April 19, 2024

Media Decoder Blog: Activist Group Opposing Antipiracy Bill Posts Information on Media Executives

The online activist group known as Anonymous, which has taken aim at opponents of the Occupy Wall Street movement and businesses that stopped providing services to WikiLeaks, has set its sights on a new adversary: media executives.

In protest of antipiracy legislation currently being considered by Congress, the collective has posted online documents that reveal personal information about Jeffrey L. Bewkes, chairman and chief executive of Time Warner, and Sumner M. Redstone, who controls Viacom and the CBS Corporation. Those companies, like almost every major media and entertainment consort, have championed the Stop Online Piracy Act, the House of Representatives bill, known as SOPA, and its related Senate bill, called Protect I.P.

The documents, culled from various databases, included Mr. Bewkes’s home addresses and phone numbers, and encouraged users to bombard the company and its executives with e-mails, faxes and phone calls. Mr. Bewkes has received intimidating phone calls and a barrage of e-mails, according to supporters of the legislation who have knowledge about the company but are not authorized to discuss the matter publicly.

The documents also included the corporate contact information of a range of companies including NBCUniversal, Sony Pictures Entertainment and the Walt Disney Company. A Disney spokeswoman said neither the company nor its chief executive, Robert A. Iger, had received threats. Time Warner declined to comment.

The file on Mr. Redstone has details about his family, home and career but does not include private contact information. A Viacom spokeswoman declined to comment.

Anonymous, a loosely organized collective of so-called “hacktivists,” has called its effort “Operation Hiroshima.” It began on Jan. 1, when the group dropped a trove of documents on Web sites that facilitate anonymous publishing, like Pastebin.com and Scribd.com. Such sites are often used in protest movements like Occupy Wall Street.

The Operation Hiroshima document drop also included information about political figures including Mayor Michael R. Bloomberg and Police Commissioner Raymond W. Kelly, among other data on corporations and government entities the group opposes.

“They should feel threatened,” said Barrett Brown, a Dallas-based online activist who has worked with Anonymous, referring to backers of the legislation. “The idea is to put pressure on the politicians and companies supporting it.”

The online movement underscores how heated the arguments have become over a piece of proposed Internet government regulation. Media companies say they believe the legislation, which has bipartisan support, will crack down on illicit downloads of movies, music and television, especially from overseas Web sites.

The technology industry, including giants like Google and Yahoo, and opponents of Internet regulation say the bills would censor the Internet, stifle free speech and give the United States government too much power to regulate and shut down Web sites.

Both sides have spent millions on lobbying in Washington. But at the grass-roots level, the issue has galvanized Internet activists, who lack lobbying power but have used computer skills to promote the cause among the online community.

“You take our speech, you take our Internet, you take our Bill of Rights, you take our Constitution, we fight back,” said a monotone voice on a YouTube video posted by Anonymous before the Operation Hiroshima document drop (known as a “d0x” in Internet parlance).

Lawmakers and their aides have also been targets. A photograph of a 25-year-old aide who works in the House Judiciary Committee was superimposed into pornography by a group related to Anonymous, according to another aide who was briefed on security threats to lawmakers and their staffs.

“Why can’t they just hire a lobbyist like everyone else?” this aide said.

The vast majority of SOPA opponents protest through legitimate means online. Hundreds of legitimate Web sites have encouraged blackouts and boycotts to protest the legislation. According to BlackoutSOPA.org, more than 10,000 users have changed their Twitter profile pictures to a “Stop SOPA” badge.

“The more outrage expressed on the Internet in the coming days, the better,” said Fred Wilson, a managing partner at Union Square Ventures, a venture capital firm and early investor in Twitter. He said he did not condone threats or “any kind of intimidation” by hackers.

Last month Scribd.com introduced a function that made the words on documents gradually fade away. As they did, a pop-up prompted users to call or write their representatives. “Don’t let the Internet vanish before your eyes,” it read.

The tactics have succeeded in some cases. Initially a supporter, the Web hosting company Go Daddy reversed its position on SOPA after Wikipedia and thousands of other Web sites said they would withdraw their domains from the service. “Go Daddy will support it when and if the Internet community supports it,” Warren Adelman, Go Daddy’s chief executive, said in a statement.

Companies like Time Warner, which owns HBO, CNN and the Warner Brothers studio, and Viacom, which owns MTV and the Paramount studio, have security teams with extensive experience, but they aren’t necessarily trained in online threats, said Josh Shaul, chief technology officer at Application Security Inc., a New York-based provider of database security software.

“When it comes to tracking down these folks who are Anonymous, they’re in way over their head,” Mr. Shaul said. “It’s easy to get something taken off a Web site, but it’s impossible to erase things off the Internet.”

Less than a week after the Operation Hiroshima documents were posted, a Twitter message that links to Mr. Bewkes’s home phone numbers and addresses, annual income and wife’s name and age had proliferated across the Internet. The message included #OpHiroshima, the shortened Twitter code for the effort.

Anonymous is not a formal group, but a nebulous collection of global activists who use computer skills to support political causes. For example, the collective demanded a full Christmas dinner for Pvt. Bradley Manning, the former Army intelligence analyst accused of leaking documents to WikiLeaks.

Last month, hackers associated with Anonymous published a trove of e-mail addresses and the personal information of subscribers of Stratfor, a security group based in Austin, Tex. A splinter group affiliated with Anonymous last year attacked the Sony Corporation, shutting down its PlayStation online network. The attack cost the company around $171 million, according to industry estimates.

Movements like Anonymous often squabble among themselves, but SOPA is a uniquely unifying cause, said Gabriella Coleman, a professor at McGill University who is an expert on  hacking. To these activists, she said, “Internet freedom is not controversial.”

When it first emerged around 2005, Anonymous largely focused on pranks or “lulz” (a variation on LOL, the Internet abbreviation of laughing out loud). During the Arab Spring last year, hackers affiliated with Anonymous helped get Twitter messages and blog posts out of Tunisia and Egypt as the government tried to block Internet access.

Article source: http://feeds.nytimes.com/click.phdo?i=d7fc49374e9ae27e87938c78c49d9ea7

Bits Blog: Symantec Confirms ‘Segment’ of Source Code Was Stolen

Security experts analyze global threat activity from the Symantec Security Operation Center in Alexandria, Va.SymantecEmployees at the Symantec Security Operation Center in Alexandria, Va.

Hackers have stolen some of the programming code for two of Symantec’s antivirus products for businesses.

A Symantec spokesman, Cris Paden, confirmed the hack in an e-mail on Friday but said the products involved, Symantec Endpoint Protection 11.0 and Symantec Antivirus 10.2, WEre four and five years old respectively. Symantec no longer sells the latter product, but does continue to service it. Mr. Paden said the hack does not affect the company’s flagship Norton brand consumer products.

“We have no indication that the code disclosure impacts the functionality or security of Symantec’s solutions,” Mr. Paden wrote in an e-mail. “Symantec is working to develop remediation process to ensure long-term protection for our customers’ information.”

Source code can be exploited by competitors, or used by hackers to corrupt antivirus products or write malicious code that circumvents those products altogether. But the age of the products involved could limit the damage.

“If this code is four or five years old, it is likely it has evolved quite a bit,” says Robert Rachwald, director of security strategy at Imperva, an Internet security company. “That said, if there are any core functions that have not evolved, then hackers could take a look at Symantec’s source code and find ways to manipulate it.”

A hacker group calling itself the Lords of Dharmaraja claims to have discovered Symantec’s source code in a hack it conducted on India’s military and intelligence servers. In a post  on Wednesday on the bulletin board Pastebin, the hackers wrote, “We have discovered within the Indian Spy Program source codes of a dozen software companies,” which they said had signed agreements with an Indian defense program and its Central Bureau of Investigation.

The original post, which is no longer on Pastebin but is still available through a Google cache, contained a document bearing a 1999 date that described how Symantec software was intended to work but did not contain any code. The hackers later posted a second file on Pastebin, which is no longer available, that Symantec confirmed contained a “segment” of the source code for the enterprise products.

“This does not happen very often,” Mr. Rachwald of Imperva said. “Source code is a company’s crown jewels. Most companies put lots of locks and chains around it.”

Article source: http://feeds.nytimes.com/click.phdo?i=46e76f2714e6de828f6b96a369b676f0