<?xml version="1.0" encoding="utf-8"?>
<rss xmlns:content="http://purl.org/rss/1.0/modules/content/" version="2.0">
  <channel>
    <title><![CDATA[[SecurityRatty] tag: jihad]]></title>
    <link>http://securityratty.com/tag/jihad</link>
    <description></description>
    <pubDate>Sat, 15 Dec 2007 06:08:23 +0000</pubDate>
    <generator>iRatty Engine</generator>
    <docs>http://blogs.law.harvard.edu/tech/rss</docs>
    <item>
      <title><![CDATA[The DDoS Attack Against Bobbear.co.uk]]></title>
      <link>http://securityratty.com/article/290801c330ee41caec63af5966719ea1</link>
      <guid>http://securityratty.com/article/290801c330ee41caec63af5966719ea1</guid>
      <description><![CDATA[When you get the &quot;privilage&quot; of getting DDoS-ed by a high profile DDoS for hire service used primarily by cybercriminals attacking other cybercriminals, you're officially doing hell of a good job...]]></description>
      <content:encoded><![CDATA[<div style="text-align: left;"></div><div class="separator" style="clear: both; text-align: center;"></div><a href="http://3.bp.blogspot.com/_wICHhTiQmrA/SSNmn4J-fjI/AAAAAAAACeM/iaTooLo_YGA/s1600-h/ddos_for_hire_bobbear.png" imageanchor="1" style="clear: left; float: left; margin-bottom: 1em; margin-right: 1em;"><img border="0" src="http://3.bp.blogspot.com/_wICHhTiQmrA/SSNmn4J-fjI/AAAAAAAACeM/iaTooLo_YGA/s200/ddos_for_hire_bobbear.png" /></a>When you get the "privilage" of <a href="http://blogs.zdnet.com/security/?p=2188">getting DDoS-ed by a high profile DDoS for hire service</a> used primarily by cybercriminals attacking other cybercriminals, you're officially doing hell of a good job exposing <a href="http://www.bobbear.co.uk/">money laundering scams</a>.<br />
<br />
The attached screenshot demonstrates how even the relatively more sophisticated countersurveillance approaches taken by a high profile DDoS for hire service can be, and were in fact bypassed, ending up in a real-time peek at how they've dedicated 4 out of their 10 BlackEnergy botnets to Bobbear exclusively.<br />
<br />
Perhaps for the first time ever, I come across a related DoS service offered by the very same vendor - <b>insider sabotage on demand given they have their own people in a particular company/ISP in question</b>. Makes you think twice before considering a minor network glitch what could easily turn into a coordinated insider attack requested by a third-party. Moreover, now that I've also established the connection between this DDoS for hire service and one of the command and control locations (all active and online) of one of the botnets used in the <a href="http://blogs.zdnet.com/security/?p=1670">Russia vs Georgia cyberattack</a>, the <a href="http://ddanchev.blogspot.com/2008/02/malware-infected-hosts-as-stepping.html">concept of engineering cyber warfare tensions</a> once again proves to be <a href="http://ddanchev.blogspot.com/2008/08/whos-behind-georgia-cyber-attacks.html">a fully realistic one</a>. <br />
<br />
<b>Related posts:</b><br />
<a href="http://blogs.zdnet.com/security/?p=1095">A U.S military botnet in the works</a><br />
<a href="http://ddanchev.blogspot.com/2008/10/ddos-attack-graphs-from-russia-vs.html">DDoS Attack Graphs from Russia vs Georgia's Cyberattacks</a><br />
<a href="http://ddanchev.blogspot.com/2007/10/botnet-on-demand-service.html">Botnet on Demand Service</a><br />
<a href="http://ddanchev.blogspot.com/2007/04/osint-through-botnets.html">OSINT Through Botnets</a><br />
<a href="http://ddanchev.blogspot.com/2007/05/corporate-espionage-through-botnets.html">Corporate Espionage Through Botnets</a><br />
<a href="http://ddanchev.blogspot.com/2008/04/ddos-attack-against-cnncom.html">The DDoS Attack Against CNN.com</a><br />
<a href="http://ddanchev.blogspot.com/2007/09/new-ddos-malware-kit-in-wild.html">A New DDoS Malware Kit in the Wild</a><br />
<a href="http://ddanchev.blogspot.com/2007/11/electronic-jihad-v30-what-cyber-jihad.html">Electronic Jihad v3.0 - What Cyber Jihad Isn't</a><div class="feedflare">
<a href="http://feeds.feedburner.com/~f/DanchoDanchevOnSecurityAndNewMedia?a=vAULN"><img src="http://feeds.feedburner.com/~f/DanchoDanchevOnSecurityAndNewMedia?i=vAULN" border="0"></img></a> <a href="http://feeds.feedburner.com/~f/DanchoDanchevOnSecurityAndNewMedia?a=ReZlN"><img src="http://feeds.feedburner.com/~f/DanchoDanchevOnSecurityAndNewMedia?i=ReZlN" border="0"></img></a> <a href="http://feeds.feedburner.com/~f/DanchoDanchevOnSecurityAndNewMedia?a=Xyy4n"><img src="http://feeds.feedburner.com/~f/DanchoDanchevOnSecurityAndNewMedia?i=Xyy4n" border="0"></img></a> <a href="http://feeds.feedburner.com/~f/DanchoDanchevOnSecurityAndNewMedia?a=jkNqn"><img src="http://feeds.feedburner.com/~f/DanchoDanchevOnSecurityAndNewMedia?i=jkNqn" border="0"></img></a> <a href="http://feeds.feedburner.com/~f/DanchoDanchevOnSecurityAndNewMedia?a=R21XN"><img src="http://feeds.feedburner.com/~f/DanchoDanchevOnSecurityAndNewMedia?i=R21XN" border="0"></img></a> <a href="http://feeds.feedburner.com/~f/DanchoDanchevOnSecurityAndNewMedia?a=vKYRN"><img src="http://feeds.feedburner.com/~f/DanchoDanchevOnSecurityAndNewMedia?i=vKYRN" border="0"></img></a> <a href="http://feeds.feedburner.com/~f/DanchoDanchevOnSecurityAndNewMedia?a=Mwlxn"><img src="http://feeds.feedburner.com/~f/DanchoDanchevOnSecurityAndNewMedia?i=Mwlxn" border="0"></img></a>
</div><img src="http://feeds.feedburner.com/~r/DanchoDanchevOnSecurityAndNewMedia/~4/458461988" height="1" width="1"/>]]></content:encoded>
      <pubDate>Wed, 19 Nov 2008 05:35:01 +0000</pubDate>
      <category domain="http://securityratty.com/tag/ddos">ddos</category>
      <category domain="http://securityratty.com/tag/ddos attack">ddos attack</category>
      <category domain="http://securityratty.com/tag/ddos-ed">ddos-ed</category>
      <category domain="http://securityratty.com/tag/ddos malware kit">ddos malware kit</category>
      <category domain="http://securityratty.com/tag/ddos attack graphs">ddos attack graphs</category>
      <category domain="http://securityratty.com/tag/hire service">hire service</category>
      <category domain="http://securityratty.com/tag/profile ddos">profile ddos</category>
      <category domain="http://securityratty.com/tag/botnets">botnets</category>
      <category domain="http://securityratty.com/tag/blackenergy botnets">blackenergy botnets</category>
      <source url="http://feeds.feedburner.com/~r/DanchoDanchevOnSecurityAndNewMedia/~3/458461988/ddos-attack-against-bobbearcouk.html">The DDoS Attack Against Bobbear.co.uk</source>
    </item>
    <item>
      <title><![CDATA[Who's Behind the Georgia Cyber Attacks?]]></title>
      <link>http://securityratty.com/article/5b529a9f3815b10331813e58bacf8129</link>
      <guid>http://securityratty.com/article/5b529a9f3815b10331813e58bacf8129</guid>
      <description><![CDATA[Of course the Klingons did it, or you were naive enough to even think for a second that Russians were behind it at the first place? Of the things I hate most, it's lowering down the quality of the...]]></description>
      <content:encoded><![CDATA[<a href="http://2.bp.blogspot.com/_wICHhTiQmrA/SKQoGBB38zI/AAAAAAAACCU/WYu9dc61zMQ/s1600-h/georgia_ddos8.JPG" imageanchor="1" style="border: 0pt none ; background-color: transparent; clear: left; margin-bottom: 1em; float: left; margin-right: 1em;"><img height="51" src="http://2.bp.blogspot.com/_wICHhTiQmrA/SKQoGBB38zI/AAAAAAAACCU/1TazKONjKVw/s200-R/georgia_ddos8.JPG" style="border: 0pt none ;" width="200" /></a>Of course the Klingons did it, or you were naive enough to even think for a second that Russians were behind it at the first place? Of the things I hate&nbsp; most, it's lowering down the quality of the discussion I hate the most. Even if you're excluding all the factual evidence (<a href="http://blogs.zdnet.com/security/?p=1670">Coordinated Russia vs Georgia cyber attack in progress</a>), common sense must prevail.<br />
<br />
Sometimes, the degree of incompetence can in fact be pretty entertaining, and greatly explains why certain countries are lacking behind others with years in their inability to understand the rules of information warfare, or the basic premise of unrestricted warfare, that there are no rules on how to achieve your objectives.<br />
<br />
So who's behind the Georgia cyber attacks, encompassing of plain simple ping floods, web site defacements, to sustained DDoS attacks, which no matter the fact that Geogia has switched hosting location to the U.S remain ongoing? It's <a href="http://computerworld.com/action/article.do?command=viewArticleBasic&amp;taxonomyName=cybercrime_and_hacking&amp;articleId=9112443&amp;taxonomyId=82&amp;intsrc=kc_top">Russia's self-mobilizing cyber militia, the product of a collectivist society</a> having the capacity to wage cyber wars and literally dictating the rhythm in this space. What is militia anyway : <br />
<br />
<a href="http://2.bp.blogspot.com/_wICHhTiQmrA/SKQqNt95RjI/AAAAAAAACCc/hxG1PZAcltY/s1600-h/information_warfare.1.gif" imageanchor="1" style="border: 0pt none ; background-color: transparent; clear: left; margin-bottom: 1em; float: left; margin-right: 1em;"><img src="http://2.bp.blogspot.com/_wICHhTiQmrA/SKQqNt95RjI/AAAAAAAACCc/B0-V902UtRA/s200-R/information_warfare.1.gif" style="border: 0pt none ;" /></a>"<i>civilians trained as soldiers but not part of the regular army; the entire body of physically fit civilians eligible by law for military service; a military force composed of ordinary citizens to provide defense, emergency law enforcement, or paramilitary service, in times of emergency; without being paid a regular salary or committed to a fixed term of service; an army of trained civilians, which may be an official reserve army, called upon in time of need; the national police force of a country; the entire able-bodied population of a state; or a private force, not under government control; An army or paramilitary group comprised of citizens to serve in times of emergency</i>"<br />
<br />
Next to the "blame the Russian Business Network for the lack of large scale implementation of DNSSEC" mentality, certain news articles also try to wrongly imply that <a href="http://arstechnica.com/news.ars/post/20080813-georgian-attacks-might-not-be-russians-after-all.html%20">there's no Russian connection in these attacks</a>, and that the attacks are not "state-sponsored", making it look like that there should be a considerable amount of investment made into these attacks, and that the Russian government has the final word on whether or not its DDoS capabilities empowered citizens should launch any attacks or not. In reality, the only thing the Russian government was asking itself during these attacks was "why didn't they start the attacks earlier?!".<br />
<br />
Thankfully, there are some visionary folks out there understanding the situation. Last year, I asked the following question - <a href="http://www.imedialearn.com/imediapoll/poll.php?code=f1156c39d3c972139c62bc91c17e2c53">What is the most realistic scenario on what exactly happened in the recent DDoS attacks aimed at Estonia, from your point of view?</a> and some of the possible answers still fully apply in this situation :<br />
<br />
- It was a Russian government-sponsored hacktivism, or shall we say a government-tolerated one<br />
<br />
- Too much media hype over a sustained ICMP flood, given the publicly obtained statistics of the network traffic<br />
<br />
- Certain individuals of the collectivist Russian society, botnet masters for instance, were automatically recruited based on a nationalism sentiments so that they basically forwarded some of their bandwidth to key web servers<br />
<br />
- In order to generate more noise, DIY DoS tools were distributed to the masses so that no one would ever know who's really behind the attacks<br />
<br />
- Don't know who did it, but I can assure you my kid was playing !synflood at that time<br />
<br />
- Offended by the not so well coordinated removal of the Soviet statue, Russian oligarchs felt the need to send back a signal but naturally lacking any DDoS capabilities, basically outsourced the DDoS attacks<br />
<br />
- A foreign intelligence agency twisting the reality and engineering cyber warfare tensions did it, while taking advantage of the momentum and the overall public perception that noone else but the affected Russia could be behind the attacks<br />
<br />
- I hate scenario building, reminds me of my academic years, however, yours are pretty good which doesn't necessarily mean I actually care who did it, and pssst - it's not cyberwar, as in cyberwar you have two parties with virtual engagement points, in this case it was bandwidth domination by whoever did it over the other. A virtual shock and awe<br />
<br />
- I stopped following the news story by the time every reporter dubbed it the first cyber war, and started following it again when the word hacktivism started gaining popularity. So, hacktivists did it to virtually state their political preferences <br />
<br />
Departamental cyber warfare would never reach the flexibity state of people's information warfare where everyone is a cyber warrior given he's empowered with access to the right tools at a particular moment in time.<br />
<br />
<b>Related posts:</b><br />
<a href="http://ddanchev.blogspot.com/2007/10/peoples-information-warfare-concept.html">People's Information Warfare Concept</a><br />
<a href="http://ddanchev.blogspot.com/2007/12/combating-unrestricted-warfare.html">Combating Unrestricted Warfare</a><br />
<a href="http://ddanchev.blogspot.com/2008/04/cyber-storm-ii-cyber-exercise.html">The Cyber Storm II Cyber Exercise</a><br />
<a href="http://ddanchev.blogspot.com/2008/04/chinese-hacktivists-waging-peoples.html">Chinese Hacktivists Waging People's Information Warfare Against CNN</a><br />
<a href="http://ddanchev.blogspot.com/2008/04/ddos-attack-against-cnncom.html">The DDoS Attacks Against CNN.com</a><br />
<a href="http://ddanchev.blogspot.com/2007/09/chinas-cyber-espionage-ambitions.html">China's Cyber Espionage Ambitions</a><br />
<a href="http://ddanchev.blogspot.com/2006/07/north-koreas-cyber-warfare-unit-121.html">North Korea's Cyber Warfare Unit 121</a><br />
<div><a href="http://ddanchev.blogspot.com/2006/09/chinese-hackers-attacking-us.html">Chinese Hackers Attacking U.S Department of Defense Networks</a></div><div><a href="http://ddanchev.blogspot.com/2007/11/electronic-jihad-v30-what-cyber-jihad.html">Electronic Jihad v3.0 - What Cyber Jihad Isn't</a></div><div><a href="http://ddanchev.blogspot.com/2007/11/electronic-jihads-targets-list.html">Electronic Jihad's Targets List</a></div><div><a href="http://ddanchev.blogspot.com/2007/11/teaching-cyber-jihadists-how-to-hack.html">Teaching Cyber Jihadists How to Hack</a></div><div><a href="http://ddanchev.blogspot.com/2007/10/empowering-script-kiddies.html">Empowering the Script Kiddies</a></div><div><a href="http://ddanchev.blogspot.com/2007/04/osint-through-botnets.html">OSINT Through Botnets</a></div><div><a href="http://ddanchev.blogspot.com/2007/05/corporate-espionage-through-botnets.html">Corporate Espionage Through Botnets</a></div><div><a href="http://ddanchev.blogspot.com/2008/02/malware-infected-hosts-as-stepping.html">Malware Infected Hosts as Stepping Stones</a></div><div><a href="http://ddanchev.blogspot.com/2006/07/hacktivism-tensions-israel-vs.html">Hacktivism Tensions - Israel vs Palestine Cyberwars</a></div><div><a href="http://ddanchev.blogspot.com/2006/05/current-emerging-and-future-state-of.html">The Current, Emerging, and Future State of Hacktivism</a></div><div><a href="http://ddanchev.blogspot.com/2006/09/internet-psyops-psychological.html">Internet PSYOPS - Psychological Operations</a></div><div class="feedflare">
<a href="http://feeds.feedburner.com/~f/DanchoDanchevOnSecurityAndNewMedia?a=Tcck1K"><img src="http://feeds.feedburner.com/~f/DanchoDanchevOnSecurityAndNewMedia?i=Tcck1K" border="0"></img></a> <a href="http://feeds.feedburner.com/~f/DanchoDanchevOnSecurityAndNewMedia?a=X9Eb0K"><img src="http://feeds.feedburner.com/~f/DanchoDanchevOnSecurityAndNewMedia?i=X9Eb0K" border="0"></img></a> <a href="http://feeds.feedburner.com/~f/DanchoDanchevOnSecurityAndNewMedia?a=sJIFNk"><img src="http://feeds.feedburner.com/~f/DanchoDanchevOnSecurityAndNewMedia?i=sJIFNk" border="0"></img></a> <a href="http://feeds.feedburner.com/~f/DanchoDanchevOnSecurityAndNewMedia?a=dY7m7k"><img src="http://feeds.feedburner.com/~f/DanchoDanchevOnSecurityAndNewMedia?i=dY7m7k" border="0"></img></a> <a href="http://feeds.feedburner.com/~f/DanchoDanchevOnSecurityAndNewMedia?a=rRiYlK"><img src="http://feeds.feedburner.com/~f/DanchoDanchevOnSecurityAndNewMedia?i=rRiYlK" border="0"></img></a> <a href="http://feeds.feedburner.com/~f/DanchoDanchevOnSecurityAndNewMedia?a=XCeTAK"><img src="http://feeds.feedburner.com/~f/DanchoDanchevOnSecurityAndNewMedia?i=XCeTAK" border="0"></img></a> <a href="http://feeds.feedburner.com/~f/DanchoDanchevOnSecurityAndNewMedia?a=IYEN6k"><img src="http://feeds.feedburner.com/~f/DanchoDanchevOnSecurityAndNewMedia?i=IYEN6k" border="0"></img></a>
</div><img src="http://feeds.feedburner.com/~r/DanchoDanchevOnSecurityAndNewMedia/~4/364867192" height="1" width="1"/>]]></content:encoded>
      <pubDate>Thu, 14 Aug 2008 06:16:34 +0000</pubDate>
      <category domain="http://securityratty.com/tag/attacks">attacks</category>
      <category domain="http://securityratty.com/tag/georgia cyber attacks">georgia cyber attacks</category>
      <category domain="http://securityratty.com/tag/warfare">warfare</category>
      <category domain="http://securityratty.com/tag/departamental cyber warfare">departamental cyber warfare</category>
      <category domain="http://securityratty.com/tag/cyber warfare tensions">cyber warfare tensions</category>
      <category domain="http://securityratty.com/tag/information warfare concept">information warfare concept</category>
      <category domain="http://securityratty.com/tag/information warfare">information warfare</category>
      <category domain="http://securityratty.com/tag/russian">russian</category>
      <category domain="http://securityratty.com/tag/russian oligarchs">russian oligarchs</category>
      <source url="http://feeds.feedburner.com/~r/DanchoDanchevOnSecurityAndNewMedia/~3/364867192/whos-behind-georgia-cyber-attacks.html">Who's Behind the Georgia Cyber Attacks?</source>
    </item>
    <item>
      <title><![CDATA[Gonzo: Two Thumbs In and Up]]></title>
      <link>http://securityratty.com/article/6853c438c7bef73e63a300124d9cf5de</link>
      <guid>http://securityratty.com/article/6853c438c7bef73e63a300124d9cf5de</guid>
      <description><![CDATA[Just saw the Hunter S. Thompson movie - Gonzo , and if you are a fan you should to. Lots of good stuff in there, the film links various part of his life and career, and gives a pretty unvarnished view...]]></description>
      <content:encoded><![CDATA[<p><a href="http://en.wikipedia.org/wiki/Hunter_S._Thompson"></a><a style="float: left;" href="http://1raindrop.typepad.com/.a/6a00d83451c75869e200e553c045c48834-pi"><img  class="at-xid-6a00d83451c75869e200e553c045c48834 " alt="180px-Gonzo_citation" src="http://1raindrop.typepad.com/.a/6a00d83451c75869e200e553c045c48834-320wi" style="margin: 0px 5px 5px 0px;"></a> Just saw the Hunter S. Thompson movie - <a href="http://www.rottentomatoes.com/m/gonzo_the_life_and_work_of_dr_hunter_s_thompson/">Gonzo</a>, and if you are a fan you should to. Lots of good stuff in there, the film links various part of his life and career, and gives a pretty unvarnished view of the high highs and the low lows. Weaves in writing, politics, and fame seamlessly.

I have never really had as much fun as early on in my career in the early-mid 90s I was a web programmer in Aspen, hacking CGI/PERL. Among the most fun things was building and running HST's site. My boss, Ed, was his neighbor. Ed was also seriously allergic to bees. One day he was alone in his house and got stung. He was dying. Luckily Hunter was due over to his house to watch a basketball game, walked in and called 911. My boss woke up in the ambulance with Hunter pounding on him chest and screaming at him. Ed said - "Waking up to that face screaming at me, I didn't know if I was alive or dead."

Seeing the movie it was also great to see a lot of the Woody Creek folks again like George Stranahan, who lovingly said about Hunter - "my friend and neighbor who never paid his rent, broke up my marriage and taught my children to smoke dope. "

Of course, there was no way he could match his early productivity and this is true of almost all artists. Most of the last two decades were wasted from a writing standpoint. However his <a href="http://proxy.espn.go.com/espn/page2/story?id=1250751">piece</a> written on 9/11 is as good as its gets:

</p><blockquote><p>
	The towers are gone now, reduced to bloody rubble, along with all hopes for Peace in Our Time, in the United States or any other country. Make no mistake about it: We are At War now -- with somebody -- and we will stay At War with that mysterious Enemy for the rest of our lives. 	
	</p></blockquote><blockquote><p>It will be a Religious War, a sort of Christian Jihad, fueled by religious hatred and led by merciless fanatics on both sides. It will be guerilla warfare on a global scale, with no front lines and no identifiable enemy. Osama bin Laden may be a primitive "figurehead" -- or even dead, for all we know -- but whoever put those All-American jet planes loaded with All-American fuel into the Twin Towers and the Pentagon did it with chilling precision and accuracy. The second one was a dead-on bullseye. Straight into the middle of the skyscraper. 	
	</p></blockquote><blockquote><p>Nothing -- even George Bush's $350 billion "Star Wars" missile defense system -- could have prevented Tuesday's attack, and it cost next to nothing to pull off. Fewer than 20 unarmed Suicide soldiers from some apparently primitive country somewhere on the other side of the world took out the World Trade Center and half the Pentagon with three quick and costless strikes on one day. The efficiency of it was terrifying. 	
	</p></blockquote><blockquote><p>We are going to punish somebody for this attack, but just who or what will be blown to smithereens for it is hard to say. Maybe Afghanistan, maybe Pakistan or Iraq, or possibly all three at once. Who knows? Not even the Generals in what remains of the Pentagon or the New York papers calling for WAR seem to know who did it or where to look for them. 	
	</p></blockquote><blockquote><p>This is going to be a very expensive war, and Victory is not guaranteed -- for anyone, and certainly not for anyone as baffled as George W. Bush. All he knows is that his father started the war a long time ago, and that he, the goofy child-President, has been chosen by Fate and the global Oil industry to finish it Now. He will declare a National Security Emergency and clamp down Hard on Everybody, no matter where they live or why. If the guilty won't hold up their hands and confess, he and the Generals will ferret them out by force. 	
	</p></blockquote><blockquote><p>Good luck. He is in for a profoundly difficult job -- armed as he is with no credible Military Intelligence, no witnesses and only the ghost of Bin Laden to blame for the tragedy.
	
</p></blockquote><p>


One unintended lesson I take away from Hunter's life is how important patience is. Obama is a politician and may yet disappoint us all, but I gotta believe Hunter would be seriously impressed. If he had waited another couple of years, he may have seen a lot of the stuff he fought for in 1968 and 72 come to fruition. Sometimes you are just 36-40 years ahead of your time and you have to be ok with that and figure out how to deal if possible. (Note - it sure sometimes feels this way in software security).

Speaking of security:

</p><blockquote>
	<p><a href="http://www.ram.org/contrib/security.html">Security</a> 	
	</p></blockquote><blockquote><p>by Hunter S. Thompson (1955). 	
	</p></blockquote><blockquote><p>Security ... what does this word mean in relation to life as we know it today? For the most part, it means safety and freedom from worry. It is said to be the end that all men strive for; but is security a utopian goal or is it another word for rut? 	
	</p></blockquote><blockquote><p>Let us visualize the secure man; and by this term, I mean a man who has settled for financial and personal security for his goal in life. In general, he is a man who has pushed ambition and initiative aside and settled down, so to speak, in a boring, but safe and comfortable rut for the rest of his life. His future is but an extension of his present, and he accepts it as such with a complacent shrug of his shoulders. His ideas and ideals are those of society in general and he is accepted as a respectable, but average and prosaic man. But is he a man? has he any self-respect or pride in himself? How could he, when he has risked nothing and gained nothing? What does he think when he sees his youthful dreams of adventure, accomplishment, travel and romance buried under the cloak of conformity? How does he feel when he realizes that he has barely tasted the meal of life; when he sees the prison he has made for himself in pursuit of the almighty dollar? If he thinks this is all well and good, fine, but think of the tragedy of a man who has sacrificed his freedom on the altar of security, and wishes he could turn back the hands of time. A man is to be pitied who lacked the courage to accept the challenge of freedom and depart from the cushion of security and see life as it is instead of living it second-hand. Life has by-passed this man and he has watched from a secure place, afraid to seek anything better What has he done except to sit and wait for the tomorrow which never comes? 	
	</p></blockquote><blockquote><p>Turn back the pages of history and see the men who have shaped the destiny of the world. Security was never theirs, but they lived rather than existed. Where would the world be if all men had sought security and not taken risks or gambled with their lives on the chance that, if they won, life would be different and richer? It is from the bystanders (who are in the vast majority) that we receive the propaganda that life is not worth living, that life is drudgery, that the ambitions of youth must he laid aside for a life which is but a painful wait for death. These are the ones who squeeze what excitement they can from life out of the imaginations and experiences of others through books and movies. These are the insignificant and forgotten men who preach conformity because it is all they know. These are the men who dream at night of what could have been, but who wake at dawn to take their places at the now-familiar rut and to merely exist through another day. For them, the romance of life is long dead and they are forced to go through the years on a treadmill, cursing their existence, yet afraid to die because of the unknown which faces them after death. They lacked the only true courage: the kind which enables men to face the unknown regardless of the consequences. 	
	</p></blockquote><blockquote><p>As an afterthought, it seems hardly proper to write of life without once mentioning happiness; so we shall let the reader answer this question for himself: who is the happier man, he who has braved the storm of life and lived or he who has stayed securely on shore and merely existed?
</p></blockquote><p>

A ship is safest at port, but thats not why we build ships. 
</p>]]></content:encoded>
      <pubDate>Thu, 17 Jul 2008 06:10:12 +0000</pubDate>
      <category domain="http://securityratty.com/tag/life">life</category>
      <category domain="http://securityratty.com/tag/security">security</category>
      <category domain="http://securityratty.com/tag/sought security">sought security</category>
      <category domain="http://securityratty.com/tag/personal security">personal security</category>
      <category domain="http://securityratty.com/tag/national security emergency">national security emergency</category>
      <category domain="http://securityratty.com/tag/software security">software security</category>
      <category domain="http://securityratty.com/tag/expensive war">expensive war</category>
      <category domain="http://securityratty.com/tag/war">war</category>
      <category domain="http://securityratty.com/tag/hunter">hunter</category>
      <source url="http://1raindrop.typepad.com/1_raindrop/2008/07/gonzo-two-thumbs-in-and-up.html">Gonzo: Two Thumbs In and Up</source>
    </item>
    <item>
      <title><![CDATA[Chinese Hacktivists Waging People's Information Warfare Against CNN]]></title>
      <link>http://securityratty.com/article/05c9fa38479affa4d154230adf02a08e</link>
      <guid>http://securityratty.com/article/05c9fa38479affa4d154230adf02a08e</guid>
      <description><![CDATA[Empowering and coordinating script kiddies by releasing DIY DDoS tools (backdoored as well) during the DDoS attacks against Estonia for instance, is exactly what is happening in the time of blogging...]]></description>
      <content:encoded><![CDATA[<a onblur="try {parent.deselectBloggerImageGracefully();} catch(e) {}" href="http://bp1.blogger.com/_wICHhTiQmrA/SA0mJdDpixI/AAAAAAAABmQ/Urb3lYBmDhU/s1600-h/hackcnn.jpg"><img style="margin: 0pt 10px 10px 0pt; float: left; cursor: pointer;" src="http://bp1.blogger.com/_wICHhTiQmrA/SA0mJdDpixI/AAAAAAAABmQ/Urb3lYBmDhU/s200/hackcnn.jpg" alt="" id="BLOGGER_PHOTO_ID_5191847889288661778" border="0" /></a>Empowering and coordinating script kiddies by <a href="http://ddanchev.blogspot.com/2007/10/empowering-script-kiddies.html">releasing DIY DDoS tools (backdoored as well)</a> during the <a href="http://ddanchev.blogspot.com/2007/08/your-point-of-view-requested.html">DDoS attacks against Estonia</a> for instance, is exactly what is happening in the time of blogging with a massive forum and IM coordination between Chinese netizens enticed to install a pre-configured to flood CNN.com piece of malware. Both of these coordinated incidents greatly illustrate what <a href="http://ddanchev.blogspot.com/2007/10/peoples-information-warfare-concept.html">people's information warfare, and the malicious culture of participation</a> is all about. The PSYOPS <span style="font-weight: bold;">anti-cnn.com</span> initiative is maturing into a central coordination point for recruiting DDoS participants on a nationalism level. Some info on <span style="font-weight: bold;">hackcnn.com</span>, the malware, internal commentary on behalf of the hacktivists, and who's behind it :<br /><br /><span style="font-weight: bold;">hackcnn.com</span> (58.49.59.253)<br />58.48.0.0-58.55.255.255 CHINANET-HB CHINANET Hubei province network China Telecom A12<br />Xin-Jie-Kou-Wai Street Beijing 100088,<br />China, Beijing 100000<br />tel:  101 1010000<br />fax:  101 1010000<br />china@hackcnn.com<br /><br />Upon execution of the tool, 18 TCP Connection Attempts to cnn.com (<span style="font-weight: bold;">64.236.91.24:80</span>) start, trying to access the following file at CNN.com :<br /><br />- Request: <span style="font-weight: bold;">GET /aux/con/com1/../../[LAG]../.%./../../../../fakecnn/redflag-stay-here.php.aspx.asp.cfm.jsp</span><br />Response: 400 "Bad Request"<br /><br /><a onblur="try {parent.deselectBloggerImageGracefully();} catch(e) {}" href="http://bp3.blogger.com/_wICHhTiQmrA/SA0pB9DpiyI/AAAAAAAABmY/2oFEElHWyFs/s1600-h/hackcnn_tool.jpg"><img style="margin: 0pt 10px 10px 0pt; float: left; cursor: pointer;" src="http://bp3.blogger.com/_wICHhTiQmrA/SA0pB9DpiyI/AAAAAAAABmY/2oFEElHWyFs/s200/hackcnn_tool.jpg" alt="" id="BLOGGER_PHOTO_ID_5191851058974526242" border="0" /></a>antiCnn.exe<br />Scanner results : 3% Scanner(1/36) found malware!<br />TROJAN.DOWNLOADER.GEN<br />File size: 174592 bytes<br />MD5...: c03abd4d871cd83fe00df38536f26422<br />SHA1..: 0502c74ee90e110ceed3cbb81b2ee53d26068691<br />Released by : Red Flag Cyber Operations nixrumor@gmail.com<br /><br />From a network reconnaissance perspective, the Chinese hacktivists didn't even bother to take care of Apache's /server status, and therefore we're easily able<br />to obtain such juicy inside information about hackcnn.com such as :<br /><br /><a onblur="try {parent.deselectBloggerImageGracefully();} catch(e) {}" href="http://bp2.blogger.com/_wICHhTiQmrA/SA0p_tDpizI/AAAAAAAABmg/8oIPp-wM404/s1600-h/sports_cnn_ddosed.jpg"><img style="margin: 0pt 10px 10px 0pt; float: left; cursor: pointer;" src="http://bp2.blogger.com/_wICHhTiQmrA/SA0p_tDpizI/AAAAAAAABmg/8oIPp-wM404/s200/sports_cnn_ddosed.jpg" alt="" id="BLOGGER_PHOTO_ID_5191852119831448370" border="0" /></a>Current Time: Tuesday, 22-Apr-2008 07:00:56<br />Restart Time: Monday, 21-Apr-2008 15:25:39<br />Parent Server Generation: 0<br />Server uptime: 15 hours 35 minutes 17 seconds<br />Total accesses: 291670 - Total Traffic: 533.8 MB<br />5.2 requests/sec - 9.7 kB/second - 1918 B/request<br />4 requests currently being processed, 246 idle workers<br /><br />Internal commentary excerpts regarding the motivation and their updates on the first DDoS round :<br /><br />"<span style="font-style: italic;">Our team of non-governmental organisations, We only private network enthusiasts. However, we have a patriotic heart, We will absolutely not permit any person to discredit our motherland under any name, We are committed to attack some spreading false information, and malicious slander, libel, support Tibet independence site.</span>"<br /><br /><a onblur="try {parent.deselectBloggerImageGracefully();} catch(e) {}" href="http://bp1.blogger.com/_wICHhTiQmrA/SA0t6dDpi0I/AAAAAAAABmo/oNfnCtMt6ns/s1600-h/sports_cnn_defaced_1.jpg"><img style="margin: 0pt 10px 10px 0pt; float: left; cursor: pointer;" src="http://bp1.blogger.com/_wICHhTiQmrA/SA0t6dDpi0I/AAAAAAAABmo/oNfnCtMt6ns/s200/sports_cnn_defaced_1.jpg" alt="" id="BLOGGER_PHOTO_ID_5191856427683646274" border="0" /></a>"<span style="font-style: italic;">User to a black CNN website suffer the same name. Yesterday, some Internet users attacked the domain name contains a "cnn" sports Web site, leaving protest speech, but reporters did not check the site found a relationship with CNN.</span>  <span style="font-style: italic;">Yesterday's attack was th</span><span style="font-style: italic;">e website with the domain name sports.si.cnn.com engaged in the work of the network of residents in Urumqi Mr. Chen, at about 2 pm, the attackers up a website hackcnn.com know, the "CNN sub-station" invasion and modify their pages. "Tug-of-war administrator and hackers," Mr. Chen said, after sports.si.cnn.com pages sometimes normal, and sometimes been modified. 16:50, the reporter saw on the pages left in bilingual text and flash animation, stressed that Tibet is a part of China, cnn protest against prejudice and false reports, the title page column was changed to "F * * kCNN!. "</span>  <span style="font-style: italic;">A few minutes later, the web site to enter a user ID and password before connecting, "evidently administrator of the authority." Chen analysis. Yesterday, the reporter tried to contact the attack, but received no response. Reporter verify that the contact address sports.si.cnn.com Pennsylvania in the United States, and the sports channel CNN web site is not the same, did not disclose information with the CNN.</span>"<br /><br /><a onblur="try {parent.deselectBloggerImageGracefully();} catch(e) {}" href="http://bp2.blogger.com/_wICHhTiQmrA/SA0uEtDpi1I/AAAAAAAABmw/eBx0cveCP5A/s1600-h/sports_cnn_defaced_2.jpg"><img style="margin: 0pt 10px 10px 0pt; float: left; cursor: pointer;" src="http://bp2.blogger.com/_wICHhTiQmrA/SA0uEtDpi1I/AAAAAAAABmw/eBx0cveCP5A/s200/sports_cnn_defaced_2.jpg" alt="" id="BLOGGER_PHOTO_ID_5191856603777305426" border="0" /></a>DDoS-ing is one thing, defacing is entirely another, try <a href="http://209.85.135.104/search?q=cache:bP4fl_vKGtwJ:sports.si.cnn.com/test.htm+%22fuck+cnn%22&amp;hl=en&amp;ct=clnk&amp;cd=8"><span style="color:black;"><span style="color:blue;">sports.si.cnn.com/test.htm</span></span></a> which was last defaced yesterday spreading "<span style="font-style: italic;">We are not against the western media, but against the lies and fabricated stories in the media</span>", "<span style="font-style: italic;">We are not against the western people, but against the prejudice from the western society.!</span>" messages.<br /><br />According to forum postings however, now that they've sent a signal, the attitude is shifting from attacking CNN to Western media in general. Thankfully, just like the case with <a href="http://ddanchev.blogspot.com/2007/11/electronic-jihad-v30-what-cyber-jihad.html">the  Electronic Jihad program</a>, they did not put a lot of efforts into ensuring the lifecycle of the tool will remain as long as possible, by introducing a way to automatically update the tool with new targets. In fact, in <a href="http://ddanchev.blogspot.com/2007/08/cyber-jihadist-dos-tool.html">the Electronic Jihad case</a>, the hardcoded update locations were all down priot to releasing the tool, making a bit more efforts cunsuming to finally manage to <a href="http://ddanchev.blogspot.com/2007/11/electronic-jihads-targets-list.html">obtain the targets list</a>.<div class="feedflare">
<a href="http://feeds.feedburner.com/~f/DanchoDanchevOnSecurityAndNewMedia?a=Y8er0oG"><img src="http://feeds.feedburner.com/~f/DanchoDanchevOnSecurityAndNewMedia?i=Y8er0oG" border="0"></img></a> <a href="http://feeds.feedburner.com/~f/DanchoDanchevOnSecurityAndNewMedia?a=U8qwQ1G"><img src="http://feeds.feedburner.com/~f/DanchoDanchevOnSecurityAndNewMedia?i=U8qwQ1G" border="0"></img></a> <a href="http://feeds.feedburner.com/~f/DanchoDanchevOnSecurityAndNewMedia?a=6x6u2fg"><img src="http://feeds.feedburner.com/~f/DanchoDanchevOnSecurityAndNewMedia?i=6x6u2fg" border="0"></img></a> <a href="http://feeds.feedburner.com/~f/DanchoDanchevOnSecurityAndNewMedia?a=z5wKCqg"><img src="http://feeds.feedburner.com/~f/DanchoDanchevOnSecurityAndNewMedia?i=z5wKCqg" border="0"></img></a> <a href="http://feeds.feedburner.com/~f/DanchoDanchevOnSecurityAndNewMedia?a=lglljMG"><img src="http://feeds.feedburner.com/~f/DanchoDanchevOnSecurityAndNewMedia?i=lglljMG" border="0"></img></a> <a href="http://feeds.feedburner.com/~f/DanchoDanchevOnSecurityAndNewMedia?a=4Hn9S4G"><img src="http://feeds.feedburner.com/~f/DanchoDanchevOnSecurityAndNewMedia?i=4Hn9S4G" border="0"></img></a> <a href="http://feeds.feedburner.com/~f/DanchoDanchevOnSecurityAndNewMedia?a=UBIyLWg"><img src="http://feeds.feedburner.com/~f/DanchoDanchevOnSecurityAndNewMedia?i=UBIyLWg" border="0"></img></a>
</div><img src="http://feeds.feedburner.com/~r/DanchoDanchevOnSecurityAndNewMedia/~4/275221877" height="1" width="1"/>]]></content:encoded>
      <pubDate>Mon, 21 Apr 2008 22:25:00 +0000</pubDate>
      <category domain="http://securityratty.com/tag/cnn">cnn</category>
      <category domain="http://securityratty.com/tag/cnn sub-station">cnn sub-station</category>
      <category domain="http://securityratty.com/tag/flood cnn">flood cnn</category>
      <category domain="http://securityratty.com/tag/sports web site">sports web site</category>
      <category domain="http://securityratty.com/tag/site">site</category>
      <category domain="http://securityratty.com/tag/psyops anti-cnn">psyops anti-cnn</category>
      <category domain="http://securityratty.com/tag/contact address sports">contact address sports</category>
      <category domain="http://securityratty.com/tag/contact">contact</category>
      <category domain="http://securityratty.com/tag/sports">sports</category>
      <source url="http://feeds.feedburner.com/~r/DanchoDanchevOnSecurityAndNewMedia/~3/275221877/chinese-hacktivists-waging-peoples.html">Chinese Hacktivists Waging People's Information Warfare Against CNN</source>
    </item>
    <item>
      <title><![CDATA[Terror on the Internet - Conflict of Interest]]></title>
      <link>http://securityratty.com/article/4d84e41b4c977b7092f8d353c8e6895e</link>
      <guid>http://securityratty.com/article/4d84e41b4c977b7092f8d353c8e6895e</guid>
      <description><![CDATA[Insightful article by Greg Goth, discussing various aspects of the pros and cons of monitoring cyber jihadist sites next to shutting them down, as well as mentioning my analysis of the Mujahideen...]]></description>
      <content:encoded><![CDATA[<div><a href="http://bp0.blogger.com/_wICHhTiQmrA/R9G7dU-0F6I/AAAAAAAABcQ/1bS4lvI4w-M/s1600-h/terrorist_database_hoax.jpg"><img id="BLOGGER_PHOTO_ID_5175123559348180898" style="margin: 0px 10px 10px 0px; float: left;" alt="" src="http://bp0.blogger.com/_wICHhTiQmrA/R9G7dU-0F6I/AAAAAAAABcQ/1bS4lvI4w-M/s200/terrorist_database_hoax.jpg" border="0" /></a>Insightful article by Greg Goth, discussing various aspects of the pros and cons of monitoring cyber jihadist sites next to shutting them down, as well as mentioning <a href="http://ddanchev.blogspot.com/2008/01/mujahideen-secrets-2-encryption-tool.html">my analysis</a> of the <a href="http://ddanchev.blogspot.com/2007/04/mujahideen-secrets-encryption-tool.html">Mujahideen Secrets encryption tool v1.0</a> and v2.0. <a href="http://dsonline.computer.org/portal/pages/dsonline/2008/03/o3003news.html">Terror on the Internet: A Complex Issue, and Getting Harder</a> :</div><br />"<em>Indeed, politicians around the world call at regular intervals for terrorist websites to be removed from their host sites’ servers or for search engines to block access to them. They also call for laws that would make posting instructions on how to kill or maim people or destroy property punishable by law. Franco Frattini, the European Commission’s Vice President for Freedom, Justice, and Security, </em><a href="http://europa.eu/rapid/pressReleasesAction.do?reference=SPEECH/07/505&amp;format=HTML&amp;aged=0&amp;language=EN&amp;guiLanguage=en"><em>called for a prohibition on websites that post bomb-making instructions in September 2007</em></a><em>. And just as quickly, he rushed to announce that in doing so he was not trying to impinge on freedom of speech or information access or to inhibit law enforcement agencies from monitoring sites.</em>"<br /><br /><div>There're three perspectives related to cyber jihad, should the virtual communities be shut down, monitored, or censored so that they cannot be accessed by people who would potentially get radicalized and brainwashed by the amazingly well created propaganda in the form of interactive multimedia? Given the different mandates given to different intelligence services and independent researchers, is where the conflict of interest begins. Moreover, don't forget that independent researchers sometimes come up with the final piece of the puzzle to have an intelligence agency come up with the big picture in a cost-effective and timely manner, given they actually believe in OSINT and trust the source of the intell data of course. Now, picture the situation where an intelligence agency is shutting down cyber jihadist sites on a large scale not believing in the value that the intelligence data they they could provide, another one given a mandate to censor cyber jihadist communities compiling reports stating that someone's shutting them down before they could even censor them, and a third one who would have to again play cat and mouse game the locate them once they've shut down by the first intel agency already. Ironic or not, different mandates and empowerment is where the contradiction begins. Let's discuss the three mandates and go in-depth into the pros and cons of each of them to come up with a philosophic solution to the problem, as I belive it's perhaps the only way to provoke some thought on the best variant.</div><br /><div></div><strong>Shutting the communities down</strong> -<br /><div>Before shuting them down you need to know where they are, their neighbourhood of supporters who will indirectly tip you on the their latest location once they have their previous domain shut down. Personal experience and third party research indicates that over 90% of the cyber jihadist communities/blogs are hosted by U.S based not owned companies. And with the lack of real-time intell sharing between the agencies themselves, the first who picks up the community will be responsible for its faith, literally. But in reality, preserving the integrity of a cyber jihadist community, and convincing the right people that balanced monitoring next to shutting it down is more beneficial, remains an idea yet to be considered. Back in 2007, I did an experiment, namely I <a href="http://ddanchev.blogspot.com/2007/08/analyses-of-cyber-jihadist-forums-and.html">crawled ten cyber jihadist forums and blogs and extracted all the outgoing links from these communities</a> to see their preferred choice for online video and files hosting. A couple of months later, the communities got shut down, so when the same thing happened while I was crawling the Global Islamic Media Front's, and Inshallahshaheed's web presence, it became clear that while some are crawling, and others censoring, third parties are shutting them down.</div><br /><div> </div>The bottom line - shutting them down doesn't mean that they'll dissapear and will never come back, exactly the opposite. Personal experience while handling the Global Islamic Media Front is perhaps the perfect and best hands-on experience on the benefits of shutting them down, given you've built enough convidence in your abilities to locate their new location. If you think that the cyber jihadist site or community you're currently monitoring is a star, look above, it's full of starts everywhere, once you start drawing the lines between them, a figure of something known emerges, in this case once a cyber jihadist community is shut down, its most loyal and closely connected cyber jihadist communities will expose their intimate connection not by just starting to promote their new location online, but even better, you'll have them use the second cyber jihadist community to directly reach their audience by the time they set up the new location and resume the propaganda and radicalization.<br /><div> </div><br /><div>There's no shortage of cyber jihadist blogs, forums and sites, and personal experience shows that upon having a cyber jihadist community shut down, they re-appear at another location. It's shut down again, it re-appears for a second time. I've seen this situation with Instahaleed and GIMF, and each and every time they had their blogs and sites removed from their hosting providers, mainly because it's rather disturbing that the majority of such communities are hosted on U.S servers, it's this short time frame which will either lead you to their new location, you risk loosing their tracks. However, the vivid supporters of PSYOPs are logically visionary enough to understand what does undermining their audiences' confidence in the community's capability to remain online means.</div><br /><div> </div><strong>Monitoring the communities</strong> -<br /><div>In order to reach the "shut it down or monitor it" stage in your analysis process, you really need to know where the cyber jihadists forums and sites are, else, you will be wasting your time, money and energy to create <a href="http://ddanchev.blogspot.com/2007/03/cyber-traps-for-wannabe-jihadists.html">fake cyber jihadist communities in the form of web honeypots for jihadist communication</a>. Monitoring is tricky, especially when you don't know what you're looking for, don't prioritize, don't have a contingency plan or an offline copy of the communitiy and wrongly building confidence in its ability to remain online. Moreover, <a href="http://cryptome.org/able-danger-ig-02.jpg">monitoring for too long</a> results in terrabytes of noise, and from a psychological perspective sometimes <a href="http://en.wikipedia.org/wiki/Able_Danger">the rush for yet another fancy social networking graph</a> to better communicate <a href="http://cryptome.org/able-danger-ig-01.jpg">the collected data</a>, ends up in the worst possible way - you miss the tipping point moment.</div><br /><div> </div><strong>Censoring the communities -</strong><br /><div>I often come across wishful comments in the lines of "blocking access to bomb and poison making tutorials", missing a very important point, namely, that these very same manuals, and jihadist magazines are not residing in a cyber-jihad.com/bomb-making-guide.zip domain and file extension form, making the process a bit more complex to realize. Unless of course the censorship systems figures out ways to detect the content in password encrypted archive files served with random file names and hosted on one of the hundreds free web space providers. Then again, given the factual evidence that cyber jihadists are encouraging the use of Internet anonymization services and software, your censorship efforts will remain futile.</div><br /><div> </div>As I'm posting this overview of various ways of handling cyber jihadist communities, yet another community is starting to attract cyber jihadists, thanks to their understanding of noise generation by teaching the novice cyber jihadists on the basics of running and maintaing such a community. What's perhaps most important to keep in mind is that, what you're currently analyzing, trying to shut down or censor whatsoever, is the public web, the Dark Web, the one closed behind authentication and invite-only access yet remains to be located and properly analyzed. If cyber jihad is really a priority, then there's nothing more effective than the combination of independent researchers and intelligence analysts.<br /><div> </div><br /><div><strong>Related posts:<br /><a href="http://ddanchev.blogspot.com/2007/12/inshallahshaheed-come-out-come-out.html"><span style="font-weight: normal;">Inshallahshaheed - Come Out, Come Out Wherever You Are</span></a><br /></strong><a href="http://ddanchev.blogspot.com/2007/07/gimf-switching-blogs.html">GIMF Switching Blogs</a><br /><a href="http://ddanchev.blogspot.com/2007/08/gimf-now-permanently-shut-down.html">GIMF Now Permanently Shut Down</a><br /><a href="http://ddanchev.blogspot.com/2007/08/gimf-we-will-remain.html">GIMF - "We Will Remain"</a><br /><strong><a href="http://ddanchev.blogspot.com/2007/10/wisdom-of-anti-cyber-jihadist-crowd.html"><span style="font-weight: normal;">Wisdom of the Anti Cyber Jihadist Crowd</span></a><br /><a href="http://ddanchev.blogspot.com/2007/11/cyber-jihadist-blogs-switching.html"><span style="font-weight: normal;">Cyber Jihadist Blogs Switching Locations</span></a><br /></strong></div><div><a href="http://ddanchev.blogspot.com/2006/09/internet-psyops-psychological.html">Internet PSYOPS - Psychological Operations</a><br /><div><a href="http://ddanchev.blogspot.com/2007/11/electronic-jihad-v30-what-cyber-jihad.html">Electronic Jihad v3.0 - What Cyber Jihad Isn't</a></div><div><a href="http://ddanchev.blogspot.com/2007/11/electronic-jihads-targets-list.html">Electronic Jihad's Targets List</a></div><div><a href="http://ddanchev.blogspot.com/2007/11/teaching-cyber-jihadists-how-to-hack.html">Teaching Cyber Jihadists How to Hack</a></div><a href="http://ddanchev.blogspot.com/2007/11/botnet-of-infected-terrorists.html">A Botnet of Infected Terrorists?</a><br /><a href="http://ddanchev.blogspot.com/2007/09/infecting-terrorist-suspects-with.html">Infecting Terrorist Suspects with Malware</a><br /><a href="http://ddanchev.blogspot.com/2007/09/dark-web-and-cyber-jihad.html">The Dark Web and Cyber Jihad</a><br /><a href="http://ddanchev.blogspot.com/2007/12/cyber-jihadist-hacking-teams.html">Cyber Jihadist Hacking Teams</a><br /><a href="http://ddanchev.blogspot.com/2005/12/cyberterrorism-dont-stereotype-and-its.html">Cyberterrorism - don't stereotype and it's there</a><br /><a href="http://ddanchev.blogspot.com/2006/06/tracking-down-internet-terrorist.html">Tracking Down Internet Terrorist Propaganda</a><br /><a href="http://ddanchev.blogspot.com/2006/05/arabic-extremist-group-forum-messages.html">Arabic Extremist Group Forum Messages' Characteristics</a><br /><a href="http://ddanchev.blogspot.com/2006/08/cyber-terrorism-communications-and_22.html">Cyber Terrorism Communications and Propaganda</a><br /><a href="http://ddanchev.blogspot.com/2006/05/techno-imperialism-and-effect-of.html">Techno Imperialism and the Effect of Cyberterrorism</a><br /><a href="http://ddanchev.blogspot.com/2006/10/cost-benefit-analysis-of-cyber.html">A Cost-Benefit Analysis of Cyber Terrorism</a><br /><a href="http://ddanchev.blogspot.com/2006/12/current-state-of-internet-jihad.html">Current State of Internet Jihad</a><br /><a href="http://ddanchev.blogspot.com/2007/02/characteristics-of-islamist-websites.html">Characteristics of Islamist Websites</a><br /><a href="http://ddanchev.blogspot.com/2006/09/hezbollahs-dns-service-providers-from.html">Hezbollah's DNS Service Providers from 1998 to 2006</a><br /><a href="http://ddanchev.blogspot.com/2006/12/full-list-of-hezbollahs-internet-sites.html">Full List of Hezbollah's Internet Sites</a><br /><a href="http://ddanchev.blogspot.com/2007/03/cyber-traps-for-wannabe-jihadists.html">Cyber Traps for Wannabe Jihadists</a><br /><a href="http://ddanchev.blogspot.com/2007/04/mujahideen-secrets-encryption-tool.html">Mujahideen Secrets Encryption Tool</a><br /><a href="http://ddanchev.blogspot.com/2006/12/analysis-of-technical-mujahid-issue-one.html">An Analysis of the Technical Mujahid Issue One</a><br /><a href="http://ddanchev.blogspot.com/2007/06/analysis-of-technical-mujahid-issue-two.html">An Analysis of the Technical Mujahid Issue Two</a><br /><a href="http://ddanchev.blogspot.com/2007/07/terrorist-groups-brand-identities.html">Terrorist Groups' Brand Identities</a><br /><a href="http://ddanchev.blogspot.com/2007/06/list-of-terrorists-blogs.html">A List of Terrorists' Blogs</a><br /><a href="http://ddanchev.blogspot.com/2007/05/jihadists-anonymous-internet-surfing.html">Jihadists' Anonymous Internet Surfing Preferences</a><br /><a href="http://ddanchev.blogspot.com/2007/05/sampling-jihadists-ips.html">Samping Jihadist IPs</a><br /><a href="http://ddanchev.blogspot.com/2007/07/cyber-jihadists-and-tor.html">Cyber Jihadists' and TOR</a><br /><a href="http://ddanchev.blogspot.com/2007/08/cyber-jihadist-dos-tool.html">A Cyber Jihadist DoS Tool</a><br /><a href="http://ddanchev.blogspot.com/2007/08/gimf-now-permanently-shut-down.html">GIMF Now Permanently Shut Down</a><br /><a href="http://ddanchev.blogspot.com/2006/08/steganography-and-cyber-terrorism.html">Steganography and Cyber Terrorism Communications</a><br /></div><div class="feedflare">
<a href="http://feeds.feedburner.com/~f/DanchoDanchevOnSecurityAndNewMedia?a=9ODTvnF"><img src="http://feeds.feedburner.com/~f/DanchoDanchevOnSecurityAndNewMedia?i=9ODTvnF" border="0"></img></a> <a href="http://feeds.feedburner.com/~f/DanchoDanchevOnSecurityAndNewMedia?a=glFBi8F"><img src="http://feeds.feedburner.com/~f/DanchoDanchevOnSecurityAndNewMedia?i=glFBi8F" border="0"></img></a> <a href="http://feeds.feedburner.com/~f/DanchoDanchevOnSecurityAndNewMedia?a=D198AFf"><img src="http://feeds.feedburner.com/~f/DanchoDanchevOnSecurityAndNewMedia?i=D198AFf" border="0"></img></a> <a href="http://feeds.feedburner.com/~f/DanchoDanchevOnSecurityAndNewMedia?a=z0vTnMf"><img src="http://feeds.feedburner.com/~f/DanchoDanchevOnSecurityAndNewMedia?i=z0vTnMf" border="0"></img></a> <a href="http://feeds.feedburner.com/~f/DanchoDanchevOnSecurityAndNewMedia?a=sALMAMF"><img src="http://feeds.feedburner.com/~f/DanchoDanchevOnSecurityAndNewMedia?i=sALMAMF" border="0"></img></a> <a href="http://feeds.feedburner.com/~f/DanchoDanchevOnSecurityAndNewMedia?a=LlGGhJF"><img src="http://feeds.feedburner.com/~f/DanchoDanchevOnSecurityAndNewMedia?i=LlGGhJF" border="0"></img></a> <a href="http://feeds.feedburner.com/~f/DanchoDanchevOnSecurityAndNewMedia?a=GIrrUWf"><img src="http://feeds.feedburner.com/~f/DanchoDanchevOnSecurityAndNewMedia?i=GIrrUWf" border="0"></img></a>
</div><img src="http://feeds.feedburner.com/~r/DanchoDanchevOnSecurityAndNewMedia/~4/253973814" height="1" width="1"/>]]></content:encoded>
      <pubDate>Tue, 18 Mar 2008 16:58:23 +0000</pubDate>
      <category domain="http://securityratty.com/tag/cyber jihadist">cyber jihadist</category>
      <category domain="http://securityratty.com/tag/cyber jihadist communities">cyber jihadist communities</category>
      <category domain="http://securityratty.com/tag/novice cyber jihadists">novice cyber jihadists</category>
      <category domain="http://securityratty.com/tag/jihadists">jihadists</category>
      <category domain="http://securityratty.com/tag/cyber jihadist forums">cyber jihadist forums</category>
      <category domain="http://securityratty.com/tag/cyber jihadist sites">cyber jihadist sites</category>
      <category domain="http://securityratty.com/tag/attract cyber jihadists">attract cyber jihadists</category>
      <category domain="http://securityratty.com/tag/internet">internet</category>
      <category domain="http://securityratty.com/tag/cyber jihadists">cyber jihadists</category>
      <source url="http://feeds.feedburner.com/~r/DanchoDanchevOnSecurityAndNewMedia/~3/253973814/terror-on-internet-conflict-of-interest.html">Terror on the Internet - Conflict of Interest</source>
    </item>
    <item>
      <title><![CDATA[Cyber Jihadist Hacking Teams]]></title>
      <link>http://securityratty.com/article/f7c78aa09db3cab063f68e229347908e</link>
      <guid>http://securityratty.com/article/f7c78aa09db3cab063f68e229347908e</guid>
      <description><![CDATA[These groups and fractions of religiously brainwashed IT enthusiasts utilizing outdated ping and HTTP GET flooding attack tools, represent today's greatly overhyped threat possed by the cyber...]]></description>
      <content:encoded><![CDATA[<a href="http://bp0.blogger.com/_wICHhTiQmrA/R2aK1j8-MRI/AAAAAAAABQA/iYI87n62izo/s1600-h/OBL_Crew.jpg"><img id="BLOGGER_PHOTO_ID_5144952277106045202" style="margin: 0px 10px 10px 0px; float: left;" alt="" src="http://bp0.blogger.com/_wICHhTiQmrA/R2aK1j8-MRI/AAAAAAAABQA/iYI87n62izo/s200/OBL_Crew.jpg" border="0" /></a>These groups and fractions of religiously brainwashed IT enthusiasts utilizing outdated ping and HTTP GET flooding attack tools, represent today's greatly overhyped threat possed by the cyber jihadists whose cheap PSYOPS dominate, given the lack of strategical thinking, and the lack of sustainable communication channels between them, ruined all of their Electronic Jihad campaigns so far. Religious fundamentalism by itself evolves into religious fanaticism, and with the indoviduals in a desperate psychological need for a belonging to a cause, ends up in one of the oldest and easiest methods for recruitment - the one based on religious beliefs.<br /><br />The teams, and the lone gunmen cyber jihadists in this post are : <strong>Osama Bin Laden's Hacking Crew</strong>, <strong>Ansar AL-Jihad Hackers Team</strong>, <strong>HaCKErS aLAnSaR</strong>, <strong>The Designer - Islamic HaCKEr</strong> and <strong>Alansar Fantom</strong>. None of these are known to have any kind of direct relationships with terrorist groups, therefore they should be considered as terrorist sympathizers.<br /><br />_<strong>Osama Bin Laden's Hacking Crew</strong><br />OBL's Hacking Crew are anything but cheap PSYOPsers trying to teke advantage of outdated conversational marketing approaches to recruit more members, for what yet remains unknown given the lack of any kind of structured formulation of their long-term objectives. They're also promoting the buzz word "E-MUJAHID" to summarize all the possible taska and objectives one would have. This is how they define E-JIHAD :<br /><br />"<em>JIHAD is the term used for struggle against evil. Electronic jihad or simply, E-JIHAD, is the jihad in cyberspace against all the propagandas and false allegations against the message of truth. E-JIHAD is the struggle in cyber space against all false and evil disciplines, ideology and forces of evil. Have you ever think what is the need of army? To defend the freedom and liberty of a territory and defend it from the attacks of evil intruders. similarly , E-jihad is the battle in the field of cyber space, against all false believes, and to defend the truth against the false and mean propagandas and cults. It is as necessary as a regular army, to defend the ideological borders of a nation. It is said, “ it is not the gun, it is man behind the gun “. Do you ever think what makes a “man “? Nothing, but just the faith and ideology. Without faith and ideology, there is no man and definitely , we then have gun , but without any man .</em>"<br /><br /><span style="font-weight: bold;">These are the tips provided for "defending the ideological borders" :</span><br /><br />- <em>They have created anti-Islamic web sites, which are full of everything except the truth. They are full of mean and vulgar allegations against our HOLY QURA’AN, HOLY PROPHAT MOHAMMAD (PEACE BE UPON HIM) and our teachings. We must defend our teachings and fight against the evils. We have to create Islamic web sites, eGroups, Forums, Message boards, &amp; we must support our Mujahideen brothers in Iraq, Afghanistan, Palestine, Kashmir and elsewhere.</em><br /><br />- <em>Many non-Muslims specially jews, Christians and hindus are working in different web groups and communities (like yahoo groups and msn communities) and spreading propaganda against us Muslims. There is a strong need to join such groups and try to refute them. At the moment, the cyber space is free of their opponents. Try to join and refute them, defend your HOLY TEACHINGS OF ISLAM and bring before everyone, nothing but just the truth.</em><br /><br />- <em>One of the most dangerous enemies is those who impersonate themselves as a Muslims but they are not Muslims infact. They are Islamic cults. They are usually qadyanis/ahmadis/mirzais and bahais. some are jews and christians. They are all non Muslims but they impersonate as a Muslim and try to misguide others. They are spreading non-Islamic believes. It needs to be taken care of, we have to fight them. Otherwise, you can imagine how disastrous this situation can be for Muslims. These culprit groups even tried to spread a copy of their teachings in the name of HOLY QURA’ AN. but ALLAH has promised that HE will keep HOLY QURA’AN preserved. That’s why, their attempt failed. What is our job? We must fight with these muslim cults and have to tell others the difference between Muslims and muslims cults.</em><br /><br />- <em>You can even make your own groups and communities to send mails having Muslim news and Islamic teachings. It is a time convenient method because if you have 500 members in your group, by sending a single mail in the group, your message will be in the inboxes of 500 users, and it takes hardly 1-2 minutes. Isn’t it a time saving technique?</em><br /><br />- <em>Many non-Muslim specially Americans, Israelis and Indian hackers always attack our web sites, which are refuting their falsehood and spreading the truth of Islam, the truth that is the only reality. To defend us against such “satanic groups “, we have to organize teamwork, consists of team of Muslim Hackers. Diamond cuts a diamond, to fight with hackers, we need hackers who will defend our sites and make it sure to convey uninterrupted messages to refute the evil and to spread the truth.</em><br /><br /><a href="http://bp3.blogger.com/_wICHhTiQmrA/R2cGnD8-MSI/AAAAAAAABQI/eQfNkGV-Ss4/s1600-h/al_ansar_hacking_team.jpg"><img id="BLOGGER_PHOTO_ID_5145088367439786274" style="margin: 0px 10px 10px 0px; float: left;" alt="" src="http://bp3.blogger.com/_wICHhTiQmrA/R2cGnD8-MSI/AAAAAAAABQI/eQfNkGV-Ss4/s200/al_ansar_hacking_team.jpg" border="0" /></a>_<strong>Ansar AL-Jihad Hackers Team and HaCKErS aLAnSaR</strong> <div>Both of these are actually the same, and the group's popularity comes from the <a href="http://ddanchev.blogspot.com/2007/08/cyber-jihadist-dos-tool.html">al-jinan.net</a> and the <a href="http://ddanchev.blogspot.com/2007/11/electronic-jihad-v30-what-cyber-jihad.html">al-jinan.org</a> Electronic Jihad campaigns, yes, the failed ones. The original message from Al-jinan's first campaign back in 2006 :</div><div></div><div><strong></strong> </div><div><strong><br />Objective</strong> : <em>Will be updated automatically in the main program and the extra room in the conversation. Date : Saturday, 26 /8/2006 - Hours are from 6 pm to 10 Mecca Time - Jerusalem-Cairo. From 3 pm until 7 Time 05:00 Enter chat http: al-jinan.org/chat. Will work only half an hour before the attack. Leadership decided to use only the major programme in the attack, Lltali follows : The programme operates in the same manner but more strongly Durrah, Member faced many problems in the modernization Durra because of their Alcockez, and the present quality, The programme is designed to automatically update speeds.</em></div><div><em></em></div><div><strong></strong> </div><div><strong><br />Their "pitch"</strong> :</div><div></div><div> </div><div><br />"<em>We note that our enemies Zionists have such groups in order to eliminate sites and sites of resistance Islamic profess. The notes on the Internet that many of the sites Mujahideen are taking place and the closure of sites and this immoral act of brotherhood pigs. Under such a senseless war on Lebanon and Palestine, the Zionists any target in any area. The factors that are responsible for targeting this will affect them and Ihabtahm and create terror in the hearts of God.</em>"</div><div></div><div> </div><div><br />_<strong>The Designer - Islamic HaCKEr</strong></div><div>A defacer going by the handle of The Designer - Islamic HaCKEr was a vivid hacktivist for a while, than switched handles and continued to deface spreading cyber jihadist PSYOPS such as the following message courtesy of one of his defacements :</div><div></div><div> </div><div><br />"<em>Muslims are not Terrorists and U.S.A &amp; Israel &amp; europa are Terrorists. america and israel and europa they terrorists and we moslems not is terrorists . and It was hacked because you are supporting the war in Iraq, palestine and Afghanistan, and it was hacked because you are killing our people and our kids in Iraq, palestine and Afghanistan , and It was hacked because they invaders our land and they vandals our homes and hacked your sites is our solution.</em>"</div><div></div><div> </div><div><br />_<strong>Alansar Fantom</strong></div><div>In direct coordination with The Designer and Al-Ansar Hackers Team, basically a low-profile script kiddie that's also involved in spreading the campaign message and the flood tools to be used in eh Electrnic Jihad campaign.</div><div></div>Offensive cyber terrorism on behalf of terrorists in the sense of cyber mujahideens is overhyped if they're to do it on their own given the factual based evidence of their current state of technical know-how, with the Electronic Jihad program among the most recent such overhyped threats. Defensive cyber terrorism as an extension of cyber jihad in <a href="http://ddanchev.blogspot.com/2007/12/combating-unrestricted-warfare.html">an asymmetric nature</a>, is what is going on online for the time being, and has been going on for the last couple of years.<br /><br />The bottom line, script kiddies cyber jihadists dominate, PSYOPS fill the gaps where there's zero technical know-how, mentors are slowly emerging and providing <a href="http://ddanchev.blogspot.com/2006/12/analysis-of-technical-mujahid-issue-one.html">interactive tutorials</a> to reach <a href="http://ddanchev.blogspot.com/2007/06/analysis-of-technical-mujahid-issue-two.html">a wider audience</a>, <a href="http://ddanchev.blogspot.com/2007/11/teaching-cyber-jihadists-how-to-hack.html">localization of knowledge from English2Arabic</a> is taking place the way propaganda is also localized from Arabic2English, and there's also an ongoing networking going on between cyber jihadists and <a href="http://ddanchev.blogspot.com/2007/11/overperforming-turkish-hacktivists.html">Turkish hacktivists</a> converting into such on <a href="http://ddanchev.blogspot.com/2007/11/mass-defacement-by-turkish-hacktivists.html">a religious level</a>. Case in point - <strong>MuslimWarriors.Org</strong> defacement campaigns with "anti-infidel" related messages.<div class="feedflare">
<a href="http://feeds.feedburner.com/~f/DanchoDanchevOnSecurityAndNewMedia?a=9O37xUC"><img src="http://feeds.feedburner.com/~f/DanchoDanchevOnSecurityAndNewMedia?i=9O37xUC" border="0"></img></a> <a href="http://feeds.feedburner.com/~f/DanchoDanchevOnSecurityAndNewMedia?a=p9ss6zC"><img src="http://feeds.feedburner.com/~f/DanchoDanchevOnSecurityAndNewMedia?i=p9ss6zC" border="0"></img></a> <a href="http://feeds.feedburner.com/~f/DanchoDanchevOnSecurityAndNewMedia?a=VQjvmLc"><img src="http://feeds.feedburner.com/~f/DanchoDanchevOnSecurityAndNewMedia?i=VQjvmLc" border="0"></img></a> <a href="http://feeds.feedburner.com/~f/DanchoDanchevOnSecurityAndNewMedia?a=LlnWiLc"><img src="http://feeds.feedburner.com/~f/DanchoDanchevOnSecurityAndNewMedia?i=LlnWiLc" border="0"></img></a> <a href="http://feeds.feedburner.com/~f/DanchoDanchevOnSecurityAndNewMedia?a=TN0qukC"><img src="http://feeds.feedburner.com/~f/DanchoDanchevOnSecurityAndNewMedia?i=TN0qukC" border="0"></img></a> <a href="http://feeds.feedburner.com/~f/DanchoDanchevOnSecurityAndNewMedia?a=nQahnxC"><img src="http://feeds.feedburner.com/~f/DanchoDanchevOnSecurityAndNewMedia?i=nQahnxC" border="0"></img></a> <a href="http://feeds.feedburner.com/~f/DanchoDanchevOnSecurityAndNewMedia?a=FL7Lv8c"><img src="http://feeds.feedburner.com/~f/DanchoDanchevOnSecurityAndNewMedia?i=FL7Lv8c" border="0"></img></a>
</div><img src="http://feeds.feedburner.com/~r/DanchoDanchevOnSecurityAndNewMedia/~4/201954171" height="1" width="1"/>]]></content:encoded>
      <pubDate>Mon, 17 Dec 2007 17:03:29 +0000</pubDate>
      <category domain="http://securityratty.com/tag/anti-islamic web sites">anti-islamic web sites</category>
      <category domain="http://securityratty.com/tag/islamic web sites">islamic web sites</category>
      <category domain="http://securityratty.com/tag/web">web</category>
      <category domain="http://securityratty.com/tag/jihad">jihad</category>
      <category domain="http://securityratty.com/tag/electronic jihad program">electronic jihad program</category>
      <category domain="http://securityratty.com/tag/campaign">campaign</category>
      <category domain="http://securityratty.com/tag/electrnic jihad campaign">electrnic jihad campaign</category>
      <category domain="http://securityratty.com/tag/web sites">web sites</category>
      <category domain="http://securityratty.com/tag/cyber jihad">cyber jihad</category>
      <source url="http://feeds.feedburner.com/~r/DanchoDanchevOnSecurityAndNewMedia/~3/201954171/cyber-jihadist-hacking-teams.html">Cyber Jihadist Hacking Teams</source>
    </item>
    <item>
      <title><![CDATA[Combating Unrestricted Warfare]]></title>
      <link>http://securityratty.com/article/419887eeeb4122e5f09f9278c24e0444</link>
      <guid>http://securityratty.com/article/419887eeeb4122e5f09f9278c24e0444</guid>
      <description><![CDATA[It's February, 1999, and two senior colonels from China's PLA, namely Qiao Liang and Wang Xiangsui depressed the world's military thinkers by coming up with a study on the future developments and...]]></description>
      <content:encoded><![CDATA[<a href="http://bp0.blogger.com/_wICHhTiQmrA/R2BcsaehX3I/AAAAAAAABPQ/wDVNwyWr2tY/s1600-h/Unconditional_warfare_PLA.jpg"><img id="BLOGGER_PHOTO_ID_5143212692548444018" style="FLOAT: left; MARGIN: 0px 10px 10px 0px; CURSOR: hand" alt="" src="http://bp0.blogger.com/_wICHhTiQmrA/R2BcsaehX3I/AAAAAAAABPQ/wDVNwyWr2tY/s200/Unconditional_warfare_PLA.jpg" border="0" /></a>It's February, 1999, and two senior colonels from China's PLA, namely Qiao Liang and Wang Xiangsui depressed the world's military thinkers by coming up with a study on the future developments and potential of asymmetric warfare in a surprising move next to the overall discussion always orbiting around <a href="http://ddanchev.blogspot.com/2006/02/who-needs-nuclear-weapons-anymore.html">symmetric warfare</a>. The study itself entitled "<a href="http://www.terrorism.com/documents/TRC-Analysis/unrestricted.pdf">Unconventional Warfare</a>" is an ugly combination of Sun Tzu's 3D perspective on warfare in combination with guerilla approaches to achieve one of Sun Tzu's most insightful quotes - "<em>One hundred victories in one hundred battles is not the most skillful. Seizing the enemy without fighting is the most skillful.</em>" Here's a <a href="http://www.fas.org/nuke/guide/china/doctrine/unresw1.htm">summary of the study</a> :<br /><br /><div><div><div>"<em>Two senior PLA Air Force colonels wrote "Unrestricted Warfare", presented here in summary translation, to explore how technology innovation is setting off a revolution in military tactics, strategy and organization. "Unrestricted Warfare" discusses new types of warfare which may be conducted by civilians as well as by soldiers including computer hacker attacks, trade wars and finance wars.</em>"</div><br /><div>During the years, and especially since 9/11, the tipping point acting as the wake up call that asymmetric warfare is also getting embraced by the bad guys, many other niche research papers were published in the context of information warfare and cyber warfare such as :</div><br /><div><a class="l" onmousedown="return clk(this.href,'','','res','32','&amp;sig2=TZgnHqsm3WrHpWNNzN0G4A')" href="http://www.strategicstudiesinstitute.army.mil/pdffiles/PUB62.pdf">Chinese Information Warfare: A Phantom Menace or Emerging Threat?</a></div><div><a class="l" onmousedown="return clk('http://www.indiana.edu/~tisj/readers/full-text/15-4%20cronin.pdf','','','res','5','&amp;sig2=MkWQCOKoRk7CjJ7p9Lop1Q')" href="http://www.indiana.edu/~tisj/readers/full-text/15-4%20cronin.pdf">Information Warfare: Its Application in Military and Civilian Contexts</a></div><div><a class="l" onmousedown="return clk(this.href,'','','res','6','&amp;sig2=Gl9cL9huPo73gyRudyudkA')" href="http://www.iwar.org.uk/iwar/resources/usaf/maxwell/students/2001/01-003.pdf">The Spectrum of Cyber Conflict From Hacking to Information Warfare</a></div><div><a class="l" onmousedown="return clk(this.href,'','','res','5','&amp;sig2=lBYJ4frOob352lXQxUX6mQ')" href="http://www.au.af.mil/au/awc/awcgate/acsc/02-053.pdf">Globalization and Asymmetrical Warfare</a></div><div><a href="http://ddanchev.blogspot.com/2006/05/whos-who-in-cyber-warfare.html">Cyber Warfare: An Analysis of the Means and Motivations of Selected Nation States</a><br /><br /><a href="http://bp2.blogger.com/_wICHhTiQmrA/R2Blr6ehX4I/AAAAAAAABPY/nfY8zsv9Zm4/s1600-h/unrestricted_warfare.jpg"><img id="BLOGGER_PHOTO_ID_5143222579563159426" style="FLOAT: left; MARGIN: 0px 10px 10px 0px; CURSOR: hand" alt="" src="http://bp2.blogger.com/_wICHhTiQmrA/R2Blr6ehX4I/AAAAAAAABPY/nfY8zsv9Zm4/s200/unrestricted_warfare.jpg" border="0" /></a>Each of these is a visionary reading by itself, but perhaps it was the need for setting a new milestone into such warfare thinking that prompted the public release of the <a href="http://www.jhuapl.edu/urw_symposium/pages/Proceedings/2006_URW_Book_Full.pdf">Unrestricted Warfare Symposium Proceedings Book</a> in <a href="http://www.jhuapl.edu/urw_symposium/pages/proceedings2006.htm">2006</a> and in 2007. An excerpt from the introduction of the 2006 edition :</div><br /><div>"<em>To compensate for their weaker military forces, these actors will employ a multitude of means, both military and nonmilitary, to strike out during times of conflict. The first rule of unrestricted warfare is that there are no rules; no measure is forbidden. It involves multidimensional, asymmetric attacks on almost every aspect of the adversary’s social, economic, and political life. Unrestricted warfare employs surprise and deception and uses both civilian technology and military weapons to break the opponent’s will.</em>"</div><br /><div><a href="http://bp0.blogger.com/_wICHhTiQmrA/R2BrjaehX5I/AAAAAAAABPg/g8qALl58MrI/s1600-h/Book_Cov.jpg"><img id="BLOGGER_PHOTO_ID_5143229030604038034" style="FLOAT: left; MARGIN: 0px 10px 10px 0px; CURSOR: hand" alt="" src="http://bp0.blogger.com/_wICHhTiQmrA/R2BrjaehX5I/AAAAAAAABPg/g8qALl58MrI/s200/Book_Cov.jpg" border="0" /></a>Moreover, <a href="http://www.jhuapl.edu/urw_symposium/pages/proceedings2007.htm">the 2007</a> edition is <a href="http://www.jhuapl.edu/urw_symposium/pages/proceedings/2007/chapters/URW%202007%20Book.pdf">covering in-depth</a> such popular asymmetric threats posed by jihadists (pages 135/143) debunking the use of WMD as a priority, and the cyber dimension (pages 251/297) with some remarkable analogies post Cold-War strategies applied to modern digital threats :<br /></div><br /><div>"<em>Technology alone is never going to solve the IA problem. We have no informed national defensive strategy in this area. The situation is starting to change and improve, in large part because visionaries like General Cartwright are in key slots. But we do not have a lot of time. The intelligence community is not sufficiently engaged in conducting, analyzing, and reporting those issues. During the Cold War, we analyzed Soviet capabilities exhaustively. We did everything possible to understand our adversary and manage that gap. We need to do the same thing today. The bottom line is that it is dangerous to underestimate the capabilities of our adversaries. They do whatever it takes to win. Good adversaries know our strengths and weaknesses. They develop surprising partners that sometimes do not even know they are partners—they will give someone an honorarium to talk at a conference and ask that person for information on associates. They play by a different set of rules. They see offense as a systems problem, while our defense is fragmented.</em>"</div></div><br /><div></div><a href="http://bp0.blogger.com/_wICHhTiQmrA/R2BybaehX6I/AAAAAAAABPo/59i39aGCLjY/s1600-h/victory_in_cyberspace"><img id="BLOGGER_PHOTO_ID_5143236589746479010" style="FLOAT: left; MARGIN: 0px 10px 10px 0px; CURSOR: hand" alt="" src="http://bp0.blogger.com/_wICHhTiQmrA/R2BybaehX6I/AAAAAAAABPo/59i39aGCLjY/s200/victory_in_cyberspace" border="0" /></a>All of these reports and Ebooks are highly recomended bedtime reading, and so is the last but not least one, namely "<a href="http://www.afa.org/media/reports/victorycyberspace.pdf">Victory in Cyberspace</a>" released October, 2007. Besides generalizing cyberspace war activities, it includes a comprehensive summary of the events that took place in Estonia during the DDoS attacks.<br /><br /><div></div><div><div><strong>Related posts:</strong></div><div><a href="http://ddanchev.blogspot.com/2007/10/peoples-information-warfare-concept.html">People's Information Warfare Concept</a></div><div><a href="http://ddanchev.blogspot.com/2007/09/chinas-cyber-espionage-ambitions.html">China's Cyber Espionage Ambitions</a></div><div><a href="http://ddanchev.blogspot.com/2006/07/north-koreas-cyber-warfare-unit-121.html">North Korea's Cyber Warfare Unit 121</a></div><div><a href="http://ddanchev.blogspot.com/2006/09/chinese-hackers-attacking-us.html">Chinese Hackers Attacking U.S Department of Defense Networks</a></div><div><a href="http://ddanchev.blogspot.com/2007/11/electronic-jihad-v30-what-cyber-jihad.html">Electronic Jihad v3.0 - What Cyber Jihad Isn't</a></div><div><a href="http://ddanchev.blogspot.com/2007/11/electronic-jihads-targets-list.html">Electronic Jihad's Targets List</a></div><div><a href="http://ddanchev.blogspot.com/2007/11/teaching-cyber-jihadists-how-to-hack.html">Teaching Cyber Jihadists How to Hack</a></div><div><a href="http://ddanchev.blogspot.com/2007/10/empowering-script-kiddies.html">Empowering the Script Kiddies</a></div><div><a href="http://ddanchev.blogspot.com/2007/04/osint-through-botnets.html">OSINT Through Botnets</a></div><div><a href="http://ddanchev.blogspot.com/2007/05/corporate-espionage-through-botnets.html">Corporate Espionage Through Botnets</a></div><div><a href="http://ddanchev.blogspot.com/2007/11/overperforming-turkish-hacktivists.html">Overperforming Turkish Hacktivists</a></div><div><a href="http://ddanchev.blogspot.com/2006/07/hacktivism-tensions-israel-vs.html">Hacktivism Tensions - Israel vs Palestine Cyberwars</a></div><div><a href="http://ddanchev.blogspot.com/2006/05/current-emerging-and-future-state-of.html">The Current, Emerging, and Future State of Hacktivism</a></div><div><a href="http://ddanchev.blogspot.com/2006/09/internet-psyops-psychological.html">Internet PSYOPS - Psychological Operations</a></div><div><a href="http://ddanchev.blogspot.com/2007/05/ddos-on-demand-vs-ddos-extortion.html">DDoS on Demand VS DDoS Extortion</a></div><div><a href="http://ddanchev.blogspot.com/2006/09/biggest-military-hacks-of-all-time.html">The Biggest Military Hacks of All Time</a></div></div></div><div class="feedflare">
<a href="http://feeds.feedburner.com/~f/DanchoDanchevOnSecurityAndNewMedia?a=7TzHNfC"><img src="http://feeds.feedburner.com/~f/DanchoDanchevOnSecurityAndNewMedia?i=7TzHNfC" border="0"></img></a> <a href="http://feeds.feedburner.com/~f/DanchoDanchevOnSecurityAndNewMedia?a=X0jMdAC"><img src="http://feeds.feedburner.com/~f/DanchoDanchevOnSecurityAndNewMedia?i=X0jMdAC" border="0"></img></a> <a href="http://feeds.feedburner.com/~f/DanchoDanchevOnSecurityAndNewMedia?a=qXU7Rnc"><img src="http://feeds.feedburner.com/~f/DanchoDanchevOnSecurityAndNewMedia?i=qXU7Rnc" border="0"></img></a> <a href="http://feeds.feedburner.com/~f/DanchoDanchevOnSecurityAndNewMedia?a=ZEufBmc"><img src="http://feeds.feedburner.com/~f/DanchoDanchevOnSecurityAndNewMedia?i=ZEufBmc" border="0"></img></a> <a href="http://feeds.feedburner.com/~f/DanchoDanchevOnSecurityAndNewMedia?a=81bBPqC"><img src="http://feeds.feedburner.com/~f/DanchoDanchevOnSecurityAndNewMedia?i=81bBPqC" border="0"></img></a> <a href="http://feeds.feedburner.com/~f/DanchoDanchevOnSecurityAndNewMedia?a=dQtwflC"><img src="http://feeds.feedburner.com/~f/DanchoDanchevOnSecurityAndNewMedia?i=dQtwflC" border="0"></img></a> <a href="http://feeds.feedburner.com/~f/DanchoDanchevOnSecurityAndNewMedia?a=kD0ea2c"><img src="http://feeds.feedburner.com/~f/DanchoDanchevOnSecurityAndNewMedia?i=kD0ea2c" border="0"></img></a>
</div><img src="http://feeds.feedburner.com/~r/DanchoDanchevOnSecurityAndNewMedia/~4/199469513" height="1" width="1"/>]]></content:encoded>
      <pubDate>Sat, 15 Dec 2007 06:08:23 +0000</pubDate>
      <category domain="http://securityratty.com/tag/chinese information warfare">chinese information warfare</category>
      <category domain="http://securityratty.com/tag/information">information</category>
      <category domain="http://securityratty.com/tag/information warfare">information warfare</category>
      <category domain="http://securityratty.com/tag/warfare">warfare</category>
      <category domain="http://securityratty.com/tag/cyber warfare unit">cyber warfare unit</category>
      <category domain="http://securityratty.com/tag/cyber warfare">cyber warfare</category>
      <category domain="http://securityratty.com/tag/asymmetric warfare">asymmetric warfare</category>
      <category domain="http://securityratty.com/tag/unconventional warfare">unconventional warfare</category>
      <category domain="http://securityratty.com/tag/warfare employs surprise">warfare employs surprise</category>
      <source url="http://feeds.feedburner.com/~r/DanchoDanchevOnSecurityAndNewMedia/~3/199469513/combating-unrestricted-warfare.html">Combating Unrestricted Warfare</source>
    </item>
  </channel>
</rss>
