Feeds

Cryptome vows to pursue those who breached site

'We will burn the hacker's ass for that'

Seven Steps to Software Security

Cryptome.org was breached over the weekend after miscreants took control of an email account used to manage the a whistle-blowing website, which predates Wikileaks by a decade.

Cryptome founder John Young said on Tuesday that he planned to pursue those responsible for the hack, and he suggested his computer system may also have been breached. A previous note left on the site's homepage said only that an Earthlink email address and a Network Solutions account used to manage the website had been compromised. The site was then defaced and all 54,000 files on it were deleted, Cryptome had said.

Tuesday's admission came in response to questions from Wired.com reporter Kim Zetter, who said she had spoken to someone who claimed to be responsible and showed her screenshots to back up the claim.

The hacker claims to have accessed John Young's email at Earthlink, a federal crime, and Zetter said she was shown screen shots of email to prove access. Zetter cited specific John Young emails the hacker claimed to have, one a confidential tip to Wired's Noah Shachtman using a pseudonym. Zetter said she confirmed with Shachtman that he had received the tip from the pseudonym.

Zetter also said the hacker claims to have accessed John Young emails and other material concerning Wikileaks, specifically related to "Wikileaks insiders" and material submitted to Wikileaks. Zetter said the hacker claims to have downloaded 7 Terabytes of Cryptome and John Young material. That is a thousand times the 7GB on Cryptome, thus the hacker is exaggerating or has downloaded material from John Young's computer system, another federal crime.

John Young told Zetter to report that Cryptome has no objection to rummaging through Cryptome material, it is all open source, but that the crimes of accessing private email, the ISP account and John Young's computer system will be pursued. "We will burn the hacker's ass for that," we said to Zetter, "be sure to print that."

US-based journalists have long asserted they protected by a patchwork of state laws that prevent their unpublished reporting from being confiscated by police and law enforcement agents. Zetter almost certainly would do the same here. The privilege is by no means a sure thing. Just ask Jason Chen, the Gizmodo editor whose computers were confiscated in Apple's fevered attempt to recover a lost iPhone 4G prototype. ®

Mobile application security vulnerability report

More from The Register

next story
Yorkshire cops fail to grasp principle behind BT Fon Wi-Fi network
'Prevent people that are passing by to hook up to your network', pleads plod
HIDDEN packet sniffer spy tech in MILLIONS of iPhones, iPads – expert
Don't panic though – Apple's backdoor is not wide open to all, guru tells us
NEW, SINISTER web tracking tech fingerprints your computer by making it draw
Have you been on YouPorn lately, perhaps? White House website?
LibreSSL RNG bug fix: What's all the forking fuss about, ask devs
Blow to bit-spitter 'tis but a flesh wound, claim team
Attackers raid SWISS BANKS with DNS and malware bombs
'Retefe' trojan uses clever spin on old attacks to grant total control of bank accounts
Manic malware Mayhem spreads through Linux, FreeBSD web servers
And how Google could cripple infection rate in a second
Mozilla fixes CRITICAL security holes in Firefox, urges v31 upgrade
Misc memory hazards 'could be exploited' - and guess what, one's a Javascript vuln
Don't look, Snowden: Security biz chases Tails with zero-day flaws alert
Exodus vows not to sell secrets of whistleblower's favorite OS
prev story

Whitepapers

Designing a Defense for Mobile Applications
Learn about the various considerations for defending mobile applications - from the application architecture itself to the myriad testing technologies.
How modern custom applications can spur business growth
Learn how to create, deploy and manage custom applications without consuming or expanding the need for scarce, expensive IT resources.
Reducing security risks from open source software
Follow a few strategies and your organization can gain the full benefits of open source and the cloud without compromising the security of your applications.
Boost IT visibility and business value
How building a great service catalog relieves pressure points and demonstrates the value of IT service management.
Consolidation: the foundation for IT and business transformation
In this whitepaper learn how effective consolidation of IT and business resources can enable multiple, meaningful business benefits.