Feeds

Cryptome vows to pursue those who breached site

'We will burn the hacker's ass for that'

Internet Security Threat Report 2014

Cryptome.org was breached over the weekend after miscreants took control of an email account used to manage the a whistle-blowing website, which predates Wikileaks by a decade.

Cryptome founder John Young said on Tuesday that he planned to pursue those responsible for the hack, and he suggested his computer system may also have been breached. A previous note left on the site's homepage said only that an Earthlink email address and a Network Solutions account used to manage the website had been compromised. The site was then defaced and all 54,000 files on it were deleted, Cryptome had said.

Tuesday's admission came in response to questions from Wired.com reporter Kim Zetter, who said she had spoken to someone who claimed to be responsible and showed her screenshots to back up the claim.

The hacker claims to have accessed John Young's email at Earthlink, a federal crime, and Zetter said she was shown screen shots of email to prove access. Zetter cited specific John Young emails the hacker claimed to have, one a confidential tip to Wired's Noah Shachtman using a pseudonym. Zetter said she confirmed with Shachtman that he had received the tip from the pseudonym.

Zetter also said the hacker claims to have accessed John Young emails and other material concerning Wikileaks, specifically related to "Wikileaks insiders" and material submitted to Wikileaks. Zetter said the hacker claims to have downloaded 7 Terabytes of Cryptome and John Young material. That is a thousand times the 7GB on Cryptome, thus the hacker is exaggerating or has downloaded material from John Young's computer system, another federal crime.

John Young told Zetter to report that Cryptome has no objection to rummaging through Cryptome material, it is all open source, but that the crimes of accessing private email, the ISP account and John Young's computer system will be pursued. "We will burn the hacker's ass for that," we said to Zetter, "be sure to print that."

US-based journalists have long asserted they protected by a patchwork of state laws that prevent their unpublished reporting from being confiscated by police and law enforcement agents. Zetter almost certainly would do the same here. The privilege is by no means a sure thing. Just ask Jason Chen, the Gizmodo editor whose computers were confiscated in Apple's fevered attempt to recover a lost iPhone 4G prototype. ®

Internet Security Threat Report 2014

More from The Register

next story
George Clooney, WikiLeaks' lawyer wife hand out burner phones to wedding guests
Day 4: 'News'-papers STILL rammed with Clooney nuptials
Shellshock: 'Larger scale attack' on its way, warn securo-bods
Not just web servers under threat - though TENS of THOUSANDS have been hit
Apple's new iPhone 6 vulnerable to last year's TouchID fingerprint hack
But unsophisticated thieves need not attempt this trick
PEAK IPV4? Global IPv6 traffic is growing, DDoS dying, says Akamai
First time the cache network has seen drop in use of 32-bit-wide IP addresses
Oracle SHELLSHOCKER - data titan lists unpatchables
Database kingpin lists 32 products that can't be patched (yet) as GNU fixes second vuln
Who.is does the Harlem Shake
Blame it on LOLing XSS terroristas
Researchers tell black hats: 'YOU'RE SOOO PREDICTABLE'
Want to register that domain? We're way ahead of you.
prev story

Whitepapers

Forging a new future with identity relationship management
Learn about ForgeRock's next generation IRM platform and how it is designed to empower CEOS's and enterprises to engage with consumers.
Storage capacity and performance optimization at Mizuno USA
Mizuno USA turn to Tegile storage technology to solve both their SAN and backup issues.
The next step in data security
With recent increased privacy concerns and computers becoming more powerful, the chance of hackers being able to crack smaller-sized RSA keys increases.
Security for virtualized datacentres
Legacy security solutions are inefficient due to the architectural differences between physical and virtual environments.
A strategic approach to identity relationship management
ForgeRock commissioned Forrester to evaluate companies’ IAM practices and requirements when it comes to customer-facing scenarios versus employee-facing ones.