Article about “Goatse Security” doesn’t use phrase “Goatse Security”

Read a little. Learn a lot. • Tightly-written news, views and stuff • Follow us on Twitter • Be a Facebook Fan • Tumble us!

where can we drop this for max lols
Reported AT&T iPad data hacker (and member of “Goatse Security”) Daniel Spitler • Reportedly discussing, in unsealed chat logs, their plans to release information on iPad 3G users, which AT&T had made available one-at-a-time on a public Web site, but they gathered en masse using a brute-force attack. A secret source reportedly turned in the chat logs focused on Spitler and his partner, Andrew Auernheimer, who were charged with fraud and conspiracy to access a computer without authorization. The details of the case were released today. We’re just upset that this Computerworld story doesn’t once use the phrase “Goatse Security.” source

Posted by Ernie Smith • 0 Comments • Permalink

07 Jul 2010 10:52

He also points out a potentially hypocritical carrying-out of the law. What’s the difference between a hacker using a public Web site to scrape information about iPad users for the purposes of publicizing and fixing a bug, and a law firm that does the same thing to scrape data about a health insurer? The hacker gets raided, arrested and denied a public attorney; the law firm isn’t dinged much at all. So is the case of Andrew “weev” Auernheimer, who broke a gag order on his case to tell you all this. Now, we’re not geniuses here, but we’re guessing social security numbers and other private data are way worse than anything “weev” took (and subsequently deleted). source

Posted by Ernie Smith • 0 Comments • Permalink

If not for our firm talking about the exploit to third parties who subsequently notified them, they would have never fixed it. We know what we did was right.
Goatse Security representative Escher Auernheimer • Responding to a letter from AT&T notifying its users of the iPad security breach the group found last week. AT&T called his group malicious hackers who wanted publicity. (You’d think the name was enough for that, but …) Auernheimer, on the other hand, called AT&T out for taking a number of days to actually inform its users of the breach. Expect some sort of legal action soon. source

Posted by Ernie Smith • 0 Comments • Permalink

It’s pretty egregious that AT&T would have it for such a device that probably has known exploit candidates (attack code) on, say, the Russian (underground) markets.
Escher “Weev” Auernheimer of Goatse Security • Talking about how his group uncovered a major flaw with AT&T’s security mechanism, which led to Gawker posting about the results. Why did they go to Gawker and not AT&T? “We did want not engage directly with AT&T in case they tried to serve us (an injunction) or something,” he said. How did they do it? It was a simple brute-force attack that required no hacking. And people offended about the group’s hilarious name? “If someone is offended to where they can’t deal with us … then they’re a douche bag and we don’t want to be employed by them anyway.” A fun read. source

Posted by Ernie Smith • 0 Comments • Permalink