Showing posts with label anonymous. Show all posts
Showing posts with label anonymous. Show all posts

Thursday, 19 November 2015

Cloudflare surf the wave - but gets caught between Anonymous and ISIL

Cloudflare protects websites from DDOS and provides a degree on anonymity online. Given that its entry level service is free it is highly popular - and sometimes with the wrong people.

It looks to be heading for a float in 2017 and a potential valuation of $8 billion dollars - hats off to CEO Matthew Prince if that works out.

Cloudflare do not provide hosting services but typical digital forensic activity such as traceroutes to an IP address end with them thus concealing the hosting entity and making removal activities more difficult. Not by design but as a consequence of providing DDOS protection.

It has been suggested by Anonymous that some ISIL related websites use Cloudflare and that therefore Cloudflare are protecting them with anonymity - an amusing turn of events from a group of that name.

In reality (and KLipcorp work with Cloudflare in this respect)  Cloudflare will reveal end point IP addresses if the proper procedures are followed so this is a bit of a misleading storm in a teacup - but a decent excuse for a good photo.

Tuesday, 17 November 2015

Do ISIL have a Stuxnet ?

The stamp commemorating Andre Maginot recognizes his sterling if ineffective efforts to prevent the Germans invading France in 1939.

As the German Panzers simply whizzed around the side of the heavily fortified emplacements he must have been spinning in his grave.

The emergence on the scene of the Stuxnet cyber weapon which was / is capable of closing down and controlling computer operating systems in heavy machinery showed the game had changed back in 2009. The worm was capable of closing down a nuclear reactor (and possibly worse). It was speculated that Stuxnet was created jointly by the USA and Israel.

A key question now is the extent of the online attack surface we present to those seeking to cause damage ? The attack surface is a term used in ethical hacking to identify the extent of a systems weaknesses. Footprinting is the process used to determine the extent of the attack surface.

George Osborne has clearly identified a potential weakness in UK cyber defences as the austerity Chancellor has suddenly started to find funds to shore up our cyber security and has doubled the budget. When Mr Dusty Wallet is suddenly getting the first round something is clearly up.

If ISIL have an equivalent of Stuxnet they could potentially wreak enormous financial damage. That said given that some of the leading people in digital (Turing, Berners-Lee) have been from the UK we should be able to hold our ground on the coming digital battleground.

In a new twist Anonymous have announced on their YouTube channel (see below) that they intend to track down members of ISIL and "totally mobilise" against them. I am sure we would all pay good money to attend the meeting where members of Anonymous and the UK Armed Forces met to share information.