The Man Who Angered Anonymous And Lived To Regret It

[@seangleason260]

The power of the Anonymous group really was something I didn't really understand to as how strong they're influence is until a Mexican Anonymous member was kidnapped by the Zetas and Anonymous reached out and threatened to out them all and the Mexican guy was released without paying ransom or facing retribution- absolutely unheard of, really proved to me they're strength

[@my.basement.is.full.]

bro that's crazy and unheard of especially by the cartel

[@seangleason260]

@@my.basement.is.full. yeah dude it really is, and the car telling question was the Zetas and they were the game changers in Mexico as far as the evolution of how they're now paramilitary groups in nature and structure like that really in my opinion just truly show me more than any thing else that these are some powerful people

[@seangleason260]

@@my.basement.is.full. and it's 100% true it was in a academic book call The Executioner's Men and the book is really a breakdown of the Zetas and their whole story but it's very very detailed and that was one of the stories that they talked about in the book, George Grayson is the author he's an authority of the cartels in a way

[@Phearsum]

Having your public information revealed when you're supposed to be an unidentifiable sicario is very dangerous. It gives your enemies a name and family to target, and the police/feds. Also, not that I know anything about the situation directly.. But, the cartel use online banking, and crypto exchanges. Venezuela legalized Bitcoin and there are plenty of ATMs to convert down there. If you call up a cartel boss and tell him that his organizations billion dollar account(s) will be drained before he can give another order, he's going to listen. Sparing 1 human for keeping a few billion plus your henchmen unnamed is a very small price to pay.. And if they refused, what are they gonna do? They can't track us, or their money.. Or call law enforcement for help getting it back... They know they shouldn't have had it to begin with. The only option is comply.

[@fercho.7776]

Bro that's crazy, I didn't hear anything loosely related to that

[@alainbcdefghijk]

Gotta love the story where the hacker group got genuinely scared that some guy found a gigabrain way of identifying them, only to realize it was just some dude stalking forums and random people on facebook.

[@sjs9698]

's cute that he thought a group of the most notoriously paranoid, anonymity & security conscious people in the world (hackers in general) might be that easy to nab. and believed the orbital supporters who claimed to be part of their leadership... because *obviously* a group that's full of anarchists would have a heirarchy :D

[@KerbalSpacey]

"only to realize it was just some dude stalking forums and random people on facebook." funny thing is this is basically how most get identified.

[@joshlanier8567]

@@KerbalSpacey That and a little bit of luck lol

[@xCobraCommanderx]

Yeah that how it’s done though. My uncle was a CIA “Clerk” for 12 years and I’ve been on Interpol since the 90’s. Every single person has a family member on Facebook or Instagram or Tiktok. In fact this is how Law Enforcement in America track targets today. Why go to The DMV or Courts for records? (Records that already open and available to all) No, today the CIA, Pentagon, DOJ, FBI all check social media first and foremost.....because that’s where people are.

[@xCobraCommanderx]

@@sjs9698 well you nailed it with “The Anarchists.” Anarchy is a highly individualistic ideal. Simply put Anarchy is Liberation for The Self. So it’s very easy to pair Anarchy with individualism. I was around when “Anonymous” actually started. Way back in the day on mIRC in Quake Chat rooms Anonymous was born. In the later 2000’s The CIA took control of “Anonymous” which was very easy because Anarchy does have so many problems with Hierarchy. It was very easy to cause division in the community and take over Ops and Community direction with the whole “Nobody speaks for Anonymous, we speak for ourselves” sloganism. Since around 2010 Anonymous has just been a front for The CIA to cause Coups and Color Revolution in Nations that America wants to go to War in. Mainly for resources. Now sure normal folks get caught up in the Ops. But anyone attempting to actually have control or go against the goals of The CIA will be singled out, arrested, and turned into informants. Once you also learn about how The CIA have used Anarchy to cause destabilization and “Regime” change for decades it all gets pretty clear. It’s the perfect cover. The CIA have full impunity just cause of the compartmentalized nature of “Anonymous.” This is also why you never see “Anonymous” fight against The United States and U.S. corruption. Instead they want you all spreading Red Scare Propaganda on Social Media to fuel their War Machine.

[@michaelmarlow6610]

As someone who works in IT I would laugh my ass off if the owner came in to tell me that he got hacked after challenging anonymous.

[@aspirebreachsecurity6736]

And I would be like that is why you do not pick on anonymous

[@spartin1173]

Honestly challenging hackers seems like a bad use of your time

[@thepearlswirl]

😂😂😂😂

[@ree2453]

​@@aspirebreachsecurity6736yet the government is already spying on them with Pegasus

[@Sal13414]

@@aspirebreachsecurity6736 🤓🤓

[@yomamma.ismydaddy216]

Realizing his world of Warcraft account was okay he breathed a great sigh of relief and went to sleep 😴

[@thewafflegamer6152]

*never mess with a man's WoW.*

[@AC-iz7eh]

They gave away all his legendary items

[@TheCosta5000]

Lol

[@HonkiePlonkie]

@@AC-iz7eh Now he has something to do right? No company = more time for WoW

[@JustLikeAFlower]

@@HonkiePlonkie he does, in fact have another company that’s doing ok

[@VampireNewl]

I don't know how you both underestimate and overestimate a group at the same time but he did it

[@wolfrainexxx]

If he hadn't claimed to have the identities of these people (some of which actually do work for Intelligence Agencies both private, and public), I really doubt anyone would have gave two shits. This was just their way of educating a know-it-all.

[@anunknownperson4018]

@@wolfrainexxxhonestly i hate how these type of ppl promote Cyber Security as a quick search… it takes more than that

[@PreachingChief]

The guy heading anonymous is a bit of an ego maniac psycho... He loves doxxing people.

[@DoktrDub]

@@anunknownperson4018 most of anonymous are kids trying to act like Edgy Hackerman though.

[@DoktrDub]

@@anunknownperson4018 I also hate how people overestimate it thinking that it’s lines of complex green matrix text rolling down the screen… I mean I qualified in cyber security not long back and even though it’s common sense for many people… genuinely the most common ways of getting information is just being persistent as fuck to sift for valuable information regarding a target/victim until data representing vulnerabilities are found and then begin to exploit that, majority of hackers and events that happen aren’t using USB tools and programming to access stuff, just a lot of patience and some adequate knowledge of where start looking in respect to said target.

[@michaelmarlow6610]

His idea that anonymous hackers would be logging into Facebook immediately after getting off a chat room is truly hilarious to me. His entire idea made me laugh the entire time.

[@miciso666]

i mean they might? but i also speak out of experience you use a different pc/laptop alltogether for that shit.

[@wessltov]

He tried to relate to the hackers, but he did so under the assumption that hackers are as stupid as he is

[@coyote4326]

@@miciso666 Or a virtual machine. I know a lot of "serious" hackers will use virtual machines for a lot of shit, because it's basically containing everything in a box and once you're done, everything related to it gets deleted.

[@alliu6562]

Yeah this guy is a real tool lmfao like not only did he do that, but he also *told* these guys where he *lives*

[@wolfrainexxx]

@@alliu6562 He's not a tool. Everything he knew was 100% correct... when he learned it. Too bad for him, technology outpaces those not-addicted to it.

[@HippieInHeart]

Lmao, dude literally doxxed himself directly to anonymous while simultanously being in the middle of trying to take them down. I guess he just really wanted to get hacked.

[@curtiskretzer8898]

Square normie hubris

[@HighlanderNorth1]

☑️ I remember how the mainstream "news" media portrayed Anonymous, WikiLeaks(and all hackers) as "immoral people who steal information from the good guys"(ie. big corporations, deep state actors, themselves, etc). The reality is that many of these hackers worked to expose evil conspiracies and public betrayals perpetrated by the alleged "good guys". It's just another reason why we cannot trust the "news" media, who are failing at their primary duty of educating and protecting the public, by holding corrupt govt entities responsible! In reality, the media is now irredeemably corrupt, and must be broken down and reconstituted into what it should've been all along.

[@thewaxbiscuit]

It was so smart it circled back to stupid

[@HippieInHeart]

@@HighlanderNorth1 Interesting. I can see your reply in my notifications but when I actually try to read it within the comments it doesn't show up at all. KZbin comment delete bot strikes again to save the poor innocent children from terribly traumatizing words on the internet, or something like that, I guess. Lmao. Srsly hope that KZbin will crash soon.

[@HighlanderNorth1]

@@HippieInHeart No, I actually didn't use ANY bad words. I merely pointed out that most of the "news" media falsely demonized Anonymous and Wikileaks.. I also pointed out that it shouldn't require WikiLeaks to uncover corporate and govt corruption, because that's what the "news" media is supposed to be doing.... Unfortunately , KZbin doesn't tolerate criticism of the corporate media, or the democratic party, or of govt in general. They are "protecting our democratic system" by shadow censoring us! Of course, if I'd said that Republicans are evil and Trump is racist, they'd allow that! Sounds real "democratic", huh?

[@nasis18]

His first mistake was thinking Anonymous was a rigid structured group. Anonymous isn't. That's their biggest strength. Anonymous is a creed.

[@tylerskreaper2762]

I’m not a hacker but I will say this one day the hackers will need boots on the ground n their is thousands of us willing and ready to

[@nasis18]

@@tylerskreaper2762 Yeah, hacktavists are great, but there's only so much they can do. You can't solve everything with a computer.

[@10tative]

exactly. Anonymous originated as just 4chan and the hackers in the 4chan community. Most of them don’t interact with each other, which breaks the domino effect after catching just one.

[@AJ-zy9jf]

this is so cringe lmfao.

[@nasis18]

@@AJ-zy9jf cool story, bro.

[@jamesgilbert124]

This is easily the most in-depth Nord VPN commercial I've ever seen. Well done.

[@X8551516]

That'd actually be the most ironic ad ever because Nord VPN is about as competent as this dude was at cyber security.

[@m.g7408]

Doubt nord vpn could do anything about it

[@vmondude]

😂 they'd soon bypass Nord

[@rpgcraftsman520]

Okay, I lol'd

[@vanjamenadzer]

VPN's are to keep you private from companies, cookies or so you can watch some netflix shows that aren't available in your country. VPN's will not protect you from someone who knows what he's doing.

[@sanseverything900]

Based on all the random footage used in this I'm getting the impression that to be a hacker you need to wear a hoody at all times and work in a dark room with at least five monitors in front of you.

[@ninakuup21]

Dude the video is fantastic but I fucking hate the every piece of footage in this video

[@sanantohomie]

@@ninakuup21 why u hating it brah, this the way it really is in da underground. What you know about da lyfe? Go get that hoodie, green glowing keyboard and a cheap LED projector to project random source code on your face and live da lyyyyyfe

[@joshpatton757]

@@sanantohomie Y'all using source code for the face projector? Man, I'm doing it wrong using ascii art.

[@SuperNeilAdams]

Furniture optional

[@Mary1337]

Idk bro, dark room+screen light can fuck up your eyesight. Be careful.

[@eynonpower]

Never has there been a more clear case of, "Fuck around and find out."

[@Blame_Wayne]

Word

[@ViolentHabits]

Anon are basement dwelling AIDS victims

[@MaliaMydnight]

I'M SENT 🤣🤣🤣 IT'S SO TRUE. 🤣👏🏼🤌🏼

[@SchMasHed]

came here for this comment

[@Greg-yu4ij]

Totally, but they should have gone easy on his clients since it just gives the government a ready made mega case and “evidence” that would have been illegal for them to collect that way. Anonymous, cia, fbi should have mutual communication and not open warfare. Besides unconstitutional govt overreach, we will need these black hats to help protect us from the CCP

[@craigh5236]

Its just amazing that a man that went after a bunch of hackers didn't think to make sure his own stuff was protected....

[@twizz420]

It amazes me that he thought he was smarter than literally EVERYONE else in Anonymous, and even more that he would use a small password with only lower-case letters and a couple numbers, AND use that same password on all his accounts... Like seriously? What the hell does the Navy actually teach these people?

[@fatjellyfish9478]

And that why he was in the navy and not us hacker squads. Dumbass got full of himself and let his ego go to his head.

[@patrickgronemeyer3375]

clearly nothing. he was just over paid navy trash

[@hi5dude2]

I mean, it literally did not matter how long or intricate the password was. That is kinda the point with password security these days. Re-use is the real danger, NOT making sure that you use a random jumbled mess of keyboard mashing as a password.

[@valletas]

Thinking you are smarter then anonymous is literally thinking you are smarten than everyone on this planet

[@bitcaps8197]

The fact that he used all the same passwords is evidence to me that this was staged. A publicity stunt by anonymous?

[@MartyrPandaGaming]

As a World of Warcraft player, he really should have known. He was *not* prepared.

[@ci6516]

How can you play wow and have this little knowledge of a workaround on the net .

[@jerod5636]

His duplicity wasn’t surprising

[@OneAccord1]

Mr. Jenkins, I presume?

[@oscartattoo3910]

@@OneAccord1 ....atleast he has chicken.

[@citizenstranger]

lol world of warcraft 🙄

[@1024BenZ]

"How do you not remember your username being your own name" Coming from someone who works in IT, you would be surprised what people forget sitting in front of a computer...

[@fredrik1337]

The CD-drive? Oh! I thought it was the cup holder!

[@disliked1390]

Can confirm IT guy here. White collars are the dumbest people

[@edgibbs2794]

This right here. I have had numerous users forget their username which was.. you guessed it.. their name.

[@KT-pv3kl]

Those people arent hired because of their merit but because of mandatory quotas, diversity hires and in an attempt to fulfil ESG requirements.

[@BlacksmithBets]

@@KT-pv3kl no it’s because they log in once and your name has many variations so if you don’t have to type it for months or years it’s easy to forget. They use initial surname/surname initial/first name underscore surname etc

[@Kindlesmith70]

The power of a group of any people is to be feared, regardless of their moral/legal grounds. Naturally some groups have far more destructive power than others, like children who think it's fun to screw a person's life over petty reasons (private experience).

[@RainbowGod666]

Granted anonymous has *_NO MORALS_* other than "if its funny, do it" because of their whole "being a 4chan group, but still, toddlers ruining your life? How does that happen?

[@Kindlesmith70]

@@RainbowGod666 Not toddlers. Children. any age they can talk and walk, and aren't considered an adult. It just takes convincing enough parents. Even just the implication / suspicion of some terrible act is enough to cause anybody trouble. I wont get into details from my experience, but I can provide an examples that shouldn't really surprise anyone. Child moles## is pretty harsh. Theft can be another. Adultery. Abuse, don't think for a moment children are incapable of self harm and then blaming another for it. There are some incredibley effed up children out there.

[@evilmastar]

​@@RainbowGod666I guess they do have morals. It looks like many of them do have morals.

[@awelshwhale]

@@RainbowGod666 im guessing he got accused of something by kids and it stuck with no proof

[@RainbowGod666]

@@awelshwhale bruuuh

[@ShrekHs]

I just think it’s crazy how any ordinary person could do a much better job than him and he still was able to get this much attention by serious groups like the FBI.

[@Jabarri74]

He's just a snake oil salesman. No product just expertise which is pathetic at best if not negligent. The smoother you talk though the more the people are fooled

[@coyote4326]

The FBI didn't know WHAT information he had. He got attention because of an article being published where he was claiming to supposedly have information capable of combating Anonymous, which at the time was still a new thing - so new in fact that few people even realized it was a fucking 4Chan movement of all things. The FBI didn't know what info he had, but figured given what his job, experience, and expertise was, thought it was in their best interests to at least schedule a meeting and see what he had to offer. Once they realize that his plan literally revolved around seeing when PUBLIC CHAT USERS were and weren't on Facebook, guaranteed he would have been laughed out of the office.

[@MyPhobo]

@@Jabarri74 Sounds like he has a bright future in crypto.

[@alexwillsuffice]

@@MyPhobo i dont think anyone can have a bright future in crypto

[@coolguy7160]

@@alexwillsuffice Bright future in scamming people

[@TheLumberjack1987]

The funny thing is that SQL injections are some of the first and most basic security flaws we learned about in the first semester of web development. They are not exactly super complicated to defend against, yet the servers of a security company were not protected from them.

[@tornmap4385]

Are you wanting to hack?

[@TheLumberjack1987]

@@tornmap4385 very interested in the wantings of the hacks indeed.

[@aspirebreachsecurity6736]

Shit i know this and I'm self taught

[@rapcentraltv831]

Keep in mind this was 2010 and u are learning this in 2022 things

[@TheLumberjack1987]

@@rapcentraltv831 I'm 35, I went to said web developer class 16 years ago and it was not a "you're smart" level of defense, it's the "if you don't do this very basic and simple thing then I'm not sure if you can wipe your ass" level of security.

[@temucargocult]

So funny that he thought the structure of anonymous was like a company, when it was actually like the splinter groups he would have spent literally over a decade learning about in the military

[@HiddenOcelot]

Yep, a decentralized hierarchy made out of loos knit cells, possibly some solo operators loosely grouping to do actions, and then departing like boats in a river. It's all very well played out, it makes it hard to do ops to try to figure out connections.

[@gonk9204]

Decentralized protest groups in general are so difficult to even attempt to infiltrate because of that factor alone. Having different cells almost completely seperate from eachother whilst retaining the same goal and power is really the strongest structure a group can have.

[@richardsteiner45]

@@gonk9204 well it’s just an empire vs guerrillas

[@mondaysinsanity8193]

​@@gonk9204 ehhh it depends on what its for. works great for idealistic purposes especially over a shorter time period. or where the onjective is extremely basic and defensive in nature(i.e. make these guys leave, fuck over these guys, etc.) but for anything complex or offensive or even just over large periods of time. it can quickly fall apart into spending more energy fighting eachother than completing the goal.

[@mondaysinsanity8193]

​@@gonk9204 ehhh it depends on what its for. works great for idealistic purposes especially over a shorter time period. or where the onjective is extremely basic and defensive in nature(i.e. make these guys leave, fuck over these guys, etc.) but for anything complex or offensive or even just over large periods of time. it can quickly fall apart into spending more energy fighting eachother than completing the goal.

[@-mindyourownbusiness]

Let this be a lesson, never challenge anonymous or any other hacker group

[@stevefriedl3983]

Holy crap. I've been doing computer security since before the internet, and I followed this case *very* closely at the time, but this is by far the most interesting coverage I've ever seen, with tons of information I've heard of before. Very well done. Thank you. Sub earned.

[@YOOOOOOOOOOOOOOOOOOOOOOOOOOOO]

what computer security was needed before the internet? Lock box and key?

[@stevefriedl3983]

@@YOOOOOOOOOOOOOOOOOOOOOOOOOOOO Computers existed before the internet; cracking root on UNIX machines (and fixing those bugs) in the eighties was totally a thing.

[@YOOOOOOOOOOOOOOOOOOOOOOOOOOOO]

@@stevefriedl3983 I know computers existed before the internet (how would they have made the internet lmao), i just didn't realise computer security was an issue before the internet.

[@the_kombinator]

@@YOOOOOOOOOOOOOOOOOOOOOOOOOOOO There were networks, things called modems could try to connect to them, you could hack a BBS if you wanted to for some reason...Malicious programs distributed via diskettes, etc. Hell, people overclocked back in the 80s and 90s.

[@anunknownperson4018]

@@the_kombinatordidn’t ppl back then also mess up the chat? (Idk i think i heard it in a show or something)😂

[@TheGodEmperorOfMankind_]

>security "expert" >thinks anonymous is a singular entity with a typical hierarchy >thinks they use fb under their own names >unprotected site >password is a word + number and is used in several accounts Actual brainlet

[@SebastianA.W.]

o master of mankind, why are glowies fighting the good guys?

[@ieuanhunt552]

@@SebastianA.W. This is 40k pal. There are no good guys.

[@Prekers1]

@@ieuanhunt552 wdym humanity is the good guys, everyone is scum and should be eliminated

[@SebastianA.W.]

@@ieuanhunt552 well, if this is 40k, then the enemy is clearly the khornate military industrial complex, the nurglite pharma industry , the tzheencian mainstream media conglomerate, the LGBQ+ slaneshi cultists and of course the Undivided Nations of Chaos..

[@Oroberus]

You'd be surprised about the incompetence you can actually find in this field, even without specifically searching for it ... personal anecdote: - Ransomware wave - Colleague catches it (because he's an actual "digital foreigner") - insta-force-unwired his rig (including literally falling off the chair to dive under the table, time is data) - ticket to IT dept - answer: "Please rewire and restart, I want to check it ... via remote connection"

[@SnthwaveSunset]

Life lesson, never piss off a hacker group of any kind

[@18NakedCowboysInTheShowersAtRR]

Especially if it's a black hat

[@lilypad5287]

Even if it’s script kiddies

[@p.o.p5570]

Lol that's the life lesson? I would piss them and they won't do shit

[@p.o.p5570]

The lesson would be to not be stupid

[@JohnyMeBoi]

addition: unless you know what you are doing and how to defend yourself, i piss of script kids alot bc i can easily defend if they decide to even try to do anything, its funny

[@maverickloggins5470]

Excellent documentary, just watched ur vid on the silk road bust and came back, you do a really good job telling these stories in the best way possible. I must say though that all the “hacking” clips were hilarious, didn’t detract from the video at all just funny lol

[@monadoboy8009]

Honestly I never really looked into the Anonymous stuff when it was real big, but they just seemed like a group of people who really didn't bother you too much if you stayed away from the right people. This guy however tried to use them as a stepping stone for his business which proved to be a major detriment.

[@lacountess]

That’s not entirely true. They would come after you if you mess with them for sure, but they also %100 go after those who threaten the freedom of information sharing on the internet. Any individual or organization who in any way gets involved in censorship could be targeted. They sometimes do things just for fun too (called for the lulz,) such as messing with a racist internet radio host or targeting celebrities who respond in funny ways. One operation I found interesting was when they hacked a virtual pet site because the site had used the likeness of one of their image memes called Longcat. They brought the site down and the owner quickly removed the image.

[@history-jovian]

​@lacountess so they are like bees. Don't mess with them or else the consequence will be immeasurable.

[@lacountess]

@@history-jovian more like bees with certain chips on their shoulders. You're certainly dead if you mess with them personally, but danger also exists if you mess with the flowers they pollenize or the meadow they fly around in.

[@TheActionTourist]

​@@lacountessA good cause, bless em

[@symmetry6320]

isn’t anonymous basically 4chan?

[@Soraaacchi]

Bro, these hackers have way more solidarity than the government in my country.

[@kyledabearsfan]

Probably more humane too

[@ElliotNess-jg8gt]

@@kyledabearsfanmoron

[@draconicfeline6177]

I hope they use that power now to save the world

[@rebeccacrawford912]

Wish they could help us

[@KingPlays_001]

@@draconicfeline6177 they do, they’re committing crimes against humanity and stopping crimes against humanity

[@rigelestbit]

It's nice to see how they worry about how innocent people could be affected by this man's mistakingly accusing them. Like, yeah, they were worried about themselves too, but they also considered the ones getting involved just for agreeing with them and coincidentally having a similar schedule.

[@sixwingsram]

Was so hoping that Anonymous would end global catastrophes like war, poverty, trafficking and world domination. Always really liked their truth exposes'. It gave me hope

[@beepboop-o5s]

thye were an fbi sy-op

[@galaxyoutcast7377]

Yea, sure sucks they just take advantage of people

[@ggsap]

Yes yes, end war, poverty just by some clicks of a button here and there. Are you dumb or just computer illiterate?

[@Brandon-nq7ys]

Hahahahaha wtf. How in the hell could they do any of those things?

[@OgdenM]

@@beepboop-o5s , eeeh some members might have been working for the FBI the whole time... while others started working for them later. Some of the most I guess active members got caught by the FBI and were basically forced into working for the FBI afterwards. Ergo, dude got caught and the FBI was like, "Look, either work for us or it's decades in jail and millions of dollars in fines." He decided to work for them making like 200-300k a year.

[@TheEudaemonicPlague]

I vaguely remember this going down. What I really remember, is laughing my ass off when I heard about it. What a maroon--he's supposed to be a security expert, but doesn't use safe practices. What kind of idiot do you have to be, to threaten hackers you don't know? He's lucky, really, because they could have done far worse to him...including Swatting. One thing I learned early, is to not go picking fights with strangers...and never brag about how untouchable you are--you'll likely learn how vulnerable you are very quickly.

[@anunknownperson4018]

Indeed children in video games are the easy target which is sad and mess up

[@mousermind]

*moron Also, you're using WAY too many commas, bub; it's like mental speed bumps while reading. :l

[@Fuzzysea693]

Maroon?

[@nickblythe9035]

Bro misspelled moron 💀

[@drhotp3nis]

u had me laughing my ass off when u said maroon 😭😭

[@Itskilo]

Can't believe they took his WoW account, these guys are savages

[@rhondasisco-cleveland2665]

Lol

[@ljco6106]

Nothing is safe, friend. 💪🏻💪🏻💪🏻💪🏻💪🏻💪🏻💪🏻💪🏻💪🏻

[@1nfiniteloop]

that WoW gold would have drained out in a flash! wonder if they sold his EPICS as well? brutal!

[@Mark_nobody3]

This reminds me, when someone deleted the wow account and he is freaking the F Out

[@1nfiniteloop]

i hope they did not delete his Epic items! 😳

[@traceyxxrose7454]

A clear case of, “play stupid games, win stupid prizes”. Also, anon infiltrating Russian state run websites and TV to show what is really happening in Ukraine to the Russian citizens, who are kept in the dark, was simply amazing.

[@chrislair6832]

Yeah I really liked that too.

[@markc6318]

that wasnt anon, they were 2 guys who used to work for those news outlets

[@augustuslunasol10thapostle]

@@markc6318 anon is and can be anyone if those two guys used anons name anon did it simple as that

[@NordicWildSoul]

That smelled more like a Western intelligence propaganda operation than Anonymous hacktivism, especially because the mainstream media was highlighting it excessively.

[@MegaLuckyLeafy]

@@markc6318 anon is everywhere

[@The-Schizophrenic-Guy]

The government and law enforcement agencies will always have you on radar, as a former HACKER myself, i just want you to realize when you hack something, opening ports, you are being seen by them 😮

[@The-Schizophrenic-Guy]

Then they they tack them? UMMM yeah definitely

[@franlnfuurter]

@@The-Schizophrenic-Guy ONLY IF YOU SUCK ASS

[@LazarusAugment]

public access points Rasbery pie bought with cash card to amazon drop site wear a hoodie don't make a habit of using the same access point in any pattern or same hoodie practice your craft at home on your stuff I'm just finding loop holes in observation factors if you want you can

[@werewolflover8636]

@@LazarusAugment😂 Okay! 👌

[@LisaKiser]

I need help I need to find out info on a man who is texting my 9 yr old who has m assess and trying to get my son to meet him already called FBI and police provided screen shots and no crime has been committed and until it is they can’t do anything so basically my son has to be kidnapped , drugged , murdered. Or kidnapped drugged and put in a live auction to be budded on and highest bidder wins and then used as a sex slave and beaten etc and blonde hair blue eye boys starting price is 100k ! ) I did time in federal prison and was in with woman who did the scouting for the rich , celebrities etc to traffic boys n girls and she told me how and what they do how they pick targets and money that is paid , she was forced to do it or they would kill her kids n family ). So after the crime is committed it is too late bc he would never been seen or heard from again

[@nukefile]

linking FB-accounts to logouts in chat... why would someone, who USED FAKE ACCOUNTS, think, these were real people? I'm in a loss for words about that... Awesome documentary, Kira, keep it up^-^

[@FluffyFlounders]

arrogance and stupidity, ya know, the usual deal.

[@Xfier246]

he didnt he wanted to have something to show for fbi and media

[@lockedon8953]

His downfall was arrogance, he thought to small and to simply

[@GradyBroyles]

NGL that was the reaction as it was happening.

[@jondoe406]

It didn't need to actually work. It just needed to sound plausible to the companies he was going to sell his services to.

[@DarkHeartMetalhead12]

I remember going on 4chan and anonymous just used to mean "the people". The goal was to create an environment where people could share memes and express views in an anonymous environment through photos and comments. So when the anonymous movement started, it just stood for "the people".

[@pepegaraid3031]

PepeD

[@zerrierslizer1]

i remember that! a lot of people decided that enough was enough, and they wanted the people of the world of memes to be safe and to be left alone with their shenanigans. it all built up to Anonymous becoming a thing, which was never more than a ragtag group of people that wanted to protect and preserve above all else. wasnt the old mantra "Anonymous: we the people, of the people, for the people." or something like that? i seem to remember those speciffic words at east.

[@zerrierslizer1]

@Bentcop . biz i have no idea what the fuck your on about, because what you just wrote made no sense what so ever.

[@annana6098]

This was how I understood it, without ever going on 4chan. A mask comes with the popular implication that not only does the mask protect the individual, it makes the figure immortal; it could be anyone, anyone could be the one, you cannot arrest or kill the idea. Any hacking group can call themselves Anonymous tomorrow, and it wouldn't necessarily be a lie, so long as the community accepts their actions as in-line with the persona. Anonymous is basically the perfect name for that.

[@taerdryn]

From the initial rising of popularity of "Anonymous", 99.9% of people NEVER understood the true intentions, purpose, or identity of the members or the group, but you have just defined exactly what it was. There are no intentions. There are no motives. There are no identities. There are no members - Anonymous is all of us, and none of us. It's whatever it needs to be, whenever it needs to be. It is simply a name for citizens of the digital world to hide behind, when they wish to take justice into their own hands. Right and wrong fade away and only the will of the anonymous people is left behind. Your one mistake in your comment however (at least as I interpreted it), is thinking that what I just described somehow changed, or died out along the way. This is not true. To this day, that is still exactly what Anonymous is, and what it will be forever. It is something that cannot be stolen, taken away, changed or perverted. How can this be? How will Anonymous never change, or die out? It is rather simple. As illustrated in the video, Anonymous is not hierarchical, and does not have any conventional structure. In fact it has no structure at all, because it literally cannot. Anonymous is not a group - it is an idea. A method of operating in the digital space. Anybody can claim to be Anonymous, but to truly *be* Anonymous is to adhere to core tenants that are clearly laid out, that can never be corrupted.

[@S0ulGh0st]

They did the world s favor not letting this guy make business in that area with anyone else. Whoever hired him for those services was not in good hands

[@J_GoTTi]

I love the idea of Anonymous. I just hope they use their power for good.

[@realtimestatic]

Being a security researcher and having the easiest password ever among reusing it and not filtering content on your website properly seems like a big red flag to me aside from the shady things they wanted to do.

[@thesovietkevin7275]

among

[@Sparkette]

@@thesovietkevin7275 us

[@allmycarsisbroke]

that weak ass password was legit the cringiest part of the entire thing. 8 characters--I know amateurs who could have cracked that in literally just a few minutes over a decade ago. And MD5 hash (not even Sha256) is just... wow. Protect it all with a website that wasn't hardened against SQL injection and this guy deserves every inch of what he received, and deserved all of the lube that wasn't used.

[@darylmason4211]

Ever heard of hiding things in plain sight... The us government seriously still thinks they are utilizing that tool very well, and I'll even prove how WEAK and COWARDLY they truly are here by simply adding. . . 🙃 I believe PEGASUS is beginning to be brought to public light all around the world once and for all in legal senses! Hahahaha now if this comment even makes it a day I will be shocked. However being in North Carolina 'MURRRICA 😂 I bet my phone will turn off or somewhat freeze by the time I send this text. 🤷👌👆👉😎❤️ They are weeeeeeeeeak here in the states, and exposed themselves at every turn. NEVER BACK DOWN FROM WEAKNESS OR COWARDICE, WE ARE GODS OF OUR OWN FREE AND JUST WILL!!! ✌️❤️🙂🙃😌

[@xedalpha1]

When he said “leaders of anonymous” all I could think was ‘this man is about to lose his entire career’

[@CelticGuardian7]

Late to the party, but this video really exemplifies what a great storyteller you are. I was hooked!

[@KiraTV1]

Thanks dude

[@erich6096]

It's never a good idea to pursue any form of success at the cost of anyone else's misfortune

[@themudpit621]

true, and I'll give it to you, a little wise.

[@homefront1999]

I love how he thinks people who take pride and lots of effort in keeping their Anonymity. Yet he thinks they are just gonna friend each other and openly support the stuff they hide.

[@markmark-ys7lt]

@@Shythalia you know better than them?

[@Easyflux]

Never seen this much edgy hacker-man footage in a single video before xD Great video as always!

[@Buttersaemmel]

ye i really didn't like it to be honest. but i understand that it serves the purpose of making the visuals more interesting (just like how hacking is depicted in movies because real hacking is...pretty boring to watch for "outsiders"). and there are videos out there about hacks that are actually pretty boring and are just exaggerated where these visuals serve to keep your mind away from realizing how boring it actually is. this isn't the case here so i gonna give him that and not complain about this edgyness. just wanted to mention all of this because i understand where your edgy feeling is coming from :)

[@thiscommentsdeleted]

@@Buttersaemmel tl;dr: Visuals are used to make things interesting. There... Saved everyone 2 minutes.

[@Buttersaemmel]

@@thiscommentsdeleted no. slow it down. everything has to be fast these days. compress all down to it's very substance so people can consume more. that's my stance on it.

[@Easyflux]

@@thiscommentsdeleted lol

[@Easyflux]

@@Buttersaemmel You didn't think it was too edgy, but you understand why I might think it's edgy. Got it.

[@sakuyarules]

My favorite part about this particular anonymous group was left out: Sabu was an FBI informant/plant. He's one of the big fish the government used to bring down a lot of "anonymous".

[@Elhombre95382]

Dude played the biggest tough guy behind his screen, but the second FBI came knocking on his door he let them have their way with him. These guys are nothing but nerds and have no idea what to do when things come their way.

[@LittleSilva422]

​@@Elhombre95382 "Pff FckNIng Nerds amirite!?" *cliche high school jock noises*

[@Elhombre95382]

@@LittleSilva422 L comment gen Zucker

[@LittleSilva422]

@@Elhombre95382 *bit-crush death nosies*

[@themudpit621]

@@Elhombre95382 I see you also underestimate them. Did you not learn anything from the video?

[@nedstarks4142]

We need people like this to keep the government in check

[@kivikaze]

"Hey, look a big beehive. I am going to punch it!... Oh no the bees are attacking me, why?" XD This was great :D

[@vmondude]

😂 Ikr what could go wrong, I mean their slogan says it all. "Expect us"

[@UberFubarius]

Didn't John Oliver refer to this event as "sticking his dick in a beehive"?

[@Friedrich2DerGrosse]

*punches beehive* "Haha, dumb bees! Wait, are those wasps?!"

[@thedukeofnuts]

It's more like putting your arm into a hole in the ground where there is a buzzing/crunching sound coming from.

[@xx3astmanxx928]

Do people actually think that members of Anonymous sit around wearing Guy Fawkes masks 24 hours a day? 😂😂😂

[@shhawnnc]

They do

[@ignoranthippy6299]

Scientifically proved

[@kristinoleka8957]

Ofc they do!!🙄🙄

[@markmark-ys7lt]

it's boring if not

[@xx3astmanxx928]

@@ignoranthippy6299 😂😂😂They're the MiB of the 21st century I guess lol

[@greenpiersystem]

I love how Anonymous runs like a group of Lolz and party games, but most of their informal structure (since there have been cases where Anonymous has called itself out [another group in the umbrella] for doing shit against their moral code) is just "hey, I found this guy that's has a ton of shit on him. He might get people hurt." "Well, the internet is our circus. Show 'em how it's done."

[@beepboop-o5s]

moral code? lol what alternate universe are you from? anonymous ws started by a gay pedophile named SABU who was working for the FBI

[@helix5441]

i love how Anonymous just kinda shows up from time to time, causes major chaos then disappears.

[@Salena905]

It's kind of obvious that this guy got so smug with himself he really wasn't thinking clearly enough, forgot his training he had learned and made so many mistakes that he just didn't realise until it was all too late. Never let things get to your head .

[@angeleyes3505]

I absolutely love this! I haven’t heard anything from anonymous for a long time! It’s about time that I actually seen justice received in correct proportions! I just hope they keep on keeping on and sharing more info for us little ppl.

[@HeynowHeynowheynow]

I believe they leaked about of damaging documents regarding Russia during the start of the Ukraine invasion.

[@thegreatmrt]

How was this justice? Lol

[@angeleyes3505]

According to the video it seems like they did some justice! But justice will come after death and Gods judgement will be worse so yes I believe that justice is served!

[@BobSellers6502]

My first thought was "50 Quatloos says he used the same password for everything!" Of course, having "Little Bobby Tables" just walk all over the "security" of a web provider he should have vetted better was also hilarious.

[@ildalailamer8341]

Ah, Little Bobby Tables, i love that kid, always brings memories.

[@speckbacon9881]

That made me drop my shit all over the place and now i cant find anything.

[@GiorgioAresu]

@@ildalailamer8341 does he? I cannot really remember this student. Or anyone else for that matter

[@cygnusx-3106]

I miss the old Anonymous. We could really use their skill set to light the shadows of those in power.

[@DazzlingPotatoes]

You miss them?? What did they stop or something?

[@Aaronn-je8cx]

@@DazzlingPotatoeshey did a lot. They did mostly good things. Going after censorship, politicians, big corporations and businesses, and some bad people. I completely misread your comment ngl, I’m still gonna leave this here tho lol. I don’t know if they stopped, I’m curious too. I know a lot of them got found out and lost their anonymity, but I don’t know if they were charged or convicted.

[@CorporateG0th]

@@DazzlingPotatoestbh cosplaying as edgelords eventually got most the typical social spots taken over by the newly minted altright then and those guys just fill their time with cosplaying angry boomers and canvassing for TP USA.

[@barbarachambers7974]

​@@DazzlingPotatoesthey sent something to Trump recently.

[@DodongoManoof]

They're still around

[@MikeGervasi]

He must have imagined Anon as kids in mom's basement with a computer, red bull, and doritos.

[@DPWrepublic]

aren't we all?

[@JohnyMeBoi]

​@@DPWrepublic no. no we arnt

[@tokertalk9648]

@@JohnyMeBoi Dude you just ruined his dreams LOL

[@jean-lucpicard5510]

​@@JohnyMeBoiMust be Anon , can't spell properly. 😅

[@Stepatee]

This was spot on in building intensity, storytelling and super relevant content. Really great work and it's something you're very good at. Stay up, brotherman.

[@KiraTV1]

Thanks, that means a lot!

[@filipskopec]

@@KiraTV1 Bro these are the types of videos that make me hang on every word. You gotta keep making these types of documentary type videos they far outclass your other content. No offence.

[@joopie46614]

its mid at best you're giving too much credit

[@neveridle]

@@KiraTV1 Jesus your videos on these themes are great. I mean I still wish you'd do Kira's Kickstarter adventures or just have a laugh at cryptoscams but by god these are really good man.

[@unknownegghead3105]

@@joopie46614 didnt ask your opinion +L+ ratio + no bitches + bazinga + heat death of the universe + ur mum + ur dad + ur granny + ur gamma ray + get nuked + connection terminated + i’m sorry to interrupt you elizabeth + if you even remember that name + but i’m afraid + you’ve been misinformed + you are not here + to recieve a gift + nor have you + been called here + by the individual you assume + although + you have been called + you have all + been called here + into a labyrinth + of sounds and smells + misdirection and misfortune + a labyrinth with no exit + a maze with no prize + you don’t even realize + that you are trapped + your lust for blood + has driven you in endless circles + chasing the cries of children + in some unseen chamber + always seeming so near + yet somehow out of reach + but you + will never find them + no one will + this is where your story ends + and to you + my brave volunteer + who somehow found this job listing + not intended for you + altho + there was a way out + planned for you + i have a feeling + that’s not what you want + i have a feeling + that you are + right where you want to be + i am remaining as well + i am nearby + this place will not be remembered + and the memory of everything + that started this + can finally begin + to fade away + as the agony of + every tragedy should + and to you monsters trapped in the corridors + be still + and give up your spirits + they don’t belong to you + as for most of you + i believe there is peace + and perhaps warm + waiting for you after the smoke clears + although for one of you + the darkest pit of hell has opened + to swallow you whole + so don’t keep the devil waiting friend + my daughter + if you can hear me + i knew you would return + as well + it’s in your nature + to protect the innocent + i’m sorry that on that day + the one were you where + shut out and left to die + no one was there + to lift you up in their arms + the way you lifted others into yours + and then + what became of you + i should have known + you wouldn’t be content + to suddenly disappear + not my daughter + i couldn’t save you then + so let me save you now + it’s time to rest + for you + and for those you carried in your arms + this ends + for all of us + end communication + bazinga

[@aRandomDork]

It amazes me for a "security expert" running a security company about using the same simple password on multiple websites. As someone who used to worked in a building for the census bureau, my password was extremely complicated with at least 20 characters and I had to change it every 30 days. I'm just shocked about how little care he took his own security

[@Spartan11117777]

What are the odds he still uses the same password to this day? 🤣

[@Nobody_1.]

Why is it that you change the password, is it because they might had gained access?

[@Spartan11117777]

@@Nobody_1. Everyone gets hacked on a daily bases and People usually get long lists of Customer’s Data Info, including Login Passwords, happened to all Xbox Live Subscribers and PlayStation Network Subscribers and more easier to happen on PC Gaming site and many other kinds of Sites.

[@paullangford8179]

@@Nobody_1. Nah. It's just that the Post-It the old password is written on gets smeary and hard to read, so you need a new one. The password should be at least eight characters, and have all four kinds: uppercase, lowercase, numbers and special characters. And you should be able to REMEMBER it. That way, you don't need to change it so often.

[@LDAR]

He might've not used the same pws, because once they get into your email, they basically have everything, since they can just pick recover password

[@magicbowler1212]

The way he says yahoo has got me giggling like a little school girl with a crush, that is all...

[@KaligarPrimus]

Always remember, "There is always someone better than you", ALWAYS.

[@Chesstunes1]

Only in the competition of "betters" if in the competition for "worse" the same isn't always true.

[@cloverlovania]

@Iris amazing way to twist it round tbh

[@Zargor]

"He was a Cyber Security Expert". Please don't call him that when he doesn't escape his SQL queries. That's like the most basic attack you can think of 😂

[@nonsweet]

Well to be fair to him, that was the fault of another company he used to run his site on... but of course he has no excuses for ignoring the other 99 warning signs and his own bad security practices.

[@cirion66]

Also md5... Maaan... Even at that time non-salted hashes was just aksing for a problem. MD5 was considered broken security-wise since 2008... Also no 2FA? Like at least google had an SMS auth at that time. "Security-expert"...

[@AlbatrossCommando]

@@cirion66 yeah I mean if it was something highly technical like some obscure CSRF vector then whatever but an SQL injection + some rainbow tables? This is second grade sysadmin shit.

[@DR_REDACTED]

It was easy.

[@avandurion]

God I have no clue about servers and sql , but not having email secured with hardware or flashing router and calling yourself expert?

[@mittons3895]

"12 years of this was enough to sour his attitude towards war, and retired to a quiet life as a defense contractor." lol does not compute. great video though

[@Patscape]

I met many officers like him in the Army Signal Corps.

[@kurtilein3]

This is a well-researched video, not making any of the mistakes the media often makes when talking about anonymous. I was with anonymous in 2008 for their actions against Scientology, did reallife stuff for southern Germany. Scariest thing i did was when i realized that the goals of our domestic intelligence agency were aligned with those of that anonymous project, i called them up on behalf of anonymous using my real identity. And i actually got a bit of a collaboration going, we got thousands of brochures and flyers about Scientology from the Federal Office for the Protection of the Constitution (german domestic intelligence agency) and handed them out during our reallife protests against Scientology. Fun times. I guess local police and intelligence agencies still have me listed as affiliated with anonymous. As far as i can tell, everything you say about the organisational structure of anonymous is correct. Basically there is no structure. There are no leaders.

[@anti-ethniccleansing465]

In your opinion, what do you think happened to anonymous?

[@kurtilein3]

@@anti-ethniccleansing465 What do you mean?

[@anti-ethniccleansing465]

@@kurtilein3 If you don’t understand the question, then forget about it.

[@kurtilein3]

@@anti-ethniccleansing465 If you want no answer, the question does not need to be understandable.

[@stanleyfrost6026]

Thank you for your service man.

[@bankleaks1217]

I ran a decent sized web hosting business 15 years ago and was aware of basic SQL injection. Often used for forums and email databases there were pretty basic tools that came with w/ cPanel to prevent or at least detect injection. The ignorance of basic opsec for this "expert" is hilarious.

[@justinwhite2725]

Little Timmy; TABLES is a story most developers even at the hobby are aware of. SQL injection and input sanitation is well known.

[@thatoneguy-yc1sj]

20:55 had to look up what rule 14 was because I forget them all the time. "Do not argue with trolls - it means they win"

[@ne12follow]

As someone doing computer science at a level, finding out the website of a company dedicated to helping others with cybersecurity is vulnerable to SQL injection attacks is really funny. They are one of the easiest things to protect against (you just don’t let any input boxes allow SQL commands as an input) so it’s really ironic that was a flaw.

[@Khenfu_Cake]

Not surprising that he struggled to acquire contracts 😄

[@beepboop-o5s]

watch a real documentary. the feds were feeding anonymous 0-days they built. the entire thing was a fed sting. the rat pedophile SABU was working for the feds the whole time.

[@JustinMacri007]

Are they good guys or bad guys

[@jesseclutterbuck6617]

gota give them credit. who even uses sql these days.

[@easlern]

Not picking on anyone in particular but as a tip for any devs who may be unaware: it’s best to whitelist input on the backend, instead of blacklisting it on the front-end. Blacklisting sql in an input box can be defeated with an html query to the backend, or possibly disguising a sql command string with a different encoding. Whitelisting on the backend works by only allowing the minimal input required for the datum you’re storing (like letters-only for a name). Whitelisting is better because it helps protect against other tricks too, like reflection attacks. Imagine you entered JavaScript as your name in a social media site, and it wasn’t scrubbed because it didn’t contain sql. Then anytime somebody’s browser displayed your name, it could run your code in their browser! The “expert” in the story made many other mistakes. He shouldn’t have kept passwords in his own database, he shouldn’t have used the weak md5 algo to hash them, and he should have used a salt to try to limit the damage to one site. We’ve known about these vulnerabilities for around 20 years btw, so there’s no more reason to be making these mistakes in 2010 than in 2023. Check out the “owasp top 10” for a nice list of popular vulnerabilities and how to mitigate them. It’s updated every couple years with the latest exploits and just being aware of them will put you way ahead of “experts” like the guy in the story!

[@Rawkr57]

This was immensely interesting and well put together!!! Thank you for your work man!

[@BM03]

Security expert not only uses the same password for everything, it's also so basic most bank accounts would decline you from having it. What an age we live in.

[@seushimarejikaze1337]

this stuff happened a bit ago. i suppose, there were no 8 char requirements back then lol

[@kolinmartz]

This was also like 15 or so years ago.

[@_me_676]

The fact that the Anonymous hacker’s mentioned in this video (Topiary, Tflow, Sabu) have since been discovered and arrested by FBI and UK police, makes this even funnier! Barr completely wasted his time doing something UK and US security services were already able to do and ruined his company in the process 🤦🏻‍♂️ 😂

[@zvexevz]

This was such an entertaining watch! You're great at making this style of videos. Excited to see more hacker/cybersecurity/crypto drama investigations like this in the future.

[@jedgrahek1426]

Lol at everyone who thought/thinks there is some defined hacking group "named" Anonymous.

[@Buttersaemmel]

isn't the infamous hackerman called "4Chan" the head of the Anonymous group?

[@deadonentry]

@@Buttersaemmel anybod are allowed to use the"brand"

[@TheLargeHardonCollider]

Right, I was already scoffing when he said he identified the "hierarchy" and thought someone "from the top" was giving out marching orders to everyone else. Just goes to show how terrible this guy's research actually was. That's Navy-training for you, I guess.

[@Maddinhpws]

There are obviously semi leaders. But those are mostly people who are more likely to rally people up or who know other people for a long time already so they trust each other more. But they still don't know each others real names or adresses.

[@Josh-bb1nn]

There is: CIA.

[@Atlastheyote222]

You can tell somebody doesn't know much about cybersec if they think Anonymous is an organized group and not just a name that anybody is free to use.

[@Freedom_nesting]

About anonymous , that’s just sad that the initial founders of this movement didn’t put anything in place for others to continue their legacy. Once they was all arrested it was done and only left some kiddos making wrong things under their movement name.

[@Thedownliner2015]

lol the irony in a so-called security company using an SQL database with MD5 encrypted passwords. At the very least they should've gone with salting then encrypting. And then using that same password on every account is the icing on the cake.

[@onemoreguyonline7878]

Md5 was sold as unbreakable for so long, there were too many old guard pricks that only cared about their bottom line

[@Buttersaemmel]

i mean isn't an SQL-Injection working not bad enough? as a security company shouldn't you check the stuff you're using (and i mean...SQL-Injections aren't that uncommon) and stop using it if it got that obvious flaws? i got a little hangover rn so maybe i just missunderstood that part as i can't believe such rookie mistakes...

[@Kenionatus]

@@onemoreguyonline7878 I don't thing MD5 was ever properly "defeated" (I think it's been replaced by SAH because it was too quick to compute?) but not salting your hashes leaves you vulnerable to a lookup in a hash table (which only requires computing the hashes once and then is reusable for every attack).

[@joshpatton757]

@@Buttersaemmel Most things are vulnerable to some form of injection attack, SQL injection is common because SQL is common and the way it interprets string commands makes it easy. The answer is not "don't use SQL", but "Understand the vulnerabilities of each piece of your tech stack and take appropreate steps to prevent and mitigate at each layer of the stack". Don't execute arbitrary queries in SQL, use parameterized stored procedures. On your back end, SQL encode any user defined input. On your web front end, use a character whitelist to only allow characters that the data type in question needs. Duplicate that whitelist client side. Those are all simple basics that any fresh out of college programmer should know, any one of these would probably have prevented the injection attack and you should be doing all of them. Failing to do so isn't even a rookie mistake, it's negligent.

[@ketchfarcaster]

*hashed

[@briancates3576]

These new stories are fantastic, Kira. So glad to see how well you’ve done with this new format. Keep up the outstanding work.

[@z1mt0n1x2]

Don't mess with Anon and they won't mess with you unless you've done damage to the public that deserves justice, and if it does, you should've thought of the risk before you took it. Anon is neither a company nor a group, it's just individuals with various levels of skills in varying areas of expertise. The grouping doesn't happen until a unified interest has taken place and the best and brightest needed for the tasks required (nothing more, nothing less) is naturally and organically filled... 100% efficiency. Nobody gets asked or told to do anything, they let interest and motivation drive their campaigns and that's why nobody can stop them, cuz to them, it's passion, not the need for food on their table.

[@jester886]

A group that’s supposedly exclusive means those who where rejected or perhaps Kicked out only creates another group that’s counter to it. Groups are crap hence nothing more than to manipulate. At what point does the puppeteer becomes the puppet ?

[@kevinkhaos7673]

cia

[@stephenjenkins7971]

That's the most braindead thing I have ever heard. Anonymous is loosely affiliated to be sure, but the fact of the matter is that they serve what THEY feel is right without public oversight. Thus, nothing indicates that they are doing anything to serve "the public". Maybe it sometimes works out that way, but claiming it so definitively is like saying the local militia will definitely fight for "the public" just because they say so.

[@anneteller3128]

@@kevinkhaos7673 Yes, didn't they become compromised. I remember when Mercedes, one of the members, got rolled out of her apartment on the ground during a raid. If they didn't become compromised, there may not be the level censorship on YT and other social media networks that exists today. Their big thing pretty much from the time YT began was no censorship and keeping the Internet free for anyone to use.

[@kurjategija]

Anything you say, Godfather.

[@netking767]

Dude.... That was a great watch man! Thanks

[@kat-nd3un]

awesome video Kira, A+ storytelling, editing, & narration! I've been having a rough day today and definitely needed the lulz, ty 😌

[@tvctaswegia497]

Absolutely. Great story, great script and can we just appreciate the editing as well? How many cuts was that? Wow. Nice work.

[@S0Nerdi]

What is that dollar amount in ur comment? does youtube let you pay for comment visibility now? crazy world...

[@kat-nd3un]

@@S0Nerdi it's a tip! I'm not paying for my comment to be visible, I'm tipping bc i really enjoyed the video and Kira put hard work into it. 😊

[@S0Nerdi]

@@kat-nd3un yeah i quess that is a good addition to youtube but its just sad to see that every platform and video game has to be a cashcow these days, we are definetly going to see some kids go into dept just trying to get attention from their favorite creators.

[@kat-nd3un]

@@S0Nerdi i 100% agree with you, it's sad to see how normalized microtransactions are becoming in every corner of the internet especially in games that are marketed at kids (looking at you, animal crossing: pocket camp 😒). i do like that the give thanks option on here isn't pushed at you I'm hoping there's some sort of restrictions on who can enable it. I've only used it a couple of times when I've really enjoyed a video and it's made my day better in some way. it's a nice alternative to thank a creator if you don't have enough to make a monthly patreon contribution.

[@Jdrunnin]

It is insane that you would give a known group of hackers your name and the idea that you are targeting them prior to getting any support or law enforcement involvement

[@boblikes]

10:55 mentions that "passwords were luckily encrypted with md5." MD5 is not an encryption algorithm, it is a hashing algorithm and has been known to be vulnerable for a long period of time prior to the occurrence of the hack. Storing passwords in MD5 format was grossly negligent even at the time of the hack.

[@memitim171]

He probably wasn't aware they were stored in MD5 since it wasn't his company and to be honest the laughable simplicity of his password and the fact he used the same one everywhere makes it kind of moot, they could have just got it from any number of other accounts.

[@roughdude6575]

I'm not an IT security expert and even me, i know that....

[@ekki1993]

To the best of my knowledge (so correct me if I'm wrong), you use the hashing algorithm to do encryption, so the password is "encrypted with [i.e. using] MD5". Is there something I'm missing?

[@byrospyro4432]

@@ekki1993 You're correct, its a one-way encryption algorithm, there are different types of encryption mainly asymmetric and symmetric, the one that should be used is SHA-3 for password encryption, you should also add "salt" to the password, its basically a pseudo random string of characters that are generated from each password that is appended to the password to add complexity.

[@Xaddre]

@@byrospyro4432 MD5 should never be used it’s crazy that some website databases default to it in 2022. If the site has an SQL injection vulnerability and only uses MD5 you might as well post your password on the homepage of the site any hacker who can actually call themselves that would be able to access all the user passwords in less that 2 mins on a site like that.

[@leszekryniec7054]

2:23 Can we just appreciate the fact that they even took the time to DDoS his router as a final blow?

[@MadHuhBro]

A ddos is a multi vector attack correct term is dos as it’s a single attack.

[@leszekryniec7054]

Ikr. It's explicitly stated it was a distributed DoS (DDoS) at 2:23

[@BuckyOhYeah]

​@MadHuhBro ddos and dos tend to only attack one destination, its the number of attacking sources that make it ddos.

[@OnionManSteve]

This is the best video you've made. Absolutely great storytelling, the pacing was spot on.

[@KiraTV1]

Thanks Steve!

[@mrt4937]

This story this event this clip is narrated in the most enthralling way I've watched/listened to multiple times. I have no understanding of the tech details just the way the story is so very well told I couldn't help but cheer on the good guys. Thank you and well done.

[@primatt]

this style of video you do is truly amazing, please keep em’ coming!

[@nissan_skyline]

Wasn't everyone involved with this attack specifically eventually arrested? I know Sabu was one of the first to be arrested and he later became an informant for the FBI to help take down a bunch of other members. Several people involved with the Sony hacking were sentenced to prison and had to pay Sony over $600k each in damages.

[@SuhbanIo]

gives me hope for the world

[@ottley32]

Hold on, let me pick up my stomach. It’s seems to have fallen out the back. My dude, well done! Excellent story telling. Incredible reporting. Award worthy presentation! I tip my hat sir!

[@ultrasupernectar]

hahaha I work in the best cycber security company there is and can't even believe dude made such serious mistakes, that was the most entertaining video I've seen in months, [great pace, great amount of detail, good narration, non biased, very well done Kiratv, I'm gonna have to subscribe now, that was great content

[@LemurG]

You got any tips for normies like me to not get hacked? Like password tips or smth?

[@sjs9698]

@@LemurG do NOT use the same password for everything. long passwords are harder to break... and never expect *anything* connected to the internet to be entirely secure from an IT standpoint. keep yr nudes offline. being a boringly normal person (ie not a corp/govt/celeb) & moderately cautious is more than enough usually.

[@cerealrakist7360]

How can I take over and rule the world? lol have to try and won’t know unless I ask and all I have to lose is the time I wasted typing this ☺️😏

[@airbrushken5339]

I love watching these type of videos, I'm old school ( 9 years US Army including a combat tour in the Vietnam War, 2/502 Inf, 101st Airborne) The military sent me to several schools, from Leadership, through security including how to repair (break in) security containers (from vaults to a small unit filed safe) I had a secret security clearance. I finished up my college education at night classes, etc... and move to Australia as a teacher (Art). One thing I learned and shared with my company employees and contractors was to NEVER put any information on this new "Desk top" computer as we manufactured artist paints for different companies ... what I had the chemists do was write formulas in a note book, keeping one copy in a safe I owned and one copy with them at home. I'm retired, us a VPN and watching these has taught me a lot... I don't chat or face book. I keep all my pass words on a little USD drive. I use a free software to generate my passwords and then add something known to me 4-7 digests in the middle of that password. It is so wrong how this information unit is turned into a weapon, but it makes sense... Loved this one... be safe ;)

[@vexile1239]

Or be me and use a dozen different passwords (written on paper) with each password being the maximum size some being 30 to 40 characters long

[@airbrushken5339]

@@vexile1239 During the time I would re-set army safes (some divisions had 12-15 safes in one room) plus ARMS ROOM VAULTS (AR-15.2 M60's, M79's, 45 hand guns, frags, ammo ... you name it. I was asked how can I remember those numbers... my reply was to get a little personal phone book. All the safes had 3 twin digit number combinations. I'd tell the client to put in a name Joe Smith(?) a real area code and then the 6 numbers along with family and friends phone numbers. I once went to a "Military Services Division" to re-set their safe (1,100 pound units) of which they had about 10 in this room. I asked him to WRITE DOWN the safe number and combinations ... all the safes had a number painted on them. The MI specialist ... pulled open a type writer pedestal from the desk in front to the safes, that had the numbers and matching combinations on an A-4 sheet of paper written with a magic marker.... I guess Military and Intelligence are two words that don't go together... true story!

[@Sybilisation2010]

This is like a very funny thriller. Suspenseful comedy, brilliant video!

[@randyranderson690]

Our world needs groups like Anonymous....to keep the checks and balances in place and to keep our leaders on the straight and narrow. I think they could be a force for good, like publishing the guest lists for Epstein island.

[@burp2019]

the whole point is that it's just a label for anyone to use

[@MarkSeve]

I'd give you two thumbs up if it were possible.

[@Sasha8pancakes]

@@MarkSeve lol, it’s funny because they already did give us all the lists

[@MarkSeve]

@@Sasha8pancakes Its amazing how arrogant, and stupid they are.

[@wrecker8236]

They published his SSN. They might as well have killed him. These are not good people.

[@Scudboy17]

The idea of linking social media access to other internet activity is a valid way to try and track people- or at least narrow down s field of suspects. The FBI and NSA used similar tactics to catch some suspected hackers that were using TOR to try and hide their IP address. The Fed's couldn't crack TOR at that time, but they were able to relate internet activity to times their suspects were active using a TOR client. Of course that was a much finer use of the tactic, but it has its uses. The way this guy used it tho was ham fisted and more than a little amature. I think the Anons were more offended by his poor security skills than they were by fear of actually being exposed. Basically this guy brought a butter knife to a machine gun fight and got smacked down hard by people who really did know what they were doing.

[@patrickgronemeyer3375]

lol the FBI and NSA keep letting Americas die. one mass shooting after another. the FBI AND NSA ARE A JOKE sadly

[@mikeholloway2625]

Hi Mike... anonymously speaking... just between you and me, it is all from here and now on the merriest of wild goose chases for dogs that do not even know their own rearends that is going to go down in a virtual world of machine code.

[@NimhLabs]

It should be noted that TOR is a Honey Pot

[@chidori0117]

I mean he was linking the activity to accounts that were openly in favor of anonymous ...I think it takes severe underestimating of these individuals to think they would openly on their real life facebook pages do anything that could possibly relate them to being part of anonymous. As was said anonymous is not a organized entity and individual cells of anons probably have to be very careful around other anons and cells as well in order to not be compromised by the same groups they are a part of.

[@mikeholloway2625]

@@chidori0117 Well... Anonymous does keep track of some people that have no mask and are vulverable. People respected by anonymous forces. Some for deeds and words worth more than gold... -Q

[@nonchip]

"the standard technique of MD5" wow i didn't know anonymous was around in the 1980ies :P the problem with MD5 being, btw, that the length/strength of your password doesn't matter, there's a rather straightforward method (even websites for that) to turn any MD5 hash back into a password that "fits" (might not be the _same_ as the original, but will result in the same hash, so the server can't tell them apart)

[@LuaanTi]

Of course, the fitting password will only work for sites that use the same method for checking the password - a plain MD5 hash. It's not going to work with proper salting, or websites that use a different approach entirely. If you use the same password on multiple sites, it still helps to have a password that can't be found exactly.

[@imapseudonym6198]

SQL Injection? Man, I fell for SQL injection attacks once.... when I was on my very first year as a professional software developer. That's basic stuff, no 'security expert' ever has an excuse to get taken down by it.

[@totally.normal]

Let me guess, did you use flash for your login system?

[@imapseudonym6198]

@@totally.normal Worse. Querystring SQL parameters. ... I WAS brand new at the time.

[@totally.normal]

@@imapseudonym6198 Oof. Did you manage to recover?

[@Sypaka]

@@imapseudonym6198 ..so any input by php went straight into a SQL query? ouch.

[@imapseudonym6198]

@@totally.normal ​ @EXcentriX Yeah, thankfully it was a script kiddie rather than a legitimate hacker, and I was running a small site without much of anything critical on it. He did some damage but I was able to revert it, with a painful lesson learned. It was an interesting first job; super small, so I was the only dev. It meant I wasn't liable for too much, but I also had nobody to mentor me.

[@HCG]

Imagine thinking you’re a security expert and not following literally the most basic rules of IT security. He didn’t even have 2FA enabled. What an absolute failure.

[@SemiDoge]

Was 2fa a thing 12 years ago?

[@___blaggard999___8]

@@SemiDoge lol

[@Dynamo33]

@@SemiDoge Was about to say this. I'm pretty sure that wasn't very common, even among the most tech savvy crowd.

[@redholm]

@@SemiDoge Kinda. But it was not very wide spread at that point.

[@arrowknee7356]

More to the point. No matter how good your security there will be flaws. Do not kick the hornets nest. Nothing may happen, but there is no reason to try and make it happen the cost is simply to high if you make any error that can be exploited.

[@violelorenzini]

I'm a persian and I know how anonymous can actually mess with someone or in our case, mess with the government. Best thing is to just not mess with them

[@quantumperception]

The way you say yahoo is hilarious.

[@danbailey5890]

really enjoy this style of video, dude. I've been subbed since pre 100k, or at least have been watching since then. You've switched up your content in a subtle way, but in a way that's blown your channel up. Love to see it. Keep it up, dude :D

[@KiraTV1]

Thanks!

[@bails13]

@@KiraTV1 awesome work dude love these new style of vids! I think you have found your true calling!

[@AustiuNoMatterWho]

what's crazy is they knew this would save a lot of people in the group at risk of probably destroying their own lives

[@asriel4881]

10:55 MD5 is not an encryption algorithm, it's a hashing algorithm, a vulnerable one as a matter of fact. The difference is that with encryption you are able to retrieve your data with a password whereas hashing takes an input and makes it into a new pseudorandom string of data. If you hash the same input again it will return the same string of data, but if the hash is secure it is impossible to get the original input from the hash, which is the reason why hashing is so useful for password verification.

[@liiam7302]

This is a prime example of what happens when you "fuck around and find out". Dude actually thought he was going to be able to identify anonymous members and bring them down....

[@jakelacey439]

Always an absolute pleasure to watch your content mate, you’ve got a great set of presentation skills. Glad to see you’re uploading again, although I’m equally glad you’re taking some time off. I hope you’re doing well, cheers!

[@KiraTV1]

[@Orkhammer]

funny story, I was one of the social media "targets" of that social media training HB gary had (I worked for competitor of theirs at the time). I asked barr about it when I saw him at a conference shortly after and he just shrugged. He was a low-tech suit type who was out of his depth and making a living on the beltway grift like so many others like him.

[@romxxii]

Makes me wonder if his job in US intelligence actually entailed _any_ form of cybersecurity, or if it was more low-tech listening to wiretaps n' shit.

[@giovannidueck9094]

@@romxxii Me too. He worked in the military for years before founding his company, which was attacked in 2011, so maybe he did only management type work in SIGINT and never actually did it himself, or was just hopelessly out of practice

[@MrYelly]

"I was in the navy so I know security." Yeah, if we lived 100 years in the past maybe. Dumb grunts can bark and bite if you place them in a backyard, but you'll need to be cut from a whole different cloth if you want to keep the entire street safe.

[@Orkhammer]

@@giovannidueck9094 Yeah I believe he was an officer, so more management then hands-on usually, but I don't know of his work at that time.

[@universalperson]

​@@MrYelly being in the military is why he didn't understand anonymous. military is VERY hierarchical.

[@coach714]

Well done Kira! Anon is a dangerous fire to play with and you managed to get close enough without getting burned. The ability of Anon to stay invisible is fascinating to me as no one seems to come out and be a whistle-blower, naming names or the group have in-fighting that leads to a public implosion.

[@snikrepak]

They aren't even the real anon, these are not even infosec or anything! They are kids, who have luck and a few years of KZbin watching.

[@atomicskull6405]

They aren't a "group" they are an internet mob with no organizational structure or leaders. Nobody knows anyone else they are just an amorphous blob on the chans that sometimes starts moving in the same direction like an amoeba if something catches enough people's fancy.

[@JH-ej2yt]

@@snikrepak if I was to start a notorious hacking group, everything would be tactical.. from the name, to claiming or not claiming which are real or fake. Yes some can be kids but while those kids are being tracked the real anon are in the wind. It’s perfect. Anyone can be Anon but no one can truly be Anon at the end of the day.

[@burp2019]

you missed the whole point of it not being an actual group but a label, and there's been anons who've betrayed other anons

[@impishlyit9780]

Anyone with the skill and presence of mind necessary to pull off the high-profile hacks tend to protect themselves from each other too. That's why he thought the only way to figure out who they were was to associate login timings. I know he was dumb, but he was at least aware that trying to talk them into sharing private info or hacking them directly was a terrible idea. Hackers always try to check others' security.