GhostShell hacker leaks 39M accounts in security “protest”
The most interesting thing to me was the evidence posted that other hackers had already penetrated these systems, which I guess goes without saying when you have little to no security in place.<p>Many many years ago when I was younger and playing with buffer overflows and learning shellcode, I&#x27;m not saying that I&#x27;m proud of this either, but in my journeys I had breached a couple of online retailers, had full access to their databases and internal networks.. of course I alerted them via anonymous e-mails, but what always struck me was the amount of times that I encountered files from &#x27;hackers&#x27; just saying that they were here or what have you.  Many of them just placing files because they couldn&#x27;t transverse the NAT, and others who had uploaded ftp scripts but had typos in them so the scripts didn&#x27;t get deleted like they had planned.  Evidence of crimes and theft laying all over the internal network for months or years, and nobody finding it.<p>At some point it&#x27;s hard not to side with people like ghostshell, because when you&#x27;re supposed to be responsible for important information, but have seemingly no interest in protecting it, at some point the system is bound to fall apart.<p>I&#x27;m reminded of something I read posted by l0pht, way back when, and they just said how much better they were than everyone else because they had jobs at burger king and were dedicated to spending all of their time penetrating networks while their opponents were a bunch of overpaid nobodies who hated their jobs and overall really didn&#x27;t care, and that they would always win.<p>I think that still holds true today.