Misplaced Pages

User:Gloriamarie/Milw0rm: Difference between revisions

Article snapshot taken from Wikipedia with creative commons attribution-sharealike license. Give it a read and then ask your questions in the chat. We can research this topic together.
< User:Gloriamarie Browse history interactively← Previous editNext edit →Content deleted Content addedVisualWikitext
Revision as of 00:17, 6 November 2007 editCounterVandalismBot (talk | contribs)14,742 editsm Automatically reverting possible vandalism by 71.179.192.17 to last good revision by 71.108.161.232← Previous edit Revision as of 16:28, 24 November 2007 edit undoDbmoodb (talk | contribs)241 edits ←Created page with ' <div id="jump-to-nav">Jump to: <a href="#column-one">navigation</a>, <a href="#searchInput">search</a></div> <!-- start content --> <p><b><b style="color:bla...'Next edit →
Line 1: Line 1:
<div id="jump-to-nav">Jump to: <a href="#column-one">navigation</a>, <a href="#searchInput">search</a></div> <!-- start content -->
{{lowercase|title=milw0rm}}
'''milw0rm''' is a group of "hacktivists" best known for penetrating the computers of the ] (BARC) in ], the primary nuclear research facility of ], on June 3, 1998. The group conducted hacks for political reasons, including an anti-nuclear agenda and peace message that it spread on hacked websites.<ref name="wiredmasshack">{{cite news | url=http://www.thing.net/~rdom/ecd/Brithacker.html | title=Anti-Nuke Cracker Strikes Again | publisher=Wired | date=July 3, 1998}}</ref> The group's logo featured the slogan "Putting the power back in the hands of the people."<ref name="Ottawa">{{cite news | url=http://hrea.org/lists/huridocs-tech/markup/msg00014.html | title=E-Guerrillas in the mist | publisher=Ottawa Citizen | date=October 27, 1998}}</ref>


<p><b><b style="color:black;background-color:#ffff66">milw0rm</b></b> is a group of "hacktivists" best known for penetrating the computers of the <a href="/Bhabha_Atomic_Research_Centre" title="Bhabha Atomic Research Centre">Bhabha Atomic Research Centre</a> (BARC) in <a href="/Bombay" title="Bombay">Bombay</a>, the primary nuclear research facility of <a href="/India" title="India">India</a>, on June 3, 1998. The group conducted hacks for political reasons, including an anti-nuclear agenda and peace message that it spread on hacked websites.<sup id="_ref-wiredmasshack_0" class="reference"><a href="#_note-wiredmasshack" title=""></a></sup> The group's logo featured the slogan "Putting the power back in the hands of the people."<sup id="_ref-Ottawa_0" class="reference"><a href="#_note-Ottawa" title=""></a></sup></p>
The BARC attack generated heated debate on the security of information in a world prevalent with countries developing nuclear weapons and the information necessary to do so, the ethics of "hacker activists" or "hacktivists," and the importance of advanced security measures in a modern world filled with people willing and able to break into insecure international websites.
<p>The BARC attack generated heated debate on the security of information in a world prevalent with countries developing nuclear weapons and the information necessary to do so, the ethics of "hacker activists" or "hacktivists," and the importance of advanced security measures in a modern world filled with people willing and able to break into insecure international websites.</p>


<table id="toc" class="toc" summary="Contents">
==Members of milw0rm==
<tr>
{{Refimprove|date=July 2007}}
<td>
Little is known about the members of milw0rm. The international hacking team went by the aliases of JF, Keystroke, ExtreemUK, savec0re, and VeNoMouS. VeNoMouS, 18, hailed from New Zealand, ExtreemUK and JF, 18, from England, and Keystroke and Savec0re, 17 from the US. To date, none of the group have come forward with their real names or identities, and investigations of the incident by the ] and ] or any other intelligence organizations proved fruitless in deciphering their identities, which were well-hidden. However, numerous people who were not a part of milw0rm have come forward saying that they were responsible for the hacks. Their claims have been discredited.
<div id="toctitle">
<h2>Contents</h2>
</div>
<ul>
<li class="toclevel-1"><a href="#Members_of_milw0rm"><span class="tocnumber">1</span> <span class="toctext">Members of <b style="color:black;background-color:#ffff66">milw0rm</b></span></a></li>
<li class="toclevel-1"><a href="#BARC_Attack"><span class="tocnumber">2</span> <span class="toctext">BARC Attack</span></a></li>


<li class="toclevel-1"><a href="#Attack_Aftermath"><span class="tocnumber">3</span> <span class="toctext">Attack Aftermath</span></a></li>
JF went on to achieve a modicum of notoriety when ] "hacked" its own website intentionally and graffitied the words "JF Was Here" across the page,<ref name="CNet">{{cite news | url=http://news.com.com/2100-1023-215319.html | title=MTV "hack" backfires| publisher=CNet | date=September 9, 1998}}</ref> at the same time that JF was under investigation for the milw0rm attacks by ]. Hundreds of pages hosted on MTV.com sported the new JF logo, including one page that read, "JF was here, greets to milw0rm".<ref name="Antionline">{{cite news | url=http://web.archive.org/web/19981205104829/http://antionline.com/SpecialReports/mtv/opinion.html | title=AntiOnline's Editorial Coverage Of The MTV Site "Hack" ?| publisher=AntiOnline | date=September 1998}}</ref>
<li class="toclevel-1"><a href="#Other_Attacks"><span class="tocnumber">4</span> <span class="toctext">Other Attacks</span></a></li>
<li class="toclevel-1"><a href="#milw0rm_Quotes"><span class="tocnumber">5</span> <span class="toctext"><b style="color:black;background-color:#ffff66">milw0rm</b> Quotes</span></a></li>
<li class="toclevel-1"><a href="#See_also"><span class="tocnumber">6</span> <span class="toctext">See also</span></a></li>


<li class="toclevel-1"><a href="#References"><span class="tocnumber">7</span> <span class="toctext">References</span></a></li>
VeNoMouS claimed that he learned to crack into systems from ], an Israeli hacker known as The Analyzer.<ref name="Wiredfirst">{{cite news | url=http://attrition.org/errata/www/art.0027.html | title=Crackers: We Stole Nuke Data| publisher=Wired | date=June 3, 1998}}</ref>
<li class="toclevel-1"><a href="#External_links"><span class="tocnumber">8</span> <span class="toctext">External links</span></a></li>
</ul>
</td>
</tr>
</table>
<script type="text/javascript">
//<![CDATA[
if (window.showTocToggle) { var tocShowText = "show"; var tocHideText = "hide"; showTocToggle(); }
//]]>
</script>
<p><a name="Members_of_milw0rm" id="Members_of_milw0rm"></a></p>
<h2><span class="editsection"></span> <span class="mw-headline">Members of <b style="color:black;background-color:#ffff66">milw0rm</b></span></h2>


<table style="" class="metadata plainlinks ambox ambox-content">
==BARC Attack==
<tr>
<td class="ambox-image"></td>
<td class="ambox-text"><b>This article needs additional <a href="/Wikipedia:Citing_sources" title="Misplaced Pages:Citing sources">citations</a> for <a href="/Wikipedia:Verifiability" title="Misplaced Pages:Verifiability">verification</a>.</b><br />
<small>Please help <a href="http://en.wikipedia.org/search/?title=Milw0rm&amp;action=edit" class="external text" title="http://en.wikipedia.org/search/?title=Milw0rm&amp;action=edit" rel="nofollow">improve this article</a> by adding <a href="/Wikipedia:Reliable_sources" title="Misplaced Pages:Reliable sources">reliable references</a>. Unsourced material may be <a href="/Template:Fact" title="Template:Fact">challenged</a> and removed. <i>(July 2007)</i></small></td>


</tr>
Four days before the incident, the five permanent members of the ], the ], ], ], ] and ], denounced both ] and ] for unilaterally declaring themselves nuclear weapons states. The day before the attack, ], US undersecretary of defense for acquisition and technology, warned a military conference that teenage hackers posed "a real threat" to national security.
</table>
<p>Little is known about the members of <b style="color:black;background-color:#ffff66">milw0rm</b>. The international hacking team went by the aliases of JF, Keystroke, ExtreemUK, savec0re, and VeNoMouS. VeNoMouS, 18, hailed from New Zealand, ExtreemUK and JF, 18, from England, and Keystroke and Savec0re, 17 from the US. To date, none of the group have come forward with their real names or identities, and investigations of the incident by the <a href="/CIA" title="CIA">CIA</a> and <a href="/FBI" title="FBI">FBI</a> or any other intelligence organizations proved fruitless in deciphering their identities, which were well-hidden. However, numerous people who were not a part of <b style="color:black;background-color:#ffff66">milw0rm</b> have come forward saying that they were responsible for the hacks. Their claims have been discredited.</p>
<p>JF went on to achieve a modicum of notoriety when <a href="/MTV" title="MTV">MTV</a> "hacked" its own website intentionally and graffitied the words "JF Was Here" across the page,<sup id="_ref-CNet_0" class="reference"><a href="#_note-CNet" title=""></a></sup> at the same time that JF was under investigation for the <b style="color:black;background-color:#ffff66">milw0rm</b> attacks by <a href="/Scotland_Yard" title="Scotland Yard">Scotland Yard</a>. Hundreds of pages hosted on MTV.com sported the new JF logo, including one page that read, "JF was here, greets to <b style="color:black;background-color:#ffff66">milw0rm</b>".<sup id="_ref-Antionline_0" class="reference"><a href="#_note-Antionline" title=""></a></sup></p>


<p>VeNoMouS claimed that he learned to crack into systems from <a href="/Ehud_Tenenbaum" title="Ehud Tenenbaum">Ehud Tenenbaum</a>, an Israeli hacker known as The Analyzer.<sup id="_ref-Wiredfirst_0" class="reference"><a href="#_note-Wiredfirst" title=""></a></sup></p>
On the night of ], ] from their workstations on three continents, the group used a US military .mil machine<ref name="Wiredfirst">{{cite news | url=http://attrition.org/errata/www/art.0027.html | title=Crackers: We Stole Nuke Data| publisher=Wired | date=June 3, 1998}}</ref> to break into the ], or local area network, of BARC and gained root access. The center's website, connected to the LAN, and their firewall was not secured enough to prevent the group from entering and gaining access to confidential emails and documents. The emails included correspondence between the center's scientists relating to their development of nuclear weapons. They then posted a statement of anti-nuclear intentions on the center's website.
<p><a name="BARC_Attack" id="BARC_Attack"></a></p>
<h2><span class="editsection"></span> <span class="mw-headline">BARC Attack</span></h2>
<p>Four days before the incident, the five permanent members of the <a href="/United_Nations_Security_Council" title="United Nations Security Council">United Nations Security Council</a>, the <a href="/US" title="US">US</a>, <a href="/Russia" title="Russia">Russia</a>, <a href="/United_Kingdom" title="United Kingdom">United Kingdom</a>, <a href="/France" title="France">France</a> and <a href="/China" title="China">China</a>, denounced both <a href="/India" title="India">India</a> and <a href="/Pakistan" title="Pakistan">Pakistan</a> for unilaterally declaring themselves nuclear weapons states. The day before the attack, <a href="/search/?title=Jacques_Gansler&amp;action=edit" class="new" title="Jacques Gansler">Jacques Gansler</a>, US undersecretary of defense for acquisition and technology, warned a military conference that teenage hackers posed "a real threat" to national security.</p>


<p>On the night of <a href="/June_3" title="June 3">June 3</a>, <a href="/1998" title="1998">1998</a> from their workstations on three continents, the group used a US military .mil machine<sup id="_ref-Wiredfirst_1" class="reference"><a href="#_note-Wiredfirst" title=""></a></sup> to break into the <a href="/LAN" title="LAN">LAN</a>, or local area network, of BARC and gained root access. The center's website, connected to the LAN, and their firewall was not secured enough to prevent the group from entering and gaining access to confidential emails and documents. The emails included correspondence between the center's scientists relating to their development of nuclear weapons. They then posted a statement of anti-nuclear intentions on the center's website.</p>
In the process of the break-in, the multinational group of teenagers -- from the ], ] and ] -- gained access to five megabytes of classified documents pertaining to India's nuclear weapons program. Savec0re erased all the data on two servers as a protest against the center's nuclear capabilities. To display their security breach publicly, they changed the center's webpage to display a mushroom cloud along with an anti-nuclear message and the phrase "Don't think destruction is cool, coz its not".<ref name="zdnet">{{cite news | url=http://news.zdnet.com/2100-9595_22-510664.html | title=India has scary nuke hack | publisher=ZDNet | date=June 5, 1998}}</ref>
<p>In the process of the break-in, the multinational group of teenagers -- from the <a href="/United_States" title="United States">United States</a>, <a href="/United_Kingdom" title="United Kingdom">United Kingdom</a> and <a href="/New_Zealand" title="New Zealand">New Zealand</a> -- gained access to five megabytes of classified documents pertaining to India's nuclear weapons program. Savec0re erased all the data on two servers as a protest against the center's nuclear capabilities. To display their security breach publicly, they changed the center's webpage to display a mushroom cloud along with an anti-nuclear message and the phrase "Don't think destruction is cool, coz its not".<sup id="_ref-zdnet_0" class="reference"><a href="#_note-zdnet" title=""></a></sup></p>


Milw0rm then came forward with the security flaws they exploited in BARC's system, along with some of the thousands of pages of documents they had lifted from the server, concerning India's last five nuclear detonations. <p><b style="color:black;background-color:#ffff66">Milw0rm</b> then came forward with the security flaws they exploited in BARC's system, along with some of the thousands of pages of documents they had lifted from the server, concerning India's last five nuclear detonations.<a href="http://www.savageideas.com/downloads/mba/Global_Information_Systems_Threats.pdf" class="external autonumber" title="http://www.savageideas.com/downloads/mba/Global_Information_Systems_Threats.pdf" rel="nofollow"></a></p>
<p>The group's purpose for the attack was to protest nuclear testing, according to Savec0re, VeNoMouS and JF, in their correspondence with <i>Wired'</i>s reporter James Glave.<sup id="_ref-zdnet_1" class="reference"><a href="#_note-zdnet" title=""></a></sup></p>
<p>After the attack Keystroke claimed that the breach had taken "13 minutes and 56 seconds" to execute. Many news organizations reported breathlessly how the teenagers had penetrated a nuclear research facility in "less than 14 minutes." However, examining more closely the hacker's wording and tone in the interview, and especially the specificity of the "56 seconds" claim, it is apparent that Keystroke meant this as a lighthearted answer to the question, "Exactly how long did it take you?". The actual invasion took careful planning, routing through servers throughout the world from three different continents, and took days to execute. An Indian news agency reported that downloading thousands of pages from India's slow servers would have taken much longer than 14 minutes.<sup id="_ref-India_0" class="reference"><a href="#_note-India" title=""></a></sup></p>
<p><a name="Attack_Aftermath" id="Attack_Aftermath"></a></p>
<h2><span class="editsection"></span> <span class="mw-headline">Attack Aftermath</span></h2>


<p>The security breach was first reported by <a href="/Wired_%28magazine%29" title="Wired (magazine)">Wired</a> News. Members of the group claimed credit by emailing Wired reporter <a href="/search/?title=James_Glave&amp;action=edit" class="new" title="James Glave">James Glave</a> with documents they had obtained from the BARC servers as proof.<sup id="_ref-zdnet_2" class="reference"><a href="#_note-zdnet" title=""></a></sup></p>
The group's purpose for the attack was to protest nuclear testing, according to Savec0re, VeNoMouS and JF, in their correspondence with ''Wired'''s reporter James Glave.<ref name="zdnet">{{cite news | url=http://news.zdnet.com/2100-9595_22-510664.html | title=India has scary nuke hack | publisher=ZDNet | date=June 5, 1998}}</ref>
<p>After first denying that any incident had occurred, BARC officials admitted that the center had indeed been hacked and emails had been downloaded. An official at BARC downplayed the severity and importance of the incident,<sup id="_ref-India_1" class="reference"><a href="#_note-India" title=""></a></sup> announcing that the security flaw resulted from "a very normal loophole in Sendmail," while going on to state that the center had not bothered to download a new version of the Sendmail program, responsible for the center's email servers. The center also admitted that after <b style="color:black;background-color:#ffff66">milw0rm's</b> breach, the site had been hacked into again, this time with less severe consequences. <i>Forbes</i> wrote that perhaps up to 100 hackers had followed <b style="color:black;background-color:#ffff66">milw0rm's</b> footsteps into the BARC servers once they were revealed as insecure.<sup id="_ref-Forbes_0" class="reference"><a href="#_note-Forbes" title=""></a></sup> The website was shut down while its security was upgraded. Later, a senior US government official told ZDNet that the Indians had known about the flaw and had chosen to ignore it, creating the opportunity for <b style="color:black;background-color:#ffff66">milw0rm</b> to root the servers.<sup id="_ref-zdnet_3" class="reference"><a href="#_note-zdnet" title=""></a></sup> BARC officials said that none of the emails contained confidential information, the group did not destroy data, and that the computers they have that contain important data were isolated from the ones broken into.<sup id="_ref-India_2" class="reference"><a href="#_note-India" title=""></a></sup></p>


<p>Nevertheless, the breach was a severe one and had the potential to cause an incident of international proportions. <i><a href="/Forbes_Magazine" title="Forbes Magazine">Forbes</a></i> called it "potentially the most devastating" hacking incident of <a href="/1998" title="1998">1998</a>.<sup id="_ref-Forbes_1" class="reference"><a href="#_note-Forbes" title=""></a></sup></p>
After the attack Keystroke claimed that the breach had taken "13 minutes and 56 seconds" to execute. Many news organizations reported breathlessly how the teenagers had penetrated a nuclear research facility in "less than 14 minutes." However, examining more closely the hacker's wording and tone in the interview, and especially the specificity of the "56 seconds" claim, it is apparent that Keystroke meant this as a lighthearted answer to the question, "Exactly how long did it take you?". The actual invasion took careful planning, routing through servers throughout the world from three different continents, and took days to execute. An Indian news agency reported that downloading thousands of pages from India's slow servers would have taken much longer than 14 minutes.<ref name="India">{{cite news | url=http://www.rediff.com/computer/1998/jun/09barc.htm | title=The Eye of the Needle | publisher=Rediff | date=June 9, 1998}}</ref>
<p>After the attack, members of the group participated in an anonymous <a href="/Internet_Relay_Chat" title="Internet Relay Chat">Internet Relay Chat</a> (IRC) chat with John Vranesivich, the founder of hacking news website Anti-Online. Keystroke explained how if he wanted to, he could have sent threatening emails from the Indian email server to a Pakistani email server. If the group had possessed malicious intentions, the consequences for both south Asian countries could have been catastrophic.</p>
<p>For these reasons, the <b style="color:black;background-color:#ffff66">milw0rm</b> attack caused other groups to heighten their security to prevent invasion by hackers. The U.S. Army announced, without giving evidence as to why they believed this to be the case, that the hacks might have originated in Turkey, noting that "Turkey is the primary conduit for cyber attacks." A senior US official said that the <a href="/Central_Intelligence_Agency" title="Central Intelligence Agency">CIA</a> had obtained the material that <b style="color:black;background-color:#ffff66">milw0rm</b> had purloined and was reviewing it-- the official did not mention how the CIA obtained this information.<sup id="_ref-zdnet_4" class="reference"><a href="#_note-zdnet" title=""></a></sup></p>


<p>Later, <a href="/Wired_%28magazine%29" title="Wired (magazine)">Wired</a> News revealed that an Indian national and self-proclaimed terrorist, <a href="/Khalid_Ibrahim" title="Khalid Ibrahim">Khalid Ibrahim</a>, had approached members of <b style="color:black;background-color:#ffff66">milw0rm</b> and other hacker groups on IRC-- including Masters of Downloading and the Noid-- and attempted to buy classified documents from them. According to savec0re, Ibrahim threatened to kill him if the hacker did not turn over the classified documents in question.<sup id="_ref-Wired_0" class="reference"><a href="#_note-Wired" title=""></a></sup></p>
==Attack Aftermath==
<p>The Electronic Disturbance Theater released a statement in support of JF, applauding him for his hacktivism and maintaining that computer break-ins of this sort were not cyber-terrorism as some claim.<a href="http://www.thing.net/~rdom/ecd/Brithacker.html" class="external autonumber" title="http://www.thing.net/~rdom/ecd/Brithacker.html" rel="nofollow"></a></p>
The security breach was first reported by ] News. Members of the group claimed credit by emailing Wired reporter ] with documents they had obtained from the BARC servers as proof.<ref name="zdnet">{{cite news | url=http://news.zdnet.com/2100-9595_22-510664.html | title=India has scary nuke hack | publisher=ZDNet | date=June 5, 1998}}</ref>
<p>The event received wide national coverage, with reports by <a href="/CNN" title="CNN">CNN</a>, <a href="/MSNBC" title="MSNBC">MSNBC</a> and the <a href="/Associated_Press" title="Associated Press">Associated Press</a> in the days following.<a href="http://www.antionline.com/about.php?action=inthenews" class="external autonumber" title="http://www.antionline.com/about.php?action=inthenews" rel="nofollow"></a></p>


<p><a name="Other_Attacks" id="Other_Attacks"></a></p>
After first denying that any incident had occurred, BARC officials admitted that the center had indeed been hacked and emails had been downloaded. An official at BARC downplayed the severity and importance of the incident,<ref name="India">{{cite news | url=http://www.rediff.com/computer/1998/jun/09barc.htm | title=The Eye of the Needle | publisher=Rediff | date=June 9, 1998}}</ref> announcing that the security flaw resulted from "a very normal loophole in Sendmail," while going on to state that the center had not bothered to download a new version of the Sendmail program, responsible for the center's email servers. The center also admitted that after milw0rm's breach, the site had been hacked into again, this time with less severe consequences. ''Forbes'' wrote that perhaps up to 100 hackers had followed milw0rm's footsteps into the BARC servers once they were revealed as insecure.<ref name="Forbes">{{cite news | url=http://www.forbes.com/1998/11/16/feat.html | title=Hacking Bhabha | publisher=Forbes | date=November 16, 1998}}</ref> The website was shut down while its security was upgraded. Later, a senior US government official told ZDNet that the Indians had known about the flaw and had chosen to ignore it, creating the opportunity for milw0rm to root the servers.<ref name="zdnet">{{cite news | url=http://news.zdnet.com/2100-9595_22-510664.html | title=India has scary nuke hack | publisher=ZDNet | date=June 5, 1998}}</ref> BARC officials said that none of the emails contained confidential information, the group did not destroy data, and that the computers they have that contain important data were isolated from the ones broken into.<ref name="India">{{cite news | url=http://www.rediff.com/computer/1998/jun/09barc.htm | title=The Eye of the Needle | publisher=Rediff | date=June 9, 1998}}</ref>
<h2><span class="editsection"></span> <span class="mw-headline">Other Attacks</span></h2>
<p>One month after the BARC incident, in July 1998, <b style="color:black;background-color:#ffff66">milw0rm</b> hacked the web hosting company <a href="/search/?title=Easyspace&amp;action=edit" class="new" title="Easyspace">Easyspace</a>, putting their anti-nuclear mushroom cloud message on more than 300 of Easyspace's websites.</p>
<p><i>Wired</i> reported that this incident was perhaps the "largest 'mass hack' ever undertaken." Some of the sites hacked in the incident were for the <a href="/World_Cup" title="World Cup">World Cup</a>, <a href="/The_Championships%2C_Wimbledon" title="The Championships, Wimbledon">Wimbledon</a>, the Ritz Casino, <a href="/Drew_Barrymore" title="Drew Barrymore">Drew Barrymore</a>, and the <a href="/Saudi_Arabia" title="Saudi Arabia">Saudi</a> royal family. The text placed on the sites read in part, "This mass takeover goes out to all the people out there who want to see peace in this world... This tension is not good, it scares you as much as it scares us. For you all know that this could seriously escalate into a big conflict between India and Pakistan and possibly even World War III, and this CANNOT happen...<sup id="_ref-wiredmasshack_1" class="reference"><a href="#_note-wiredmasshack" title=""></a></sup> Use your power to keep the world in a state of PEACE."<sup id="_ref-Harvard_0" class="reference"><a href="#_note-Harvard" title=""></a></sup></p>


<p>While scanning a network for weaknesses, members of the group came across EasySpace, a British company which hosted many sites on one server. Along with members of the fellow hacking group Ashtray Lumberjacks, <b style="color:black;background-color:#ffff66">milw0rm</b> had the revised mushroom cloud image and text on all of Easyspace's websites in less than one hour.</p>
Nevertheless, the breach was a severe one and had the potential to cause an incident of international proportions. '']'' called it "potentially the most devastating" hacking incident of ].<ref name="Forbes">{{cite news | url=http://www.forbes.com/1998/11/16/feat.html | title=Hacking Bhabha | publisher=Forbes | date=November 16, 1998}}</ref>
<p><a name="milw0rm_Quotes" id="milw0rm_Quotes"></a></p>
<h2><span class="editsection"></span> <span class="mw-headline"><b style="color:black;background-color:#ffff66">milw0rm</b> Quotes</span></h2>
<p><i>"The world is lucky we're so nice."</i></p>
<dl>


<dd>-Keystroke</dd>
After the attack, members of the group participated in an anonymous ] (IRC) chat with John Vranesivich, the founder of hacking news website Anti-Online. Keystroke explained how if he wanted to, he could have sent threatening emails from the Indian email server to a Pakistani email server. If the group had possessed malicious intentions, the consequences for both south Asian countries could have been catastrophic.
</dl>
<p><i>"It's ironic that India has weapons capable of destroying the world, but they can't secure a little web server which is connected to their networks."</i></p>
<dl>
<dd>-Keystroke</dd>
</dl>
<p><i>"If you're gonna amass data which can take many lives ... at least secure it."</i></p>
<dl>
<dd>-savec0re</dd>
</dl>
<p><i>"I'm only young; I don't want a hostile world on the edge of a nuclear conflict."</i></p>


<dl>
For these reasons, the milw0rm attack caused other groups to heighten their security to prevent invasion by hackers. The U.S. Army announced, without giving evidence as to why they believed this to be the case, that the hacks might have originated in Turkey, noting that "Turkey is the primary conduit for cyber attacks." A senior US official said that the ] had obtained the material that milw0rm had purloined and was reviewing it-- the official did not mention how the CIA obtained this information.<ref name="zdnet">{{cite news | url=http://news.zdnet.com/2100-9595_22-510664.html | title=India has scary nuke hack | publisher=ZDNet | date=June 5, 1998}}</ref>
<dd>-JF</dd>
</dl>
<p><i>"We should be moving towards world peace in the millennium, and nuclear warfare testing is NO way forward. It can destroy the world."</i></p>
<dl>
<dd>-JF</dd>
</dl>
<p>The full text of the <b style="color:black;background-color:#ffff66">milw0rm</b>-revised BARC website:</p>
<blockquote>
<p>oh gn0, like this is what happens if j00 play with atomic energy!#@! It g0es b00m@#@#@# so PLEEEZE, do not fuck around, didn't you parents ever teach you manners? I like the world in its current state (i guess), well its better than the world would be if the b0mb went b00m. think about it k1dz, its not clever, its not big, so don't think destruction is cool, coz its not. If a nuclear war does start, you will be the first to scream. You all saw the movie WARGAMES right? well.... That could have been us$#@ So India, LISTEN TO WISE OLD MILWORM .... You do not need nuclear weapons in the 1990s!#@! STOP THE SHIT Owned Savec0re - JF - VeNoMouS JF - Hamst0r - Keystoke - savec0re - ExtreemUK</p>


</blockquote>
Later, ] News revealed that an Indian national and self-proclaimed terrorist, ], had approached members of milw0rm and other hacker groups on IRC-- including Masters of Downloading and the Noid-- and attempted to buy classified documents from them. According to savec0re, Ibrahim threatened to kill him if the hacker did not turn over the classified documents in question.<ref name="Wired">{{cite news | url=http://www.wired.com/politics/law/news/1998/11/15812 | title=Do Terrorists Troll the Net? | publisher=Wired | date=November 4, 1998}}</ref>
<p><a name="See_also" id="See_also"></a></p>
<h2><span class="editsection"></span> <span class="mw-headline">See also</span></h2>
<ul>
<li><a href="/Hacktivism" title="Hacktivism">Hacktivism</a></li>
</ul>
<p><a name="References" id="References"></a></p>
<h2><span class="editsection"></span> <span class="mw-headline">References</span></h2>


<div class="references-small">
The Electronic Disturbance Theater released a statement in support of JF, applauding him for his hacktivism and maintaining that computer break-ins of this sort were not cyber-terrorism as some claim.
<ol class="references">
<li id="_note-wiredmasshack">^ <a href="#_ref-wiredmasshack_0" title=""><sup><i><b>a</b></i></sup></a> <a href="#_ref-wiredmasshack_1" title=""><sup><i><b>b</b></i></sup></a> "<a href="http://www.thing.net/~rdom/ecd/Brithacker.html" class="external text" title="http://www.thing.net/~rdom/ecd/Brithacker.html" rel="nofollow">Anti-Nuke Cracker Strikes Again</a>", Wired, July 3, 1998.<span class="Z3988" title="ctx_ver=Z39.88-2004&amp;rft_val_fmt=info%3Aofi%2Ffmt%3Akev%3Amtx%3Adc&amp;rft.type=newspaperArticle&amp;rft.subject=News&amp;rft.title=Anti-Nuke+Cracker+Strikes+Again&amp;rft.identifier=http%3A%2F%2Fwww.thing.net%2F%7Erdom%2Fecd%2FBrithacker.html&amp;rft.publisher=Wired&amp;rft.date=July+3%2C+1998">&#160;</span></li>
<li id="_note-Ottawa"><b><a href="#_ref-Ottawa_0" title="">^</a></b> "<a href="http://hrea.org/lists/huridocs-tech/markup/msg00014.html" class="external text" title="http://hrea.org/lists/huridocs-tech/markup/msg00014.html" rel="nofollow">E-Guerrillas in the mist</a>", Ottawa Citizen, October 27, 1998.<span class="Z3988" title="ctx_ver=Z39.88-2004&amp;rft_val_fmt=info%3Aofi%2Ffmt%3Akev%3Amtx%3Adc&amp;rft.type=newspaperArticle&amp;rft.subject=News&amp;rft.title=E-Guerrillas+in+the+mist&amp;rft.identifier=http%3A%2F%2Fhrea.org%2Flists%2Fhuridocs-tech%2Fmarkup%2Fmsg00014.html&amp;rft.publisher=Ottawa+Citizen&amp;rft.date=October+27%2C+1998">&#160;</span></li>


<li id="_note-CNet"><b><a href="#_ref-CNet_0" title="">^</a></b> "<a href="http://news.com.com/2100-1023-215319.html" class="external text" title="http://news.com.com/2100-1023-215319.html" rel="nofollow">MTV "hack" backfires</a>", CNet, September 9, 1998.<span class="Z3988" title="ctx_ver=Z39.88-2004&amp;rft_val_fmt=info%3Aofi%2Ffmt%3Akev%3Amtx%3Adc&amp;rft.type=newspaperArticle&amp;rft.subject=News&amp;rft.title=MTV+%22hack%22+backfires&amp;rft.identifier=http%3A%2F%2Fnews.com.com%2F2100-1023-215319.html&amp;rft.publisher=CNet&amp;rft.date=September+9%2C+1998">&#160;</span></li>
The event received wide national coverage, with reports by ], ] and the ] in the days following.
<li id="_note-Antionline"><b><a href="#_ref-Antionline_0" title="">^</a></b> "<a href="http://web.archive.org/web/19981205104829/http://antionline.com/SpecialReports/mtv/opinion.html" class="external text" title="http://web.archive.org/web/19981205104829/http://antionline.com/SpecialReports/mtv/opinion.html" rel="nofollow">AntiOnline's Editorial Coverage Of The MTV Site "Hack"&#160;?</a>", AntiOnline, September 1998.<span class="Z3988" title="ctx_ver=Z39.88-2004&amp;rft_val_fmt=info%3Aofi%2Ffmt%3Akev%3Amtx%3Adc&amp;rft.type=newspaperArticle&amp;rft.subject=News&amp;rft.title=AntiOnline%27s+Editorial+Coverage+Of+The+MTV+Site+%22Hack%22+%3F&amp;rft.identifier=http%3A%2F%2Fweb.archive.org%2Fweb%2F19981205104829%2Fhttp%3A%2F%2Fantionline.com%2FSpecialReports%2Fmtv%2Fopinion.html&amp;rft.publisher=AntiOnline&amp;rft.date=September+1998">&#160;</span></li>
<li id="_note-Wiredfirst">^ <a href="#_ref-Wiredfirst_0" title=""><sup><i><b>a</b></i></sup></a> <a href="#_ref-Wiredfirst_1" title=""><sup><i><b>b</b></i></sup></a> "<a href="http://attrition.org/errata/www/art.0027.html" class="external text" title="http://attrition.org/errata/www/art.0027.html" rel="nofollow">Crackers: We Stole Nuke Data</a>", Wired, June 3, 1998.<span class="Z3988" title="ctx_ver=Z39.88-2004&amp;rft_val_fmt=info%3Aofi%2Ffmt%3Akev%3Amtx%3Adc&amp;rft.type=newspaperArticle&amp;rft.subject=News&amp;rft.title=Crackers%3A+We+Stole+Nuke+Data&amp;rft.identifier=http%3A%2F%2Fattrition.org%2Ferrata%2Fwww%2Fart.0027.html&amp;rft.publisher=Wired&amp;rft.date=June+3%2C+1998">&#160;</span></li>


<li id="_note-zdnet">^ <a href="#_ref-zdnet_0" title=""><sup><i><b>a</b></i></sup></a> <a href="#_ref-zdnet_1" title=""><sup><i><b>b</b></i></sup></a> <a href="#_ref-zdnet_2" title=""><sup><i><b>c</b></i></sup></a> <a href="#_ref-zdnet_3" title=""><sup><i><b>d</b></i></sup></a> <a href="#_ref-zdnet_4" title=""><sup><i><b>e</b></i></sup></a> "<a href="http://news.zdnet.com/2100-9595_22-510664.html" class="external text" title="http://news.zdnet.com/2100-9595_22-510664.html" rel="nofollow">India has scary nuke hack</a>", ZDNet, June 5, 1998.<span class="Z3988" title="ctx_ver=Z39.88-2004&amp;rft_val_fmt=info%3Aofi%2Ffmt%3Akev%3Amtx%3Adc&amp;rft.type=newspaperArticle&amp;rft.subject=News&amp;rft.title=India+has+scary+nuke+hack&amp;rft.identifier=http%3A%2F%2Fnews.zdnet.com%2F2100-9595_22-510664.html&amp;rft.publisher=ZDNet&amp;rft.date=June+5%2C+1998">&#160;</span></li>
==Other Attacks==
<li id="_note-India">^ <a href="#_ref-India_0" title=""><sup><i><b>a</b></i></sup></a> <a href="#_ref-India_1" title=""><sup><i><b>b</b></i></sup></a> <a href="#_ref-India_2" title=""><sup><i><b>c</b></i></sup></a> "<a href="http://www.rediff.com/computer/1998/jun/09barc.htm" class="external text" title="http://www.rediff.com/computer/1998/jun/09barc.htm" rel="nofollow">The Eye of the Needle</a>", Rediff, June 9, 1998.<span class="Z3988" title="ctx_ver=Z39.88-2004&amp;rft_val_fmt=info%3Aofi%2Ffmt%3Akev%3Amtx%3Adc&amp;rft.type=newspaperArticle&amp;rft.subject=News&amp;rft.title=The+Eye+of+the+Needle&amp;rft.identifier=http%3A%2F%2Fwww.rediff.com%2Fcomputer%2F1998%2Fjun%2F09barc.htm&amp;rft.publisher=Rediff&amp;rft.date=June+9%2C+1998">&#160;</span></li>
One month after the BARC incident, in July 1998, milw0rm hacked the web hosting company ], putting their anti-nuclear mushroom cloud message on more than 300 of Easyspace's websites.


<li id="_note-Forbes">^ <a href="#_ref-Forbes_0" title=""><sup><i><b>a</b></i></sup></a> <a href="#_ref-Forbes_1" title=""><sup><i><b>b</b></i></sup></a> "<a href="http://www.forbes.com/1998/11/16/feat.html" class="external text" title="http://www.forbes.com/1998/11/16/feat.html" rel="nofollow">Hacking Bhabha</a>", Forbes, November 16, 1998.<span class="Z3988" title="ctx_ver=Z39.88-2004&amp;rft_val_fmt=info%3Aofi%2Ffmt%3Akev%3Amtx%3Adc&amp;rft.type=newspaperArticle&amp;rft.subject=News&amp;rft.title=Hacking+Bhabha&amp;rft.identifier=http%3A%2F%2Fwww.forbes.com%2F1998%2F11%2F16%2Ffeat.html&amp;rft.publisher=Forbes&amp;rft.date=November+16%2C+1998">&#160;</span></li>
''Wired'' reported that this incident was perhaps the "largest 'mass hack' ever undertaken." Some of the sites hacked in the incident were for the ], ], the Ritz Casino, ], and the ] royal family. The text placed on the sites read in part, "This mass takeover goes out to all the people out there who want to see peace in this world... This tension is not good, it scares you as much as it scares us. For you all know that this could seriously escalate into a big conflict between India and Pakistan and possibly even World War III, and this CANNOT happen...<ref name="wiredmasshack">{{cite news | url=http://www.thing.net/~rdom/ecd/Brithacker.html | title=Anti-Nuke Cracker Strikes Again | publisher=Wired | date=July 3, 1998}}</ref> Use your power to keep the world in a state of PEACE."<ref name="Harvard">{{cite news | url=http://hir.harvard.edu/articles/print.php?article=905 | title=Cyberwarriors: Activists and Terrorists Turn to Cyberspace | publisher=The Future of War | date=Summer 2001}}</ref>
<li id="_note-Wired"><b><a href="#_ref-Wired_0" title="">^</a></b> "<a href="http://www.wired.com/politics/law/news/1998/11/15812" class="external text" title="http://www.wired.com/politics/law/news/1998/11/15812" rel="nofollow">Do Terrorists Troll the Net?</a>", Wired, November 4, 1998.<span class="Z3988" title="ctx_ver=Z39.88-2004&amp;rft_val_fmt=info%3Aofi%2Ffmt%3Akev%3Amtx%3Adc&amp;rft.type=newspaperArticle&amp;rft.subject=News&amp;rft.title=Do+Terrorists+Troll+the+Net%3F&amp;rft.identifier=http%3A%2F%2Fwww.wired.com%2Fpolitics%2Flaw%2Fnews%2F1998%2F11%2F15812&amp;rft.publisher=Wired&amp;rft.date=November+4%2C+1998">&#160;</span></li>
<li id="_note-Harvard"><b><a href="#_ref-Harvard_0" title="">^</a></b> "<a href="http://hir.harvard.edu/articles/print.php?article=905" class="external text" title="http://hir.harvard.edu/articles/print.php?article=905" rel="nofollow">Cyberwarriors: Activists and Terrorists Turn to Cyberspace</a>", The Future of War, Summer 2001.<span class="Z3988" title="ctx_ver=Z39.88-2004&amp;rft_val_fmt=info%3Aofi%2Ffmt%3Akev%3Amtx%3Adc&amp;rft.type=newspaperArticle&amp;rft.subject=News&amp;rft.title=Cyberwarriors%3A+Activists+and+Terrorists+Turn+to+Cyberspace&amp;rft.identifier=http%3A%2F%2Fhir.harvard.edu%2Farticles%2Fprint.php%3Farticle%3D905&amp;rft.publisher=The+Future+of+War&amp;rft.date=Summer+2001">&#160;</span></li>


</ol>
While scanning a network for weaknesses, members of the group came across EasySpace, a British company which hosted many sites on one server. Along with members of the fellow hacking group Ashtray Lumberjacks, milw0rm had the revised mushroom cloud image and text on all of Easyspace's websites in less than one hour.
</div>
<p><a name="External_links" id="External_links"></a></p>
<h2><span class="editsection"></span> <span class="mw-headline">External links</span></h2>
<ul>
<li><a href="http://www.milw0rm.com/" class="external text" title="http://www.milw0rm.com/" rel="nofollow"><b style="color:black;background-color:#ffff66">milw0rm</b>.com</a> Exploit and Vulnerability Database</li>
</ul>
<p>Mirrors of hacked sites:</p>


<ul>
==milw0rm Quotes==
<li><a href="http://fb.provocation.net/www.flashback.se/hack/1998/07/02/1/index.html" class="external text" title="http://fb.provocation.net/www.flashback.se/hack/1998/07/02/1/index.html" rel="nofollow">Mass hack</a></li>
<li><a href="http://www.kitetoa.com/Pages/Textes/Les_Dossiers/Hacked/Souvenirs/fantasyfootball.htm" class="external text" title="http://www.kitetoa.com/Pages/Textes/Les_Dossiers/Hacked/Souvenirs/fantasyfootball.htm" rel="nofollow">Fantasyfootball.co.uk hacked</a></li>
<li><a href="http://www.kitetoa.com/Pages/Textes/Les_Dossiers/Hacked/Souvenirs/leje.htm" class="external text" title="http://www.kitetoa.com/Pages/Textes/Les_Dossiers/Hacked/Souvenirs/leje.htm" rel="nofollow">Hacked site</a></li>
<li><a href="http://www.kitetoa.com/Pages/Textes/Les_Dossiers/Hacked/Souvenirs/michaelpowels.htm" class="external text" title="http://www.kitetoa.com/Pages/Textes/Les_Dossiers/Hacked/Souvenirs/michaelpowels.htm" rel="nofollow">"We Hacked Prince Charles' Bentley!"</a></li>
</ul>


<!--
''"The world is lucky we're so nice."''
Pre-expand include size: 65258 bytes
:-Keystroke
Post-expand include size: 18514 bytes
Template argument size: 9327 bytes
Maximum: 2048000 bytes
-->


<!-- Saved in parser cache with key enwiki:pcache:idhash:2905436-0!1!0!default!!en!2 and timestamp 20071113084033 -->
''"It's ironic that India has weapons capable of destroying the world, but they can't secure a little web server which is connected to their networks."''
<div class="printfooter">
:-Keystroke
Retrieved from "<a href="http://en.wikipedia.org/Milw0rm">http://en.wikipedia.org/<b style="color:black;background-color:#ffff66">Milw0rm</b></a>"</div>


<div id="catlinks"><p class='catlinks'><a href="/Special:Categories" title="Special:Categories">Categories</a>: <span dir='ltr'><a href="/Category:Articles_needing_additional_references_from_July_2007" title="Category:Articles needing additional references from July 2007">Articles needing additional references from July 2007</a></span> | <span dir='ltr'><a href="/Category:Hacker_groups" title="Category:Hacker groups">Hacker groups</a></span> | <span dir='ltr'><a href="/Category:Underground_computer_groups" title="Category:Underground computer groups">Underground computer groups</a></span> | <span dir='ltr'><a href="/Category:Hacking_%28computer_security%29" title="Category:Hacking (computer security)">Hacking (computer security)</a></span></p></div> <!-- end content -->
''"If you're gonna amass data which can take many lives ... at least secure it."''
<div class="visualClear"></div>
:-savec0re


</div>
''"I'm only young; I don't want a hostile world on the edge of a nuclear conflict."''
</div>
:-JF
</div>
<div id="column-one">
<div id="p-cactions" class="portlet">
<h5>Views</h5>
<div class="pBody">
<ul>


<li id="ca-nstab-main" class="selected"><a href="/Milw0rm" title="View the content page " accesskey="c">Article</a></li>
''"We should be moving towards world peace in the millennium, and nuclear warfare testing is NO way forward. It can destroy the world."''
<li id="ca-talk"><a href="/Talk:Milw0rm" title="Discussion about the content page " accesskey="t">Discussion</a></li>
:-JF
<li id="ca-edit"><a href="/search/?title=Milw0rm&amp;action=edit" title="You can edit this page. Please use the preview button before saving. " accesskey="e">Edit this page</a></li>
<li id="ca-history"><a href="/search/?title=Milw0rm&amp;action=history" title="Past versions of this page " accesskey="h">History</a></li>
</ul>
</div>
</div>


<div class="portlet" id="p-personal">
The full text of the milw0rm-revised BARC website:
<h5>Personal tools</h5>
<div class="pBody">
<ul>
<li id="pt-login"><a href="/search/?title=Special:Userlogin&amp;returnto=Milw0rm" title="You are encouraged to log in, it is not mandatory however. " accesskey="o">Sign in / create account</a></li>
</ul>
</div>
</div>


<div class="portlet" id="p-logo">
<blockquote>
<a style="background-image: url(/images/wiki-en.png);" href="/Main_Page" title="Visit the Main Page " accesskey="z"></a>
oh gn0, like this is what happens if j00 play with atomic energy!#@!
</div>
<script type="text/javascript"> if (window.isMSIE55) fixalpha(); </script>
<div class='portlet' id='p-navigation'>
<h5>Navigation</h5>
<div class='pBody'>
<ul>


<li id="n-Main-page"><a href="/Main_Page" title="Visit the main page " accesskey="z">Main page</a></li>
It g0es b00m@#@#@# so PLEEEZE, do not fuck around, didn't you parents ever teach you manners?
<li id="n-Contents"><a href="/Wikipedia:Contents" title="Guides to browsing Misplaced Pages">Contents</a></li>
<li id="n-Featured-content"><a href="/Wikipedia:Featured_content" title="Featured content — the best of Misplaced Pages">Featured content</a></li>
<li id="n-currentevents"><a href="/Portal:Current_events" title="Find background information on current events">Current events</a></li>
<li id="n-randompage"><a href="/Special:Random" title="Load a random page " accesskey="x">Random article</a></li>
</ul>


</div>
I like the world in its current state (i guess), well its better than the world would be if the b0mb went b00m.
</div>
<div class='portlet' id='p-interaction'>
<h5>interaction</h5>
<div class='pBody'>
<ul>
<li id="n-About-Misplaced Pages"><a href="/Wikipedia:About" title="Find out about Misplaced Pages">About Misplaced Pages</a></li>
<li id="n-portal"><a href="/Wikipedia:Community_Portal" title="About the project, what you can do, where to find things">Community portal</a></li>


<li id="n-recentchanges"><a href="/Special:Recentchanges" title="The list of recent changes in the wiki " accesskey="r">Recent changes</a></li>
think about it k1dz, its not clever, its not big, so don't think destruction is cool, coz its not.
<li id="n-contact"><a href="/Wikipedia:Contact_us" title="How to contact Misplaced Pages">Contact Misplaced Pages</a></li>
<li id="n-sitesupport"><a href="http://wikimediafoundation.org/Donate" title="Support us">Donate to Misplaced Pages</a></li>
<li id="n-help"><a href="/Help:Contents" title="Guidance on how to use and edit Misplaced Pages">Help</a></li>
</ul>
</div>
</div>


<div id="p-search" class="portlet">
If a nuclear war does start, you will be the first to scream.
<h5><label for="searchInput">Search</label></h5>

<div id="searchBody" class="pBody">
You all saw the movie WARGAMES right? well.... That could have been us$#@
<form action="/Special:Search" id="searchform"><div>

<input id="searchInput" name="search" type="text" title="Search Misplaced Pages " accesskey="f" value="" />
So India, LISTEN TO WISE OLD MILWORM .... You do not need nuclear weapons in the 1990s!#@!
<input type='submit' name="go" class="searchButton" id="searchGoButton" value="Go" />&nbsp;

<input type='submit' name="fulltext" class="searchButton" id="mw-searchButton" value="Search" />
STOP THE SHIT
</div></form>

Owned

Savec0re - JF - VeNoMouS

JF - Hamst0r - Keystoke - savec0re - ExtreemUK
</blockquote>


</div>
==See also==
</div>
*]
<div class="portlet" id="p-tb">
<h5>Toolbox</h5>
<div class="pBody">
<ul>
<li id="t-whatlinkshere"><a href="/Special:Whatlinkshere/Milw0rm" title="List of all wiki pages that link here " accesskey="j">What links here</a></li>
<li id="t-recentchangeslinked"><a href="/Special:Recentchangeslinked/Milw0rm" title="Recent changes in pages linked from this page " accesskey="k">Related changes</a></li>


<li id="t-upload"><a href="/Wikipedia:Upload" title="Upload images or media files " accesskey="u">Upload file</a></li>
==References==
<li id="t-specialpages"><a href="/Special:Specialpages" title="List of all special pages " accesskey="q">Special pages</a></li>
{{reflist}}
<li id="t-print"><a href="/search/?title=Milw0rm&amp;printable=yes" title="Printable version of this page " accesskey="p">Printable version</a></li> <li id="t-permalink"><a href="/search/?title=Milw0rm&amp;oldid=169493180" title="Permanent link to this version of the page">Permanent link</a></li><li id="t-cite"><a href="/search/?title=Special:Cite&amp;page=Milw0rm&amp;id=169493180">Cite this article</a></li> </ul>
</div>
</div>
</div><!-- end of the left (by default at least) column -->


<div class="visualClear"></div>
==External links==
<div id="footer">
* Exploit and Vulnerability Database
<div id="f-poweredbyico"><a href="http://www.mediawiki.org/"><img src="/skins-1.5/common/images/poweredby_mediawiki_88x31.png" alt="Powered by MediaWiki" /></a></div>
<div id="f-copyrightico"><a href="http://wikimediafoundation.org/"><img src="/images/wikimedia-button.png" border="0" alt="Wikimedia Foundation"/></a></div>
<ul id="f-list">
<li id="lastmod"> This page was last modified 00:17, 6 November 2007.</li>
<li id="copyright">All text is available under the terms of the <a class='internal' href="/Wikipedia:Text_of_the_GNU_Free_Documentation_License" title="Misplaced Pages:Text of the GNU Free Documentation License">GNU Free Documentation License</a>. (See <b><a class='internal' href="/Wikipedia:Copyrights" title="Misplaced Pages:Copyrights">Copyrights</a></b> for details.) <br /> Misplaced Pages&reg; is a registered trademark of the <a href="http://www.wikimediafoundation.org">Wikimedia Foundation, Inc</a>., a U.S. registered <a class='internal' href="/501%28c%29#501.28c.29.283.29" title="501(c)(3)">501(c)(3)</a> <a href="http://wikimediafoundation.org/Deductibility_of_donations">tax-deductible</a> <a class='internal' href="/Non-profit_organization" title="Non-profit organization">nonprofit</a> <a href="/Charitable_organization" title="Charitable organization">charity</a>.<br /></li>


<li id="privacy"><a href="http://wikimediafoundation.org/Privacy_policy" title="wikimedia:Privacy policy">Privacy policy</a></li>
Mirrors of hacked sites:
<li id="about"><a href="/Wikipedia:About" title="Misplaced Pages:About">About Misplaced Pages</a></li>
*
<li id="disclaimer"><a href="/Wikipedia:General_disclaimer" title="Misplaced Pages:General disclaimer">Disclaimers</a></li>
*
</ul>
*
</div>
*
<script type="text/javascript">if (window.runOnloadHook) runOnloadHook();</script>
</div>


<!-- Served by srv67 in 0.083 secs. --></body></html>
]
]
]

Revision as of 16:28, 24 November 2007

Jump to: <a href="#column-one">navigation</a>, <a href="#searchInput">search</a>

milw0rm is a group of "hacktivists" best known for penetrating the computers of the <a href="/Bhabha_Atomic_Research_Centre" title="Bhabha Atomic Research Centre">Bhabha Atomic Research Centre</a> (BARC) in <a href="/Bombay" title="Bombay">Bombay</a>, the primary nuclear research facility of <a href="/India" title="India">India</a>, on June 3, 1998. The group conducted hacks for political reasons, including an anti-nuclear agenda and peace message that it spread on hacked websites. The group's logo featured the slogan "Putting the power back in the hands of the people."

The BARC attack generated heated debate on the security of information in a world prevalent with countries developing nuclear weapons and the information necessary to do so, the ethics of "hacker activists" or "hacktivists," and the importance of advanced security measures in a modern world filled with people willing and able to break into insecure international websites.

Contents

  • <a href="#Members_of_milw0rm">1 Members of milw0rm</a>
  • <a href="#BARC_Attack">2 BARC Attack</a>
  • <a href="#Attack_Aftermath">3 Attack Aftermath</a>
  • <a href="#Other_Attacks">4 Other Attacks</a>
  • <a href="#milw0rm_Quotes">5 milw0rm Quotes</a>
  • <a href="#See_also">6 See also</a>
  • <a href="#References">7 References</a>
  • <a href="#External_links">8 External links</a>

<script type="text/javascript"> //<![CDATA[ 

if (window.showTocToggle) { var tocShowText = "show"; var tocHideText = "hide"; showTocToggle(); }

//]]> </script>

<a name="Members_of_milw0rm" id="Members_of_milw0rm"></a>

Members of milw0rm

This article needs additional <a href="/Wikipedia:Citing_sources" title="Misplaced Pages:Citing sources">citations</a> for <a href="/Wikipedia:Verifiability" title="Misplaced Pages:Verifiability">verification</a>.
Please help <a href="http://en.wikipedia.org/search/?title=Milw0rm&action=edit" class="external text" title="http://en.wikipedia.org/search/?title=Milw0rm&action=edit" rel="nofollow">improve this article</a> by adding <a href="/Wikipedia:Reliable_sources" title="Misplaced Pages:Reliable sources">reliable references</a>. Unsourced material may be <a href="/Template:Fact" title="Template:Fact">challenged</a> and removed. (July 2007)

Little is known about the members of milw0rm. The international hacking team went by the aliases of JF, Keystroke, ExtreemUK, savec0re, and VeNoMouS. VeNoMouS, 18, hailed from New Zealand, ExtreemUK and JF, 18, from England, and Keystroke and Savec0re, 17 from the US. To date, none of the group have come forward with their real names or identities, and investigations of the incident by the <a href="/CIA" title="CIA">CIA</a> and <a href="/FBI" title="FBI">FBI</a> or any other intelligence organizations proved fruitless in deciphering their identities, which were well-hidden. However, numerous people who were not a part of milw0rm have come forward saying that they were responsible for the hacks. Their claims have been discredited.

JF went on to achieve a modicum of notoriety when <a href="/MTV" title="MTV">MTV</a> "hacked" its own website intentionally and graffitied the words "JF Was Here" across the page, at the same time that JF was under investigation for the milw0rm attacks by <a href="/Scotland_Yard" title="Scotland Yard">Scotland Yard</a>. Hundreds of pages hosted on MTV.com sported the new JF logo, including one page that read, "JF was here, greets to milw0rm".

VeNoMouS claimed that he learned to crack into systems from <a href="/Ehud_Tenenbaum" title="Ehud Tenenbaum">Ehud Tenenbaum</a>, an Israeli hacker known as The Analyzer.

<a name="BARC_Attack" id="BARC_Attack"></a>

BARC Attack

Four days before the incident, the five permanent members of the <a href="/United_Nations_Security_Council" title="United Nations Security Council">United Nations Security Council</a>, the <a href="/US" title="US">US</a>, <a href="/Russia" title="Russia">Russia</a>, <a href="/United_Kingdom" title="United Kingdom">United Kingdom</a>, <a href="/France" title="France">France</a> and <a href="/China" title="China">China</a>, denounced both <a href="/India" title="India">India</a> and <a href="/Pakistan" title="Pakistan">Pakistan</a> for unilaterally declaring themselves nuclear weapons states. The day before the attack, <a href="/search/?title=Jacques_Gansler&action=edit" class="new" title="Jacques Gansler">Jacques Gansler</a>, US undersecretary of defense for acquisition and technology, warned a military conference that teenage hackers posed "a real threat" to national security.

On the night of <a href="/June_3" title="June 3">June 3</a>, <a href="/1998" title="1998">1998</a> from their workstations on three continents, the group used a US military .mil machine to break into the <a href="/LAN" title="LAN">LAN</a>, or local area network, of BARC and gained root access. The center's website, connected to the LAN, and their firewall was not secured enough to prevent the group from entering and gaining access to confidential emails and documents. The emails included correspondence between the center's scientists relating to their development of nuclear weapons. They then posted a statement of anti-nuclear intentions on the center's website.

In the process of the break-in, the multinational group of teenagers -- from the <a href="/United_States" title="United States">United States</a>, <a href="/United_Kingdom" title="United Kingdom">United Kingdom</a> and <a href="/New_Zealand" title="New Zealand">New Zealand</a> -- gained access to five megabytes of classified documents pertaining to India's nuclear weapons program. Savec0re erased all the data on two servers as a protest against the center's nuclear capabilities. To display their security breach publicly, they changed the center's webpage to display a mushroom cloud along with an anti-nuclear message and the phrase "Don't think destruction is cool, coz its not".

Milw0rm then came forward with the security flaws they exploited in BARC's system, along with some of the thousands of pages of documents they had lifted from the server, concerning India's last five nuclear detonations.<a href="http://www.savageideas.com/downloads/mba/Global_Information_Systems_Threats.pdf" class="external autonumber" title="http://www.savageideas.com/downloads/mba/Global_Information_Systems_Threats.pdf" rel="nofollow"></a>

The group's purpose for the attack was to protest nuclear testing, according to Savec0re, VeNoMouS and JF, in their correspondence with Wired's reporter James Glave.

After the attack Keystroke claimed that the breach had taken "13 minutes and 56 seconds" to execute. Many news organizations reported breathlessly how the teenagers had penetrated a nuclear research facility in "less than 14 minutes." However, examining more closely the hacker's wording and tone in the interview, and especially the specificity of the "56 seconds" claim, it is apparent that Keystroke meant this as a lighthearted answer to the question, "Exactly how long did it take you?". The actual invasion took careful planning, routing through servers throughout the world from three different continents, and took days to execute. An Indian news agency reported that downloading thousands of pages from India's slow servers would have taken much longer than 14 minutes.

<a name="Attack_Aftermath" id="Attack_Aftermath"></a>

Attack Aftermath

The security breach was first reported by <a href="/Wired_%28magazine%29" title="Wired (magazine)">Wired</a> News. Members of the group claimed credit by emailing Wired reporter <a href="/search/?title=James_Glave&action=edit" class="new" title="James Glave">James Glave</a> with documents they had obtained from the BARC servers as proof.

After first denying that any incident had occurred, BARC officials admitted that the center had indeed been hacked and emails had been downloaded. An official at BARC downplayed the severity and importance of the incident, announcing that the security flaw resulted from "a very normal loophole in Sendmail," while going on to state that the center had not bothered to download a new version of the Sendmail program, responsible for the center's email servers. The center also admitted that after milw0rm's breach, the site had been hacked into again, this time with less severe consequences. Forbes wrote that perhaps up to 100 hackers had followed milw0rm's footsteps into the BARC servers once they were revealed as insecure. The website was shut down while its security was upgraded. Later, a senior US government official told ZDNet that the Indians had known about the flaw and had chosen to ignore it, creating the opportunity for milw0rm to root the servers. BARC officials said that none of the emails contained confidential information, the group did not destroy data, and that the computers they have that contain important data were isolated from the ones broken into.

Nevertheless, the breach was a severe one and had the potential to cause an incident of international proportions. <a href="/Forbes_Magazine" title="Forbes Magazine">Forbes</a> called it "potentially the most devastating" hacking incident of <a href="/1998" title="1998">1998</a>.

After the attack, members of the group participated in an anonymous <a href="/Internet_Relay_Chat" title="Internet Relay Chat">Internet Relay Chat</a> (IRC) chat with John Vranesivich, the founder of hacking news website Anti-Online. Keystroke explained how if he wanted to, he could have sent threatening emails from the Indian email server to a Pakistani email server. If the group had possessed malicious intentions, the consequences for both south Asian countries could have been catastrophic.

For these reasons, the milw0rm attack caused other groups to heighten their security to prevent invasion by hackers. The U.S. Army announced, without giving evidence as to why they believed this to be the case, that the hacks might have originated in Turkey, noting that "Turkey is the primary conduit for cyber attacks." A senior US official said that the <a href="/Central_Intelligence_Agency" title="Central Intelligence Agency">CIA</a> had obtained the material that milw0rm had purloined and was reviewing it-- the official did not mention how the CIA obtained this information.

Later, <a href="/Wired_%28magazine%29" title="Wired (magazine)">Wired</a> News revealed that an Indian national and self-proclaimed terrorist, <a href="/Khalid_Ibrahim" title="Khalid Ibrahim">Khalid Ibrahim</a>, had approached members of milw0rm and other hacker groups on IRC-- including Masters of Downloading and the Noid-- and attempted to buy classified documents from them. According to savec0re, Ibrahim threatened to kill him if the hacker did not turn over the classified documents in question.

The Electronic Disturbance Theater released a statement in support of JF, applauding him for his hacktivism and maintaining that computer break-ins of this sort were not cyber-terrorism as some claim.<a href="http://www.thing.net/~rdom/ecd/Brithacker.html" class="external autonumber" title="http://www.thing.net/~rdom/ecd/Brithacker.html" rel="nofollow"></a>

The event received wide national coverage, with reports by <a href="/CNN" title="CNN">CNN</a>, <a href="/MSNBC" title="MSNBC">MSNBC</a> and the <a href="/Associated_Press" title="Associated Press">Associated Press</a> in the days following.<a href="http://www.antionline.com/about.php?action=inthenews" class="external autonumber" title="http://www.antionline.com/about.php?action=inthenews" rel="nofollow"></a>

<a name="Other_Attacks" id="Other_Attacks"></a>

Other Attacks

One month after the BARC incident, in July 1998, milw0rm hacked the web hosting company <a href="/search/?title=Easyspace&action=edit" class="new" title="Easyspace">Easyspace</a>, putting their anti-nuclear mushroom cloud message on more than 300 of Easyspace's websites.

Wired reported that this incident was perhaps the "largest 'mass hack' ever undertaken." Some of the sites hacked in the incident were for the <a href="/World_Cup" title="World Cup">World Cup</a>, <a href="/The_Championships%2C_Wimbledon" title="The Championships, Wimbledon">Wimbledon</a>, the Ritz Casino, <a href="/Drew_Barrymore" title="Drew Barrymore">Drew Barrymore</a>, and the <a href="/Saudi_Arabia" title="Saudi Arabia">Saudi</a> royal family. The text placed on the sites read in part, "This mass takeover goes out to all the people out there who want to see peace in this world... This tension is not good, it scares you as much as it scares us. For you all know that this could seriously escalate into a big conflict between India and Pakistan and possibly even World War III, and this CANNOT happen... Use your power to keep the world in a state of PEACE."

While scanning a network for weaknesses, members of the group came across EasySpace, a British company which hosted many sites on one server. Along with members of the fellow hacking group Ashtray Lumberjacks, milw0rm had the revised mushroom cloud image and text on all of Easyspace's websites in less than one hour.

<a name="milw0rm_Quotes" id="milw0rm_Quotes"></a>

milw0rm Quotes

"The world is lucky we're so nice."

-Keystroke

"It's ironic that India has weapons capable of destroying the world, but they can't secure a little web server which is connected to their networks."

-Keystroke

"If you're gonna amass data which can take many lives ... at least secure it."

-savec0re

"I'm only young; I don't want a hostile world on the edge of a nuclear conflict."

-JF

"We should be moving towards world peace in the millennium, and nuclear warfare testing is NO way forward. It can destroy the world."

-JF

The full text of the milw0rm-revised BARC website:

oh gn0, like this is what happens if j00 play with atomic energy!#@! It g0es b00m@#@#@# so PLEEEZE, do not fuck around, didn't you parents ever teach you manners? I like the world in its current state (i guess), well its better than the world would be if the b0mb went b00m. think about it k1dz, its not clever, its not big, so don't think destruction is cool, coz its not. If a nuclear war does start, you will be the first to scream. You all saw the movie WARGAMES right? well.... That could have been us$#@ So India, LISTEN TO WISE OLD MILWORM .... You do not need nuclear weapons in the 1990s!#@! STOP THE SHIT Owned Savec0re - JF - VeNoMouS JF - Hamst0r - Keystoke - savec0re - ExtreemUK

<a name="See_also" id="See_also"></a>

See also

  • <a href="/Hacktivism" title="Hacktivism">Hacktivism</a>

<a name="References" id="References"></a>

References

  1. ^ <a href="#_ref-wiredmasshack_0" title=""></a> <a href="#_ref-wiredmasshack_1" title=""></a> "<a href="http://www.thing.net/~rdom/ecd/Brithacker.html" class="external text" title="http://www.thing.net/~rdom/ecd/Brithacker.html" rel="nofollow">Anti-Nuke Cracker Strikes Again</a>", Wired, July 3, 1998. 
  2. <a href="#_ref-Ottawa_0" title="">^</a> "<a href="http://hrea.org/lists/huridocs-tech/markup/msg00014.html" class="external text" title="http://hrea.org/lists/huridocs-tech/markup/msg00014.html" rel="nofollow">E-Guerrillas in the mist</a>", Ottawa Citizen, October 27, 1998. 
  3. <a href="#_ref-CNet_0" title="">^</a> "<a href="http://news.com.com/2100-1023-215319.html" class="external text" title="http://news.com.com/2100-1023-215319.html" rel="nofollow">MTV "hack" backfires</a>", CNet, September 9, 1998. 
  4. <a href="#_ref-Antionline_0" title="">^</a> "<a href="http://web.archive.org/web/19981205104829/http://antionline.com/SpecialReports/mtv/opinion.html" class="external text" title="http://web.archive.org/web/19981205104829/http://antionline.com/SpecialReports/mtv/opinion.html" rel="nofollow">AntiOnline's Editorial Coverage Of The MTV Site "Hack" ?</a>", AntiOnline, September 1998. 
  5. ^ <a href="#_ref-Wiredfirst_0" title=""></a> <a href="#_ref-Wiredfirst_1" title=""></a> "<a href="http://attrition.org/errata/www/art.0027.html" class="external text" title="http://attrition.org/errata/www/art.0027.html" rel="nofollow">Crackers: We Stole Nuke Data</a>", Wired, June 3, 1998. 
  6. ^ <a href="#_ref-zdnet_0" title=""></a> <a href="#_ref-zdnet_1" title=""></a> <a href="#_ref-zdnet_2" title=""></a> <a href="#_ref-zdnet_3" title=""></a> <a href="#_ref-zdnet_4" title=""></a> "<a href="http://news.zdnet.com/2100-9595_22-510664.html" class="external text" title="http://news.zdnet.com/2100-9595_22-510664.html" rel="nofollow">India has scary nuke hack</a>", ZDNet, June 5, 1998. 
  7. ^ <a href="#_ref-India_0" title=""></a> <a href="#_ref-India_1" title=""></a> <a href="#_ref-India_2" title=""></a> "<a href="http://www.rediff.com/computer/1998/jun/09barc.htm" class="external text" title="http://www.rediff.com/computer/1998/jun/09barc.htm" rel="nofollow">The Eye of the Needle</a>", Rediff, June 9, 1998. 
  8. ^ <a href="#_ref-Forbes_0" title=""></a> <a href="#_ref-Forbes_1" title=""></a> "<a href="http://www.forbes.com/1998/11/16/feat.html" class="external text" title="http://www.forbes.com/1998/11/16/feat.html" rel="nofollow">Hacking Bhabha</a>", Forbes, November 16, 1998. 
  9. <a href="#_ref-Wired_0" title="">^</a> "<a href="http://www.wired.com/politics/law/news/1998/11/15812" class="external text" title="http://www.wired.com/politics/law/news/1998/11/15812" rel="nofollow">Do Terrorists Troll the Net?</a>", Wired, November 4, 1998. 
  10. <a href="#_ref-Harvard_0" title="">^</a> "<a href="http://hir.harvard.edu/articles/print.php?article=905" class="external text" title="http://hir.harvard.edu/articles/print.php?article=905" rel="nofollow">Cyberwarriors: Activists and Terrorists Turn to Cyberspace</a>", The Future of War, Summer 2001. 

<a name="External_links" id="External_links"></a>

External links

Mirrors of hacked sites:


<a href="/Special:Categories" title="Special:Categories">Categories</a>: <a href="/Category:Articles_needing_additional_references_from_July_2007" title="Category:Articles needing additional references from July 2007">Articles needing additional references from July 2007</a> | <a href="/Category:Hacker_groups" title="Category:Hacker groups">Hacker groups</a> | <a href="/Category:Underground_computer_groups" title="Category:Underground computer groups">Underground computer groups</a> | <a href="/Category:Hacking_%28computer_security%29" title="Category:Hacking (computer security)">Hacking (computer security)</a>

Views
  • <a href="/Milw0rm" title="View the content page " accesskey="c">Article</a>
  • <a href="/Talk:Milw0rm" title="Discussion about the content page " accesskey="t">Discussion</a>
  • <a href="/search/?title=Milw0rm&action=edit" title="You can edit this page. Please use the preview button before saving. " accesskey="e">Edit this page</a>
  • <a href="/search/?title=Milw0rm&action=history" title="Past versions of this page " accesskey="h">History</a>
Personal tools
  • <a href="/search/?title=Special:Userlogin&returnto=Milw0rm" title="You are encouraged to log in, it is not mandatory however. " accesskey="o">Sign in / create account</a>

<a style="background-image: url(/images/wiki-en.png);" href="/Main_Page" title="Visit the Main Page " accesskey="z"></a>

<script type="text/javascript"> if (window.isMSIE55) fixalpha(); </script>

Navigation
  • <a href="/Main_Page" title="Visit the main page " accesskey="z">Main page</a>
  • <a href="/Wikipedia:Contents" title="Guides to browsing Misplaced Pages">Contents</a>
  • <a href="/Wikipedia:Featured_content" title="Featured content — the best of Misplaced Pages">Featured content</a>
  • <a href="/Portal:Current_events" title="Find background information on current events">Current events</a>
  • <a href="/Special:Random" title="Load a random page " accesskey="x">Random article</a>
interaction
  • <a href="/Wikipedia:About" title="Find out about Misplaced Pages">About Misplaced Pages</a>
  • <a href="/Wikipedia:Community_Portal" title="About the project, what you can do, where to find things">Community portal</a>
  • <a href="/Special:Recentchanges" title="The list of recent changes in the wiki " accesskey="r">Recent changes</a>
  • <a href="/Wikipedia:Contact_us" title="How to contact Misplaced Pages">Contact Misplaced Pages</a>
  • <a href="http://wikimediafoundation.org/Donate" title="Support us">Donate to Misplaced Pages</a>
  • <a href="/Help:Contents" title="Guidance on how to use and edit Misplaced Pages">Help</a>
<label for="searchInput">Search</label>
<form action="/Special:Search" id="searchform">

<input id="searchInput" name="search" type="text" title="Search Misplaced Pages " accesskey="f" value="" /> <input type='submit' name="go" class="searchButton" id="searchGoButton" value="Go" />  <input type='submit' name="fulltext" class="searchButton" id="mw-searchButton" value="Search" />

</form>
Toolbox
  • <a href="/Special:Whatlinkshere/Milw0rm" title="List of all wiki pages that link here " accesskey="j">What links here</a>
  • <a href="/Special:Recentchangeslinked/Milw0rm" title="Recent changes in pages linked from this page " accesskey="k">Related changes</a>
  • <a href="/Wikipedia:Upload" title="Upload images or media files " accesskey="u">Upload file</a>
  • <a href="/Special:Specialpages" title="List of all special pages " accesskey="q">Special pages</a>
  • <a href="/search/?title=Milw0rm&printable=yes" title="Printable version of this page " accesskey="p">Printable version</a>
  • <a href="/search/?title=Milw0rm&oldid=169493180" title="Permanent link to this version of the page">Permanent link</a>
  • <a href="/search/?title=Special:Cite&page=Milw0rm&id=169493180">Cite this article</a>
<a href="http://www.mediawiki.org/"><img src="/skins-1.5/common/images/poweredby_mediawiki_88x31.png" alt="Powered by MediaWiki" /></a> <a href="http://wikimediafoundation.org/"><img src="/images/wikimedia-button.png" border="0" alt="Wikimedia Foundation"/></a>
  • This page was last modified 00:17, 6 November 2007.
  • All text is available under the terms of the <a class='internal' href="/Wikipedia:Text_of_the_GNU_Free_Documentation_License" title="Misplaced Pages:Text of the GNU Free Documentation License">GNU Free Documentation License</a>. (See <a class='internal' href="/Wikipedia:Copyrights" title="Misplaced Pages:Copyrights">Copyrights</a> for details.)
    Misplaced Pages® is a registered trademark of the <a href="http://www.wikimediafoundation.org">Wikimedia Foundation, Inc</a>., a U.S. registered <a class='internal' href="/501%28c%29#501.28c.29.283.29" title="501(c)(3)">501(c)(3)</a> <a href="http://wikimediafoundation.org/Deductibility_of_donations">tax-deductible</a> <a class='internal' href="/Non-profit_organization" title="Non-profit organization">nonprofit</a> <a href="/Charitable_organization" title="Charitable organization">charity</a>.
  • <a href="http://wikimediafoundation.org/Privacy_policy" title="wikimedia:Privacy policy">Privacy policy</a>
  • <a href="/Wikipedia:About" title="Misplaced Pages:About">About Misplaced Pages</a>
  • <a href="/Wikipedia:General_disclaimer" title="Misplaced Pages:General disclaimer">Disclaimers</a>


<script type="text/javascript">if (window.runOnloadHook) runOnloadHook();</script>

</body></html>