Saudi Arabian Hackers Leak Credit Card Details of 400,000 Israeli Citizens
pastebay.com
pastebay.com
I'm ashamed to see that we've learned nothing in the past 10 years.
[1] - http://www.youtube.com/watch?v=ow7cvZOzp6w
[2] - http://speakerdeck.com/u/yuvadm/p/28c3-data-mining-the-israe...
EDIT: Israeli media now claims that 400K is an exaggerated number, and the actual number of leaked CC is much smaller.
EDIT2: I'm gonna go ahead and publish a mirror list [3] for the leaked data and for affected accounts by email [4]. I might be affected and I prefer to know if I am ASAP, even if this means the data leaks more, which it will anyway.
From my own experience in this matters, security forces may eventually get the logs, but are then going to cross check them against other information before even asking an ISP about information pertaining the IP addresses they get. If I were worried that someone with powerful connections in security forces would be determined enough to get me into trouble, I would use Tor to open them from a securely wipeable VM and won't save them in my hard disk.
I always click them from my PC... but in any case things get nasty I am currently working for a recognized information security company, and clicking this stuff is sort of part of my job.
And then there's the big question: what do you do now that the data is out there? (and putting biometrics in the database isn't the answer)
I can't really see the ideals of Anonymous coexisting with nationalism and religious fundamentalism.
After all the petty bullshit, Saudis like to party too. The problem is their government and society is repressive as hell, and they're so scared to confront it, they have to go into this whole make-believe world where they act as heroes by attacking Israeli servers. It's pretty funny. I'm sure Israelis will recover. The Saudis on the other hand still live in a medieval hellhole where women can't drive a car... and this really doesn't do much to change anything. Their time and energy would be better spent trying to bring civilization to their own wasteland.
[Edit] I should add, the fact that if you did this in your own country, you'd probably have your hands cut off, is a powerful motivation to go after somebody with more liberal values.
I think this hacking incident is a mere accident, and the ruling Saudis will be quick to repress it and assure Israel none of this will happen again.
How can you "demonize" that type of brutal regimes? What more can you say about them? That Assad eats children?
>>One could say it all depends on your stance vis-a-vis Israel.
>>the ruling Saudis will be quick to repress it and assure Israel none of this will happen again
Sigh, so Saudi Arabia is pro Israel? :-)
http://en.wikipedia.org/wiki/Antisemitism_in_the_Arab_world#...
This is a model of what happens there without conspiracy theories:
Saudi Arabia is needed as an ally by the US. It is called "realpolitik" -- all countries, including democracies, use it and lie about it. (The difference with democracies is that they do support human rights, as long as it doesn't cost too much.)
North Korea sells/sold nuclear tech to Syria/Iran; are you really claiming they have "neutral" relations with Israel?
And so on... please don't write this kind of thing on HN.
Fuck off, Mr. Wannabe Censor. Progress requires unfettered conversation of all types, not just the ones of which you approve.
"... noduerme's deeply rude, ignorant, arrogant an[d] plain racist post."
It was none of those things. What he said is basically correct, and it reminded me of 2005's Syriana, in which there was a conversation between Matt Damon as Bryan Woodman, an energy analyst, and Alexander Siddig as Prince Nasir Al-Subaai, successor to the Emir.
NASIR: An ancestor of mine owned this bird's [falcon's] ancestor before Christ was born. Six more North Field blocks will be available for development. We would like to offer your firm the right to represent them.
WOODMAN: If I were your economic advisor I'd tell you it's not the dumbest thing you've ever done, but it'll probably be the dumbest thing you do today. Probably. But why would you need an economic advisor? Twenty years ago you had the highest GNP in the world and now you're tied with Paraguay. Your second biggest export is second-hand goods. Followed by dates on which you lose five cents a pound. You want to know what the business world thinks of you. They think a hundred years ago you were chopping each other's heads off in the desert and that's exactly where you'll be in another hundred. So, yes, on behalf of my firm, I accept your money.
http://en.wikipedia.org/wiki/Syriana
I included the first sentence, about the falcon, because it shows that Nasir is proud of his people having been around for a long time, but that apparent plus is effectively countered by Woodman's observation about their primitive nature, and how the oil money is really the only thing keeping them from regressing. Sure, the film is fictional, but there is a lot of truth to be found in it.
I'm not one who wants to impose restraint on others. I merely suggest a little bit of tact makes dialog possible. Or, more important, that its lack may make dialog impossible.
> Progress requires unfettered conversation of all types, not just the ones of which you approve.
It also requires the conversation itself, which may be rendered unproductive by the kind of comment made upstream.
> it reminded me of 2005's Syriana, in which there was a conversation between Matt Damon as Bryan Woodman, an energy analyst, and Alexander Siddig as Prince Nasir Al-Subaai
Is all your knowledge in Middle East affairs derived from a movie?
Certainly sounds racially motivated to me.
Let's say we accept, for a moment, that not all Jews are Zionists, that "criticism of Israel" isn't motivated by anti-semitism. Let's even pretend for a second that stealing civilians' credit card numbers is a valid form of criticism against a state or government. Let's forget that Saudi schoolbooks call Jews the "children of apes and pigs." Why not. Even so, why would buying something from a "Judaism web site" make someone a Zionist (or even an Israeli, for that matter)? For all we know some of those people could have been the next Noam Chomsky or (insert other groveling apologist here).
And what do you think they're hoping people will do with this list of Jewish names? Why the fuck is it acceptable to be making lists of Jewish names anyway? If that's not racist, I don't know what is. We'd be better off if that had never existed; but at least it proves plainly that nothing about this hack qualifies as a legitimate political statement.
I never said the release was warranted, fair, right or anything close to that. In fact, I did not even manifest an opinion about it. I only pointed out your message was not up to our standards (http://ycombinator.com/newsguidelines.html) and that it was full of telling misconceptions.
Having said that, I wouldn't go to Saudi Arabia for a million dollars. It's not racist to point out the shortcomings of a national culture. Name one piece of technology used in this attack that was invented or even built in Saudi Arabia. Name one program that was written there. If you can't, it's not my fault. And clearly they're not so oppressed by Israel and the West that they can't afford to buy nice things, or build their own industries if they choose to. I know Lebanese guys who've moved back to Beirut to do startups. Look at Qatar and Dubai. They're too busy branching out and moving beyond an oil economy to be envious of middle-class Israelis.
It's also not racist to point out the lack of character involved in attacking civilians in another country, allegedly in protest of a foreign government, while you yourself live in a phony, sham-theocratic dictatorship.
If anything, I think it's people like yourself with your "good intentions" of pointing out who-must-be-a-racist, without deigning to criticize the giant racist elephant in the room, who are mostly responsible for the continuation of problems in the ME. To quote a famous Christian, first take the plank out of your own eye.
No it's not. What's racist is your assumption that hadn't you (an implicitly superior culture, which is also a somewhat racist idea) told them what natural resource they had under their feet and taught them how to explore it they'd never figure it out for themselves and would be a primitive society. You imply that they are somehow better off because of it when, in fact, the money the country got for its riches was funneled to a small group of religious fundamentalists that, because of it, are able to rule the country unquestioned. One could argue they still have a very primitive society, only now they have money and weapons. You also imply they would never be able to develop the tools used to glean the data, an assumption that's also probably untrue and fail to mention the fact that most script-kids who pull tricks like this around the planet have no knowledge of the inner workings of the tools they use and would never be able to develop them from scratch.
And finally, I did not comment on Saudi Arabia's form of government, its repressive laws or the sadly misguided idiots who pulled this trick and their ideas about how the world works. I, myself, don't like the idea of theocracies (and absolutist monarchies) and regard them as incompatible with democracy.
Unfortunately, this is not the world I live in and we have to coexist with the less than ideal systems other people want (sometimes for no good reason) to live under. We don't have the right to impose our own way of life - or worse, an artificial one that favors us - upon others.
Also, the fact there is a giant racist elephant in the room does not make your own behavior and discourse any more helpful. Let's discuss the elephant when we get to it and, in the meantime, let's not put more little elephants in the room. I'd say there are enough of them already.
You think the North Koreans made an informed choice to starve while the party elite drank good whiskey?!
Tyrants like those just has no right of existence.
It's their job to get rid of their tyrant. We may help them, but we have no right to expect them to pick a form of government that pleases us. It's their country.
But "pick their own lifestyle" argument can be used with slaves, which have been kept ignorant by their owners.
I don't know where you come from and might be putting opinions into your fingers, but modern (mostly left extremist) cultural relativistic acceptance of tyrants is truly abhorrent.
(Sorry for coming in late.)
I was referring to the _relative_ treatment. I thought this was clearly implied. Syria's regime is definitely not above blame. But neither is Saudi Arabia and it deserves an equal share of 'demonization' by the government and the media.
>> Sigh, so Saudi Arabia is pro Israel? :-)
You musn't mistake public policy that carries no weight with actual behavior. Egypt under Mubarak was trumpeted as anti-Israel, but was clearly colluding with them in Gaza affairs. Saudi Arabia is unique in that there is a strong powerful extremist movement that needs to be placated by the ruling family. This makes for more empty talk that confuses many.
>> North Korea sells/sold nuclear tech to Syria/Iran; are you really claiming they have "neutral" relations with Israel?
They too have had their share of trouble as we all know, but I may be wrong on this one.
>> please don't write this kind of thing on HN
What kind of thing? When you see remarks like those of noduerme being upvoted, it's important that people understand that our governments are just as responsible for sustaining the abuses going on in the MidEast so that they don't misdirect their hate towards muslims/arabs.
And I discussed Syria/SA re "realpolitik". You didn't answer.
>>it's important that people understand that our governments are just as responsible for sustaining the abuses going on in the MidEast so that they don't misdirect their hate towards muslims/arabs.
So I should have opinions, because that would have good influences in the world...
Respect, troll -- you know how to push my buttons! (Yeah yeah, it is your honest opinion...)
(Why would anyone hate a bunch of countries that haven't modernized yet? Compare Middle East treatment of women, homosexuals, jews etc etc to many western countries 150 years ago.)
The US is obviously responsible for all the human rights violations happening in the Mid East the last 30 years? (Hell, even the Bush administrations tried to influence for human rights and Obama seems to even play cards with islamists to get rid of dicators!)
Enough, good night.
In the modern sense of appreciating its immense value, possibly, but factually incorrect as a general statement:
http://en.wikipedia.org/wiki/History_of_petroleum#Early_hist...
Well the hackers have not identified themselves by name so they are ... anonymous. Isn't that the idea behind Anonymous, that anyone who is anonymous can claim to be Anonymous?
https://twitter.com/anonyops/status/153969476277248000
"We have no love for Israeli gov't but targeting 1000s for being Israeli? Sorry, you are not #Anonymous pastebay.com/148920"
Hypocrisy on hypocrisy.
However, by performing actions that are contrary to the Anonymous ideology the Saudi attackers distanced themselves farther from Anonymous than any name could
Maybe Anonymous should have chosen a different name. Other groups could then remain anonymous, without being assumed to be Anonymous.
That's what I don't like about people saying "You are not true Anonymous". First hackers under the name "Anonymous" posted other people MySpace passwords on 4chan and put blinking lights on epilepsy website. And the whole scientology movement was first meant as a joke, as a reaction to the leaked Tom Cruise video.
Really, people calling other people "not true Anonymous" are hypocritical. I think.
Wouldn't that seem to suggest that staying completely anonymous while being taken seriously on the Internet is impossible?
I know because I was involved in cleaning up one of the hacks. (I have to stay anonymous, but my main account has more than 7000 karma.)
In the one I dealt with they did not copy stored cards (because they couldn't), but rather added extra code that would email a copy of the details to the hacker as the order was placed.
(So even with PCI compliance credit card numbers can still be stolen.)
Does anyone have good arguments against leaving the files where they are now and not deleting them from pastebin/megaupload/...? Since the beast is already out of it's cage, there is no point in chasing it. It is even better to let the public d/l the file and try to find themselves if their card and other details like emails, passwords were stolen.
(nice username btw, learned the word here..)
Unfortunately (or fortunately?) the file isn't available any more.
I think once that file was online even for a few minutes, the card numbers mentioned in it are not safe anymore. It will be leaked again.
If it's not some kind of provocation (files with false data) then this is a pretty big crisis. I'm going to have to monitor my credit card logs closely in the next few weeks...
Obviously it will still be a huge hassle to reissue all those cards but it will minimize the financial damage.
Lets save the word terror for things that terrify people like say bodily harm or death.
We can. How will that help? It won't put the cat back in the bag.
I don't imagine online CC security being much better..
Audits are few and far between, lots of places have shoddy security but claim they are Fort Knox.
PCI compliancy is quite meaningless unless the people that implement it take their job seriously. That's very frequently not the case, it is just seen as a small obstacle in the way of doing business.
Related: http://serverfault.com/questions/293217/our-security-auditor...
Another thing is temporary one-use credit card numbers. My Discover card as that feature. Of course then it also relies on me to assess the risk of a merchant and go through the steps of getting that number.
EDIT: I got downvoted, without a reply. So, explain how doing this sort of thing is not faction warfare?
The details of israeli credit is leaked by anons from the house of Saud. This is clearly a faction issue. It is not likely government sponsored (though likely condoned) and as a religious rift exists between jews and muslims, the word faction applies perfectly.
Jews, muslims, christians; all factions within religious zealotry.
Tomato Potato
--- Sectarian:
of, relating to, or characteristic of a sect or sectarian
limited in character or scope
---
Faction
a party or group (as within a government) that is often contentious or self-seeking : clique
party spirit especially when marked by dissension
---
You would be a fool to claim that sectarian skirmishes are not also political, given the widespread theocratic nature of governments under both muslim and jewish rule.
In this case - this is an attack, while premised on the appearance of religion, is actually a theocratic/political-religious attack.
Does anyone know more about this group?
That Stratfor dump with 75.000 card details is still on Pastebin. Why this one deleted and the other is still there? (I believe both should be deleted.)
Generally agree but with one exception -- in places were the government claims it represents the people and most people agree with that. Then everyone who votes basically shares the guilt of what the government does.
I totally disagree with the Israeli gov's policies and often protest them. Guess what? My personal info was inside those files (deprecated credit card and email though).
Attacking citizens of democracies because they are inseparable from their government and responsible for its actions, is a common argument for terrorism, btw.