pen 11y agoI was under the impression that they were planting files on the user's computer to incriminate them. I don't really understand where this code is getting it's payload from though.
- DCoder 11y agoIt seems like that code just builds random-ish data that conforms to the wanted file format and then gives it incriminating names. For example: [1] https://github.com/hackedteam/rcs-common/blob/38290d4eab2b2c295bea021429848a3666647827/lib/rcs-common/evidence.rb#L110 https://github.com/hackedteam/rcs-common/blob/38290d4eab2b2c... [2] https://github.com/hackedteam/rcs-common/blob/38290d4eab2b2c295bea021429848a3666647827/lib/rcs-common/evidence/position.rb#L51 https://github.com/hackedteam/rcs-common/blob/38290d4eab2b2c...
- Apaze 11y agoHere you can the tree of the archive: https://paste.ee/r/N3rg7 https://paste.ee/r/N3rg7
- redwood 11y agoPalantir Europe?
- deleted 11y ago[deleted]
- HelloNurse 11y agoDon't miss: the bullshit at http://www.hackingteam.it/index.php/customer-policy http://www.hackingteam.it/index.php/customer-policy "We do not sell products to governments or to countries blacklisted by the U.S., E.U., U.N., NATO or ASEAN. We review potential customers before a sale to determine whether or not there is objective evidence or credible concerns that Hacking Team technology provided to the customer will be used to facilitate human rights violations."
- Globz 11y agoFTP link to all files : http://ht.musalbas.com/ http://ht.musalbas.com/
- Globz 11y agoThis link is part of their knowledge base : http://ht.musalbas.com/KnowledgeBase/Windows%20-%20Soldier%20Feature%20Compatibility%209.6%20-%20%5dHT%5b%20%3a%3a%20KnowledgeBase%20Product.html http://ht.musalbas.com/KnowledgeBase/Windows%20-%20Soldier%2... This one is about "Soldier"
- nissehulth 11y agoFor those curious about file contents, this seems to be a mirror: http://ht.musalbas.com/ http://ht.musalbas.com/
- HelloNurse 11y agoDavid Vincenzetti's page on LinkedIn (https://www.linkedin.com/in/vincenzetti https://www.linkedin.com/in/vincenzetti) features a recommendation from Tommaso Vincenzetti (brother? Cousin?) and a list of many skills, including "Information Security", "Security Audits", "Vulnerability Management", "Ethical Hacking" and less funny ones. Marco Valleri, another Hacking Team employee, lists himself on LinkedIn as a "Jedi". Nice corporate culture.
- antirez 11y agoI've no idea about the whole story and what Hacking Team exactly did during the years, but I started to write serious code around 1998 working for Vincenzetti, so I think I can provide some hint about this to counter-balance all the hate. * They allowed me to work on hping, releasing it as free software during most of my working hours. They supported my research that lead to https://en.wikipedia.org/wiki/Idle_scan https://en.wikipedia.org/wiki/Idle_scan * Vincenzetti taught me personally many things about POSIX, and he was a very skilled programmer. He wrote, AFAIK before SSH existed, a secure shell that was in use at least in Italy for some time. It used UDP and implemented the reliable connection on top of it in a secure way using state of art encryption. So we are talking about serious programmers. * Bedeschi, the co-founder of the company, is an incredible hacker, from the way he typed to the keyboard to the incredible Unix knowledged he had. I worked for a couple of months for their "SecLab", then left the company to return in Sicily since I did not wanted to live in Milan. I don't want to provide an ethical evaluation of the people and don't have enough information, but I can assure you that they were an incredible team of talented hackers. EDIT: For sure they were very competitive people. I remember than when I left, Vincenzetti told me that it was a shame, I was a very talented programmer in his opinion, and I would finish in my little town in Sicily writing "soccer bet programs". He just wanted to push me to stay in the big city to know more hackers and so forth. I'm glad I don't write soccer bet programs BTW.
- tptacek 11y agoDuring the time you worked with them, did you contribute to projects you knew were used by LEOs and intelligence agencies? I'm curious about whether they got into "darker" stuff as they progressed.
- antirez 11y agoNo, that was a different company. We did plain penetration testings and other Security Firm works like firewalling, hardening. They sold this company, and started the new gig later when I was already gone for years.
- 11y ago
- fuj 11y agoIs the source code of their tools also in the dump?
- stefantalpalaru 11y agohttps://www.privacyinternational.org/?q=node/147 https://www.privacyinternational.org/?q=node/147 : > It has come to Privacy International’s attention that Hacking Team appears to have received €1.5 million from two venture capital funds originating from the Region of Lombardy in 2007. One of the funds, Finlombarda Gestioni SGR S.p.A (FGSGR) has only a single shareholder - Finlombarda S.p.A, a public financial services agency whose only shareholder is the Region of Lombardy. Finlombarda S.p.A. designs, builds and manages financial services on behalf of the Region of Lombardy, placing the profits of Hacking Team hand-in-hand with the public finances of Lombardy. FGSGR also lists the Head of Venture Capital as being a Board Member of Hacking Team itself.
- mirimir 11y agoLorenzo Franceschi-Bicchierai at Motherboard reports evidence that PhineasFisher hacked Hacking Team.[0] It's also possible that someone else hacked both Hacking Team and PhineasFisher, of course. [0] http://motherboard.vice.com/read/hacker-claims-responsibility-for-the-hit-on-hacking-team http://motherboard.vice.com/read/hacker-claims-responsibilit...
- ikeboy 11y agoI doubt it was PhineasFisher that was hacked; there's almost no attack vector. S/he hadn't used the twitter account in almost a year , there's extremely little info about them for any attacker to go on, and there's little obvious motive for a hacker to impersonate them as opposed to starting their own pseudonym or anything. The only method of attack would be to know what email is used for the twitter and hack it, or guess the password, neither of which should be easy against someone using minimal security precautions. (Or, I guess, it could be a false-flag by the US, who could force twitter to do stuff; but that seems way too much risk of PhineasFisher coming out elsewhere and exposing that. Did PF ever put a pgp key somewhere?
- s-afra 11y agoHow to download files hacking team?
- rurban 11y agoThe childporn evidence being planted and esp. the violation of the Sudan export restrictions will make a very good case for the procuratore di milano, which famously is very independent. So they will face jailtime, yeah.
- thomasrossi 11y agoAnother question came to my mind, slightly related, what is another interesting Italian company to check? I think "movimento 5 stelle", it's a """party""" which makes up whatever, it would be fun to show the fake votes and all.
- ophelia 11y agoResults of a static code analysis of the leaked git repos. I hope this contributes to further research http://bit.ly/ht-code-analysis http://bit.ly/ht-code-analysis