Hacker, Hoaxer, Whistleblower, Spy

Home > Other > Hacker, Hoaxer, Whistleblower, Spy > Page 22
Hacker, Hoaxer, Whistleblower, Spy Page 22

by Gabriella Coleman


  “Good drama must be drastic”23

  It was Super Bowl Sunday, February 6, 2011. Millions of Americans were glued to the tube watching overgrown bulky men pounce on each other for the purpose of kicking a ball through two goal posts. Aaron Barr might well have been one of those Americans, but any such plans were overshadowed; he had been brutally hacked. His Twitter account, hijacked, spewed forth the most abject racist and degrading statements possible in 140 characters, along with his social security number and home address. Countless unflattering photo-shopped images of Barr were circulated. His emails, including personal ones replete with embarrassing details of marital troubles, were posted on the Pirate Bay.

  In the midst of it all, he logged onto the AnonOps IRC server and was invited to a dedicated #ophbgary channel. Barr accepted:

  CogAnon ([email protected]) has joined #ophbgary

  : Ohai CogAnon

  : Hello, Mr. Barr.

  : Mr. Barr and his infiltration of Anonymous; “Now they’re threatening us directly”, amirite?

  : I apologize for what’s about to happen to you and your company.

  : Enjoying the Superbowl, I hope?

  : high one sec. please

  : I really do, Mr. Barr.

  : You have no idea what’s coming next.

  : tflow, How are things going with that, anyway?

  : CogAnon is clearly super 1337 with his PM psyops skills in the Washington area

  : ok…sure I figured something like this might happen.

  : CogAnon, nah, you won’t like what’s coming next

  : CogAnon, can you guess what’s coming next?

  : Ooh, a fun game - guess!

  : dude…you just don’t get it. it was research on social media vulnerabilities…I was never going to release the names…

  : LIAR

  This brief visit on Sunday, February 6, was the preamble to a more epic conversation that would take place later that same day. The chat that followed has become one of the most viewed IRC logs in history. IRC represents a zone of freedom and autonomy on an Internet dominated by private interests. When you gather dozens, sometimes hundreds, of people together and give them license to say whatever they want as whoever they claim to be, it is only natural that humor, wit, drama, and some chaos will follow. If the world’s a stage—and all the geeks, hackers, and sleazy InfoSec hacks are merely players—then what does that make the Internet? A play within a play, written in real time, with each player contributing line by line? They have their exits and their entrances but nothing is known in advance. The output even looks like a screenplay. The difference is that it is populist, participatory, and improvisational in character with real-world stakes and implications.

  Act One

  The play we are about to watch owes its existence in part to Barrett Brown. Late Sunday evening he bought good tidings in #ophbgary—a channel whose purpose was to discuss and celebrate the hack:

  : BarrettBrown, you here?

  : I’m on the phone with president of HBGary

  : lol

  Sabu pitched the following suggestion:

  : BarrettBrown, ask PENNY to come here and speak.

  At this point, it was public knowledge that Anonymous had been on a hacking spree against HBGary Federal and HBGary. Sabu’s suggestion seemed like a taunt, not a real request. After all that had unfolded, it didn’t seem plausible that Penny Leavy, the president of HBGary, would plunge into the epicenter of the rat’s nest currently at work clawing her company apart. But that is exactly what she did. Sabu initiated the exchange by reminding her of the uncomfortable facts:

  : penny. before we get started—know that we have all [seen] email communication between you and everyone in hbgary. so my first question would be why would you allow aaron to sell such garbage under your company name?

  : jesus cristo

  : Penny, did you also know that aaron was peddling fake/ wrong/false information leading to the potential arrest of innocent people[?]

  She rose to Aaron Barr’s defense:

  : I did know he was doing research on social media and the problem associated with it, the ease of pretending to be one of you

  : He was never planning on giving it to the gov’t. He was never going to release names, just talk about handles

  : Penny, if what you are saying is tr[u]e then why is Aaron meeting with the FBI tomorrow morning at 11am? PLEASE KEEP IN MIND WE HAVE ALL YOUR EMAILS.

  : well penny like I said 4 times we have all the emails. theres lots of emails from you promoting aaron’s research so … I’m curious

  : im still seeding the emails

  : I think what he was doign was good, it was informative and it will shed lite on lots of issues associated with social media

  According to the leaked emails, there were no plans to reach out to law enforcement, much less sell the data to them. However, recall that Anonymous read an email exchange where Barr had claimed point blank to his programmer, “I will sell.” Anonymous devised an on-the-fly-IRC financial plan of its own, a Robin Hood–esque blackmail proposal:

  : penny. we will not target hbgary.com. its done. what you can do is motivate your investment from hbgaryfederal over to bradley mannings defense fund. and distance yourselves from aaron barnetts’ research

  : Penny … we are under fire in ways you do not understand. Not just the feds … right wing ‘freedom’ fighters trying to take us down … infiltrators have hurt us … Aarons research contains personal information of ppl who never did anything but show up here … please try to understand our rage

  Meanwhile, in Brown’s abode, the phone rang. On the other end of the line was none other than Barr. They proceeded to have a courteous eleven-minute exchange (Brown recorded the conversation and subsequently uploaded it online). There was some uncertainty regarding just what it was HBGary intended to do with the data. Barr, whose voice bore no trace of sourness, fear, or even anger, confidently introduced himself: “I am a federal contractor working mostly in the security space.” Anticipating a question about motives, Barr claimed point blank, “I never planned to sell the data to the FBI.” Again, the emails support Barr on this point—there is no evidence that he had contacted the FBI. But he was certainly seeking to profit in some manner by gathering these correlated names and “outing” Anons, as he put it—presumably any number of embattled organizations would be interested in ascertaining the identity of their assailants. Regardless of the eventual outcome, the mere existence of such a file was received as an ominous threat by the Anonymous community at large.

  To Brown, Barr presented a very different rationale, claiming his overarching agenda was to demonstrate the weaknesses of social media and expose the hierarchy behind the hive. “There is definitely a structure,” he said. Brown assented to some degree—“I agree a few dozen people set the pace”—but he noted that many of the names were wrong. “I never purported it was 100 percent accurate,” Barr insisted, even in his conversation with the Financial Times. “The reporter writes what he wants to write.” Barr reminded Brown that he was still planning to meet with the FBI the following morning, noting that “It is going to be out of my hands.”

  Leaked emails indicate that Barr and his colleagues had, indeed, given great thought—just that day—to the question of releasing the names to the FBI. Ted Vera, the president and COO of HBGary Federal, finished off the chain in favor of withholding:

  You could end up accusing a wrong person. Or you could further enrage the group. Or you could be wrong, and it blows up in your face, and HBGary’s face, publicly. The hint of you having their true names is enough. No need to release names publicly. You meet with FBI tomorrow. I doubt they’ll share much, but they may informally or inadvertently vet some of your findings.

 
; Anonymous, on the other hand, had no qualms and released the document listing all the names.

  As he had done with Leavy, Brown tried to lure Barr online. “They would like you to come. I will try to keep things productive,” Brown told him. Barr, having already logged on earlier in the day, resisted, and so Brown, in his Texan drawl, switched strategies. “I understand you have had a rough day,” Brown said. “You have been picked on. Again, it was not my doing—though I can’t say I disapproved of it, because we are here to protect ourselves and our interests here.” By the end of the phone conversation, it remained unclear whether Barr was convinced to return for a second round.

  Off the phone and back on IRC, Brown, an avid gamer, proclaimed that he was done with “this silliness” and announced his intention to “play some Fallout: New Vegas.” But first, as Anonymous made successive demands, Brown offered a characteristic gesture of empathy toward Leavy:

  : Thanks everyone it was very nice talking to you. How do I re-connect you?

  : penny, can you have greg hop on your computer and talk to us for a few minutes /?

  : If it makes you feel any better, I’m an opiate addict and still on Suboxone maintanance

  : which I’m ending in a couple days

  : Hey Sabu thanks for being so nice rough day

  : its all good. rough day for us too

  Act Two

  As Penny exited the stage, Greg Hoglund entered, physically replacing her at the computer:

  Penny is now known as greg

  : success

  : epic success

  : SOrry guys it was me it was my computer and greg went away

  : he’s back

  : ok

  : GREG IS THAT YOU

  : yea

  Before Anons resumed their interrogation, they paused for a self-congratulatory moment:

  <`k>: Greg have you ever heard of ssh keys? [ssh keys referring to encryption technology]

  : first off, if you havent read already take a look at http://pastie.org/1535735

  : thats how we owned rootkit.com

  : oh wow Sabu

  : that’s a good one

  : :)

  : what a security company you are

  : is there anything you can do to stop him from using your company name // hbgary ?

  There was a noticeable pause as Greg looked at the paste site, where a log of the leak was detailed. He quickly apprehended the full seriousness of the situation:

  : so you got my email spool too then

  : yes greg.

  <`k>: greg we got everything

  : Greg, I’m curious to know if you understand what we are about? Do you understand why we do what we do?

  “We got everything.” Had this play been staged, Hoglund would have, at this point, probably embarked on a soliloquy bemoaning his fate—or, at minimum, conveyed some degree of facial horror. Hoglund must have realized his options were limited. But if you can’t trick the tricksters, one can always appeal to reason … maybe?

  : you realize that releasing my email spool will cause millions in damages to HBGary?

  : greg, I do beleive the people around here are very honest when they say they would be happy not to release it. But that they will be basing that decision on what happens with Aaron.

  : which is why I asked you to possibl[y] explain your ideas on what might be done there.

  : so they might have an idea of what you can do.

  : greg, in essence we want you to distance yourself and company from aaron

  : Like I said, great time to donate to Tunisia

  : or Bradley manning

  : whichever

  Would his honest appeal work? With the reappearance of another lead, we are ushered into the play’s final act.

  Act Three

  CogAnon entered the room.

  : its aaron

  : coganon

  : thats his SPY NICK

  : hi aaron

  : Good evening Aaron.

  Hoglund took a moment to dissociate himself from Barr:

  : aaron is CEO of his own company, that unfortunately, shares the HBGary name - I can’t do anything except yell at him on the phone

  <`k>: hahaha they’re all here

  : hbgary (my hbgary) has 15% ownership of hbgary federal, for the record

  : yeah, and aaron just had to poke the wasp nest didnt he

  : i’m downloading some emails

  Thanks to the emails, we know Hoglund’s claims here are mostly hot air—Barr was a respected, central member of the HBGary management team:

  From: Greg Hoglund

  To: [email protected]

  Subject: Welcome Aaron Barr and Ted Vera to the HBGary management team!

  Date: 2009-11-23

  I am extremely excited to announce that Aaron Barr and Ted Vera have joined the HBGary team! Ted and Aaron will operate and lead HBGary Federal, a wholly owned subsidiary of HBGary, with a focus on contracting in the government space. They are very experienced and most recently built a $10 million/year business at Northrop Grumman. Both have won and lead multi-million dollar development projects and managed substantial teams. We have known Aaron and Ted for more than 5 years. These two are A+ players in the DoD contracting space and are able to “walk the halls” in customer spaces. Some very big players made offers to Ted and Aaron last week, and instead they chose HBGary. This reflects extremely well on our company. “A” players attract “A” players. Aaron will take position as CEO of HBGary Federal, and will be operating out of the DC area. Ted will take position as President and COO of HBGary Federal, and will be operating out of Colorado Springs. Welcome aboard!—Greg Hoglund

  CEO, HBGary, Inc.

  Hoglund then changed tack, appealing to Anonymous’s supposed sense of self-preservation:

  : do you guys realize that attacking a US company and stealing private data is something you have never done before?

  : no, I think you might have considered your public reputation - it doesn’t look good.

  : Greg. Please answer: do you understand who we are and why we do what we do?

  : I was never going to sell u have it wrong.

  : we don’t CARE about reputation

  : greg, our reputation is not at stake here. yours is.

  : i mean this was a real hack - and btw, i have to concede you really did hack us good

  : we do what we think is right

  : Greg, and the people here dont care about reputation, at all

  : there are numerous ways to make us look bad

  : we dont care

  […]

  : Granted, you guys don’t do burn notices proper…But it’s the thought that counts. We want Aaron’s reputation nuked for this.

  : jesus

  Brown, taking a break from his game, issued a reminder:

  BarrettBrown: he’s still meeting with FBI at 11 tomorrow, remember c0s: That is the thing that bothers me the most.

  Sabu: he literally picked out random people from facebook and connected it to irc nicks

  BarrettBrown: and will no doubt discuss me personally

  As anger erupted around him, Barr still did not concede:

  : why did you start working on this anyway?

  : As I told him, my family was fucked by Feds

  : was it personal interest, for research?

  : do u want me to answer?

  : guys it doesn’t matter anyways … you have released my emails.

  : i suspect its for monetary gain

  : greg. please respond

  : I did this for research.

  on>: The fbi called me because of my research.

  : the email you are refering to about selling data was about a model built on this type of research.

  : you knew, or your a complete idiot, you KNEW that your methods were flawed.

  : The most data I was going to show was an org chart of IRCs with icons representing those nicks I thought I knew…

  : theres still some emails we havent released

  : aaron, you need to apologize to us, your investers at hbgary and set the record straight

  : that you DID NOT identify anonymous leadership

  : ^

  : and that your research is purely academic and theoretical

  With so much said, Barr had had enough:

  : ok guys I have to go to bed. I repeat this was only about research on social media vulnerabilities … u guys crossed the line …

  : this was an eye for an eye by pepole you wronged.

  : you did by doxing innocent fucking people

  : fuck you forreal

  : Fuck you ok?

  : look at the names on your doc

  : fuck it

  : The problem is that he doesn’t even consider that he did something wrong.

  : hes ok with doxing innocent people

  : I MEAN HOLY SHIT

  : Greg, make deal now … shut him up … all will be well

  : deal? what kind of deal?

  : Aaron shuts the fuck up … your email stays private

  : guys

  : control yourselves

  : this was about research.

  One of the benefits of watching an Internet play is that no one knows what will happen next, and you can talk as much as you want without disturbing anyone. By now, it was well known that I was the resident anthropologist. An Anon sent me a private message asking me to reflect on the moment:

 

‹ Prev