[00:00.000 --> 00:01.920]  This is HNN.
[00:03.340 --> 00:05.340]  This is HNNCast.
[00:05.540 --> 00:07.600]  With your host, Space Rogue.
[00:09.420 --> 00:11.760]  This is Space Rogue for the Hacker News Network.
[00:12.020 --> 00:14.240]  You're watching another edition of HNNCast.
[00:17.000 --> 00:19.920]  HNNCast is sponsored by Immunity.
[00:20.400 --> 00:23.460]  Makers of Canvas and other fine products.
[00:24.200 --> 00:28.400]  www.immunitysec.com Become a sponsor?
[00:28.960 --> 00:33.880]  Contact sales@hackernews.com You're watching the Hacker News Network.
[00:34.100 --> 00:37.740]  I'm Space Rogue, and this is HNNCast for the first week of June 2009.
[00:38.600 --> 00:40.040]  Our top story this week.
[00:41.800 --> 00:50.120]  Ghost Exodus, a.k.a. Jesse William McGraw, the leader of the Electronic Tribulation Army, has been arrested by the FBI on a charge of downloading malicious code into a computer without authorization.
[00:50.680 --> 00:58.760]  Ghost Exodus claims to have gained access to the heating and ventilation system at the Carroll Clinic Hospital in Dallas, Texas, where he worked as an overnight security guard.
[00:59.080 --> 01:09.580]  The FBI claims that Ghost Exodus had planned a massive DDoS attack to occur on July 4th, or, in his words, Devil's Day, and had already quit his job in preparation for the attacks.
[01:10.200 --> 01:14.540]  Additional charges will probably be filed depending on the outcome of the grand jury's investigation.
[01:15.260 --> 01:18.000]  Always remember to vet your outsourced employees, people.
[01:18.220 --> 01:21.380]  That includes the cleaning crew and the security guards.
[01:25.280 --> 01:36.060]  Little Hacker, a.k.a. Matthew Wiegman, a blind 19-year-old man from Massachusetts, has been sentenced to 11 years in federal prison following his guilty plea on computer intrusion and witness intimidation charges earlier this year.
[01:36.500 --> 01:43.700]  Little Hacker is often regarded as one of the best phone phreakers in the country and claims to have been manipulating phone systems since he was 8 years old.
[01:43.700 --> 01:52.100]  He is responsible for several instances of SWATing, recalling in fake hostage reports to 911, forcing a SWAT team to raid innocent people's houses.
[01:52.400 --> 01:56.980]  With no parole available in the federal system, he might be out in time for his 30th birthday.
[01:59.160 --> 02:03.960]  A talk regarding insecurities of ATM machines has been cancelled from this year's DEF CON schedule.
[02:04.580 --> 02:11.780]  Barnaby Jack had planned to demonstrate a live attack on stage against an ATM machine and getting the machine to jackpot or spit out all its money.
[02:12.500 --> 02:17.740]  Unfortunately, the ATM manufacturer has pressured Barnaby's employer Juniper Networks to cancel Jack's talk.
[02:18.200 --> 02:27.560]  You would think that with all the publicity that arose from Cisco, Apple, and the MBTA cancelling talks in previous years, the companies would learn that getting talks cancelled only makes things worse.
[02:28.280 --> 02:28.880]  Wait a minute.
[02:29.100 --> 02:32.980]  Did Michael Lynn quit his job at ISS rather than see his Cisco talk get cancelled?
[02:33.380 --> 02:35.360]  And doesn't he work for Juniper Networks now?
[02:36.080 --> 02:37.860]  Ah well, full circle, I guess.
[02:42.640 --> 02:53.920]  Max Vision, a.k.a. Iceman, a.k.a. Max Butler, pled guilty to federal wire fraud charges on Monday, admitting he stole nearly 2 million credit card numbers from banks, businesses, and other criminals, which were used to rack up 86 million in fraudulent charges.
[02:54.320 --> 03:04.740]  A former celebrated internet security consultant, Max Vision also ran the online forum Carter's Market, where criminals would meet online to buy, sell, and trade credit card information.
[03:05.100 --> 03:08.440]  The sealed plea agreement could get Max up to 60 years in jail.
[03:08.920 --> 03:10.960]  Huh, gotta wonder why the plea is sealed.
[03:12.140 --> 03:15.300]  We will be back with more stories after this word from our sponsor.
[03:17.680 --> 03:21.140]  What was the most trusted name in Hacker News?
[03:22.180 --> 03:24.560]  The voice of reason.
[03:26.900 --> 03:29.000]  The Hacker News Network.
[03:32.530 --> 03:35.450]  HNN Task launches 011110.
[03:37.070 --> 03:39.590]  Be there, be there.
[03:57.710 --> 04:01.630]  The streets of Iran may be quiet, but the fight continues on in cyberspace.
[04:01.830 --> 04:06.490]  Online hacktivists are still targeting DDoS attacks against the websites of various government organizations.
[04:06.490 --> 04:15.030]  Many online sympathizers are gathering online at a site known as Nidhanet.org, named after the Iranian woman gunned down in the streets of Tehran last week.
[04:15.710 --> 04:18.450]  Nidhanet.org was created by none other than Eric S.
[04:18.550 --> 04:19.050]  Raymond himself.
[04:19.610 --> 04:27.110]  Another site known as Freedom Sucker has a dozen websites automatically reloading every second in an attempt to keep certain Iranian government sites offline.
[04:31.290 --> 04:41.650]  Rubico, a.k.a. David Cornell, finally went on trial in Tennessee this week to face charges that he hacked into Alaska Governor Sarah Palin's email account and changed her password to Popcorn last September.
[04:42.210 --> 04:42.690]  Hack?
[04:42.930 --> 04:43.950]  I don't think so.
[04:44.330 --> 04:46.450]  Guessing an email password is not a hack mate.
[04:46.690 --> 04:49.290]  Oh sure, he used some proxy service to try and hide.
[04:49.550 --> 04:50.810]  Obviously not very well.
[04:51.030 --> 04:52.070]  But calling this a hack?
[04:52.310 --> 04:52.710]  No.
[04:53.210 --> 04:57.770]  Unfortunately, this kid probably won't get the slap on the wrist he deserves, but will instead be made an example of.
[04:57.970 --> 05:05.570]  How about instead we punish a publicly elected official for using unofficial email channels for government business and a flagrant violation of public records laws?
[05:05.830 --> 05:08.910]  I won't even mention the stupidity of choosing a weak, guessful password.
[05:11.110 --> 05:12.630]  Malware, malware, everywhere.
[05:13.010 --> 05:13.690]  The latest target?
[05:13.910 --> 05:14.270]  Children.
[05:14.630 --> 05:19.430]  Specifically, a website known as NeoPets, an online social community that revolves around virtual pets.
[05:19.770 --> 05:27.010]  While the site itself hasn't been compromised, it is a gathering place for unwary children who can easily be social engineered into downloading and installing malware.
[05:27.410 --> 05:34.970]  Once installed, the malware will easily grab passwords to the kids' Xbox Live account or, just as easily, their parents' online bank accounts.
[05:37.050 --> 05:38.970]  Advertise with H&M Cast.
[05:39.170 --> 05:41.830]  Sponsor and advertiser packages available.
[05:42.170 --> 05:46.130]  For more information, contact sales at Akronews.com.
[05:46.390 --> 05:50.090]  And now for a few quick stories that we found online this week.
[05:51.330 --> 06:02.130]  Bullock County, Kentucky is now out $415,000 that was siphoned from their online bank account after at least one county employee fell victim to a, quote, identification theft virus, unquote.
[06:02.550 --> 06:03.450]  Whatever that is.
[06:03.830 --> 06:05.390]  The FBI is investigating.
[06:06.050 --> 06:12.130]  Last week, just as news of Michael Jackson's death hit the web, Google saw a massive spike in related web searches.
[06:12.450 --> 06:15.130]  They actually mistook this spike as an attack at first.
[06:15.370 --> 06:18.930]  It took Google about a half an hour or so to figure out what was really going on.
[06:20.010 --> 06:27.910]  China's ultra-secure government OS, Kailin, which they claim to be proprietary, has been found to run on a hardened version of FreeBSD 5.3.
[06:29.030 --> 06:32.510]  The full speaker schedule for DEFCON 17 has been released.
[06:32.710 --> 06:35.410]  Of course, it doesn't include Barnaby Jack's ATM cock.
[06:35.710 --> 06:39.330]  And the official hashtag, pound DEFCON, has been announced as well.
[06:40.850 --> 06:47.490]  Airtel, an iPhone distributed in India, has claimed that their iPhone 3GSs are unprackable and cannot be jailbroken.
[06:48.130 --> 06:56.250]  Not really sure why they are bragging about that, but their IT director claims that even the most talented people on the planet will be unable to unlock their iPhones.
[06:56.790 --> 06:57.410]  Yeah, right.
[06:57.650 --> 06:58.790]  Sounds like a challenge to me.
[06:59.890 --> 07:11.290]  The Conficker Worm prevented the city of Manchester, England from issuing 1,609 traffic violations within the statutory limit of 28 days, forcing the city to lose out on collecting 43,000 pounds.
[07:11.450 --> 07:11.770]  Hey!
[07:11.990 --> 07:12.470]  Free parking!
[07:14.350 --> 07:27.170]  The U.S. Secret Service will be teaming up with an Italian anti-cybercrime police unit to create the European Electronic Crime Task Force to bolster defenses against computer attacks on embassies and other government sites that host sensitive computer systems.
[07:28.690 --> 07:39.950]  Maria Belen Chapur, the alleged Argentinian mistress of South Carolina Governor Mark Sanford, has claimed that emails leaked to the press from her Hotmail account were done so by an online cybercriminal.
[07:40.970 --> 07:51.390]  A 200-year-old cipher sent to President Thomas Jefferson by his friend Robert Patterson, has finally been cracked by Lauren Smithline, a 36-year-old mathematician from New Jersey.
[07:52.830 --> 08:05.790]  And finally this week, Sacramento police have arrested Jonah Nelson, who claims that he made more than 1,000 fake ID cards and stole over 500 identities using materials he found while dumpster diving at his local bank.
[08:06.250 --> 08:09.410]  Remember, kids, only you can protect your identity.
[08:10.830 --> 08:14.610]  This has been HNNCast with your host, Space Rogue on the Hacker News Network.
[08:17.670 --> 08:22.570]  Remember, if you have any news you think we should report, send it through news at hackernews.com.
[08:26.130 --> 08:28.190]  You have been watching HNNCast.
[08:28.290 --> 08:30.470]  This is Space Rogue for the Hacker News Network.
[08:56.600 --> 09:04.200]  This is HNNCast with your host, Space Rogue.
[09:06.140 --> 09:08.360]  This is Space Rogue for the Hacker News Network.
[09:08.660 --> 09:10.840]  You're watching another edition of HNNCast.
[09:13.720 --> 09:20.040]  HNNCast is sponsored by Immunity, Makers of Canvas, and other fine products.
[09:21.820 --> 09:24.980]  www.immunitysec.com Become a sponsor.
[09:25.540 --> 09:30.240]  Contact sales@hackernews.com You're watching the Hacker News Network.
[09:30.420 --> 09:34.180]  I'm Space Rogue, and this is HNNCast for the first week of June, 2009.
[09:35.820 --> 09:38.820]  The iPhone now has a new attack vector, SMS.
[09:39.380 --> 09:46.160]  Charlie Miller, co-author of the Mac Hacker's Handbook, presented some details of the attack to the SysScan conference in Singapore this week.
[09:46.700 --> 09:52.940]  The vulnerability could lead to arbitrary code execution on the iPhone after receiving a malicious SMS message.
[09:53.620 --> 10:00.860]  Apple is working on a patch and is expected to release it prior to DEFCON, where Miller is scheduled to reveal more intricate details of the attack.
[10:01.400 --> 10:03.780]  Let's hope no one else figures it out before then.
[10:06.280 --> 10:10.840]  China has backed down over its mandate of installing the internet filtering software GreenDAM.
[10:11.160 --> 10:20.600]  According to China's state media, the Zinghao News Agency, the Ministry of Industry and Information Technology, had decided to delay the plan, which is supposed to start this week.
[10:21.120 --> 10:26.620]  The GreenDAM Youth Escort software has been accused of being riddled with security holes and of using stolen code.
[10:27.080 --> 10:35.000]  However, the announced delay hasn't stopped Sony from shipping computers inside China with this filtering software GreenDAM already installed.
[10:35.680 --> 10:41.000]  Probably because Sony has so much experience with rootkits, they thought they would get an early start.
[10:44.290 --> 10:51.660]  More celebrities have had their Twitter accounts compromised, including Britney Spears, Ellen DeGeneres, Jeff Goldblum, P. Diddy, and many others.
[10:52.360 --> 10:59.360]  They have had fake messages posted to their Twitter accounts, sometimes announcing their deaths, after their account passwords were brute-forced via TwitPic.
[10:59.780 --> 11:08.180]  Evidently, TwitPic failed to lock out accounts after a set number of failed password guessing attempts, so attackers could just set up their script and let it run until it found the passwords.
[11:08.180 --> 11:10.220]  Jeff Goldblum, really?
[11:10.640 --> 11:11.220]  Why bother?
[11:12.840 --> 11:20.180]  Three years after the original month of browser bugs, security researcher Aviv Raff has declared July 2009 as the month of Twitter bugs.
[11:20.380 --> 11:27.040]  He is planning to publish a new vulnerability every day throughout July in a third-party Twitter service on twitpone.com.
[11:27.360 --> 11:32.820]  Third-party service providers and Twitter will be given at least a 24-hour heads-up before the vulnerabilities are published.
[11:34.400 --> 11:40.840]  The FBI has arrested Bruce Raisley of Monaco, Pennsylvania, and has charged him with intentionally causing damage to a protected computer.
[11:41.240 --> 11:48.860]  Mr. Raisley allegedly launched a DDoS attack against the rollingstone.com website and other sites after they published an unflattering article about him.
[11:49.080 --> 11:57.560]  The DDoS attacks evidently went on sporadically for over a year before the FBI could finally trace the command and control machines of the botnet systems under Raisley's control.
[11:58.240 --> 12:07.060]  The Red Hacker Alliance, an underground group based in China, formed to protect websites from attacks during the Chinese Olympic Games, has been resurrected by its leader Wang Xi.
[12:07.060 --> 12:15.980]  However, Lin Lin, leader of the Evil Octal Security Group, disputes Wang Xi's claim as, according to Lin Lin, only Lion can lead the Red Hacker Alliance.
[12:18.060 --> 12:27.060]  The Pirate Bay has been sold for $7.8 million to Global Gaming Factory X, a Swedish company specializing in internet cafe management software.
[12:27.960 --> 12:34.060]  GGF has said it will start paying copyright royalties, which of course means that the cost will somehow be passed on to the users.
[12:34.060 --> 12:36.100]  Well, so much for that free ride.
[12:36.340 --> 12:38.760]  Looks like NAFTA 2.0 all over again.
[12:42.910 --> 12:47.810]  Remember, if you have any news you think we should report, send it to news@hackernews.com.
[12:51.240 --> 12:52.820]  You have been watching HNNCast.
[12:53.520 --> 12:55.740]  This is Space Road for the Hacker News Network.
[13:00.580 --> 13:03.160]  Funny dude, funny dude, funny dude, bad things.