Cryptome vows to pursue those who breached site Cryptome.org was breached over the weekend after miscreants took control of an email account used to manage the a whistle-blowing website, which predates Wikileaks by a decade. Cryptome founder John Young said on Tuesday that he planned to pursue those responsible for the hack, and he suggested his computer system may also …
The information Cryptome has provided access to is very useful to see what governments are actually up to.
The measure of their success is the proportional inverse dislike displayed against Cryptome by the US Government and it's agencies.
It might be an idea to sign up for secure Hushmail.com, based in Vancouver, Canada where the government has to get a warrant before they access users e-mail - unlike the US where an investigative agency can simply issue a letter.
why Mr Cryptome does use a plain email in box to receive all those "secret" revelations ?
He certainly knows about the interception capabilities of various governments and has to assume his email address and all other unique identifiers are certainly being on their watch lists.
His security practices are simply hilarious.
For starters, I would
1.) receive only gpg-encrypted email and bounce everything else.
2.) suggest leakers use The Onion Router.
3.) Decrypt "raw" material only on a computer disconnected from the net. That makes attacks like this very difficult. The attacker would have to somehow inject a virus and find a way to get the results back.
4.) All "raw" material must of course reside on an encrypted volume, which is safely locked away together with the computer containing the harddisk.
Can I have 10 FAIL images above this post, please ?
You assume that John Young (aka Mr. Cryptome) has one and only one email address. Obviously, he could have (and probably does have) other email addresses.
You assume that there was unencrypted material of value stolen (aside from the 7GB accessible on the Cryptome website.) There's nothing in the article that points to this.
Also, I think it may be more than just a coincidence that Cryptome has 7GB of data, and the hacker said he downloaded 7TB of data. More likely that the hacker typo'd T instead of G. Anybody's who's tried to download a significant fraction of a TB under favorable conditions knows that there are lots of potential problems and things that can go wrong. Its possible that the hacker had been syphoning off data for a long time, but I still think a typo is more likely.
... here is the rumored "John Young material" that was copied along with the Cryptome files. As any reader of Nettime knows, Young's personal writing is a highly concentrated form of splenetic vitriol, which is highly explosive when combined with ... well, anything, in reasonable proportions. (It's only stable in Young's possession because of the lack of the aforementioned reasonable proportions there.)
The Register 
Biting the hand that feeds IT
Copyright. All rights reserved © 1998–2024
