Hacking Senate.gov: Boss lulz or famous last words?

LulzSec kicks sand in the face of Anonymous -- and every door-kicker in the .gov

By Kevin Fogarty  Add a new comment

Here's a great way to make friends in high places: Hack their server.

LulzSec -- which has been making inroads into Anonymous' griefer market share with aggressively promoted attacks on Sony, PBS, affiliates of the FBI, porn sites, and Bethesda Softworks and Brink (sites they like) – just posted data that looks like it was taken from an internally facing server belonging to the U.S. Senate.

[ Also see: The case for lousy passwords ]

Nice.

The data is routine log info, but includes logins for (presumably) the sysadmins, structure of the files on the SunOS server and IP addresses for various machines inside Senate.gov.

There is no confirmation the hack is genuine, and not much genuinely valuable information was sucked out.

There are some toes that don't take much stepping on to generate a response, though.

Members of the Senate itself might not be that impressed; most wouldn't know they'd been hacked unless their photos of their personal equipment showed up online without their having Tweeted it first.

An awful lot of people work for those Members, though. People who would take even a tiny breach as a major offense. People that like hanging victory pelts above the door. People that probably don't get a lot of lulz.

The LulzSec guys called this a "just-for-kicks release of some internal data from Senate.gov – is this an act of war, gentlemen? Problem?"

The Honorable Members probably can't be bothered to answer.

The hard-asses who want to impress them won't either. Not right away.

Boss hack, LulzSec. Don't stand too close to your doors. Someone might be getting ready to kick them in.

ITworld LIVE

SecurityWhite Papers & Webcasts

Webcast On Demand

Seven Deadly Sins of Cloud Security (Video)

As cloud computing gains popularity, too few people are aware of the security threats that are emerging. In this short video, experts from HP discuss the latest cloud security threats and explain measures to help overcome them. Hear about the seven deadly sins of cloud security and learn how to avoid becoming a victim of poor security in your cloud environment.Intel and the Intel logo are trademarks of Intel Corporation in the U.S. and/or other countries.

Sponsor: HP & Intel

White Paper

Establishing a Strategy for Database Security is No Longer Optional

The options for securing increasingly valuable databases are very broad and deep, and can be confusing. This research provides an overview of three categories of controls that should be implemented to ensure that enterprise data is protected in the most efficient and effective manner.

White Paper

Database Activity Monitoring Is Evolving

Read the analyst report and learn how you can leverage the core capabilities of a DAP solution for better database security.

White Paper

Protecting Against Database Attacks and Insider Threats: Top 5 Scenarios

Read this new eBook to learn the top five scenarios and essential best practices for preventing database attacks and insider threats.

Webcast On Demand

Distributed Database Security with Real-time Monitoring

View this demo and learn how IBM InfoSphere Guardium database activity monitoring can help protect your sensitive data in distributed DBMS environments with a holistic approach to data security and compliance.

Sponsor: IBM

See more White Papers | Webcasts

Ask a question

Ask a Question