Anonymous Ready To Dump More HBGary E-mails, Launch AnonLeaks

[WhoIsNumberNone]

Source: Forbes

--snip--

Anonymous has already posted around 50,000 emails of Aaron Barr, the CEO of sister organisation HPGary Federal, which revealed a report by the firm looking at ways to sabotage WikiLeaks in collaboration with Palantir Technologies and Berico Technologies. The emails also show that Bank of America, a potential target of WikiLeaks, was to hear the proposal via its outside law firm Hunton & Williams.

A source from Anonymous says that most of the new e-mails from Hoglund are still unchecked and it is unclear who will be most liable when the information is made public, but added that briefly skimming the emails had revealed “three different malware archives, two bots, an offer to sell a botnet, a genuine stuxnet copy, and various malware lists.” Not entirely surprising given that HBGary is a security firm, but the source speculates that botnets aren’t typically rented out for “research.”

“Judging by the fact that they’d attack WikiLeaks’ operations, wouldn’t be surprised if they’re up to something fishy,” the source added. “We’ll let Anon and other public devour the emails.”

--snip--

The revelations about HBGary and WikiLeaks came about by accident, after supporters of Anonymous hacked into Barr’s web site and servers in retaliation for telling the Financial Times that he had managed penetrate the group and learn the identities of senior figures. It later transpired that some of Barr’s initial research was incorrect, and Anonymous posted a link to one of his documents purporting to show names and addresses of active supporters to prove its point.

Read more: http://blogs.forbes.com/parmyolson/2011/02/11/anonymous-ready-to-dump-more-hbgary-e-mails-launch-anonleaks/

[xchrom]

1. Awesome. nt

[Champion Jack]

2. K & R

[meegbear]

3. K&R

[villager]

4. let a thousand flowers bloom!

;-)

[boppers]

5. Never start a land war in Asia...

...or an internet war with Anonymous.

[montanto]

6. Good. As my old gaffer used to say:

You fuck with the bull, you get the horn.

[mahatmakanejeeves]

7. Palantir Technologies

I had seen the name Palantir on the news the night before. I recognized it from all the advertising it has at the Pentagon Metrorail station.

Palantir Technologies

According to leaked documents, in December 2010 the law firm Hunton & Williams approached Palantir, HBGary Federal, and Berico Technologies to draft a report on the threat posed by WikiLeaks. The report recommends attacking constitutional lawyer Glenn Greenwald for his support of WikiLeaks, launching a "media campaign to push the radical and reckless nature of WikiLeaks activities" and obtaining data on document submitters by hacking Wikileaks' servers.

Circa Feb 11, 2011, Dr. Karp issued an apology to Mr Greenwald, and "directed the company to sever any and all contacts with HBGary".

Palantir Media

Statement from Dr. Alex Karp, Co-Founder and CEO, Palantir Technologies
February 10, 2011. Palo Alto, CA — As the Co-Founder and CEO of Palantir Technologies, I have directed the company to sever any and all contacts with HB Gary.

Palantir Technologies provides a software analytic platform for the analysis of data. We do not provide – nor do we have any plans to develop – offensive cyber capabilities. Palantir Technologies does not build software that is designed to allow private sector entities to obtain non-public information, engage in so-called “cyber attacks” or take other offensive measures. I have made clear in no uncertain terms that Palantir Technologies will not be involved in such activities. Moreover, we as a company, and I as an individual, always have been deeply involved in supporting progressive values and causes. We plan to continue these efforts in the future.

The right to free speech and the right to privacy are critical to a flourishing democracy. From its inception, Palantir Technologies has supported these ideals and demonstrated a commitment to building software that protects privacy and civil liberties. Furthermore, personally and on behalf of the entire company, I want to publicly apologize to progressive organizations in general, and Mr. Greenwald in particular, for any involvement that we may have had in these matters.

Dr. Alex Karp
Co-Founder and CEO
Palantir Technologies

[Hissyspit]

13. CEO Alex Karp did interview on Charlie Rose show in 2009. nt

[pacalo]

8. I just spent some time reading the IM's between the hackers & the self-described

president of HBGary who is going by the name "Penny".

It gets interesting around the 4:54 time mark when they begin to discuss Bradley Manning. The hackers suggest her firing Aaron & using his salary as a donation to Bradley's defense. I love what one hacker says in defense of Manning:

04:57 (+joepie91|coding) Penny: all he released was the truth. If that brings people into danger that means that not Bradley would be the cause of that, but the people who did those things in the first place.

(Adding this one, too, which was typed earlier at the 4:55 time mark.)

04:55 (+Baas) If Bradley was a traitor, he'd have sold his information - not released it to the public.

[WhoIsNumberNone]

9. Just tried to go to Anonleaks

The account has already been suspended. The Chamber of Commerce has long tentacles.

[frylock]

11. the CoC likely signed their death warrant..

how stoopid does one have to be to fuck with Anonymous?!

[cutlassmama]

12. It should be an interesting watch

[WhoIsNumberNone]

14. CORRECTION

The actual URL for Anonleaks is http://anonleaks.ru/

Where the big banks and USCOC can't reach them (yet)

[Luciferous]

10. Good for them!

[Snagglepuss2]

15. Veracity of HBGary email messages posted by Anonymous

One of the technical issues that seems to be consistently
overlooked in the HBGary saga is important because it confirms
the authenticity of the emails acquired by Anonymous. After
the hack by Anonymous, the HBGary website contained the
following notice: 



[div class="excerpt"] "Meanwhile, please be
aware that any information currently in the public domain is
not reliable because the perpetrators of this offense, or
people working closely with them, have intentionally falsified
certain data...." 

http://dagblog.com/reader-blogs/hb-gary-federal-anonymous-and-wikileaks-8912

[/div]  


HBGary's statement regarding the intentional falsification of
data is what appears to have resulted in the decision to
release an additional 27,000-odd messages belonging to Greg
Hoglund, founder of HBGary, Inc. 

Now, despite Mr. Hoglund's statement, if you download and
examine the emails, specifically those authored by Aaron Barr,
you will notice that many of them are digitally-signed with a
VeriSign Class 1 Individual Subscriber certificate. (Details
of which can be seen below). 

The majority of Aaron's emails (except those sent from his
IPad) sport a cryptographically-secure digital signature and
can thus be demonstrated to be untampered with. Each such
signed email has an icon that resembles an envelope with a
little red wax seal on it. When you click on this icon, a
pop-up comes up which reads as follows: 

Message Security
Message is Signed
This message includes a valid digital signature. The message
has not been altered since it was sent.

Signed by: Aaron Barr
Email address: [e-mail]
Certificate issued by: VeriSign Class 1 Individual Subscriber
CA - G2
[View Signature Certificate] (button)

Message Not Encrypted
This message was not encrypted before it was sent, information
sent over the Internet without encryption can be seen by other
people while in transit. 

If you click on the [View Signature Certificate] button you
can see the following: 

This certificate has been verified for the following uses: 
Email Signer Certificate
Email Recipient Certificate

Issued To
Common Name (CN):           Aaron Barr
Organization (O):           VeriSign, Inc.
Organizational Unit (OU):   VeriSign Trust Network

Issued By
Common Name (CN):           VeriSign Class 1 Individual
Subscriber CA - G2
Organization (O):           VeriSign, Inc.
Organizational Unit (OU):   VeriSign Trust Network

Validity
Issued On:                  4/28/2010
Expires On:                 4/28/2011

Fingerprints
SHA1 Fingerprint
32:54:31:25:F6:4D:8C:E4:9E:90:2E:A7:E4:51:CF:A5:F2:7E:C3:11
MD5 Fingerprint 
E3:63:31:3B:AE:20:61:59:C5:0F:A8:54:F1:5D:66:38

Whats is particularly important about these digital signatures
is that they are not only proof of authenticity, they also are
non-repudiable, meaning they cannot later be disavowed as
forgeries.  (I suspect that, right about now, Mr. Barr may be
kicking himself for ever purchasing that VeriSign signing
certificate.) 

Digital signatures are every bit as valid as the signature on
a contract. 

If memory serves, I believe it was President Clinton who first
used a digital signature on the text of a bill to sign it into
law. In other words, these digital signatures would stand-up
in a court of law as valid. 

The upshot here is that neither HBGary nor Mr. Barr simply
CANNOT  disavow these email by dismissing them as forgeries. 

Snagglepuss2

[WhoIsNumberNone]

16. Hat-tip and welcome to DU

n/t

[SecularMotion]

17. Anonleaks website - dupe

same url as earlier post

http://anonleaks.ru

[Odin2005]

18. BWAHAHAHA! Never mess with the white-hat hackers!