Hackers deface USAtoday.com

[blackwave]

Re: so would I

Originally posted by cyberat3
ny hacker convetion. Does anyone know the name of that one? :D

Sounds like you are talking about H2K2, the 4th HOPE conference, sponsored by 2600
http://www.h2k2.net/

Here is a slashdot article on the h2k2 wrapup...

[cyberat3]

so would I

so would I like to see their work.. I read it somewhere, that it also conincided with a ny hacker convetion. Does anyone know the name of that one? :D

[blackwave]

more "news"...

USA Today swats hack attack - but not entirely
http://www.theregister.co.uk/content/55/26157.html

[converge]

you wouldn't be able to hook me up with that calendar on the right would you? I was going to just write one to get it done, but would love to save on the coding time

[blackwave]

Re: Re: Hackers deface USAtoday.com

Originally posted by TheWatcher
I've check it from www.blackhat.info, it is not added.

It appears that this webdef fell through the cracks...

[TheWatcher]

Re: Hackers deface USAtoday.com

Originally posted by PoT
Another great example of hackers in the news. I never saw what the defaced version of USA Today's page was. It had their web page down for all of 3 hours. Seems a bit of a waste to have your work taken down so quickly. Does anyone here have a screen shot of the defaced page? I'd kind of like to see it.



http://www.usatoday.com/news/site-vandalism.htm

-PoT

I've check it from www.blackhat.info, it is not added.

[TheWatcher]

Originally posted by c0nv3r9
I've looked around several mirror sites, but it looks like most of them are outdated or unmaintained

Blackhat.info is updated though not heavy on day 12-14 due to h2k2 conference.

I'm doing the update every night from 10pm to 2pm, where most defacement took place....

From this defacement archive, if I have extra time, I do assessment report.

[blackwave]

too bad the webdefs don't put up a mirror or have a snapshot sent to these mirrors automatically...

[converge]

I believe all of safemodes previous archives are still there, but directory browsing is not permitted, so you have to know the exact mirror url.

[blackwave]

Originally posted by c0nv3r9
I've looked around several mirror sites, but it looks like most of them are outdated or unmaintained

Yeah it looks like there are so many sites that either groups like:

http://www.2600.com/hacked_pages/
stopped logging these since 2000

http://www.safemode.org

After collecting thousands defacements the maintainers of Safemode.org decided to close the mirror.

http://www.safemode.org/defacers

This page is temporary unavailable on safemode.org due to reorganization of the web site. Browse the archive by hand for defacement information.

http://www.safemode.org/mirror/

Defaced Commentary Mail List Archive
http://www.attrition.org/security/commentary/ A steep rise in the amount of malicious cybergraffiti and an increasingly argumentative and angry crew of page visitors has forced security news site Attrition to shut down its most popular section. from:http://www.wired.com/news/print/0,1294,43991,00.html

...just closed, or stop maintaining the sites...

I've only seen a few sites that maintain defarch's such as:

http://defaced.alldas.org/

that maintain the sites and keep their archives current, at least as best as it can...

[converge]

I've looked around several mirror sites, but it looks like most of them are outdated or unmaintained

[astcell]

I knew of a site that posted info about government defaced websites, I wonder if it'd be there.

[Mystakis]

Ide like to see that. ill ask around see if anyone i know has one.

[converge]

hahaha I was a little curious about the politcal correctness link I enjoyed in the channel last night... I dunno... it just didn't seem up to journalistic expectations heheh

I can't believe I didn't take a screen shot... someone from the channel might

... added:

I think this was the link, although it appears cleaned out now.
http://www.usatoday.com/pc.html

Nothing in my cache unfortunately...

[blackwave]

Re: Hackers deface USAtoday.com

Originally posted by PoT
It had their web page down for all of 3 hours. Seems a bit of a waste to have your work taken down so quickly.

Come on, check out their server:
Content-Type: text/html
Server: Microsoft-IIS/5.0
I doubt they are spoofing their server response...

most likely a sk, or one of the webdef groups out there...
it could go up again, games like this are rarely over after the first strike. (not that I would know)