LulzSec. The C$%Ts that hacked Minecraft.net

Tetsuoken, Tue Jun 14 2011, 10:42PM

Lulz Security, the hacking group apparently motivated by nothing more than their desire to laugh at the mayhem they cause, has had a busy day in an event they called Titanic Takeover Tuesday. Taking a break from their dumps of user data and server break-ins, today saw the group perform a bunch of distributed denial of service attacks against a range of targets.

First up—and still only intermittently available at the time of writing—was gaming magazine The Escapist, with no apparent reason for the attack. LulzSec boasted that taking down the site required just 0.4 percent of its DDoS capacity.

Next in line were the login servers for the game EVE Online. The effect of this attack was to bring down the EVE Online website at the same time, though LulzSec insists that this was not the actual target. In response to the DDoS, CCP Games, makers of EVE, have taken all their systems offline, for fear that they might be hacked. The company has also issued a statement to assure customers that their personal information remains secure.

The third target—and the only one for which the group has offered a rationale beyond "lulz"—is an IT security company named Finfisher. Their site was taken down, briefly, because "apparently they sell monitoring software to the government or some Griefers like that."

Gamers were once more in the crosshairs with the fourth target; more login servers, this time for Minecraft. Just as with EVE Online, going after the login servers also took out the game's website.

The pattern was repeated for the fifth target; login servers for the game League of Legends were knocked offline, a move which also brought down the game's website.

The result of all this? Lot of enraged gamers complaining about the downtime, and hence, many lulz for Lulz Security. Going after gaming targets hasn't made the group universally popular; posters on 4chan's /b/ forum, who might normally be sympathetic to lulz-motivated shenanigans, attempted to hunt LulzSec down. LulzSec dismissed the "/b/tards" as "damn furries," saying that they were the cream of the /b/ crop from 2005, distancing themselves from the /b/tards of today.

Article from http://arstechnica.com/tech-policy/news/2011/06/titanic-takeover-tuesday-lulzsecs-busy-day-of-hacking-escapades.ars

Basically a bunch of ass holes that don't deserve the carbon they're made up of and wasting valuable oxygen.
Re: LulzSec. The C$%Ts that hacked Minecraft.net
BRooNiE, Tue Jun 14 2011, 11:35PM

The Escapist and LoL where only affected for extended downtime since they manually took their services offline as a precaution.

Everything else was just a short burst of DDOS attacks.
Re: LulzSec. The C$%Ts that hacked Minecraft.net
dubien, Wed Jun 15 2011, 01:42AM

Umm can't these guys get in trouble with the law from doing this?
Re: LulzSec. The C$%Ts that hacked Minecraft.net
, Wed Jun 15 2011, 02:08AM


Umm can't these guys get in trouble with the law from doing this?

dubien
Yes. Yes they can.
Re: LulzSec. The C$%Ts that hacked Minecraft.net
Hotmage100, Wed Jun 15 2011, 07:53AM

Oh !! No Wonder LoL Extended The Maintenance Until This Friday .... Darn You Hackers D:<
Re: LulzSec. The C$%Ts that hacked Minecraft.net
Deleted-User-1415, Wed Jun 15 2011, 11:09AM

Being attacked merely lifts the security level in the aftermath and thus, making them more secure against more nefarious hackers.

A la Playstation Network.
Re: LulzSec. The C$%Ts that hacked Minecraft.net
, Wed Jun 15 2011, 11:32AM

LoL

Hotmage100
lol!
Re: LulzSec. The C$%Ts that hacked Minecraft.net
Hotmage100, Wed Jun 15 2011, 11:51AM


LoL

Hotmage100
lol!

Kahr

Swt..... =.=||||
Re: LulzSec. The C$%Ts that hacked Minecraft.net
BRooNiE, Wed Jun 15 2011, 12:00PM


Being attacked merely lifts the security level in the aftermath and thus, making them more secure against more nefarious hackers.

A la Playstation Network.

DavH27

In the case of a DDOS attack in which they're doing last night, they can easily portray that their managing it again and again.

With the tatic they employ [attacking http web servers] it will be hard to determine attacking traffic from legimate traffic, so unless they throw more bandwidth at it for a few bursts of a dos, there is not much they can do.
Re: LulzSec. The C$%Ts that hacked Minecraft.net
, Wed Jun 15 2011, 12:37PM

They can lessen the effect by working out if IP's are connecting to the server with too many connections or at too fast an interval and banning that IP address for 24-48 hours. But that doesn't prevent the server from failing, it only helps lessen the impact(While it stops the server from wasting CPU time preparing PHP/etc to send to the banned IP's, it will still spend some CPU time on them).
Re: LulzSec. The C$%Ts that hacked Minecraft.net
BRooNiE, Wed Jun 15 2011, 01:18PM


They can lessen the effect by working out if IP's are connecting to the server with too many connections or at too fast an interval and banning that IP address for 24-48 hours. But that doesn't prevent the server from failing, it only helps lessen the impact(While it stops the server from wasting CPU time preparing PHP/etc to send to the banned IP's, it will still spend some CPU time on them).

Stucuk

From a botnet though, you won't really notice any visible difference, and you'll have a large database of IP's to check against to see if the IP is blocked especially from a large botnet, further wasting CPU time [Perhaps more than that was needed to execute the script.]

I'll admit, if this webserver or the minecraft server got DDOS'd via http from a large botnet, it'll overload, and there is not much I can do to to prevent it, sure you can limit max connections, but a botnet of 20k computers all connecting once in a small time period. How can you tell apart the real from the attacker?
Re: LulzSec. The C$%Ts that hacked Minecraft.net
beagrie, Wed Jun 15 2011, 03:04PM

It gets better, they're taking requests now; http://www.bbc.co.uk/news/technology-13777129
Re: LulzSec. The C$%Ts that hacked Minecraft.net
404thread, Wed Jun 15 2011, 03:06PM

my daily dose of lulz. now i can be an upstanding citisen for the rest of the day.
Re: LulzSec. The C$%Ts that hacked Minecraft.net
, Wed Jun 15 2011, 03:15PM

These guys are just low life fags tet your right they are a waste of human oxygen and space.
Re: LulzSec. The C$%Ts that hacked Minecraft.net
Deleted-User-1415, Tue Jun 21 2011, 01:35PM

I'd read up a bit on thier manifesto and what they say on Twitter and such before you go believing what the popular media wants you to thi.....er I mean...what the popular media 'report' on.

Anyways, for those that want to believe it, they believe they found the leader: http://twitter.com/#!/MrDavidHarrison/status/83152698228211712

Oh wait, no they didnt: http://twitter.com/#!/LulzSec/status/83164092998758400
Re: LulzSec. The C$%Ts that hacked Minecraft.net
Aconan, Tue Jun 21 2011, 05:39PM

And they got one of them.
http://www.bbc.co.uk/news/technology-13859868
Re: LulzSec. The C$%Ts that hacked Minecraft.net
dubien, Tue Jun 21 2011, 07:06PM


And they got one of them.
http://www.bbc.co.uk/news/technology-13859868

Mulan

Wow, these guys are no life idiots. Do they actually think they can get away with this stuff?
Re: LulzSec. The C$%Ts that hacked Minecraft.net
, Tue Jun 21 2011, 07:20PM


I'd read up a bit on thier manifesto and what they say on Twitter and such before you go believing what the popular media wants you to thi.....er I mean...what the popular media 'report' on......

DavH27


What a load of crap. The "hackers" are nothing but script kiddies with a sense of entitlement and an ego that does not match their skill level. Any idiot can buy a zombie network and do damage to online businesses. Any one reading "how to hack for dummies" can probably break into most government web sites and deface them.

Just because some nerd wrote a "manifesto" to try and justify their behavior, that does not make it alright.

If you really want to point out security weak points in a site or a network, then simply tell the admins of those sites/networks. Sometimes the admins don't listen or turn a blind eye, in that case, tell the admin's boss. Or, tell the CEO of the business.

You can't just run around a city tossing bricks through the front doors of businesses and say "see, look how weak the security is on that glass door".

These script kiddies need to grow the f**k up and realize they will be spending hard time in prison if they screw over enough people. Everyone can be found eventually.
Re: LulzSec. The C$%Ts that hacked Minecraft.net
Deleted-User-1415, Wed Jun 22 2011, 10:08AM

They didn't get one of them. They just arrested a kid who hosted one of their IRC servers...

[EDIT] I just realised the irony of what I am saying. I am saying to not believe the red-tops because they say what you want to hear, but what is the stop the owner of LulzSec Twitter account doing exactly the same...? Hmmm interesting.

M0 you have some valid points. The glass door one actually made me laugh out loud smile
Re: LulzSec. The C$%Ts that hacked Minecraft.net
Aconan, Wed Jun 22 2011, 11:41AM

Ryan was the one who about a year back spilled the beans on some of the users attacks. He was part of it. But seemed to disagree.
Re: LulzSec. The C$%Ts that hacked Minecraft.net
, Wed Jun 22 2011, 11:08PM

i dont understand why people do that kind of stuff and im glad that guy got caught
Re: LulzSec. The C$%Ts that hacked Minecraft.net
, Thu Jun 23 2011, 04:27AM


i dont understand why people do that kind of stuff and im glad that guy got caught

CreepersWantHug
The Attention. There are proberly some groups which do it only to people who deserve it (Such as UbiSoft and there evil "Always online" system. People DDos'd there servers and proved how stupid there system was.) but the vast majority just do it for the attention.

Look at me, im soo 1337 because i overloaded a server!
Re: LulzSec. The C$%Ts that hacked Minecraft.net
Deleted-User-1415, Thu Jun 23 2011, 04:45PM

How are they getting leaked info, then? Database injection?
Re: LulzSec. The C$%Ts that hacked Minecraft.net
Flightster, Mon Jun 27 2011, 07:28AM

Looks like it's over:

http://th3j35t3r.wordpress.com/2011/06/25/lulzsecs-cloudflare-configuration/

http://pastebin.com/1znEGmHa
Re: LulzSec. The C$%Ts that hacked Minecraft.net
, Mon Jun 27 2011, 11:31AM

Over? With today's mentality of some people, I doubt it's over. There'll just come someone new along.
Re: LulzSec. The C$%Ts that hacked Minecraft.net
Aconan, Mon Jun 27 2011, 02:16PM

That select group is going to hide under a rock for a while. But other "better" groups have now been goaded into action.
Re: LulzSec. The C$%Ts that hacked Minecraft.net
, Mon Jun 27 2011, 04:07PM

Exactly.
Re: LulzSec. The C$%Ts that hacked Minecraft.net
dubien, Mon Jun 27 2011, 06:01PM

These people are a waste of space