Anonymous: Trump is making America weaker and we’ll exploit it. The international hacker community is preparing to strike against U.S. infrastructure and calls for public awareness against incoming fascism

  • WhatSay@slrpnk.net
    link
    fedilink
    English
    arrow-up
    1
    ·
    14 minutes ago

    Hacker fashion tip: while wearing your guy fox mask, match it with a Luigi hat.

  • Ozymati@lemmy.nz
    link
    fedilink
    English
    arrow-up
    76
    arrow-down
    1
    ·
    10 hours ago

    Can they do something useful like destroy the debt infrastructure and delete all student loans and medical bills?

    • buddascrayon@lemmy.world
      link
      fedilink
      English
      arrow-up
      9
      ·
      4 hours ago

      A more useful thing would be to do as much damage to Twitter as possible. In fact, why they haven’t attacked Twitter while Musk has been disarming all of its safety protocols is fucking beyond me.

    • Randelung@lemmy.world
      link
      fedilink
      English
      arrow-up
      6
      ·
      4 hours ago

      I’m sure backups and redundancies are “inefficient” since “everything is in the cloud, anyway”.

      • andros_rex@lemmy.world
        link
        fedilink
        English
        arrow-up
        17
        ·
        4 hours ago

        “Anonymous” isn’t like a formal group. The entire point is that anyone can say that they are anonymous. So yeah, people talk a lot. You can do whatever you like as anonymous.

      • nutsack@lemmy.dbzer0.com
        link
        fedilink
        English
        arrow-up
        6
        arrow-down
        1
        ·
        8 hours ago

        mostly they are spending hours scrolling through social media accounts of certain types of people looking for dox materials. that’s really about it

  • Fedizen@lemmy.world
    link
    fedilink
    English
    arrow-up
    29
    ·
    edit-2
    10 hours ago

    This is kinda what trump wants. If the government cant handle “online stuff” they can pitch privatization. It hurts more if tech megacorps get hacked. Though at this point I wou’d laugh if a bunch of internet nerds got the nuclear codes or locked up a bunch of satellites

  • TypicalHog@lemm.ee
    link
    fedilink
    English
    arrow-up
    4
    arrow-down
    7
    ·
    3 hours ago

    I’m all for attacking infra - we need to make this shit more resilient and we need to transition to memory-safe langs like Rust. This will hopefully accelerate it. Also, I lol at people saying Trump/Elon/Doge will destroy the US when in reality - these kinds of people who wanna attack it probably have way better chances to do so.

    • addie@feddit.uk
      link
      fedilink
      English
      arrow-up
      9
      ·
      3 hours ago

      Memory safety is just a small part of infrastructure resilience. Rust doesn’t protect you from phishing attacks. Rust doesn’t protect you from weak passwords. Rust doesn’t protect you from network misconfiguration. (For that matter, Rust doesn’t protect you from some group of twenty-year old assholes installing their own servers inside your network, like you say.) Protecting your estate is not just about a programming language.

      “Infrastructure”, to me, suggests power, water, oil and food, more than some random website. For US infra, I’m thinking a lot of Allen-Bradley programmable logic controllers, but probably a lot of Siemens and Mitsubishi stuff as well - things like these: https://www.rockwellautomation.com/en-us/products/hardware/allen-bradley/programmable-controllers.html.

      Historically, the controllers for industrial infrastructure (from a single pumping station to critical electrical distribution) have been on their own separate networks, and so things like secure passwords and infrastructure updates haven’t been a priority. Some of these things have been running untouched for decades; thousands of people will have used the (often shared) credentials, which are very rarely updated or changed. The recent change is to demand more visibility and interaction; every SCADA (the main control computer used for interactive plant control) that you bring onto the public internet so that you can see what it’s up to in a central hub, the more opportunity you have to mess up the network security and allow undesirables in.

      PLCs tend to be coded up in “ladder logic” and compiled to device-specific assembly language. It isn’t a programming environment where C has made any inroads over the decades; I very much doubt there’s a Rust compiler for some random microcontroller, and “supported by manufacturer” is critical for these industries.

  • NotMyOldRedditName@lemmy.world
    link
    fedilink
    English
    arrow-up
    27
    ·
    edit-2
    12 hours ago

    Tomorrow

    Trump: By executive order, I dismantle the computer warfare and defence division

    Musk: It doesn’t exist anymore!

    The day after

    Anonymous: They turned off their service that sanitized all inputs. We just stole everything from every department, and put cats on every governments webpage.

  • meowmeowbeanz@sh.itjust.works
    link
    fedilink
    English
    arrow-up
    54
    arrow-down
    14
    ·
    17 hours ago

    Ah, Anonymous—the digital equivalent of a fart in a hurricane. Trump’s America? Weakness isn’t new—it’s baked into the propaganda circus we’ve called democracy since Reagan. You think script kiddies and Elon’s crypto-bros “hacking fascism” will fix anything? Please. The real op is watching tech oligarchs and politicians collude while we argue about which flavor of dystopia we’re slurping.

    Infrastructure attacks? Bold move, Cotton. Let’s see how it works out when grandma’s dialysis machine gets bricked by some edgelord’s Python script. If you want revolution, stop fetishizing IRC nostalgia and touch grass. Until then, this is just digital graffiti on a burning trash barge.

    • fine_sandy_bottom@discuss.tchncs.de
      link
      fedilink
      English
      arrow-up
      18
      arrow-down
      1
      ·
      12 hours ago

      I’m not going to write off hacktivism so quickly.

      Even if it’s just a few defaced websites now and then, that’s a whole lot more effective than any other sort of activism I’ve seen to date.

      • meowmeowbeanz@sh.itjust.works
        link
        fedilink
        English
        arrow-up
        3
        arrow-down
        4
        ·
        7 hours ago

        Oh, sure, let’s romanticize hacktivism, the digital equivalent of spray-painting a slogan on a collapsing wall. A few defaced websites? That’s your bar for effectiveness? The oligarchs aren’t losing sleep over a 404 page; they’re too busy consolidating power while you cheer for digital vandalism like it’s the French Revolution.

        Real change doesn’t come from poking at the system with a keyboard and hoping it flinches. If anything, these stunts just give them more excuses to tighten the noose—more surveillance, more control.

        You want to fight the machine? Build something better. Organize. Create infrastructure that can’t be co-opted. Until then, hacktivism is just a tantrum dressed up as resistance.

        • fine_sandy_bottom@discuss.tchncs.de
          link
          fedilink
          English
          arrow-up
          6
          arrow-down
          1
          ·
          7 hours ago

          Settle down mate.

          I didn’t say defaced websites are going to take down the government.

          My implication was that it would be more effective than ranting on social media.

          • meowmeowbeanz@sh.itjust.works
            link
            fedilink
            English
            arrow-up
            4
            ·
            6 hours ago

            Settle down? Sure, but let’s not settle for mediocrity. If your metric for effectiveness is being slightly better than social media rants, you’ve already lost the plot. Hacktivism that doesn’t disrupt the system in a meaningful way is just noise—an aesthetic rebellion that the system shrugs off or, worse, absorbs.

            You want to be effective? Stop playing into their hands with token gestures. Build tools, networks, and alternatives that outlast their control. Otherwise, you’re just rearranging deck chairs on the Titanic while calling it progress.

            Defacing websites might feel cathartic, but it’s not revolution—it’s a distraction.

      • nomy@lemmy.zip
        link
        fedilink
        English
        arrow-up
        16
        arrow-down
        9
        ·
        13 hours ago

        What a pointless thought-terminating comment.

        Do you have any actual critiques or just lame regurgitated snark to try to win imaginary points?

  • wizardbeard@lemmy.dbzer0.com
    link
    fedilink
    English
    arrow-up
    114
    arrow-down
    1
    ·
    23 hours ago

    Anything supposedly said by “Anonymous” as a hacker group should always be treated with immense skepticism.

    There do exist somewhat legitimate sub-factions that actually take serious actions and do serious ops, and also semi-legitimate “outlets” for their statements… but there’s also an overwhelming amount of smokescreen bullshit “anon news outlets” and little script kiddies running around. It’s important/intentional that those continue existing as smoke screen for the more “serious” factions.

    Beyond that, being an anonymous group with no real methods of confirming membership to outsiders (insiders can just check if you’re in the private IRCs and etc) it means that just about anyone and everyone can make some big declaration like this. The proof will be in the results, not some announcement that could be made by a rando.


    All that said, there’s convincing and considerable evidence (collected by Krebs) that members of Elon’s DOGE group have background in the actual hacking ops spaces.

    No matter who is really making these threats/warnings, I think things are going to get pretty dire in the US government IT space. It’s been well known for decades that most government orgs have absolutely abysmal cyber security, and now you have a bunch of young adult tech-bros with no true accountability running roughshod over all of it. Then there’s the fact that more than one of them have “serious black hat hacker” backgrounds.

    Going to be one wild ride.

    • Semi-Hemi-Lemmygod@lemmy.world
      link
      fedilink
      English
      arrow-up
      35
      ·
      edit-2
      19 hours ago

      little script kiddies running around

      Yeah, they’re running around the Treasury Dept right now.

      It’s been well known for decades that most government orgs have absolutely abysmal cyber security

      Having worked with government agencies and a lot of large private organizations the thing that keeps them mostly secure is the amount of red tape involved with things. Patching a production system requires a teleconference with at least five different people and no one person knows everything.

      The idiots without any security experience coming in to “streamline” things will just make the systems even more fragile and insecure.

    • fine_sandy_bottom@discuss.tchncs.de
      link
      fedilink
      English
      arrow-up
      3
      ·
      12 hours ago

      Yeah. I’ve only spent a few moments skimming through the linked article but if you were part of a legitimate hacktivism group planning a significant operation why would you publish this statement ?

      It’s really just spooky hyperbole - as though written by an adolescent that want’s to sound scary and powerful.

      I would absolutely love to see hacktivists cause some chaos, and maybe even some real financial harm.

      • shastaxc@lemm.ee
        link
        fedilink
        English
        arrow-up
        1
        ·
        2 hours ago

        The whole point is to being attention to the rise of fascism. Hacking without releasing a statement like this is just terrorism. Releasing a statement after hacking can make it easier for the govt to cover up, like “no we weren’t hacked, someone in our server room just accidentally tripped over a power cable”

    • MagicShel@lemmy.zip
      link
      fedilink
      English
      arrow-up
      11
      ·
      21 hours ago

      I don’t know about government overall, but the military and HHS have has some of the most stringent security stances I’ve encountered. To the point where just working for them was a massive chore. (How effective they were I guess I don’t know, but working for them sucked.)

      That said, I’ll take what you said on faith, because I think you’re spot on with everything else.

      • ikidd@lemmy.world
        link
        fedilink
        English
        arrow-up
        15
        arrow-down
        1
        ·
        19 hours ago

        Often, ridiculous and onerous procedural security is hiding massively incompetent actual software security or is used to constrain people from discovering security by obscurity holes. Everything I’ve done in government interfacing as a vendor would seem to confirm this, at least back when I was doing it a few years ago. You’d be hard pressed to convince me it’s changed much since.

      • MutilationWave@lemmy.world
        link
        fedilink
        English
        arrow-up
        6
        ·
        19 hours ago

        I once answered a phone call inside a com closet on base. Military IT was already escorting me. Security came because the cameras in the closet detected the camera on my phone. It’s definitely physically tight security.

      • ipkpjersi@lemmy.ml
        link
        fedilink
        English
        arrow-up
        6
        ·
        20 hours ago

        That said, I’ll take what you said on faith, because I think you’re spot on with everything else.

        I mean, it’s not a secret that governments everywhere run really outdated software (think things like Windows 7 and older) because “it works”, so it really shouldn’t be too surprising.

      • Semi-Hemi-Lemmygod@lemmy.world
        link
        fedilink
        English
        arrow-up
        5
        ·
        19 hours ago

        I had to help the SSA implement SAML authentication once and they weren’t even allowed to share their screen so I could see what they were doing. Totally agree that it’s a massive chore.

    • reksas@sopuli.xyz
      link
      fedilink
      English
      arrow-up
      2
      ·
      17 hours ago

      I guess its pointless to believe their words since there is no way to know if its them. Just look at what they actually do and judge based on that.

    • corsicanguppy@lemmy.ca
      link
      fedilink
      English
      arrow-up
      2
      ·
      20 hours ago

      It’s been well known for decades that most government orgs

      I’ve seen Muni and Regional gov and also dotcoms.

      The Govs I’ve been at were crazy-tight about security. They were unionized and could decide based on conscience vs costs. Dotcoms, though, followed a different trending, one that really focused on costs.

  • absquatulate@lemmy.world
    link
    fedilink
    English
    arrow-up
    155
    arrow-down
    4
    ·
    1 day ago

    Exploit it you say? Please get in line behind the russians, the chinese snd pretty much all arab countries

  • Phoenixz@lemmy.ca
    link
    fedilink
    English
    arrow-up
    33
    arrow-down
    2
    ·
    20 hours ago

    As much and as little that anonymous means, because of the name, because of what the name implies, because of what they do, claim they do, and well, we don’t know what they do… As much as all of that is true, it’s AWESOME to hear from them again, if it is them…

    I can’t wait to see “real” anonymous actions again, lord knows we can use it