Massachusetts Senate Race Still Steers Clear... >>
<< 4Chan Reroutes Promotional Contest, Lines...
 tdicon 

(Mis)Uses of Technology

by Mike Masnick

Tue, Sep 4th 2012 3:12pm




Repost This

Filed Under:
anonymous, antisec, apple udids, cybersecurity, fbi, hack, privacy

Companies:
apple


FBI Denies That Hacked Apple Info Came From FBI

from the then-where-did-it-come-from dept

Earlier today, we wrote about Antisec releasing some Apple UDIDs to show that it had apparently collected info on 12 million Apple users, which it claims to have found when it hacked into an FBI's laptop. As we noted at the time, the file was called "NCFTA_iOS_devices_intel.csv," which implied that it came from the National Cyber-Forensics & Training Alliance, a vehicle set up to allow companies to share info with the government. However, the FBI is now flat out denying that any of its laptops had been hacked or that it had the info. Antisec is, to say the least, unimpressed:
The FBI's denial comes after an earlier, weaker denial, in which they just said they had "no evidence" to support the story. Now they're saying it's "TOTALLY FALSE" (all caps for EMPHASIS). And, of course, Antisec folks are reminding the FBI (and the public) that they're still sitting on 3TB of additional data from this hack -- which suggests that they're planning to release more to prove that the hack really was of an FBI machine. Either way, now that the fight is happening on Twitter, it seems time to grab some virtual popcorn, sit back and watch the fireworks.

61 Comments | Leave a Comment

If you liked this post, you may also be interested in...

Reader Comments (rss)

(Flattened / Threaded)

  •  
    icon
    Forest_GS (profile), Sep 4th, 2012 @ 3:16pm

    *sigh*

    This is just going to instigate the hackers to release more or all of the data >.>

     

    [ reply to this | link to this | view in chronology ]

  •  
    icon
    Mike C. (profile), Sep 4th, 2012 @ 3:17pm

    Ploy?

    You know, this could go either way. On the one hand, we've got Antisec potentially sitting on a ton of additional information which could cause no small amount of embarassment to the FBI. On the other hand, this reply from the press office could just be a ploy to intentionally get them to release more in the hopes that Antisec slips up and shows their hand too early.

    Excuse me... I gotta go pop some popcorn...

     

    [ reply to this | link to this | view in chronology ]

  •  
    icon
    charliebrown (profile), Sep 4th, 2012 @ 3:32pm

    3TB of data from a laptop? What am I missing here?

     

    [ reply to this | link to this | view in chronology ]

    •  
      icon
      :Lobo Santo (profile), Sep 4th, 2012 @ 3:33pm

      Re: Pick me!

      Oooh, I know! You're missing one very hi-capacity laptop hard-drive!

       

      [ reply to this | link to this | view in chronology ]

    •  
      icon
      Mike Masnick (profile), Sep 4th, 2012 @ 3:42pm

      Re:

      3TB of data from a laptop? What am I missing here?


      Might be more than one laptop. Also, not impossible. I have over 1TB connected to this laptop between its internal hard drive and the tiny portable one strapped to it...

       

      [ reply to this | link to this | view in chronology ]

      •  
        identicon
        Anonymous Coward, Sep 4th, 2012 @ 3:58pm

        Re: Re:

        Probably not on the laptop itself. I'm thinking 1 TB hard drives in a multi-bay external enclosure. Someone willing to shell out a few hundred dollars could easily cart around 4 TB of data that way; access it pretty fast too, assuming the laptop has a USB 3.0 port.

         

        [ reply to this | link to this | view in chronology ]

      •  
        identicon
        JustSomeGuy, Sep 4th, 2012 @ 8:53pm

        Yeah, me too. What, with my 800G primary drive and the two 2TB drives I stole from the DoD last week, this laptop is brimming with capacity :-)

         

        [ reply to this | link to this | view in chronology ]

      •  
        icon
        Tunnen (profile), Sep 5th, 2012 @ 10:22am

        Re: Re:

        I can understand having an external hard drive connected to a laptop, but if this was a hack over the Internet what kind of bandwidth did the connection to this laptop have? It'd take almost 6 days to download 3 Terabytes at 50 Mbps. That's 15 years over a 56k modem. Even if you managed to get a sustained 1 Gbps of bandwidth, you are still looking at about 6 hours.

        You would think someone would have noticed the huge spike of network activity for such a long time, but I guess this is the FBI we're talking about...

         

        [ reply to this | link to this | view in chronology ]

        •  
          icon
          SD (profile), Sep 5th, 2012 @ 12:02pm

          Re: Re: Re:

          If they hacked the FBI they probably were smart enough to send the data to a server somewhere that they anonymously paid for, rather than trying to push 3TB over 7 proxies. It would have still taken a while but not more than a few days over a fiber uplink the FBI should be using.

          Large upload monitoring can be thwarted by splitting the data into smaller packets. Any small leak could be damaging on it's own. If they they are trying to stop the problem at that point, they've already lost. I don't see any reason a dossier on Apple devices and their owners would need to be that accessible in the first place.

           

          [ reply to this | link to this | view in chronology ]

        •  
          identicon
          New Mexico Mark, Sep 5th, 2012 @ 5:06pm

          Re: Re: Re:

          Anyone with a smidgen of hacker skills would likely encrypt the outbound data. Most forms of encryption compress as well. csv data files like this compress like crazy, and it is quite feasible that it might have been as little as 30-90 GB of transferred data. Not trivial, but certainly not a big deal on a fast network. If a device is already somewhat of a data warehouse, large network transfers might be normal.

          That said, I'm not convinced about the FBI thing yet. The temptation to grab the data from one site but embarrass another party could be strong. (The breached organization might even still be accessible.) One would assume that some other unique info from the laptop would be forthcoming pretty quickly if this were true. More of the same data does not at all strengthen the case that this was from FBI.

           

          [ reply to this | link to this | view in chronology ]

    •  
      icon
      John Fenderson (profile), Sep 4th, 2012 @ 4:27pm

      Re:

      Not a thing. Such high-capacity drives for laptops are readily available, some from Amazon.

       

      [ reply to this | link to this | view in chronology ]

    •  
      icon
      kh (profile), Sep 4th, 2012 @ 4:39pm

      Re:

      And a very fast broadband connection and the owner didn't notice a 3TB upload and no-one else noticed?

       

      [ reply to this | link to this | view in chronology ]

      •  
        icon
        Raymond Johansen (profile), Sep 4th, 2012 @ 4:52pm

        Re: Re: 3TB from a laptop or not

        If you look at the whole situation it seems that a particular agent was targeted, and that for the "first" time Anon has used HumInt to get what they wanted. It seems to me be the only explanation to whats going on right now.

         

        [ reply to this | link to this | view in chronology ]

    •  
      icon
      That Anonymous Coward (profile), Sep 4th, 2012 @ 4:40pm

      Re:

      the 3TB was from another hack...
      and exceeds the amount the DEA can hold on its servers for long term storage by 1TB.

       

      [ reply to this | link to this | view in chronology ]

    •  
      identicon
      Anonymous Coward, Sep 4th, 2012 @ 11:00pm

      Re:

      "3TB of data from a laptop? What am I missing here?"

      What you are missing is the implausibility of the file being 3TB. The file is .csv, that means "comma separated values". In other words it is a plain text file with text fields separated by commas. Each record consists of a line of text. Looking at the names of the fields, in the story earlier today, each field is only going to be a few bytes. So each record will be around a few hundred bytes. There were 12M customers, pick 250 bytes as a reasonable guess for the average record size, then multiply out:

      12M * 250 = 3G

      Do the maths for yourself. Somebody got their Gigabytes and their Terabytes mixed up. The file is 3GB, not 3TB.

       

      [ reply to this | link to this | view in chronology ]

      •  
        icon
        bratwurzt (profile), Sep 5th, 2012 @ 2:17am

        Re: Re:

        3 TB of data is not the .cvs file :> It's still unreleased data.

         

        [ reply to this | link to this | view in chronology ]

        •  
          identicon
          Anonymous Coward, Sep 5th, 2012 @ 5:45pm

          Re: Re: Re:

          Reread the earlier story on this. Particularly look at: "on his laptop, they found a csv file". Antisec got 12M records in one CSV file. They have released a redacted version of 1M records, to prove they have got the data. Only idiots are now pretending that they do not have all the data, thereby proving that the FBI's IT security skills are pathetic.

          The calculation showing the file to be 3GB, not 3TB, stands. You are never going to get to the truth of this matter if you are unable to distinguish lies and mistakes from the truth.

           

          [ reply to this | link to this | view in chronology ]

          •  
            icon
            bratwurzt (profile), Sep 6th, 2012 @ 12:19am

            Re: Re: Re: Re:

            Look, I am able to use math:
            12000000 * 250 B = 3000000000 B

            3000000000 B/1024 = 2929687,5 MB
            2929687,5 MB/1024 = 2861,023 GB

            2861,023 GB != 3 GB

            It's not 3 TB but it definitely is at least 2.

             

            [ reply to this | link to this | view in chronology ]

            •  
              identicon
              Anonymous Coward, Sep 6th, 2012 @ 6:19am

              Re: Re: Re: Re: Re:

              Um, you missed kilo.


              3000000000 B/1024 = 2929687,5 MB
              2929687,5 MB/1024 = 2861,023 GB

              2861,023 GB != 3 GB


              Should be
              3000000000 B/1024 = 2929687,5 KB
              2929687,5 KB/1024 = 2861,023 MB

              2861,023 MB != 3 GB

              G M K B
              3 000 000 000

               

              [ reply to this | link to this | view in chronology ]

      •  
        identicon
        AnonAdvocate, Apr 12th, 2013 @ 6:16am

        Re: Re:

        Unless of course, they have additional data BESIDES apple ids.

         

        [ reply to this | link to this | view in chronology ]

    •  
      identicon
      Michael Driver, Sep 5th, 2012 @ 7:27am

      Re: 3TB

      Just what was on my mind. Unless there's some storage tech that the public doesn't know about (doubtful).

       

      [ reply to this | link to this | view in chronology ]

  •  
    identicon
    Anonymous Coward, Sep 4th, 2012 @ 3:34pm

    But then the FBI would deny it. The only thing worse for the FBI than to admit it is performing widespread survailance without warrents, would be that it lost said data to a group like antisec.

    But if the FBI say it, then it must be true... they'd never lie...

     

    [ reply to this | link to this | view in chronology ]

    •  
      icon
      John Fenderson (profile), Sep 4th, 2012 @ 4:28pm

      Re:

      When I was a sprout, someone told me that you should never believe a story about government activities until there's been an official denial.

       

      [ reply to this | link to this | view in chronology ]

  •  
    identicon
    Anonymous Coward, Sep 4th, 2012 @ 3:41pm

    Of course this never happened, just like the NSAs Stellar Wind isn't happening....

     

    [ reply to this | link to this | view in chronology ]

  •  
    icon
    The Logician (profile), Sep 4th, 2012 @ 3:56pm

    When an organization such as the FBI becomes more concerned with its image and its own power rather than the well-being of the citizens it is intended to serve, the logical course of action is to oppose it and expose its corruption, as Antisec has done. It is at this point that the FBI must be reformed or removed, as it has forgotten the purpose it was created for. To do so, it must be made to collapse from the weight of its own bureaucracy. This leak and its exposure by Antisec are conducive to that process and should be encouraged.

     

    [ reply to this | link to this | view in chronology ]

  •  
    identicon
    Profiler, Sep 4th, 2012 @ 4:04pm

    FBI profile

    My profile of this tweet is: the FBI is guilty.

     

    [ reply to this | link to this | view in chronology ]

  •  
    icon
    Jay (profile), Sep 4th, 2012 @ 4:13pm

    Nixon would be proud...

    So now this reminds me of the breakins at Watergate and the Chilean embassy. Should we call this FBIgate now? Are they going to punish these kids for making them look foolish like Daniel Ellsberg made Nixon look foolish when he published the Pentagon Papers?

     

    [ reply to this | link to this | view in chronology ]

  •  
    icon
    Raymond Johansen (profile), Sep 4th, 2012 @ 4:17pm

    New words/idioms

    It seems hell has frozen over!

    Woodward, Bernstein and a tutu in one Tweet! Impossible!

    FBI #TweetRelease

    Anon vs FBI #TweetFight

     

    [ reply to this | link to this | view in chronology ]

  •  
    icon
    letherial (profile), Sep 4th, 2012 @ 4:30pm

    When presented with two different story's i ask myself who is more believable, who has more credibility and who has more interest in lying.

    I asked myself that question, and sadly the anonymous hacker group i know nothing about is more trustworthy then FBI...so maybe the FBI has some PR to do, it will only take a 5 or 6 generations to change it.

     

    [ reply to this | link to this | view in chronology ]

  •  
    identicon
    Anonymous Coward, Sep 4th, 2012 @ 4:44pm

    Unless it's catching a fake terrorist, the FBI won't admit to their own idiocy.

     

    [ reply to this | link to this | view in chronology ]

  •  
    identicon
    Digitari, Sep 4th, 2012 @ 5:23pm

    Re:

    umm doesn't every CRIMINAL swear they are Innocent???

     

    [ reply to this | link to this | view in chronology ]

  •  
    identicon
    Anonymous Coward, Sep 4th, 2012 @ 7:14pm

    popcorn

    grab your popcorn at http://imgur.com/a/LPRbU (courtesy of reddit)

     

    [ reply to this | link to this | view in chronology ]

  •  
    identicon
    Jayce, Sep 4th, 2012 @ 8:22pm

    If the FBI swore the sun would rise tomorrow,

    I'd be heavily inclined to buy lanterns.

     

    [ reply to this | link to this | view in chronology ]

  •  
    icon
    BentFranklin (profile), Sep 4th, 2012 @ 9:16pm

    It takes days to get 3TB over consumer bandwidth. FBI naturally has T3. Does this mean Anon has T3 too?

     

    [ reply to this | link to this | view in chronology ]

  •  
    icon
    DataShade (profile), Sep 4th, 2012 @ 11:24pm

    Well, hypothetical ... what if the FBI really did "never had" the information, because it was always remotely accessed from an NCFTA server?



    FBI Agent leaves laptop open with a username and password in plain view or written on a post-it (because "o hai Im FBI! c my gun pew pew! I haz nashunul seekrits lulz" seems to fit the profile of a joker who shows up to a hacker conference to shill for the FBI in an EFF tshirt).

    AntiSec grabs the post-it, logs into NCFTA website, downloads file.


    FBI issues factually accurate but still deceptive denial.

     

    [ reply to this | link to this | view in chronology ]

  •  
    identicon
    Anonymous Coward, Sep 5th, 2012 @ 12:25am

    reasonably obvious that the FBI would deny the leak came from them. had they admitted it did come from them, they would have been automatically admitting that they had the data in the first place, thereby opening themselves up to questions of why they had the info to begin with. i suppose their answer would be that everyone on the list is a terrorist, at least until we decide they are not but that could take a while

     

    [ reply to this | link to this | view in chronology ]

  •  
    icon
    PCCare247 (profile), Sep 5th, 2012 @ 2:12am

    Is it true ?

    Another News for our consideration. ;)

     

    [ reply to this | link to this | view in chronology ]

  •  
    identicon
    relghuar, Sep 5th, 2012 @ 2:55am

    Well...

    As to the size problem (3TB) - depends on what Antisec guys meant. If it's 3TB of plain text (like the CSV file with UDIDs, or some logs or whatever) and it has been stored compressed, the ratio could be anywhere from 1:5 to 1:15 (we regularly get over 1:10 for apache log files), so at 1:10 it would be 300GB of data. Still not very plausible to come from single notebook, but not THAT awful... Anyway, that's just a mental exercise, certainly not any precise analysis :-)
    For the FBI claiming they never had that data - well, I definitely CAN imagine a scenario when they wouldn't even know they had it, or at least know exactly what they had.
    I've heard speculations the data came from hacked iPhone App vendor - might be, but perhaps the vendor didn't have to be hacked? Perhaps the vendor could have - generously - share the data with NCFTA (well that's what they're for, right), and the NCFTA could then share the data with FBI, which (surprisingly, given their famous technical knowledge and overall high level of skills) could then loose the data by getting hacked (real shock, never happened before).
    I really can't decide what's worse - if their lying through their teeth, or them being so incompetent they don't even KNOW what's being shared with them.
    On the other hand, it could explain why they say CISPA is necessary - of course they need new laws, when they don't know about anyone sharing any relevant data with them :-/

     

    [ reply to this | link to this | view in chronology ]

  •  
    icon
    Ninja (profile), Sep 5th, 2012 @ 3:44am

    Either way, now that the fight is happening on Twitter, it seems time to grab some virtual popcorn, sit back and watch the fireworks.

    That. Should be amusing. The sad part is that we'll be seeing more cybersecurity FUD being spread after this totally missing the point Antisec ppl are trying to make. Oh and FBI will try to fuck up a few lives in the process just for vengeance.

     

    [ reply to this | link to this | view in chronology ]

    •  
      identicon
      Anonymous Coward, Sep 5th, 2012 @ 4:03am

      Re:

      It's not like they were short on fake reasons to do police state things before. The important thing is to let everyone know about the widespread spying.

       

      [ reply to this | link to this | view in chronology ]

    •  
      identicon
      Anonymous Coward, Sep 5th, 2012 @ 5:36am

      Re:

      Yes, so the point is people's UDIDs are not secure. That's a problem. It's a much larger problem if that information can be easily cross-referenced with other personal information/behavior histories/etc.

      But that's not the point Antisec is trying to make. They're itching for a fight with the govt to prove the govt is willing to fight. Right now, at least publicly, it isn't. Interesting situation, indeed.

       

      [ reply to this | link to this | view in chronology ]

  •  
    icon
    Wally (profile), Sep 5th, 2012 @ 5:58am

    I don't have much concern over this. Even if my UDID was stollen, I can easily change the password and thank God Mrs. Wally and I only use gift cards for payments on our iPods.

     

    [ reply to this | link to this | view in chronology ]

    •  
      icon
      Wally (profile), Sep 5th, 2012 @ 6:22am

      Re:

      Adding to this, it should be noted that the UDID'S that were stolen, do change and due to Apple's "oppressive" approach of only allowing one computer-based iTunes account to be authorized on one computer at a time for up to 5 of your devices, the UDID system is non-effective to data theft on the scale shown here. The data stolen was 6 months old.

      For iTunes on the PC, you have to authorize the use of an iOS device by logging into your iTunes account with your Apple ID. When authorized on one computer, you cannot transfer any purchased items from iTunes from your iDevice to other computers without first deauthorizing your main computer and authorizing said device to your next one. It automatically knows and sends a report to Apple if you reformat the computer's hard disk.

      In short, the UDID information is useless unless you can locally and physicslly get onto the authorized computer for a set of devices.

       

      [ reply to this | link to this | view in chronology ]

  •  
    identicon
    Michael, Sep 5th, 2012 @ 7:15am

    How do you know that this whole event isn't really Antisec's doing but rather the FBI's in order to reveal (in an offhanded way) that they're hoarding all this personal data and then observe people's response? Thinking about it, the FBI would have to be incredibly stupid to just leave that data just sitting on a laptop w/ internet access enabled, not to mention conveniently innoculous to all that uploading.

    Or, it could be that Antisec is flat-out lying or that it's all data they've gathered via other means and are now pinning the blame on the FBI.

    Either way, there's really no way of knowing for sure at this time. Unfortunately, if any of this turns out to be true, the real victims are the 12.3 million whose private info has been compromised.

     

    [ reply to this | link to this | view in chronology ]

  •  
    identicon
    Anonymous Coward, Sep 5th, 2012 @ 8:13am

    Thanks for the confirmation (denial).

     

    [ reply to this | link to this | view in chronology ]

  •  
    identicon
    Michael Driver, Sep 5th, 2012 @ 1:23pm

    Apple

    I was under the impression, at least from what I've always heard from Apple and Apple fanboys, that Apple was infallible, and perfect. What happened Apple, and fanboys?

     

    [ reply to this | link to this | view in chronology ]

    •  
      icon
      Wally (profile), Sep 5th, 2012 @ 4:54pm

      Re: Apple

      Apple is not perfect....but they are a ton better than the FBI. The only useful data stolen was credit card information and it's till a pain in the ass to make use of the UDID's in the first place.

       

      [ reply to this | link to this | view in chronology ]

  •  
    identicon
    Anonymous, Sep 5th, 2012 @ 6:50pm

    Here's Your Evidence

    Here's the MAC addresses of every computer in their field office --> http://bit.ly/RMfXlJ

     

    [ reply to this | link to this | view in chronology ]

  •  
    identicon
    Willton, Sep 10th, 2012 @ 10:11am

    Calm Down, People

    As it turns out, Apple has confirmed that Antisec did not obtain the alleged UDIDs from the FBI:

    http://gizmodo.com/5940692/apple-responds-to-alleged-udid-hack-dont-look-at-us?tag=udid

    I n addition, a third party has alleged that the UDIDs came from their servers, not from the FBI:

    http://gizmodo.com/5941919/where-anonymous-really-got-its-apple-ids-from-hint-not-the-fbi?ut m_source=deadspin.com&utm_medium=recirculation&utm_campaign=recirculation

    Its amazing that the folks on Techdirt are willing to give more credibility to a rogue association of hackers over that of the FBI. Stop being stupid.

     

    [ reply to this | link to this | view in chronology ]


Add Your Comment

Have a Techdirt Account? Sign in now. Want one? Register here
Get Techdirt’s Daily Email
Save me a cookie
  • Note: A CRLF will be replaced by a break tag (<br>), all other allowable HTML will remain intact
  • Allowed HTML Tags: <b> <i> <a> <em> <br> <strong> <blockquote> <hr> <tt>
Massachusetts Senate Race Still Steers Clear... >>
<< 4Chan Reroutes Promotional Contest, Lines...
 tdicon 
Follow Techdirt
A word from our sponsors...
Essential Reading
Techdirt Reading List
Techdirt Insider Chat
A word from our sponsors...
Recent Stories

Friday

02:05 GCHQ Oversight Tribunal Has To Ask GCHQ's Permission To Reveal GCHQ's Wrongdoing (5)

Thursday

22:59 Dumb Criminal Incriminates Dumb Self With Dumb Selfie (7)
20:02 Illinois Gas Company Facing Class Action Suit Over Service Charges May Be Blocked By Eavesdropping Act From Presenting Recorded Evidence (3)
17:00 DailyDirt: It's What You Say AND How You Say It (4)
16:35 Our $7 Billion Emergency LTE Network Appears Stuck In Corrupt, Bureaucratic Purgatory (10)
15:34 CBS Wants Dish To Make Their Ad-Skipping Hopper DVR Even Less Useful If They Want Streaming Video Rights (8)
14:33 Judge Apparently Uncomfortable With 'Innocence Of Muslims' Ruling, Asks Court To Reconsider Stay Denial (4)
13:32 Disappointing: DMCA Being Used To Make Feynman Lectures On Physics Less Accessible (21)
12:35 The Aereo Case Isn't About Aereo, But About The Future Of Cloud Computing And Innovation (33)
11:34 Government Sues Sprint For Overcharging For Wiretaps Under CALEA (12)
More arrow
A word from our sponsors...

Close

Email This