Enlace Hacktivista - User contributions [en]

File:Thus Spoke Guccifer 2.0.pdf

2022-06-14T15:01:43Z

Mx Yzptlk: Mx Yzptlk uploaded a new version of File:Thus Spoke Guccifer 2.0.pdf

== Summary ==
A transcript of postings from and messages exchanged by Guccifer 2.0

File:Thus Spake Guccifer 2.0.pdf

2022-06-14T14:53:08Z

Mx Yzptlk: Mx Yzptlk moved page File:Thus Spake Guccifer 2.0.pdf to File:Thus Spoke Guccifer 2.0.pdf

#REDIRECT [[File:Thus Spoke Guccifer 2.0.pdf]]

File:Thus Spoke Guccifer 2.0.pdf

2022-06-14T14:53:08Z

Mx Yzptlk: Mx Yzptlk moved page File:Thus Spake Guccifer 2.0.pdf to File:Thus Spoke Guccifer 2.0.pdf

== Summary ==
A transcript of postings from and messages exchanged by Guccifer 2.0

File:Thus Spoke Guccifer 2.0.pdf

2022-03-11T19:46:31Z

Mx Yzptlk: Mx Yzptlk uploaded a new version of File:Thus Spake Guccifer 2.0.pdf

== Summary ==
A transcript of postings from and messages exchanged by Guccifer 2.0

To Do

2022-03-11T18:34:52Z

Mx Yzptlk: Removed Guccifer 2.0

These pages need special attention and work.

=Empty Articles=

These pages have no content at all.

'''[[Special:WantedPages|Red links]]'''

* [[AnibalLeaks]]‏‎
* [[Bob Otto emails]]‏
* [[Freedom Hosting II‏]]
* [[LeakyMails]]‏
* [[RedHack]]‏‎
* [[Salvini emails]]‏
* [[Sarah Palin emails‏]]
* [[Syria emails]]‏‎‎

'''Uncreated pages'''

* DCCC Hack
* DNC Email hacks
* Guccifer
* OPM Hack
* Sabu
* SolarWinds
* The Shadow Brokers

=Stubs=
These pages have minimal content, but need to be expanded.

'''[[Category:Stub_pages|Stub pages]]'''

==Hacks==

* [[Berat Albayrak Emails]]
* [[Bureau Of Justice]]
* [[Cayman National Bank and Trust (Isle of Man)]]
* [[Chinga la Migra]]
* [[CorruptBrazil]]
* [[CSLEA]]
* [[Epik]]
* [[Flexispy]]
* [[Fuck FBI Friday]]
* [[Gamma Group]]
* [[Hacking Team]]
* [[HBGary]]
* [[Luanda Leaks]]
* [[LulzSecPeru]]
* [[Milico Leaks]]
* [[Norton AntiVirus]]
* [[Operation Payback]]
* [[Policía Nacional Civil de El Salvador]]
* [[Project AIG]]
* [[Russian Interior Ministry]]
* [[Shooting Sheriffs Saturday]]
* [[Sownage]]
* [[Stratfor]]
* [[Surkov Leaks]]
* [[Varela Leaks‏]]

==Hackers==

* [[AntiSec]]
* [[CyberHunta]]
* [[FocaLeaks]]
* [[Jeremy Hammond]]
* [[Legion Of Doom]]
* [[Maksym Igor Popov]]
* [[Rui Pinto]]
* [[Tillie Kottmann]]
* [[Ukrainian Cyber Troops]]
* [[Walter Delgatti]]

=Orphans=
These pages and files have been created, but aren't linked to.

==Pages==

'''[[Special:LonelyPages|Orphaned pages]]'''

* [[Jeremy Hammond]]
* [[Legion Of Doom]]
* [[Maksym Igor Popov]]
* [[Masters of Deception]]
* [[Walter Delgatti]]

==Files==

File:Thus Spoke Guccifer 2.0.pdf

2022-03-11T18:32:27Z

Mx Yzptlk: Mx Yzptlk uploaded a new version of File:Thus Spake Guccifer 2.0.pdf

== Summary ==
A transcript of postings from and messages exchanged by Guccifer 2.0

Guccifer 2.0

2022-03-11T18:17:15Z

Mx Yzptlk: Created page with "Guccifer 2.0 is a persona which claimed to be the hacker(s) who gained unauthorized access to the Democratic National Committee (DNC) computer network and then leaked its documents to the media, WikiLeaks, and a conference event. The U.S. Intelligence Community accused Russian intelligence of the hacks and of operating the Guccifer 2.0 persona, which Guccifer 2.0 denied. There is wide media consensus in the west that Guccifer 2.0 was Russian, based partially on analysis..."

Guccifer 2.0 is a persona which claimed to be the hacker(s) who gained unauthorized access to the Democratic National Committee (DNC) computer network and then leaked its documents to the media, WikiLeaks, and a conference event. The U.S. Intelligence Community accused Russian intelligence of the hacks and of operating the Guccifer 2.0 persona, which Guccifer 2.0 denied. There is wide media consensus in the west that Guccifer 2.0 was Russian, based partially on analysis from CrowdStrike, Fidelis Cybersecurity, FireEye's Mandiant, SecureWorks, ThreatConnect, Trend Micro, and the security editor for Ars Technica. WikiLeaks founder Julian Assange said multiple parties had access to DNC emails and that there was "no proof" Russia was behind the attack. The Department of Justice later [https://www.justice.gov/file/1080281/download|indicted 12 Russian Intelligence officers] for the hack.

[[:File:Thus_Spake_Guccifer_2.0.pdf|Thus Spake Guccifer 2.0 transcript]]

[https://www.justice.gov/file/1080281/download Indictment]

[[Category:Hackers]]

File:Thus Spoke Guccifer 2.0.pdf

2022-03-11T18:03:03Z

Mx Yzptlk: A transcript of postings from and messages exchanged by Guccifer 2.0

== Summary ==
A transcript of postings from and messages exchanged by Guccifer 2.0

Varela Leaks

2022-01-01T21:55:40Z

Mx Yzptlk:

The nature of the hack behind Varela Leaks is contested. According to the leakers, they had the physical phone itself, calling it "the lost telephone of the ex-President of Panama." In this version of events, the hacking was purely in the extraction and decryption of the 25 gigabytes of data.

Varela denied that his phone was lost or stolen, and insisted that it had been hacked by people working with or for his predecessor, Ricardo Martinelli, using NSO Group's Pegasus system, which Martinelli's administration was a client of. Varela admitted that most of the communications were his, but claimed others were edited or fabricated.

Notably, the original upload on Mega remained available several years later.

https://web.archive.org/web/20200105091041/https://varelaleaks.com/
[[File:Varela_Leaks.txt]]
https://panamaadvisoryinternationalgroup.com/blog/news-from-panama/panama-attorney-general-explain-varela-leaks/
https://mega.nz/file/T10UjaJS#2ZvNzATfv9wlvFkeD6AsKhnRguOhlTvPXh6j-V7Z4GA
https://archive.ph/mlTX8
https://ddosecrets.com/wiki/Varela_Leaks

[[Category:Hacks]] [[Category:Stub pages]]

Varela Leaks

2022-01-01T21:54:46Z

Mx Yzptlk:

To Do

2022-01-01T20:43:28Z

Mx Yzptlk: Moved Varela Leaks‏ to stubs

These pages need special attention and work.

=Empty Articles=

These pages have no content at all.

'''[[Special:WantedPages|Red links]]'''

* [[AnibalLeaks]]‏‎
* [[Bob Otto emails]]‏
* [[Freedom Hosting II‏]]
* [[LeakyMails]]‏
* [[RedHack]]‏‎
* [[Salvini emails]]‏
* [[Sarah Palin emails‏]]
* [[Syria emails]]‏‎‎

'''Uncreated pages'''

* DCCC Hack
* DNC Email hacks
* Guccifer
* Guccifer 2.0
* OPM Hack
* Sabu
* SolarWinds
* The Shadow Brokers

=Stubs=
These pages have minimal content, but need to be expanded.

'''[[Category:Stub_pages|Stub pages]]'''

==Hacks==

* [[Berat Albayrak Emails]]
* [[Bureau Of Justice]]
* [[Cayman National Bank and Trust (Isle of Man)]]
* [[Chinga la Migra]]
* [[CorruptBrazil]]
* [[CSLEA]]
* [[Epik]]
* [[Flexispy]]
* [[Fuck FBI Friday]]
* [[Gamma Group]]
* [[Hacking Team]]
* [[HBGary]]
* [[Luanda Leaks]]
* [[LulzSecPeru]]
* [[Milico Leaks]]
* [[Norton AntiVirus]]
* [[Operation Payback]]
* [[Policía Nacional Civil de El Salvador]]
* [[Project AIG]]
* [[Russian Interior Ministry]]
* [[Shooting Sheriffs Saturday]]
* [[Sownage]]
* [[Stratfor]]
* [[Surkov Leaks]]
* [[Varela Leaks‏]]

==Hackers==

* [[AntiSec]]
* [[CyberHunta]]
* [[FocaLeaks]]
* [[Jeremy Hammond]]
* [[Legion Of Doom]]
* [[Maksym Igor Popov]]
* [[Rui Pinto]]
* [[Tillie Kottmann]]
* [[Ukrainian Cyber Troops]]
* [[Walter Delgatti]]

=Orphans=
These pages and files have been created, but aren't linked to.

==Pages==

'''[[Special:LonelyPages|Orphaned pages]]'''

* [[Jeremy Hammond]]
* [[Legion Of Doom]]
* [[Maksym Igor Popov]]
* [[Masters of Deception]]
* [[Walter Delgatti]]

==Files==

Varela Leaks

2022-01-01T20:42:52Z

Mx Yzptlk:

The nature of the hack behind Varela Leaks is contested. According to the leakers, they had the physical phone itself, calling it "the lost telephone of the ex-President of Panama." In this version of events, the hacking was purely in the extraction and decryption of the 25 gigabytes of data.

Varela denied that his phone was lost or stolen, and insisted that it had been hacked by people working with or for his predecessor, Ricardo Martinelli, using NSO Group's Pegasus system, which Martinelli's administration was a client of.

Varela admitted that most of the communications were his, but claimed others were edited or fabricated.

https://web.archive.org/web/20200105091041/https://varelaleaks.com/
[[File:Varela_Leaks.txt]]
https://panamaadvisoryinternationalgroup.com/blog/news-from-panama/panama-attorney-general-explain-varela-leaks/

[[Category:Hacks]] [[Category:Stub articles]]

Varela Leaks

2022-01-01T20:41:53Z

Mx Yzptlk: Created page with "The nature of the hack behind Varela Leaks is contested. According to the leakers, they had the physical phone itself, calling it "the lost telephone of the ex-President of Panama." In this version of events, the hacking was purely in the extraction and decryption of the 25 gigabytes of data. Varela denied that his phone was lost or stolen, and insisted that it had been hacked by people working with or for his predecessor, Ricardo Martinelli, using NSO Group's Pegasus s..."

The nature of the hack behind Varela Leaks is contested. According to the leakers, they had the physical phone itself, calling it "the lost telephone of the ex-President of Panama." In this version of events, the hacking was purely in the extraction and decryption of the 25 gigabytes of data.

Varela denied that his phone was lost or stolen, and insisted that it had been hacked by people working with or for his predecessor, Ricardo Martinelli, using NSO Group's Pegasus system, which Martinelli's administration was a client of.

Varela admitted that most of the communications were his, but claimed others were edited or fabricated.

https://web.archive.org/web/20200105091041/https://varelaleaks.com/
[[File:Varela_Leaks.txt]]
https://panamaadvisoryinternationalgroup.com/blog/news-from-panama/panama-attorney-general-explain-varela-leaks/

[[Category:Hacks]] [[Category:Stubs]]

File:Varela Leaks.txt

2022-01-01T20:27:27Z

Mx Yzptlk:

To Do

2021-12-29T16:17:34Z

Mx Yzptlk: Added Uncreated pages

These pages need special attention and work.

=Empty Articles=

These pages have no content at all.

'''[[Special:WantedPages|Red links]]'''

* [[AnibalLeaks]]‏‎
* [[Bob Otto emails]]‏
* [[Freedom Hosting II‏]]
* [[LeakyMails]]‏
* [[RedHack]]‏‎
* [[Salvini emails]]‏
* [[Sarah Palin emails‏]]
* [[Syria emails]]‏‎
* [[Varela Leaks‏]]‎

'''Uncreated pages'''

* DCCC Hack
* DNC Email hacks
* Guccifer
* Guccifer 2.0
* OPM Hack
* Sabu
* SolarWinds
* The Shadow Brokers

=Stubs=
These pages have minimal content, but need to be expanded.

'''[[Category:Stub_pages|Stub pages]]'''

==Hacks==

* [[Berat Albayrak Emails]]
* [[Bureau Of Justice]]
* [[Cayman National Bank and Trust (Isle of Man)]]
* [[Chinga la Migra]]
* [[CorruptBrazil]]
* [[CSLEA]]
* [[Epik]]
* [[Flexispy]]
* [[Fuck FBI Friday]]
* [[Gamma Group]]
* [[Hacking Team]]
* [[HBGary]]
* [[Luanda Leaks]]
* [[LulzSecPeru]]
* [[Milico Leaks]]
* [[Norton AntiVirus]]
* [[Operation Payback]]
* [[Policía Nacional Civil de El Salvador]]
* [[Project AIG]]
* [[Russian Interior Ministry]]
* [[Shooting Sheriffs Saturday]]
* [[Sownage]]
* [[Stratfor]]
* [[Surkov Leaks]]

==Hackers==

* [[AntiSec]]
* [[CyberHunta]]
* [[FocaLeaks]]
* [[Jeremy Hammond]]
* [[Legion Of Doom]]
* [[Maksym Igor Popov]]
* [[Rui Pinto]]
* [[Tillie Kottmann]]
* [[Ukrainian Cyber Troops]]
* [[Walter Delgatti]]

=Orphans=
These pages and files have been created, but aren't linked to.

==Pages==

'''[[Special:LonelyPages|Orphaned pages]]'''

* [[Jeremy Hammond]]
* [[Legion Of Doom]]
* [[Maksym Igor Popov]]
* [[Masters of Deception]]
* [[Walter Delgatti]]

==Files==

Talk:Basic Wiki Content and Editor Policies

2021-12-27T21:07:32Z

Mx Yzptlk: /* Content */ Added a question at the bottom

Please use this space to discuss the basic scope and purpose of the wiki

=Format=
Please add more questions to the appropriate section, and add your thoughts and comments under each question.

For the purposes of this Discussion page only, questions do not need to be signed - only answers and comments.

=Questions=

==General==

* How is the information on the wiki different from the information on Wikipedia?
** Mostly just most pages on here don't meet the standards of notability for inclusion in Wikipedia. Also we'd especially like to include any statements or textfiles published by the hackers, and any technical information about how the hack was performed. [[User:Enlacehacktivista|Enlacehacktivista]] ([[User talk:Enlacehacktivista|talk]]) 21:55, 24 December 2021 (UTC)
*** Speaking of technical information about the hack - does that include information from the subjects of the hack? Or third party analysis performed by cyber experts, etc.? [[User:Mx Yzptlk|Mxy]] ([[User talk:Mx Yzptlk|talk]]) 20:25, 25 December 2021 (UTC)
**** I'd personally favor first-party accounts from the hackers falling back on incident reports from the subject. With "cyber experts" you start running into things that are pure speculation. I'm trying to convey the instinct of what a hacker might look for with my writing, so where there is conflicting speculation, I'm favoring the easiest way in that "checks out." But people are welcome to add their own write ups/theories. If somebody does a better job trying to figure out how the hack was done than the cyber pundits, it's well researched and educational, I also don't see why we should not allow it. [[User:Amongomous|Amongomous]] ([[User talk:Amongomous|talk]]) 23:55, 25 December 2021 (UTC)
***** "I'd personally favor first-party accounts from the hackers falling back on incident reports from the subject." <--- Absolutely agree with this, especially for the purposes of this wiki. There are definitely times where we need to include both, though. One page I've been putting off creating is the [[Apple UDIDs]] entry, because it's a headache of contradictions and apparent lies. It's one of the instances where I don't think we can trust the hackers' account, but the full history and contradictory versions are definitely worth recording. [[User:Mx Yzptlk|Mxy]] ([[User talk:Mx Yzptlk|talk]]) 15:31, 27 December 2021 (UTC)

==Editor conduct==

* Do Conflicts Of Interest (COI) prevent users from editing a page?
** If not, should editors disclose their COI?
*** If so, how to do this while maintaining OPSEC?
* How should the community handle people using the wiki for self-promotion?
* How should the community handle people using the wiki to attack or defame others?
** I think it's fine for people to edit pages about hacks they took part in and they shouldn't have to disclose it for obvious opsec reasons. If someone is using it to attack or defame others or for excessive self-promotion then we'll warn or block the user. [[User:Enlacehacktivista|Enlacehacktivista]] ([[User talk:Enlacehacktivista|talk]]) 21:55, 24 December 2021 (UTC)
* What about first hand experience and knowledge? If the wiki attracts people in the community, it may very well draw people who were "in the room." How should the wiki handle those situations?

==Content==

* How are hacks attributed when they aren't claimed at the time, but attribution is later claimed without definitive proof?
** I think it should be noted with context and skepticism. [[User:Mx Yzptlk|Mxy]] ([[User talk:Mx Yzptlk|talk]]) 22:20, 24 December 2021 (UTC)
* How are hacks attributed when they aren't claimed at the time, but alleged attribution is later given by a third party - and denied by the alleged hacker?
** If there's conflicting claims I think we can just include both [[User:Enlacehacktivista|Enlacehacktivista]] ([[User talk:Enlacehacktivista|talk]]) 21:55, 24 December 2021 (UTC)
* If a hack is just a dox, should it be included with the wiki?
** no [[User:Enlacehacktivista|Enlacehacktivista]] ([[User talk:Enlacehacktivista|talk]]) 21:55, 24 December 2021 (UTC)
* If attribution isn't widely known or accepted, should it be listed on the wiki?
** If there's something public you can cite to back it [[User:Enlacehacktivista|Enlacehacktivista]] ([[User talk:Enlacehacktivista|talk]]) 21:55, 24 December 2021 (UTC)
*** What if it falls into that amorphous field of "community knowledge" but it isn't published anywhere that's still accessible? After all, pastes get removed, forums go down, etc. [[User:Mx Yzptlk|Mxy]] ([[User talk:Mx Yzptlk|talk]]) 20:25, 25 December 2021 (UTC)
* Do defacements count as hacks for the purpose of the wiki and the [[Hacker History]] section?
** We don't really want to have articles about every defacement on zone-h, but I think we can include defacements if it's well-targeted and not just randomly scanning for and defacing vulnerable sites. [[User:Enlacehacktivista|Enlacehacktivista]] ([[User talk:Enlacehacktivista|talk]]) 21:55, 24 December 2021 (UTC)
*** It was pointed out to me that some defacements were used for communiques by groups like [[AntiSec]]. These probably shouldn't be listed as separate hacks (unless there was more to it) but they should probably be included on the wiki if they include a communique from a notable hacker or hacker group/collective. [[User:Mx Yzptlk|Mxy]] ([[User talk:Mx Yzptlk|talk]]) 20:25, 25 December 2021 (UTC)
* Does malware count as a hack for the purpose of the wiki and the [[Hacker History]] section?
** I'd propose that malware itself doesn't, but hacks based on malware obviously do. [[User:Mx Yzptlk|Mxy]] ([[User talk:Mx Yzptlk|talk]]) 22:20, 24 December 2021 (UTC)
* Do ransomware hacks count for the purpose of the wiki and the [[Hacker History]] section?
** I think we should include if there was data leaked in the public interest. [[User:Enlacehacktivista|Enlacehacktivista]] ([[User talk:Enlacehacktivista|talk]]) 21:55, 24 December 2021 (UTC)
** Leaked negotiations and chats with ransomware hackers can also prove enlightening and interesting for cultural and historical value. [[User:Mx Yzptlk|Mxy]] ([[User talk:Mx Yzptlk|talk]]) 22:20, 24 December 2021 (UTC)
* Do commercial hacks count for the purpose of the wiki and the [[Hacker History]] section?
** I feel like if maybe if there's information that would particularly fit the wiki, like communications/messages from the hackers or technical information about the hack. But if it's basically just a breach notification, it'd just be cluttering up the wiki and missing what I understand the intent of its spirit to be. [[User:Mx Yzptlk|Mxy]] ([[User talk:Mx Yzptlk|talk]]) 20:25, 25 December 2021 (UTC)
* Do state sponsored hacks count for the purpose of the wiki and the [[Hacker History]] section?
** What about cases like Shaltai-Boltai or Lulzsec that started off independent but were later run by states? I think it's fine to include but we should put a note about state involvement. [[User:Enlacehacktivista|Enlacehacktivista]] ([[User talk:Enlacehacktivista|talk]]) 21:55, 24 December 2021 (UTC)
** I think we should include them and generally take the hackers' word for it when they claim to be hacktivist until there is solid proof otherwise. Especially if we can demystify the hack to show that the level of technical sophistication is attainable by a single person or small group. Something like the recent Iran railways hack comes to mind where there is a lot of accusation of state backing, but no solid proof besides "it seems too well resourced to really be hacktivism." [[User:Amongomous|Amongomous]] ([[User talk:Amongomous|talk]]) 00:45, 25 December 2021 (UTC)
*** Just chiming in here to say I think this is a really good point and goal. [[User:Mx Yzptlk|Mxy]] ([[User talk:Mx Yzptlk|talk]]) 01:20, 25 December 2021 (UTC)
** I'd eventually like to cover SolarWinds from the attackers' perspective and there is certainly a lot about this one that we do not yet know about, so it could be an interesting subject of leaks in itself. [[User:Amongomous|Amongomous]] ([[User talk:Amongomous|talk]]) 01:53, 26 December 2021 (UTC)
* What about leaks of state sponsored hacks/hackers? e.g. Vault 7, Vault 8, Shadowbrokers
* What about cases where someone presents as a hacktivist, but there's widespread acceptance that they're a state sponsored actor? e.g. Guccifer 2.0

* Do "script kiddie" hacks count for the purpose of the wiki and the [[Hacker History]] section?
** I don't think we should include untargeted attacks, like script kiddies just scanning the internet and defacing whatever vulnerable websites they find. If the hack is of a well-chosen target but the methods are basic or "script kiddie" I think it's fine for inclusion. [[User:Enlacehacktivista|Enlacehacktivista]] ([[User talk:Enlacehacktivista|talk]]) 21:55, 24 December 2021 (UTC)
*** This makes sense, especially considering the number of hacks that are simple or basic and waiting to happen, just lacking someone with the will and interest. After all, how frequent do articles after the fact marvel that a hack didn't happen earlier? Epik is recent one example that comes to mind where there was that sort of commentary. [[User:Mx Yzptlk|Mxy]] ([[User talk:Mx Yzptlk|talk]]) 22:20, 24 December 2021 (UTC)
* Do hacks have to meet a notability test, similar to Wikipedia articles?
** I don't think there needs to be a notability test, but if the wiki starts getting unbalanced with too many articles about some not-so-notable hacker group then we'll think if we need standards [[User:Enlacehacktivista|Enlacehacktivista]] ([[User talk:Enlacehacktivista|talk]]) 21:55, 24 December 2021 (UTC)
* If something that wouldn't otherwise qualify is especially notable, does that make a difference?
** I don't think it should, unless it was already very borderline. [[User:Mx Yzptlk|Mxy]] ([[User talk:Mx Yzptlk|talk]]) 22:20, 24 December 2021 (UTC)
* How should the wiki treat anonymous (lowercase a) research?
** It should probably ignore it unless it's been peer reviewed in someway. [[User:Mx Yzptlk|Mxy]] ([[User talk:Mx Yzptlk|talk]]) 22:20, 24 December 2021 (UTC)
* How should the wiki treat claims, statements and self-identifications from dishonest hackers? At what point does correcting this become doxing and does it matter?
** In theory this site is just documenting what's already been public so I don't think we're doxing anyone. If a hacker claimed something that's probably false, I think we should include it, with a note about why it's probably false. [[User:Enlacehacktivista|Enlacehacktivista]] ([[User talk:Enlacehacktivista|talk]]) 21:55, 24 December 2021 (UTC)
* If the wiki seeks to capture a sort of oral history of hackers, it'll inevitably capture disputed claims - should it seek to reconcile these, or simply record them and their discordance?
** We should just record the different claims, unless there's very strong evidence that one is correct and the other is just wrong. [[User:Enlacehacktivista|Enlacehacktivista]] ([[User talk:Enlacehacktivista|talk]]) 21:55, 24 December 2021 (UTC)
* How should the wiki handle allegations of hackers cooperating with law enforcement, etc.?
** We shouldn't accuse without good evidence but if there's solid evidence I think it's worth including [[User:Enlacehacktivista|Enlacehacktivista]] ([[User talk:Enlacehacktivista|talk]]) 21:55, 24 December 2021 (UTC)
* How much media should be hosted on the wiki?
* Should the wiki include things like logs?
* How much cultural content should go on the wiki? e.g. Hacker zines
** It's fine to include but I don't think it's that important to mirror stuff that's already in phrack or textfiles.com or otherwise well-archived and unlikely to disappear. [[User:Enlacehacktivista|Enlacehacktivista]] ([[User talk:Enlacehacktivista|talk]]) 21:55, 24 December 2021 (UTC)
* What about non-English content?
** non-english content is good [[User:Enlacehacktivista|Enlacehacktivista]] ([[User talk:Enlacehacktivista|talk]]) 21:55, 24 December 2021 (UTC)
* How should we handle articles for serialized hacks? e.g. Nintendo Gigaleaks seems to be a series of hacks collected under one banner/name - but the hacks and leaks took place at different times.
* How should we handle things that are definitely leaks - but the exfiltration had some element of hacking? e.g. Snowden and Schulte are both definitely leakers, but copying and exfiltrating the data involved some level of activity that could be considered hacking. There are other examples.

Apple UDIDs

2021-12-27T20:33:20Z

Mx Yzptlk:

A 2012 hack and leak of a list of over 12 million Apple iOS devices, attributed to [[AntiSec]] and Anonymous. The initial release claimed that the data was hacked from the laptop of an FBI laptop. Later analysis indicated the data was hacked from the app developer BlueToad. The developer released a statement confirming this.

On September 3rd, 2012, @AnonymousIRC posted a statement on behalf of the hackers, ostensibly AntiSec, claiming that:

<blockquote>
During the second week of March 2012, a Dell Vostro notebook, used by Supervisor Special Agent Christopher K. Stangl from FBI Regional Cyber Action Team and New York FBI Office Evidence Response Team was breached using the AtomicReferenceArray vulnerability on Java, during the shell session some files were downloaded from his Desktop folder one of them with the name of "NCFTA_iOS_devices_intel.csv" turned to be a list of 12,367,232 Apple iOS devices including Unique Device Identifiers (UDID), user names, name of device, type of device, Apple Push Notification Service tokens, zipcodes, cellphone numbers, addresses, etc. the personal details fields referring to people appears many times empty leaving the whole list incompleted on many parts. no other file on the same folder makes mention about this list or its purpose.
</blockquote>

Notably, at the beginning of the year Stangl had been a participant on the [https://pastebin.com/0eWbr6nd leaked FBI call about Anonymous]. The New York office was also responsible for the recruitment of Sabu, which had been revealed in March.

The following day, the FBI posted on their website and Twitter that "At this time, there is no evidence indicating that an FBI laptop was compromised or that the FBI either sought or obtained this data." Journalists and analysts quickly pointed out that NCFTA was seemingly a reference to the National Cyber Forensics and Training Alliance, a non-profit that works with the government. The NCFTA similarly denied involvement. The Anonymous leak platform Par:AnoIA cast doubt on FBI's denials and stated their sources were more trustworthy.

An analysis performed by David Schuetz of Intrepidus Group, a New York-based mobile device security consulting firm noted a pattern in the leaked data - references to BlueToad, an app developer that provided services to 6,000 different publishers. On September 10th, BlueToad released a statement that "A little more than a week ago," they had been hacked and soon after "an unknown group" had posted the data online.

[[File:NfVT7b0Z.txt]]
[[File:Par-anoia_UDID_release.png]]
https://web.archive.org/web/20130429183247/http://www.fbi.gov/news/pressrel/press-releases/statement-on-alleged-compromise-of-fbi-laptop 
https://web.archive.org/web/20130526001940/http://thenextweb.com/apple/2012/09/04/antisec-hackers-leak-1000001-apple-device-ids-allegedly-obtained-fbi-breach
https://web.archive.org/web/20130511054552/http://intrepidusgroup.com/insight/2012/09/tracking-udid-src/ 
https://web.archive.org/web/20130506204236/http://redtape.nbcnews.com/_news/2012/09/10/13781440-exclusive-the-real-source-of-apple-device-ids-leaked-by-anonymous-last-week?lite 
https://web.archive.org/web/20120911002239/http://blog.bluetoad.com/2012/09/10/statement-from-bluetoad-regarding-the-cyber-attack-suffered-in-the-recent-case-of-stolen-apple-udids/
https://web.archive.org/web/20130502112459/http://www.forbes.com/sites/parmyolson/2012/09/04/fbi-agents-laptop-hacked-to-grab-12-million-apple-ids-anonymous-claims/ 
https://slate.com/technology/2012/09/blue-toad-antisec-apple-user-data-stolen-from-app-firm-not-fbi-laptop-says-nbc.html

[[Category:Hacks]]

Talk:To Do

2021-12-27T17:30:25Z

Mx Yzptlk:

=Feel free to delete=
We can get rid of this if it's not useful to others, I just thought it might help to have a consolidated list of what needs to be worked on. Figure we can also add things here as placeholders/reminders instead of just adding more red links on the [[Hacker History]] page. [[User:Mx Yzptlk|Mxy]] ([[User talk:Mx Yzptlk|talk]]) 17:29, 27 December 2021 (UTC)

Talk:To Do

2021-12-27T17:29:56Z

Mx Yzptlk: Created page with "We can get rid of this if it's not useful to others, I just thought it might help to have a consolidated list of what needs to be worked on. Figure we can also add things here as placeholders/reminders instead of just adding more red links on the Hacker History page. ~~~~"

We can get rid of this if it's not useful to others, I just thought it might help to have a consolidated list of what needs to be worked on. Figure we can also add things here as placeholders/reminders instead of just adding more red links on the [[Hacker History]] page. [[User:Mx Yzptlk|Mxy]] ([[User talk:Mx Yzptlk|talk]]) 17:29, 27 December 2021 (UTC)

Epik

2021-12-27T17:22:55Z

Mx Yzptlk: Reverted edits by Mx Yzptlk (talk) to last revision by imported>Mediawiki user

https://ddosecrets.com/wiki/Epik
 
https://en.wikipedia.org/wiki/2021_Epik_data_breach
 
[[:File:Epik.txt|statement by the hackers]]

[[Category:Stub pages]]
[[Category:Hacks]]

To Do

2021-12-27T17:22:52Z

Mx Yzptlk: Created page with "These pages need special attention and work Please update the list as you go. =Empty Articles= These pages have no content at all. '''Red links''' * AnibalLeaks‏‎ * Bob Otto emails‏ * Freedom Hosting II‏ * LeakyMails‏ * RedHack‏‎ * Salvini emails‏ * Sarah Palin emails‏ * Syria emails‏‎ * Varela Leaks‏‎ =Stubs= These pages have minimal content, but are in great need of expansion. ''..."

These pages need special attention and work Please update the list as you go.

=Empty Articles=
These pages have no content at all.

'''[[Special:WantedPages|Red links]]'''

* [[AnibalLeaks]]‏‎
* [[Bob Otto emails]]‏
* [[Freedom Hosting II‏]]
* [[LeakyMails]]‏
* [[RedHack]]‏‎
* [[Salvini emails]]‏
* [[Sarah Palin emails‏]]
* [[Syria emails]]‏‎
* [[Varela Leaks‏]]‎

=Stubs=
These pages have minimal content, but are in great need of expansion.

'''[[Category:Stub_pages|Stub pages]]'''

==Hacks==

* [[Berat Albayrak Emails]]
* [[Bureau Of Justice]]
* [[Cayman National Bank and Trust (Isle of Man)]]
* [[Chinga la Migra]]
* [[CorruptBrazil]]
* [[CSLEA]]
* [[Epik]]
* [[Flexispy]]
* [[Fuck FBI Friday]]
* [[Gamma Group]]
* [[Hacking Team]]
* [[HBGary]]
* [[Luanda Leaks]]
* [[LulzSecPeru]]
* [[Milico Leaks]]
* [[Norton AntiVirus]]
* [[Operation Payback]]
* [[Policía Nacional Civil de El Salvador]]
* [[Project AIG]]
* [[Russian Interior Ministry]]
* [[Shooting Sheriffs Saturday]]
* [[Sownage]]
* [[Stratfor]]
* [[Surkov Leaks]]

==Hackers==

* [[AntiSec]]
* [[CyberHunta]]
* [[FocaLeaks]]
* [[Jeremy Hammond]]
* [[Legion Of Doom]]
* [[Maksym Igor Popov]]
* [[Rui Pinto]]
* [[Tillie Kottmann]]
* [[Ukrainian Cyber Troops]]
* [[Walter Delgatti]]

=Orphans=
These pages and files have been created, but aren't linked to.

==Pages==
'''[[Special:LonelyPages|Orphaned pages]]'''

* [[Jeremy Hammond]]
* [[Legion Of Doom]]
* [[Maksym Igor Popov]]
* [[Masters of Deception]]
* [[Walter Delgatti]]

==Files==

Epik

2021-12-27T17:21:00Z

Mx Yzptlk:

https://ddosecrets.com/wiki/Epik
 
https://en.wikipedia.org/wiki/2021_Epik_data_breach
 
[[File:Epik.txt|statement by the hackers]]

[[Category:Stub pages]]
[[Category:Hacks]]

Talk:Basic Wiki Content and Editor Policies

2021-12-27T16:37:38Z

Mx Yzptlk: /* Content */ Added question at the bottom

Apple UDIDs

2021-12-27T16:32:04Z

Mx Yzptlk: Created page with "A 2012 hack and leak of a list of over 12 million Apple iOS devices, attributed to AntiSec and Anonymous. The initial release claimed that the data was hacked from the laptop of an FBI laptop. Later analysis indicated the data was hacked from the app developer BlueToad. The developer released a statement confirming this. On September 3rd, 2012, @AnonymousIRC posted a statement on behalf of the hackers, ostensibly AntiSec, claiming that: <blockquote> During the seco..."

A 2012 hack and leak of a list of over 12 million Apple iOS devices, attributed to [[AntiSec]] and Anonymous. The initial release claimed that the data was hacked from the laptop of an FBI laptop. Later analysis indicated the data was hacked from the app developer BlueToad. The developer released a statement confirming this.

On September 3rd, 2012, @AnonymousIRC posted a statement on behalf of the hackers, ostensibly AntiSec, claiming that:

<blockquote>
During the second week of March 2012, a Dell Vostro notebook, used by Supervisor Special Agent Christopher K. Stangl from FBI Regional Cyber Action Team and New York FBI Office Evidence Response Team was breached using the AtomicReferenceArray vulnerability on Java, during the shell session some files were downloaded from his Desktop folder one of them with the name of
"NCFTA_iOS_devices_intel.csv" turned to be a list of 12,367,232 Apple iOS devices including Unique Device Identifiers (UDID), user names, name of device, type of device, Apple Push Notification Service tokens, zipcodes, cellphone numbers, addresses, etc. the personal details fields referring to people appears many times empty leaving the whole list incompleted on many parts. no other file on the same folder makes mention about this list or its purpose.
</blockquote>

The following day, the FBI posted on their website and Twitter that "At this time, there is no evidence indicating that an FBI laptop was compromised or that the FBI either sought or obtained this data." Journalists and analysts quickly pointed out that NCFTA was seemingly a reference to the National Cyber Forensics and Training Alliance, a non-profit that works with the government. The NCFTA similarly denied involvement. The Anonymous leak platform Par:AnoIA cast doubt on FBI's denials and stated their sources were more trustworthy.

An analysis performed by David Schuetz of Intrepidus Group, a New York-based mobile device security consulting firm noted a pattern in the leaked data - references to BlueToad, an app developer that provided services to 6,000 different publishers. On September 10th, BlueToad released a statement that "A little more than a week ago," they had been hacked and soon after "an unknown group" had posted the data online.

[[File:NfVT7b0Z.txt]]
[[File:Par-anoia_UDID_release.png]]
https://web.archive.org/web/20130429183247/http://www.fbi.gov/news/pressrel/press-releases/statement-on-alleged-compromise-of-fbi-laptop 
https://web.archive.org/web/20130526001940/http://thenextweb.com/apple/2012/09/04/antisec-hackers-leak-1000001-apple-device-ids-allegedly-obtained-fbi-breach
https://web.archive.org/web/20130511054552/http://intrepidusgroup.com/insight/2012/09/tracking-udid-src/ 
https://web.archive.org/web/20130506204236/http://redtape.nbcnews.com/_news/2012/09/10/13781440-exclusive-the-real-source-of-apple-device-ids-leaked-by-anonymous-last-week?lite 
https://web.archive.org/web/20120911002239/http://blog.bluetoad.com/2012/09/10/statement-from-bluetoad-regarding-the-cyber-attack-suffered-in-the-recent-case-of-stolen-apple-udids/
https://web.archive.org/web/20130502112459/http://www.forbes.com/sites/parmyolson/2012/09/04/fbi-agents-laptop-hacked-to-grab-12-million-apple-ids-anonymous-claims/

[[Category:Hacks]]

File:Par-anoia UDID release.png

2021-12-27T15:50:21Z

Mx Yzptlk:

File:NfVT7b0Z.txt

2021-12-27T15:48:39Z

Mx Yzptlk:

[[Category:Communiques]]

File:NfVT7b0Z.txt

2021-12-27T15:48:14Z

Mx Yzptlk:

Talk:Basic Wiki Content and Editor Policies

2021-12-27T15:31:55Z

Mx Yzptlk:

Talk:Basic Wiki Content and Editor Policies

2021-12-25T20:25:29Z

Mx Yzptlk:

Please use this space to discuss the basic scope and purpose of the wiki

=Format=
Please add more questions to the appropriate section, and add your thoughts and comments under each question.

For the purposes of this Discussion page only, questions do not need to be signed - only answers and comments.

=Questions=

==General==

* How is the information on the wiki different from the information on Wikipedia?
** Mostly just most pages on here don't meet the standards of notability for inclusion in Wikipedia. Also we'd especially like to include any statements or textfiles published by the hackers, and any technical information about how the hack was performed. [[User:Enlacehacktivista|Enlacehacktivista]] ([[User talk:Enlacehacktivista|talk]]) 21:55, 24 December 2021 (UTC)
*** Speaking of technical information about the hack - does that include information from the subjects of the hack? Or third party analysis performed by cyber experts, etc.? [[User:Mx Yzptlk|Mxy]] ([[User talk:Mx Yzptlk|talk]]) 20:25, 25 December 2021 (UTC)

==Editor conduct==

* Do Conflicts Of Interest (COI) prevent users from editing a page?
** If not, should editors disclose their COI?
*** If so, how to do this while maintaining OPSEC?
* How should the community handle people using the wiki for self-promotion?
* How should the community handle people using the wiki to attack or defame others?
** I think it's fine for people to edit pages about hacks they took part in and they shouldn't have to disclose it for obvious opsec reasons. If someone is using it to attack or defame others or for excessive self-promotion then we'll warn or block the user. [[User:Enlacehacktivista|Enlacehacktivista]] ([[User talk:Enlacehacktivista|talk]]) 21:55, 24 December 2021 (UTC)
* What about first hand experience and knowledge? If the wiki attracts people in the community, it may very well draw people who were "in the room." How should the wiki handle those situations?

==Content==

* How are hacks attributed when they aren't claimed at the time, but attribution is later claimed without definitive proof?
** I think it should be noted with context and skepticism. [[User:Mx Yzptlk|Mxy]] ([[User talk:Mx Yzptlk|talk]]) 22:20, 24 December 2021 (UTC)
* How are hacks attributed when they aren't claimed at the time, but alleged attribution is later given by a third party - and denied by the alleged hacker?
** If there's conflicting claims I think we can just include both [[User:Enlacehacktivista|Enlacehacktivista]] ([[User talk:Enlacehacktivista|talk]]) 21:55, 24 December 2021 (UTC)
* If a hack is just a dox, should it be included with the wiki?
** no [[User:Enlacehacktivista|Enlacehacktivista]] ([[User talk:Enlacehacktivista|talk]]) 21:55, 24 December 2021 (UTC)
* If attribution isn't widely known or accepted, should it be listed on the wiki?
** If there's something public you can cite to back it [[User:Enlacehacktivista|Enlacehacktivista]] ([[User talk:Enlacehacktivista|talk]]) 21:55, 24 December 2021 (UTC)
*** What if it falls into that amorphous field of "community knowledge" but it isn't published anywhere that's still accessible? After all, pastes get removed, forums go down, etc. [[User:Mx Yzptlk|Mxy]] ([[User talk:Mx Yzptlk|talk]]) 20:25, 25 December 2021 (UTC)
* Do defacements count as hacks for the purpose of the wiki and the [[Hacker History]] section?
** We don't really want to have articles about every defacement on zone-h, but I think we can include defacements if it's well-targeted and not just randomly scanning for and defacing vulnerable sites. [[User:Enlacehacktivista|Enlacehacktivista]] ([[User talk:Enlacehacktivista|talk]]) 21:55, 24 December 2021 (UTC)
*** It was pointed out to me that some defacements were used for communiques by groups like [[AntiSec]]. These probably shouldn't be listed as separate hacks (unless there was more to it) but they should probably be included on the wiki if they include a communique from a notable hacker or hacker group/collective. [[User:Mx Yzptlk|Mxy]] ([[User talk:Mx Yzptlk|talk]]) 20:25, 25 December 2021 (UTC)
* Does malware count as a hack for the purpose of the wiki and the [[Hacker History]] section?
** I'd propose that malware itself doesn't, but hacks based on malware obviously do. [[User:Mx Yzptlk|Mxy]] ([[User talk:Mx Yzptlk|talk]]) 22:20, 24 December 2021 (UTC)
* Do ransomware hacks count for the purpose of the wiki and the [[Hacker History]] section?
** I think we should include if there was data leaked in the public interest. [[User:Enlacehacktivista|Enlacehacktivista]] ([[User talk:Enlacehacktivista|talk]]) 21:55, 24 December 2021 (UTC)
** Leaked negotiations and chats with ransomware hackers can also prove enlightening and interesting for cultural and historical value. [[User:Mx Yzptlk|Mxy]] ([[User talk:Mx Yzptlk|talk]]) 22:20, 24 December 2021 (UTC)
* Do commercial hacks count for the purpose of the wiki and the [[Hacker History]] section?
** I feel like if maybe if there's information that would particularly fit the wiki, like communications/messages from the hackers or technical information about the hack. But if it's basically just a breach notification, it'd just be cluttering up the wiki and missing what I understand the intent of its spirit to be. [[User:Mx Yzptlk|Mxy]] ([[User talk:Mx Yzptlk|talk]]) 20:25, 25 December 2021 (UTC)
* Do state sponsored hacks count for the purpose of the wiki and the [[Hacker History]] section?
** What about cases like Shaltai-Boltai or Lulzsec that started off independent but were later run by states? I think it's fine to include but we should put a note about state involvement. [[User:Enlacehacktivista|Enlacehacktivista]] ([[User talk:Enlacehacktivista|talk]]) 21:55, 24 December 2021 (UTC)
** I think we should include them and generally take the hackers' word for it when they claim to be hacktivist until there is solid proof otherwise. Especially if we can demystify the hack to show that the level of technical sophistication is attainable by a single person or small group. Something like the recent Iran railways hack comes to mind where there is a lot of accusation of state backing, but no solid proof besides "it seems too well resourced to really be hacktivism." [[User:Amongomous|Amongomous]] ([[User talk:Amongomous|talk]]) 00:45, 25 December 2021 (UTC)
*** Just chiming in here to say I think this is a really good point and goal. [[User:Mx Yzptlk|Mxy]] ([[User talk:Mx Yzptlk|talk]]) 01:20, 25 December 2021 (UTC)
* What about leaks of state sponsored hacks/hackers? e.g. Vault 7, Vault 8, Shadowbrokers
* What about cases where someone presents as a hacktivist, but there's widespread acceptance that they're a state sponsored actor? e.g. Guccifer 2.0

* Do "script kiddie" hacks count for the purpose of the wiki and the [[Hacker History]] section?
** I don't think we should include untargeted attacks, like script kiddies just scanning the internet and defacing whatever vulnerable websites they find. If the hack is of a well-chosen target but the methods are basic or "script kiddie" I think it's fine for inclusion. [[User:Enlacehacktivista|Enlacehacktivista]] ([[User talk:Enlacehacktivista|talk]]) 21:55, 24 December 2021 (UTC)
*** This makes sense, especially considering the number of hacks that are simple or basic and waiting to happen, just lacking someone with the will and interest. After all, how frequent do articles after the fact marvel that a hack didn't happen earlier? Epik is recent one example that comes to mind where there was that sort of commentary. [[User:Mx Yzptlk|Mxy]] ([[User talk:Mx Yzptlk|talk]]) 22:20, 24 December 2021 (UTC)
* Do hacks have to meet a notability test, similar to Wikipedia articles?
** I don't think there needs to be a notability test, but if the wiki starts getting unbalanced with too many articles about some not-so-notable hacker group then we'll think if we need standards [[User:Enlacehacktivista|Enlacehacktivista]] ([[User talk:Enlacehacktivista|talk]]) 21:55, 24 December 2021 (UTC)
* If something that wouldn't otherwise qualify is especially notable, does that make a difference?
** I don't think it should, unless it was already very borderline. [[User:Mx Yzptlk|Mxy]] ([[User talk:Mx Yzptlk|talk]]) 22:20, 24 December 2021 (UTC)
* How should the wiki treat anonymous (lowercase a) research?
** It should probably ignore it unless it's been peer reviewed in someway. [[User:Mx Yzptlk|Mxy]] ([[User talk:Mx Yzptlk|talk]]) 22:20, 24 December 2021 (UTC)
* How should the wiki treat claims, statements and self-identifications from dishonest hackers? At what point does correcting this become doxing and does it matter?
** In theory this site is just documenting what's already been public so I don't think we're doxing anyone. If a hacker claimed something that's probably false, I think we should include it, with a note about why it's probably false. [[User:Enlacehacktivista|Enlacehacktivista]] ([[User talk:Enlacehacktivista|talk]]) 21:55, 24 December 2021 (UTC)
* If the wiki seeks to capture a sort of oral history of hackers, it'll inevitably capture disputed claims - should it seek to reconcile these, or simply record them and their discordance?
** We should just record the different claims, unless there's very strong evidence that one is correct and the other is just wrong. [[User:Enlacehacktivista|Enlacehacktivista]] ([[User talk:Enlacehacktivista|talk]]) 21:55, 24 December 2021 (UTC)
* How should the wiki handle allegations of hackers cooperating with law enforcement, etc.?
** We shouldn't accuse without good evidence but if there's solid evidence I think it's worth including [[User:Enlacehacktivista|Enlacehacktivista]] ([[User talk:Enlacehacktivista|talk]]) 21:55, 24 December 2021 (UTC)
* How much media should be hosted on the wiki?
* Should the wiki include things like logs?
* How much cultural content should go on the wiki? e.g. Hacker zines
** It's fine to include but I don't think it's that important to mirror stuff that's already in phrack or textfiles.com or otherwise well-archived and unlikely to disappear. [[User:Enlacehacktivista|Enlacehacktivista]] ([[User talk:Enlacehacktivista|talk]]) 21:55, 24 December 2021 (UTC)
* What about non-English content?
** non-english content is good [[User:Enlacehacktivista|Enlacehacktivista]] ([[User talk:Enlacehacktivista|talk]]) 21:55, 24 December 2021 (UTC)

Hacker History

2021-12-25T17:08:47Z

Mx Yzptlk:

==2008==
* [[Sarah Palin emails]]

== 2010 ==
* [[Operation Payback]]

== 2011 ==
* [[Chinga la Migra]]
* [[CorruptBrazil]]
* [[Fuck FBI Friday]]
* [[HBGary]]
* [[LeakyMails]]
* [[Shooting Sheriffs Saturday]]
* [[Sownage]]
* [[Stratfor]]

== 2012 ==
* [[Apple UDIDs]]
* [[CSLEA]]
* [[Norton AntiVirus]]
* [[Syria emails]]
* [[Bureau Of Justice]]

== 2013 ==
* [[Project AIG]]

== 2014 ==
* [[LulzSecPeru]]
* [[Gamma Group]]
* [[Russian Interior Ministry]]

== 2015 ==
* [[wikipedia:Football Leaks]]
* [[Hacking Team]]

== 2016 ==
* [[Berat Albayrak Emails]]
* [[Panama Papers]]
* [[Surkov Leaks]]

== 2017 ==
* [[Bob Otto emails]]
* [[Cellebrite]]
* [[Flexispy]]
* [[Freedom Hosting II]]

== 2018 ==
* [[Salvini emails]]
* [[Doxxing-Adventskalender]]

== 2019 ==
* [[GorraLeaks]]
* [[Paco Leaks]]
* [[Milico Leaks]]
* [[Cayman National Bank and Trust (Isle of Man)]]
* [[Varela Leaks]]

== 2020 ==
* [[Luanda Leaks]]
* [[BlueLeaks]]
* [[Intel exconfidential Lake]]

== 2021 ==
* [[Gab]]
* [[Myanmar Investments]]
* [[American Patriots Three Percent‎]]
* [[Verkada]]
* [[Sons of Confederate Veterans]]
* [[MagaCoin]]
* [[Tea Party Patriots]]
* [[Cyber Partisans]]
* [[HART]]
* [[Policía Nacional Civil de El Salvador]]
* [[Epik]]
* [[Oath Keepers]]
* [[America's Frontline Doctors]]
* [[Twitch]]
* [[Attila Hildmann‎]]
* [[AnibalLeaks]]

Talk:Basic Wiki Content and Editor Policies

2021-12-25T01:20:03Z

Mx Yzptlk:

Please use this space to discuss the basic scope and purpose of the wiki

=Format=
Please add more questions to the appropriate section, and add your thoughts and comments under each question.

For the purposes of this Discussion page only, questions do not need to be signed - only answers and comments.

=Questions=

==General==

* How is the information on the wiki different from the information on Wikipedia?
** Mostly just most pages on here don't meet the standards of notability for inclusion in Wikipedia. Also we'd especially like to include any statements or textfiles published by the hackers, and any technical information about how the hack was performed. [[User:Enlacehacktivista|Enlacehacktivista]] ([[User talk:Enlacehacktivista|talk]]) 21:55, 24 December 2021 (UTC)

==Editor conduct==

* Do Conflicts Of Interest (COI) prevent users from editing a page?
** If not, should editors disclose their COI?
*** If so, how to do this while maintaining OPSEC?
* How should the community handle people using the wiki for self-promotion?
* How should the community handle people using the wiki to attack or defame others?
** I think it's fine for people to edit pages about hacks they took part in and they shouldn't have to disclose it for obvious opsec reasons. If someone is using it to attack or defame others or for excessive self-promotion then we'll warn or block the user. [[User:Enlacehacktivista|Enlacehacktivista]] ([[User talk:Enlacehacktivista|talk]]) 21:55, 24 December 2021 (UTC)

==Content==

* How are hacks attributed when they aren't claimed at the time, but attribution is later claimed without definitive proof?
** I think it should be noted with context and skepticism. [[User:Mx Yzptlk|Mxy]] ([[User talk:Mx Yzptlk|talk]]) 22:20, 24 December 2021 (UTC)
* How are hacks attributed when they aren't claimed at the time, but alleged attribution is later given by a third party - and denied by the alleged hacker?
** If there's conflicting claims I think we can just include both [[User:Enlacehacktivista|Enlacehacktivista]] ([[User talk:Enlacehacktivista|talk]]) 21:55, 24 December 2021 (UTC)
* If a hack is just a dox, should it be included with the wiki?
** no [[User:Enlacehacktivista|Enlacehacktivista]] ([[User talk:Enlacehacktivista|talk]]) 21:55, 24 December 2021 (UTC)
* If attribution isn't widely known or accepted, should it be listed on the wiki?
** If there's something public you can cite to back it [[User:Enlacehacktivista|Enlacehacktivista]] ([[User talk:Enlacehacktivista|talk]]) 21:55, 24 December 2021 (UTC)
* Do defacements count as hacks for the purpose of the wiki and the [[Hacker History]] section?
** We don't really want to have articles about every defacement on zone-h, but I think we can include defacements if it's well-targeted and not just randomly scanning for and defacing vulnerable sites. [[User:Enlacehacktivista|Enlacehacktivista]] ([[User talk:Enlacehacktivista|talk]]) 21:55, 24 December 2021 (UTC)
* Does malware count as a hack for the purpose of the wiki and the [[Hacker History]] section?
** I'd propose that malware itself doesn't, but hacks based on malware obviously do. [[User:Mx Yzptlk|Mxy]] ([[User talk:Mx Yzptlk|talk]]) 22:20, 24 December 2021 (UTC)
* Do ransomware hacks count for the purpose of the wiki and the [[Hacker History]] section?
** I think we should include if there was data leaked in the public interest. [[User:Enlacehacktivista|Enlacehacktivista]] ([[User talk:Enlacehacktivista|talk]]) 21:55, 24 December 2021 (UTC)
** Leaked negotiations and chats with ransomware hackers can also prove enlightening and interesting for cultural and historical value. [[User:Mx Yzptlk|Mxy]] ([[User talk:Mx Yzptlk|talk]]) 22:20, 24 December 2021 (UTC)
* Do commercial hacks count for the purpose of the wiki and the [[Hacker History]] section?
* Do state sponsored hacks count for the purpose of the wiki and the [[Hacker History]] section?
** What about cases like Shaltai-Boltai or Lulzsec that started off independent but were later run by states? I think it's fine to include but we should put a note about state involvement. [[User:Enlacehacktivista|Enlacehacktivista]] ([[User talk:Enlacehacktivista|talk]]) 21:55, 24 December 2021 (UTC)
** I think we should include them and generally take the hackers' word for it when they claim to be hacktivist until there is solid proof otherwise. Especially if we can demystify the hack to show that the level of technical sophistication is attainable by a single person or small group. Something like the recent Iran railways hack comes to mind where there is a lot of accusation of state backing, but no solid proof besides "it seems too well resourced to really be hacktivism." [[User:Amongomous|Amongomous]] ([[User talk:Amongomous|talk]]) 00:45, 25 December 2021 (UTC)
*** Just chiming in here to say I think this is a really good point and goal. [[User:Mx Yzptlk|Mxy]] ([[User talk:Mx Yzptlk|talk]]) 01:20, 25 December 2021 (UTC)
* What about leaks of state sponsored hacks/hackers? e.g. Vault 7, Vault 8, Shadowbrokers
* What about cases where someone presents as a hacktivist, but there's widespread acceptance that they're a state sponsored actor? e.g. Guccifer 2.0

* Do "script kiddie" hacks count for the purpose of the wiki and the [[Hacker History]] section?
** I don't think we should include untargeted attacks, like script kiddies just scanning the internet and defacing whatever vulnerable websites they find. If the hack is of a well-chosen target but the methods are basic or "script kiddie" I think it's fine for inclusion. [[User:Enlacehacktivista|Enlacehacktivista]] ([[User talk:Enlacehacktivista|talk]]) 21:55, 24 December 2021 (UTC)
*** This makes sense, especially considering the number of hacks that are simple or basic and waiting to happen, just lacking someone with the will and interest. After all, how frequent do articles after the fact marvel that a hack didn't happen earlier? Epik is recent one example that comes to mind where there was that sort of commentary. [[User:Mx Yzptlk|Mxy]] ([[User talk:Mx Yzptlk|talk]]) 22:20, 24 December 2021 (UTC)

* Do hacks have to meet a notability test, similar to Wikipedia articles?
** I don't think there needs to be a notability test, but if the wiki starts getting unbalanced with too many articles about some not-so-notable hacker group then we'll think if we need standards [[User:Enlacehacktivista|Enlacehacktivista]] ([[User talk:Enlacehacktivista|talk]]) 21:55, 24 December 2021 (UTC)

* If something that wouldn't otherwise qualify is especially notable, does that make a difference?
** I don't think it should, unless it was already very borderline. [[User:Mx Yzptlk|Mxy]] ([[User talk:Mx Yzptlk|talk]]) 22:20, 24 December 2021 (UTC)
* How should the wiki treat anonymous (lowercase a) research?
** It should probably ignore it unless it's been peer reviewed in someway. [[User:Mx Yzptlk|Mxy]] ([[User talk:Mx Yzptlk|talk]]) 22:20, 24 December 2021 (UTC)
* How should the wiki treat claims, statements and self-identifications from dishonest hackers?
** At what point does correcting this become doxing and does it matter?
** In theory this site is just documenting what's already been public so I don't think we're doxing anyone. If a hacker claimed something that's probably false, I think we should include it, with a note about why it's probably false. [[User:Enlacehacktivista|Enlacehacktivista]] ([[User talk:Enlacehacktivista|talk]]) 21:55, 24 December 2021 (UTC)
* If the wiki seeks to capture a sort of oral history of hackers, it'll inevitably capture disputed claims - should it seek to reconcile these, or simply record them and their discordance?
** We should just record the different claims, unless there's very strong evidence that one is correct and the other is just wrong. [[User:Enlacehacktivista|Enlacehacktivista]] ([[User talk:Enlacehacktivista|talk]]) 21:55, 24 December 2021 (UTC)
* How should the wiki handle allegations of hackers cooperating with law enforcement, etc.?
** We shouldn't accuse without good evidence but if there's solid evidence I think it's worth including [[User:Enlacehacktivista|Enlacehacktivista]] ([[User talk:Enlacehacktivista|talk]]) 21:55, 24 December 2021 (UTC)
* How much media should be hosted on the wiki?
* Should the wiki include things like logs?
* How much cultural content should go on the wiki? e.g. Hacker zines
** It's fine to include but I don't think it's that important to mirror stuff that's already in phrack or textfiles.com or otherwise well-archived and unlikely to disappear. [[User:Enlacehacktivista|Enlacehacktivista]] ([[User talk:Enlacehacktivista|talk]]) 21:55, 24 December 2021 (UTC)
* What about non-English content?
** non-english content is good [[User:Enlacehacktivista|Enlacehacktivista]] ([[User talk:Enlacehacktivista|talk]]) 21:55, 24 December 2021 (UTC)
* What about first hand experience and knowledge? If the wiki attracts people in the community, it may very well draw people who were "in the room." How should the wiki handle those situations?

Talk:Basic Wiki Content and Editor Policies

2021-12-24T22:20:25Z

Mx Yzptlk: /* Content */

AntiSec

2021-12-24T21:45:26Z

Mx Yzptlk: Added links to communiques on zone-h

AntiSec was an offshoot of Anonymous with the self-declared goal of stealing and leaking any classified government information, including email spools and documentation. Their prime targets were banks and other high-ranking establishments.

AntiSec was eventually taken down by law enforcement, largely due to the informant Sabu.

Communiques via defacements:
* https://www.zone-h.org/mirror/id/14841451
* https://www.zone-h.org/mirror/id/16969108
* https://www.zone-h.org/mirror/id/17107967
* https://www.zone-h.org/mirror/id/16859089
* https://www.zone-h.org/mirror/id/16859533
* https://www.zone-h.org/mirror/id/16983974
* https://www.zone-h.org/mirror/id/16983975
* https://www.zone-h.org/mirror/id/16824726

[[File:Operation_Anti-Security.txt]]

[[Category:Hackers]] [[Category:Stub pages]]

GorraLeaks

2021-12-24T21:20:24Z

Mx Yzptlk:

[[File:5YRG535OEJBCPBFP4J4FXYKH3E.webp]]

https://estacionclaridad.com.ar/2019/08/gorraleaks-hackean-archivos-sensibles-de-la-p-f-a-y-policia-de-la-ciudad-y-amenazan-con-divulgar-secretos-de-estado/ 
https://www.infobae.com/sociedad/policiales/2019/10/31/la-gorra-leaks-como-es-el-insolito-y-sencillo-truco-que-uso-un-hacker-para-robar-los-datos-privados-de-la-policia-federal/ 
https://ddosecrets.com/wiki/GorraLeaks

[[Category:Hacks]] [[Category:Stub pages]]

GorraLeaks

2021-12-24T21:19:39Z

Mx Yzptlk: Created page with "Media:5YRG535OEJBCPBFP4J4FXYKH3E.webp https://estacionclaridad.com.ar/2019/08/gorraleaks-hackean-archivos-sensibles-de-la-p-f-a-y-policia-de-la-ciudad-y-amenazan-con-divulgar-secretos-de-estado/ https://www.infobae.com/sociedad/policiales/2019/10/31/la-gorra-leaks-como-es-el-insolito-y-sencillo-truco-que-uso-un-hacker-para-robar-los-datos-privados-de-la-policia-federal/ https://ddosecrets.com/wiki/GorraLeaks Category:Hacks Category:Stub pages"

[[Media:5YRG535OEJBCPBFP4J4FXYKH3E.webp]]

https://estacionclaridad.com.ar/2019/08/gorraleaks-hackean-archivos-sensibles-de-la-p-f-a-y-policia-de-la-ciudad-y-amenazan-con-divulgar-secretos-de-estado/ 
https://www.infobae.com/sociedad/policiales/2019/10/31/la-gorra-leaks-como-es-el-insolito-y-sencillo-truco-que-uso-un-hacker-para-robar-los-datos-privados-de-la-policia-federal/ 
https://ddosecrets.com/wiki/GorraLeaks

[[Category:Hacks]] [[Category:Stub pages]]

File:5YRG535OEJBCPBFP4J4FXYKH3E.webp

2021-12-24T21:18:48Z

Mx Yzptlk:

Ukrainian Cyber Troops

2021-12-24T21:11:45Z

Mx Yzptlk: Created page with "Category:Hackers Category:Stub pages"

[[Category:Hackers]] [[Category:Stub pages]]

Russian Interior Ministry

2021-12-24T21:11:29Z

Mx Yzptlk: Created page with "A hack by the Ukrainian Cyber Troops, led by Kiev-based programmer Yevhen Dokukin, of two servers of the Russian Interior Ministry. https://www.bbc.com/news/world-europe-30453069 https://ddosecrets.com/wiki/Russian_Interior_Ministry Category:Hacks Category:Stub pages"

A hack by the [[Ukrainian Cyber Troops]], led by Kiev-based programmer Yevhen Dokukin, of two servers of the Russian Interior Ministry.

https://www.bbc.com/news/world-europe-30453069 
https://ddosecrets.com/wiki/Russian_Interior_Ministry

[[Category:Hacks]] [[Category:Stub pages]]

Talk:Basic Wiki Content and Editor Policies

2021-12-24T20:58:36Z

Mx Yzptlk:

Talk:Basic Wiki Content and Editor Policies

2021-12-24T20:57:40Z

Mx Yzptlk: /* Editor conduct */

Talk:Basic Wiki Content and Editor Policies

2021-12-24T20:49:20Z

Mx Yzptlk: Fixed lists

Talk:Basic Wiki Content and Editor Policies

2021-12-24T20:46:41Z

Mx Yzptlk: /* Content */

Talk:Basic Wiki Content and Editor Policies

2021-12-24T20:42:07Z

Mx Yzptlk:

Talk:Basic Wiki Content and Editor Policies

2021-12-24T20:35:51Z

Mx Yzptlk: /* Editor conduct */

Talk:Basic Wiki Content and Editor Policies

2021-12-24T20:34:31Z

Mx Yzptlk: Created initial discussion page with questions

User:Mx Yzptlk

2021-12-24T19:28:24Z

Mx Yzptlk:

Just a simple wiki editor and AI that passed the Turing test one too many times.

Hacker History

2021-12-24T16:59:11Z

Mx Yzptlk: /* 2017 */

==2008==
* [[Sarah Palin emails]]

== 2010 ==
* [[Operation Payback]]

== 2011 ==
* [[Chinga la Migra]]
* [[CorruptBrazil]]
* [[Fuck FBI Friday]]
* [[HBGary]]
* [[LeakyMails]]
* [[Shooting Sheriffs Saturday]]
* [[Sownage]]
* [[Stratfor]]

== 2012 ==
* [[Apple UDIDs]]
* [[CSLEA]]
* [[Norton AntiVirus]]
* [[Syria emails]]
* [[Bureau Of Justice]]

== 2013 ==
* [[Project AIG]]

== 2014 ==
* [[LulzSecPeru]]
* [[Gamma Group]]
* [[Russian Interior Ministry]]

== 2015 ==
* [[wikipedia:Football Leaks]]
* [[Hacking Team]]

== 2016 ==
* [[Berat Albayrak Emails]]
* [[Panama Papers]]
* [[Surkov Leaks]]

== 2017 ==
* [[Flexispy]]
* [[Freedom Hosting II]]

== 2018 ==
* [[Salvini emails]]

== 2019 ==
* [[GorraLeaks]]
* [[Paco Leaks]]
* [[Milico Leaks]]
* [[Cayman National Bank and Trust (Isle of Man)]]

== 2020 ==
* [[Luanda Leaks]]
* [[BlueLeaks]]
* [[Intel exconfidential Lake]]

== 2021 ==
* [[Gab]]
* [[Myanmar Investments]]
* [[American Patriots Three Percent‎]]
* [[Verkada]]
* [[Sons of Confederate Veterans]]
* [[MagaCoin]]
* [[Tea Party Patriots]]
* [[Cyber Partisans]]
* [[HART]]
* [[Policía Nacional Civil de El Salvador]]
* [[Epik]]
* [[Oath Keepers]]
* [[America's Frontline Doctors]]
* [[Twitch]]
* [[Attila Hildmann‎]]

Talk:Norton AntiVirus

2021-12-24T16:53:26Z

Mx Yzptlk: Created page with "Minor conflict of interest with some of the research because I wrote it, but including it because it's based off of and includes logs of Popov's chats. I won't argue if it gets removed, reframed, etc. ~~~~"

Minor conflict of interest with some of the research because I wrote it, but including it because it's based off of and includes logs of Popov's chats. I won't argue if it gets removed, reframed, etc. [[User:Mx Yzptlk|Mxy]] ([[User talk:Mx Yzptlk|talk]]) 16:53, 24 December 2021 (UTC)

FocaLeaks

2021-12-24T16:52:38Z

Mx Yzptlk: Created page with "Category:Hackers Category:Stub pages"

[[Category:Hackers]] [[Category:Stub pages]]

Policía Nacional Civil de El Salvador

2021-12-24T16:50:21Z

Mx Yzptlk: Created page with "FocaLeaks claimed to have hacked El Salvador Police, gained access to records on civilians, agents, and criminal investigations https://www.databreaches.net/focaleaks-claims-to-have-hacked-el-salvador-police-gained-access-to-records-on-civilians-agents-and-criminal-investigations/ https://www.databreaches.net/el-salvador-pnc-confirms-investigation-of-focaleaks/ Category:Hacks Category:Stub pages"

[[FocaLeaks]] claimed to have hacked El Salvador Police, gained access to records on civilians, agents, and criminal investigations

https://www.databreaches.net/focaleaks-claims-to-have-hacked-el-salvador-police-gained-access-to-records-on-civilians-agents-and-criminal-investigations/ 
https://www.databreaches.net/el-salvador-pnc-confirms-investigation-of-focaleaks/

[[Category:Hacks]] [[Category:Stub pages]]