News

There are many fake rumors for Anonymous operations. One of the first ones was the attack on Facebook on November 5 2011 and then again another fake Facebook rumor. As we said before, there are several reasons why someone spread fake rumors about Anonymous. This time they say that Anonymous will take down the internet for hours or days at the end of March. Anonymous accounts on Twitter say that this is not the case, they don’t plan to attack dns servers and take down the internet. An many of them say, they don’t see the point on attacking to their greatest weapon. Anonymous see the internet as a weapon, as a tool to fight for their rights. Many bloggers and journalists spread the rumors before even check by themselves the validity of the news they learn. It is a very sad thing but this is internet, you should not believe anything you read.

The email account of Syrian president was hacked by Anonymous along with other accounts on mail server of the Syrian Ministry of Presidential Affairs. The password of 33 accounts including the Syrian president’s one was 12345. Of course, very easy to remember but very easy to be hacked or guessed. 12345 is the second weakest password after 123 and almost half of the accounts on that mail server they were using it. Even if it was the default password nobody cared enough to change it. Hundreds of emails leaked and that could be prevented by a stronger password. Hackers gained access to 78 email accounts and the damage from leaked emails is very big. The lesson here is that you should use stronger passwords if you don’t want your emails fall into wrong hands.

University of Washington has been hacked once again and their database was leaked. This time they were hacked by N0B0DY and N0LIFE. You can see the information they published on pastebin. You can see the users and WordPress users with their (encrypted) passwords and emails. Once again, hackers used SQL injection to gain access to university’s database. There are more than one vulnerable links that hackers can use to gain access to their database. It is very easy to prevent such attacks and there are more than one ways to do it. If you are too lazy to change your code at least validate the input values. The best way to do this is by using stored procedures and pass the values as parameters instead of building the command string to be executed. It is the most common vulnerability, we have seen hundreds hacks exploding SQL injection and yet there are many websites still vulnerable and just waiting to be hacked.