<![CDATA[Gizmodo: hax0rs]]> http://tags.gizmodo.com/assets/base/img/thumbs140x140/gizmodo.com.png <![CDATA[Gizmodo: hax0rs]]> http://gizmodo.com/tag/hax0rs http://gizmodo.com/tag/hax0rs <![CDATA[Hackers Help Loggers Smuggle 1.7 Million Cubic Meters of Wood Out of Brazil]]> Hackers in Brazil have managed to break into the computerized system that tracks quotas for logging companies, allowing for the illegal logging and smuggling of nearly 1.7 million cubic meters of wood.

The haven't gotten away with it, however, as Brazil has been trying to crack down on illegal logging. Now there are 107 companies being sued for $833 million. In addition, 202 people are facing prosecution, including 30 "ringleaders" who brought the hackers and logging companies together.

Essentially what they did was falsify transportation permits. The Brazilian system is set up so that companies receive permits to transport their felled trees. The load is measured and that amount of wood is deducted from the total amount allowed. Once a company reaches its quota, it can’t get more permits and therefore can’t make more money by cutting down trees. However, hiring hackers got them around the system for long enough to do some big illegal damage.

We'll see if anything actually happens in court to stop this practice. [Greenpeace via Treehugger]

]]>
http://gizmodo.com/index.php?op=postcommentfeed&postId=5108282&view=rss&microfeed=true
<![CDATA[Palin Email "Hack" Was Hardly a Hack at All]]> The screamingly obvious trail of evidence left behind by the person who broke into Sarah Palin's Yahoo mail yesterday should have been the tip-off—this was not an elite job. According to postings on the troll-hive forum 4chan dug up by Threat Level, all the perp did was guess her password-resest security question correctly after a few seconds of Googling.

The question was: Where did you meet your spouse? A fact that is readily available in the now flooded stream of Palin info on the web—they met in high school, and that's all it took to start the shitstorm. The 4chan post also further illustrates that the whole thing was done by someone well over their head:

yes I was behind a proxy, only one, if this shit ever got to the FBI I was fucked, I panicked, i still wanted the stuff out there but I didn’t know how to rapidshit all that stuff, so I posted the pass on /b/, and then promptly deleted everything, and unplugged my internet and just sat there in a comatose state

Read the complete post over at Wired, and pick up an excellent primer to making sure your email and other online accounts are as secure as possible with this great guide by our friends at Lifehacker. [Threat Level, Lifehacker]

]]>
http://gizmodo.com/index.php?op=postcommentfeed&postId=5051978&view=rss&microfeed=true
<![CDATA[Sarah Palin's Email Hackers' Sloppy Work Could Lead to Their Arrests]]> By now you've probably heard about how the super-duper 1337 h4ck3r5 from anonymous busted into one of Sarah Palin's private email accounts and posted the contents for the world to see. Well, it looks like those h4ck3r5 aren't as 1337 as one might think, as they left themselves pretty wide open to get busted for what they did.

You see, it appears that the hacker(s) used the proxy Ctunnel.com to access the account. Smart move, using a proxy! What was less smart was including the entire address in your screenshots, as that kind of defeats the purpose of using a proxy. Says Ctunnel.com owner Gabriel Ramuglia:

Usually, this sort of thing would be hard to track down because it’s Yahoo email, and a lot of people use my service for that. Since they were dumb enough to post a full screen shot that showed most of the [Ctunnel.com] URL, I should be able to find that in my log.

Oops! If the hacker in question wasn't doing his work from an internet café or using a second anonymizing service, it shouldn't be tough to track them down. And since this was definitely a federal offense, anonymous might be getting a little less anonymous in the not-too-distant future. [The Register via Boy Genius]

]]>
http://gizmodo.com/index.php?op=postcommentfeed&postId=5051729&view=rss&microfeed=true
<![CDATA['Biggest Military Hack of All Time' Was Done Over a 56k Connection]]> Gary McKinnon, the British hacker who broke into military computers looking for evidence of UFOs in the "biggest military hack of all time," did so using his home computer and a 56k modem. I think we just lost our rights to complain about not having Japan-fast broadband.

Using his own computer at home in London, McKinnon hacked into 97 computers belonging to and used by the U.S. government between February 2001 and March 2002.

McKinnon is accused of causing the entire U.S. Army's Military District of Washington network of more than 2,000 computers to be shut down for 24 hours.

Using a limited 56-kbps dialup modem and the hacking name "Solo" he found many U.S. security systems used an insecure Microsoft Windows program with no password protection.

He then bought off-the-shelf software and scanned military networks, saying he found expert testimonies from senior figures reporting that technology obtained from extra-terrestrials did exist.

At the time of his indictment, Paul McNulty, U.S. Attorney for the Eastern District of Virginia, said: "Mr. McKinnon is charged with the biggest military computer hack of all time."

He's currently awaiting extradition to the United States where, if convicted, he'll face up to 70 years in jail and up to $1.75 million in fines. Let us know about that alien technology first, Gary! [Valleywag]

]]>
http://gizmodo.com/index.php?op=postcommentfeed&postId=5032380&view=rss&microfeed=true
<![CDATA[Hacker Pulls an Office Space, Steals $50,000 Worth of Pennies from Google, Paypal]]> In a move reminiscent of schemes seen in Office Space and Superman III, a hacker has exploited a loophole to weasel himself over $50,000 from services such as Google Checkout and Paypal by taking pennies at a time. Unfortunately, he was caught, and is in all likelihood heading to pound-me-in-the-ass prison.

The loophole involved the tiny payments that online payment services and brokerages send to new user accounts to verify that they're real. While getting four cents from PayPal might not seem like a big deal to you, Michael Largent decided to create a script to automatically open 58,000 of these accounts. Unfortunately for him, the companies caught on to his scheme and he's currently out on bail on charges of wire, bank and mail fraud.

The funny thing is, he's not in trouble for taking the money. It was being given out freely, after all. He's in trouble for using fake names and social security numbers to open the accounts.

If only Milton would go burn down the Googleplex in retaliation for Sergey Brin taking his stapler, destroying the evidence of your crime, you could escape these charges! [PC Pro via Slashdot]

]]>
http://gizmodo.com/index.php?op=postcommentfeed&postId=393747&view=rss&microfeed=true
<![CDATA[Chinese Army Blamed for Pentagon Hack]]> A hack of Pentagon computers in the office of Defense Secretary Robert Gates has been traced to China, according to US officials. The attack, which brought down the network serving Gates' office, has been traced back to China's People's Liberation Army with near-certainty. China, of course, denies any involvement, as they're obviously too busy trying to make sure all their factories stop producing products that kill children to hack anybody.

China poking around our networks and us doing the same to theirs is nothing new, but the fact that they were able to actually take down an internal network has caused some alarm at the Pentagon. It's proof that network security in the government isn't quite what it should be, as an attack such as this at a critical time could prove disastrous. As far as I'm concerned, they can take down internal Pentagon networks all they want as long as they leave the parts of the internet I use alone. Don't mess with my Facebook profile, China! [Techworld]

]]>
http://gizmodo.com/index.php?op=postcommentfeed&postId=296117&view=rss&microfeed=true
<![CDATA[Leopard Got Pirated, Probably]]> Oopsie daisy! It looks like that developers build of OS X Leopard has made its way into the grabby hands of Internet pirates. It looks like it, at least. There's a torrent on a popular private (well, it was) torrent tracker that has a few hundred people pigpiled on, but because people are too damned impatient to wait for a couple of seeds to get it, they're all waiting and no one has finished downloading it yet. Silly fanboys.

There's certainly a chance that this is a 6GB prank by some cruel jerk who wants to ruin a whole lot of thieving fanboys' day, but it could just as likely be the real deal. And if it is, look for a whole slew of Leopard screenshots in the very near future. Huzzah for the pink underbelly of the Internet!

WWDC Leopard Beta Leaked Onto BitTorrent Site [Crunchgear]

]]>
http://gizmodo.com/index.php?op=postcommentfeed&postId=270686&view=rss&microfeed=true