Welcome!

Agile Computing Authors: Yeshim Deniz, Carmen Gonzalez, Pat Romanski, Kevin Jackson, Elizabeth White

Related Topics: Cloud Security, Release Management , @CloudExpo

Cloud Security: Article

Wiki War Breaks Out

Vigilantes acting in support of Assange's rogue site started unleashing a torrent of punishing denial of service attacks

Even before WikiLeaks mastermind Julian Assange got hauled off to Wandsworth Prison in southwest London Tuesday, vigilantes acting in support of his rogue site started unleashing a torrent of punishing denial of service attacks on the financial institutions that turned the spigot off on the donations WikiLeaks needs to survive and pay Assange's legal bills.

That includes PayPal, MasterCard, Visa and the Swiss Post bank.

Amazon.com, which booted WikiLeaks off its cloud last week, was threatened again Thursday but reportedly the new avenging angel lacked the "forces" given Amazon's EC2-style elasticity. The ruffians pushed on to PayPal. Twitter is also a possible target for not allowing WikiLeaks discussions to "trend" to the top of the heap.

The attacks, which WikiLeaks refused neither to "condemn nor applaud" and which the US government is now investigating, brought down the web sites of Visa, MasterCard and the Swiss Post bank PostFinance.

Authorities apparently don't believe WikiLeaks and its leader aren't responsible for the attack and moved Assange to a segregated part of the prison where there is limited computer access, according to the Guardian Thursday.

PostFinance, which has so far suffered the most, was first hit on Monday and was down most of Tuesday preventing depositors from doing online banking; mastercard.com was still impossible to reach Wednesday but its core business was reportedly unaffected. Ditto Visa whose web site crashed Wednesday.

The attacks, however, have continued with reports of interference with MasterCard payment operations and from our own in-house experience with Visa Thursday that appeared to be true.

PayPal, which pulled WikiLeaks' account last Friday, has reportedly been hit too but seemed to bear up aside from some difficulties with its blog and Thursday with its web site.

The web site of the Swedish prosecutor's office, which is pressing the sex crimes case against Assange, was down Tuesday into Wednesday and then the web site and e-mail system of the law firm for the two Swedish women who brought the complaint were attacked.

So too Sarah Palin's web site and US Senator Joe Lieberman's, both outspoken WikiLeaks critics. At press time, the US Senate web site was a target.

Oddly enough the web site of the hysterically liberal Democratic senator from California Dianne Feinstein, who chairs the Senate Intelligence Committee and suddenly finds herself in Lieberman's company, is so far untouched. Guess the mob doesn't have a subscription to the Wall Street Journal where she wrote an op-ed saying Assange should be hauled into court for violating the Espionage Act of 1917.

Dubbed Operation Payback, the revenge attacks are the work of an army of maybe 1,500-but-swelling self-styled "hacktivists" associated with the so-called Anonymous hacker coalition that has previously attacked the Church of Scientology and RIAA for its anti-piracy moves.

When Operation Payback first started, these modern-day Vikings said, "While we don't have much of an affiliation with WikiLeaks, we fight for the same reasons. We want transparency and counter censorship."

After the marauders downed the Visa and MasterCard web sites Wednesday, Facebook killed an Operation Payback page where it appeared the vandals have been congregating, congratulating each other and getting their marching orders.

Facebook said the page was removed "for violating our Terms of Use," which outlaw hate speech, threats of violence and bullying.

It appears it was an idle gesture since they just regrouped elsewhere on Facebook.

Twitter, where the timing of some of the attacks has been posted, tried to do the same thing after a file appeared that seemed to contain credit card information. MasterCard said it was bogus.

In retaliation Anonymous has been hit and WikiLeaks itself has been under sporadic DDoS attacks since it started releasing stolen US embassy cables.

After WikiLeaks got kicked off Amazon's cloud last week and lost its wikileaks.org domain to DDoS attacks on EveryDNS.net, WikiLeaks borrowed a Swiss web address belonging to the Swiss Pirate Party and reportedly now has DNS servers in 14 countries and a thousand mirror sites.

It also took out an "insurance" policy.

Before turning himself in, Assange claimed he sent a practically biblical army of 100,000 fellow travelers a stockpile of secret national and commercial information that he threatened would be decrypted and released if something happened to him. His lawyers called it a "thermonuclear device."

On Tuesday WikiLeaks said it wouldn't send out the decryption code just yet. A spokesman told the AP it will only be used if "grave matters" take place involving WikiLeaks staff. What that means is unclear.

Indicative of what the file might contain WikiLeaks, in a shot across the establishment's bow Monday, released a list of critical foreign infrastructure assets such as pipelines, mines, trans-Atlantic cables, food sources and pharmaceutical supplies that are important to the security of the United States not to mention its allies. The list is a terrorist's dream.

The AP said British Foreign Secretary William Hague condemned the disclosure, telling the BBC it was a "reprehensible" act committed "without regard to wider concerns of security, the security of millions of people."

The wire service said it decided against publishing the list "due to the sensitive nature of the information." The BBC linked to the list on WikiLeaks and the AP wants to know why. It said the BBC didn't respond.

The list was part of the huge cache of 252,000 stolen diplomatic cables and State Department documents that WikiLeaks started releasing last week to the detriment of international relations. Nothing so far comes close to the dictionary definition of whistle-blowing, just voyeurism and general mayhem.

The Telegraph speculates that the financial giants are acting in lockstep because Assange made the "fatal mistake" of threatening to bring down a major US bank with New Year's revelations supposedly akin to Enron. Fingers pointed at Bank of America.

The paper figures such a thing cuts a little too close to home for all of them especially in the middle of a recession.

WikiLeaks still has a post office box in Australia and bank accounts in Germany and Iceland to accept donations.

Wading into the fray Tuesday, possibly to heighten its non-existent profile, a Philadelphia start-up financial processing service called Xipwire (say Zipwire) has offered to handle WikiLeaks donations via debit and credit cards over cell phones.

It said on its site, "While people may or may not agree with WikiLeaks, we at Xipwire believe that anyone who wishes to support the organization through a donation should be able to do so." It said it is "waiving all fees so that 100 percent of the donations collected will be directly passed on to WikiLeaks." The AP says it holding the money in an escrow account since it hasn't been able to make contact with WikiLeaks.

Of course, if WikiLeaks is declared a terrorist organization, as the incoming chairman of the House Homeland Security Committee wants, US banks would be prohibited from processing payments and it would be a felony to provide the group with "material support or resources."

More Stories By Maureen O'Gara

Maureen O'Gara the most read technology reporter for the past 20 years, is the Cloud Computing and Virtualization News Desk editor of SYS-CON Media. She is the publisher of famous "Billygrams" and the editor-in-chief of "Client/Server News" for more than a decade. One of the most respected technology reporters in the business, Maureen can be reached by email at maureen(at)sys-con.com or paperboy(at)g2news.com, and by phone at 516 759-7025. Twitter: @MaureenOGara

Comments (0)

Share your thoughts on this story.

Add your comment
You must be signed in to add a comment. Sign-in | Register

In accordance with our Comment Policy, we encourage comments that are on topic, relevant and to-the-point. We will remove comments that include profanity, personal attacks, racial slurs, threats of violence, or other inappropriate material that violates our Terms and Conditions, and will block users who make repeated violations. We ask all readers to expect diversity of opinion and to treat one another with dignity and respect.


@ThingsExpo Stories
Internet of @ThingsExpo, taking place June 6-8, 2017 at the Javits Center in New York City, New York, is co-located with the 20th International Cloud Expo and will feature technical sessions from a rock star conference faculty and the leading industry players in the world. @ThingsExpo New York Call for Papers is now open.
Smart Cities are here to stay, but for their promise to be delivered, the data they produce must not be put in new siloes. In his session at @ThingsExpo, Mathias Herberts, Co-founder and CTO of Cityzen Data, discussed the best practices that will ensure a successful smart city journey.
Every successful software product evolves from an idea to an enterprise system. Notably, the same way is passed by the product owner's company. In his session at 20th Cloud Expo, Oleg Lola, CEO of MobiDev, will provide a generalized overview of the evolution of a software product, the product owner, the needs that arise at various stages of this process, and the value brought by a software development partner to the product owner as a response to these needs.
In 2014, Amazon announced a new form of compute called Lambda. We didn't know it at the time, but this represented a fundamental shift in what we expect from cloud computing. Now, all of the major cloud computing vendors want to take part in this disruptive technology. In his session at 20th Cloud Expo, John Jelinek IV, a web developer at Linux Academy, will discuss why major players like AWS, Microsoft Azure, IBM Bluemix, and Google Cloud Platform are all trying to sidestep VMs and containers...
@ThingsExpo has been named the ‘Top WebRTC Influencer' by iTrend. iTrend processes millions of conversations, tweets, interactions, news articles, press releases, blog posts - and extract meaning form them and analyzes mobile and desktop software platforms used to communicate, various metadata (such as geo location), and automation tools. In overall placement, @ThingsExpo ranked as the number one ‘WebRTC Influencer' followed by @DevOpsSummit at 55th.
SYS-CON Events announced today that MobiDev, a client-oriented software development company, will exhibit at SYS-CON's 20th International Cloud Expo®, which will take place June 6-8, 2017, at the Javits Center in New York City, NY, and the 21st International Cloud Expo®, which will take place October 31-November 2, 2017, at the Santa Clara Convention Center in Santa Clara, CA. MobiDev is a software company that develops and delivers turn-key mobile apps, websites, web services, and complex softw...
The cloud market growth today is largely in public clouds. While there is a lot of spend in IT departments in virtualization, these aren’t yet translating into a true “cloud” experience within the enterprise. What is stopping the growth of the “private cloud” market? In his general session at 18th Cloud Expo, Nara Rajagopalan, CEO of Accelerite, explored the challenges in deploying, managing, and getting adoption for a private cloud within an enterprise. What are the key differences between wh...
"Tintri was started in 2008 with the express purpose of building a storage appliance that is ideal for virtualized environments. We support a lot of different hypervisor platforms from VMware to OpenStack to Hyper-V," explained Dan Florea, Director of Product Management at Tintri, in this SYS-CON.tv interview at 18th Cloud Expo, held June 7-9, 2016, at the Javits Center in New York City, NY.
The security needs of IoT environments require a strong, proven approach to maintain security, trust and privacy in their ecosystem. Assurance and protection of device identity, secure data encryption and authentication are the key security challenges organizations are trying to address when integrating IoT devices. This holds true for IoT applications in a wide range of industries, for example, healthcare, consumer devices, and manufacturing. In his session at @ThingsExpo, Lancen LaChance, vic...
WebRTC has had a real tough three or four years, and so have those working with it. Only a few short years ago, the development world were excited about WebRTC and proclaiming how awesome it was. You might have played with the technology a couple of years ago, only to find the extra infrastructure requirements were painful to implement and poorly documented. This probably left a bitter taste in your mouth, especially when things went wrong.
Big Data, cloud, analytics, contextual information, wearable tech, sensors, mobility, and WebRTC: together, these advances have created a perfect storm of technologies that are disrupting and transforming classic communications models and ecosystems. In his session at @ThingsExpo, Erik Perotti, Senior Manager of New Ventures on Plantronics’ Innovation team, provided an overview of this technological shift, including associated business and consumer communications impacts, and opportunities it m...
You have great SaaS business app ideas. You want to turn your idea quickly into a functional and engaging proof of concept. You need to be able to modify it to meet customers' needs, and you need to deliver a complete and secure SaaS application. How could you achieve all the above and yet avoid unforeseen IT requirements that add unnecessary cost and complexity? You also want your app to be responsive in any device at any time. In his session at 19th Cloud Expo, Mark Allen, General Manager of...
WebRTC is bringing significant change to the communications landscape that will bridge the worlds of web and telephony, making the Internet the new standard for communications. Cloud9 took the road less traveled and used WebRTC to create a downloadable enterprise-grade communications platform that is changing the communication dynamic in the financial sector. In his session at @ThingsExpo, Leo Papadopoulos, CTO of Cloud9, discussed the importance of WebRTC and how it enables companies to focus o...
Big Data engines are powering a lot of service businesses right now. Data is collected from users from wearable technologies, web behaviors, purchase behavior as well as several arbitrary data points we’d never think of. The demand for faster and bigger engines to crunch and serve up the data to services is growing exponentially. You see a LOT of correlation between “Cloud” and “Big Data” but on Big Data and “Hybrid,” where hybrid hosting is the sanest approach to the Big Data Infrastructure pro...
In his General Session at 16th Cloud Expo, David Shacochis, host of The Hybrid IT Files podcast and Vice President at CenturyLink, investigated three key trends of the “gigabit economy" though the story of a Fortune 500 communications company in transformation. Narrating how multi-modal hybrid IT, service automation, and agile delivery all intersect, he will cover the role of storytelling and empathy in achieving strategic alignment between the enterprise and its information technology.
Buzzword alert: Microservices and IoT at a DevOps conference? What could possibly go wrong? In this Power Panel at DevOps Summit, moderated by Jason Bloomberg, the leading expert on architecting agility for the enterprise and president of Intellyx, panelists peeled away the buzz and discuss the important architectural principles behind implementing IoT solutions for the enterprise. As remote IoT devices and sensors become increasingly intelligent, they become part of our distributed cloud enviro...
With major technology companies and startups seriously embracing IoT strategies, now is the perfect time to attend @ThingsExpo 2016 in New York. Learn what is going on, contribute to the discussions, and ensure that your enterprise is as "IoT-Ready" as it can be! Internet of @ThingsExpo, taking place June 6-8, 2017, at the Javits Center in New York City, New York, is co-located with 20th Cloud Expo and will feature technical sessions from a rock star conference faculty and the leading industry p...
"LinearHub provides smart video conferencing, which is the Roundee service, and we archive all the video conferences and we also provide the transcript," stated Sunghyuk Kim, CEO of LinearHub, in this SYS-CON.tv interview at @ThingsExpo, held November 1-3, 2016, at the Santa Clara Convention Center in Santa Clara, CA.
Things are changing so quickly in IoT that it would take a wizard to predict which ecosystem will gain the most traction. In order for IoT to reach its potential, smart devices must be able to work together. Today, there are a slew of interoperability standards being promoted by big names to make this happen: HomeKit, Brillo and Alljoyn. In his session at @ThingsExpo, Adam Justice, vice president and general manager of Grid Connect, will review what happens when smart devices don’t work togethe...
"There's a growing demand from users for things to be faster. When you think about all the transactions or interactions users will have with your product and everything that is between those transactions and interactions - what drives us at Catchpoint Systems is the idea to measure that and to analyze it," explained Leo Vasiliou, Director of Web Performance Engineering at Catchpoint Systems, in this SYS-CON.tv interview at 18th Cloud Expo, held June 7-9, 2016, at the Javits Center in New York Ci...