Lulzsec claim to have the 2011 uk census data.

[joe_90]

Fallout/backpeddling incoming..

http://pastebin.com/K1nerhk0

[Shuvi Tupya]

I certainly would not be suprised..

[s1962a]

What could they do with it that the official census statistics won't show us?

[Sheets Tabuer]

They must have been rummaging through my bin

[jshell]

Is it the manual submissions or the web submissions, or both?

[Shuvi Tupya]

s1962a said:

What could they do with it that the official census statistics won't show us?

My first thought is that they won't use the information for anything worse than it was intended for anyway. It will get sold to large companies that want to sell us st we do not want or need.

[Tonsko]

Hm. I can't view the link as it's blocked, however Lockheed Martin (LHM) are the ones who got the contract for the data processing, and LHM were done on 28/5/11 using the RSA compromise exposed on 17/3/11. LHM claimed no 'secret' data was stolen (i.e. all their defence contractor work) but nothing was said as far as I can see about the census data.

The only thing that doesn't gel with this claim is that the Pentagon and LHM claimed the attack originated in China (denied by Chinese) and was centred around IP and sensitive military info.

We can infer a few things from this, either: Lulzsec are fibbing; have contact with Chinese groups (or have members in China); have counter-hacked them to get this data, or the breach wasn't from China in the first place but actually from the Lulzsec team. Boudn to be a few other factors I haven't considered.

[eldar]

They are busy...

http://www.bbc.co.uk/news/technology-13848510

They said they were hacking away behind the scenes at government data...

[FourWheelDrift]

Trying to read the illiteracy, are they all under 7?

[s1962a]

Shuvi Tupya said:

s1962a said:

What could they do with it that the official census statistics won't show us?

My first thought is that they won't use the information for anything worse than it was intended for anyway. It will get sold to large companies that want to sell us st we do not want or need.

Considering every home in the land had to fill this in by law, it's a goldmine of information if they really have got all of it.

[Shuvi Tupya]

s1962a said:

Considering every home in the land had to fill this in by law, it's a goldmine of information if they really have got all of it.

The DVLA will see your info to any one that wants it already, and i am not sure if they are the only government department that do this.

[joe_90]

Tonsko said:

Hm. I can't view the link as it's blocked, however Lockheed Martin (LHM) are the ones who got the contract for the data processing, and LHM were done on 28/5/11 using the RSA compromise exposed on 17/3/11. LHM claimed no 'secret' data was stolen (i.e. all their defence contractor work) but nothing was said as far as I can see about the census data.

The only thing that doesn't gel with this claim is that the Pentagon and LHM claimed the attack originated in China (denied by Chinese) and was centred around IP and sensitive military info.

We can infer a few things from this, either: Lulzsec are fibbing; have contact with Chinese groups (or have members in China); have counter-hacked them to get this data, or the breach wasn't from China in the first place but actually from the Lulzsec team. Boudn to be a few other factors I haven't considered.

not 100% sure what you are saying, but LS have a massive botnet (global) I suspect, and would jump from server to server before attacking a site (maybe from China?) so its possible the last ip logged was China, but that was hopped too over 10+ nodes first.

[mrmr96]

s1962a said:

What could they do with it that the official census statistics won't show us?

Know fuggin everything about me!

http://www.theregister.co.uk/2011/06/21/uk_census_...

[s1962a]

mrmr96 said:

s1962a said:

What could they do with it that the official census statistics won't show us?

Know fuggin everything about me!

http://www.theregister.co.uk/2011/06/21/uk_census_...

Name
Addres
DOB
Ethnicity
Profession
Income bracket
etc etc

[Shuvi Tupya]

I still do not regret binning my form..

[Tonsko]

joe_90 said:

Tonsko said:

Hm. I can't view the link as it's blocked, however Lockheed Martin (LHM) are the ones who got the contract for the data processing, and LHM were done on 28/5/11 using the RSA compromise exposed on 17/3/11. LHM claimed no 'secret' data was stolen (i.e. all their defence contractor work) but nothing was said as far as I can see about the census data.

The only thing that doesn't gel with this claim is that the Pentagon and LHM claimed the attack originated in China (denied by Chinese) and was centred around IP and sensitive military info.

We can infer a few things from this, either: Lulzsec are fibbing; have contact with Chinese groups (or have members in China); have counter-hacked them to get this data, or the breach wasn't from China in the first place but actually from the Lulzsec team. Boudn to be a few other factors I haven't considered.

not 100% sure what you are saying, but LS have a massive botnet (global) I suspect, and would jump from server to server before attacking a site (maybe from China?) so its possible the last ip logged was China, but that was hopped too over 10+ nodes first.

Anything is possible! I would say though that botnets are usually used for DDoS. I guess they could be used as data relays for a specific reason, since you have control of the zombie, why not? Not heard of that though. That's not to say it hasn't happened of course

THe RSA was a pretty clever attack, using a 0-day flash exploit via an excel file as a carrier. The attack was focussed on low-level employees and carried out via phising emails. So far Lulzsec seem to be focussing on companies with noddy mistakes in their configs (mainly SQL injection I think)rather than mounting a persistant and (fairly advanced) attack such as this one. LHM was then exposed via data gathered from the RSA breach. The sec analysts call the attack on RSA 'APT' ('advanced persistant attack') - this is a euphemism for 'China' apaprently.

Edited by Tonsko on Tuesday 21st June 12:46

[FourWheelDrift]

Shuvi Tupya said:

I still do not regret binning my form..

The safer option to avoid the possible £1000 fine was to fill it in with anything you thought of at the time that isn't correct when answering snooping questions you wanted privacy on (apart from name and address), like I did. Can't remember most but I think I used "none" quite often.

[joe_90]

Tonsko said:

Anything is possible! I would say though that botnets are usually used for DDoS. I guess they could be used as data relays for a specific reason, since you have control of the zombie, why not? Not heard of that though. That's not to say it hasn't happened of course

Yep.. but if you install the bot sw, they it will also have a backdoor to control it, run shell commands etc..

[mrmr96]

s1962a said:

mrmr96 said:

s1962a said:

What could they do with it that the official census statistics won't show us?

Know fuggin everything about me!

http://www.theregister.co.uk/2011/06/21/uk_census_...

Name
Addres
DOB
Ethnicity
Profession
Income bracket
etc etc

Exactly, I'd rather not have that information shared with anyone who doesn't need it, and the Government.

Plenty of identity theft/spearphising oppertunities to anyone with that data. If this really has gotten out then it would be one of the highest quality databases ever made available to the criminals.

We may as well give up on trying to maintain privacy.

And the thing that dissapoints me the most, is that I'm not even that surprised the governemnt system has let us down.

[Russ T Bolt]

Claim is that they have all of the 2011 census data, I bet a very high percentage of it is still in a secure warehouse somewhere waiting to be scanned.

So unless they are wandering around with portable scanners, the claims are rubbish.