快猫短视频

Exclusive first interview with key LulzSec hacker

"Sabu", a member of the notorious hacking group LulzSec and prominent in AntiSec (the antisecurity movement) talks exclusively to 快猫短视频
A screen grab of the PBS website, showing how it looked following LulzSec's hack-attack
A screen grab of the PBS website, showing how it looked following LulzSec鈥檚 hack-attack
(Image: AP Photo)

Update: We now know that when 鈥淪abu鈥 鈥 real name Hector Xavier Monsegur 鈥 gave the interview below to 快猫短视频, he was cooperating with the FBI to gather intelligence on Anonymous activities. Read more:Was our interview with LulzSec hacker an FBI set-up?

Original article, posted 4 July 2011

It was early May when LulzSec鈥檚 profile skyrocketed after a hack on the giant Sony corporation. LulzSec鈥檚 name comes from Lulz, a corruption of LOL, often denoting laughter at the victim of a prank. For 50 days until it disbanded, the group鈥檚 unique blend of humour, taunting and unapologetic data theft made it notorious. But knowing whether LulzSec was all about the 鈥渓ulz鈥 or if it owed more to its roots as part of Anonymous 鈥 the umbrella group of internet subculture and digital activism 鈥 was pure speculation. Until now.

Who is 鈥淪abu鈥?
I鈥檓 a man who believes in human rights and exposing abuse and corruption. I generally care about people and their situations. I鈥檓 into politics and I try my best to stay on top of current events.

We鈥檝e seen you cast as everything from the greatest of heroes to the most evil of villains. How would you characterise yourself?
It is hard for me to see myself as either. I am not trying to be a martyr. I鈥檓 not some cape-wearing hero, nor am I some supervillain trying to bring down the good guys. I鈥檓 just doing what I know how to do, and that is counter abuse.

What was your first experience with 鈥渉acktivism鈥?
I got involved about 11 years ago when the US navy was using Vieques Island in Puerto Rico as a bombing range for exercises. There were lots of protests going on and I got involved in supporting the Puerto Rican government by disrupting communications. This whole situation was the first of its kind for the island and the people didn鈥檛 expect things to go that route. Eventually, the US navy left Vieques.

How did you get involved with Anonymous?
When I found out about what happened to Julian Assange, his arrest in the UK and so on, I found it absolutely absurd. So I got involved with Anonymous at that point.

What operation really inspired you and why?
Earlier this year, we got wind of the Tunisians鈥 plight. Their government was blocking access to any website that reported anti-Tunisian information, including Tunileaks, the Tunisian version of Wikileaks, and any news sites discussing them.

Tunisians came to us telling us about their desire to resist. 鈥淒isrupt the government of Tunisia,鈥 they said, and we did. We infiltrated the prime minister鈥檚 site and defaced it externally. When Tunisia filtered off its internet from the world, it was the Tunisians who came online using dial-up and literally allowed us to use their connections to tunnel through to re-deface the prime minister鈥檚 websites. It was the most impressive thing I鈥檝e seen: a revolution coinciding both physically and online. It was the first time I had proof that what Anonymous was doing was real and it was working.

What would you like to say to people who say that you and other Antisec/Anonymous/LulzSec members are just troublemakers who have caused untold damage and loss to people for no apparent reason?
Would you rather your millions of emails, passwords, dox [personal information] and credit cards be exposed to the wild to be used by nefarious dealers of private information? Or would you rather have someone expose the hole and tell you your data was exploitable and that it鈥檚 time to change your passwords? I鈥檓 sure we are seen as evil for exposing Sony and others, but at the end of the day, we motivated a giant to upgrade its security.

But what about hacks that were done 鈥渇or lulz鈥?
Yes, some hacks under LulzSec were done for the lulz, but there are lessons learned from them all. In 50 days, you saw how big and small companies were handling their user data incorrectly. You saw the US federal government vulnerable to security issues that could have just as easily been exploited by foreign governments. You saw affiliates of the US government handling sensitive emails and they themselves ignored the FBI鈥檚 better practice manuals about password re-use.

With the Public Broadcasting Service site, you saw the media vulnerable to fake articles. And yes, our Frontline hit [the group attacked the PBS鈥檚 Frontline television programme website after perceived unfair treatment of Wikileaks] was political, but we also showed what could happen if an organisation were to hack 50 of the biggest media publications right now, online, and distribute a mass news article designed to blend in on each outlet鈥檚 site. That kind of thing would cause some serious havoc. I mean, we鈥檙e talking about the potential of crashing stocks or spreading damaging rumours. Everything we did had a duality: a lesson and some LOLs at the same time.

When did you realise you had hit the point of no return?
I was at the point of no return when I realised that I could make a change. Operation Tunisia was it for me. Then HBGary [a security firm attacked by LulzSec]. Now Antisec is the biggest movement in years, unifying all hackers and free thinkers across Anonymous and other groups. There鈥檚 no going back.

How do you describe what Antisec is about?
Expose corruption. Expose censorship. Expose abuses. Assist our brothers and sisters during their operations in their own countries like the one we have going in Brazil now, Operation Brazil, which is about internet/information censorship. Expose these big multinational companies that have their hands in too much, that have too much power, and don鈥檛 even take the time to secure your passwords and credit cards. And finally, discussion and education. We are not sitting idly by and letting our rights get thrashed. It鈥檚 time to rise up now.

So what would an Antisec 鈥渨in鈥 look like?
There is no win. There鈥檚 just change and education.

The popularity of LulzSec and Anonymous has inspired many to follow in your footsteps. What words of wisdom do you have for them?
Those who are with me in the fight do not have to be hackers. They can be reporters, artists, public speakers. This movement is about all of us uniting against corruption. But I don鈥檛 ask anyone to take my risks. I don鈥檛 want anyone to follow me down my path.

Are you afraid of being caught?
There is no fear in my heart. I鈥檝e passed the point of no return. I only hope that if I am stopped, the movement continues on the right path without me.

Profile

Anonymous is a leaderless organisation. Among its typical strategies are website defacement, 鈥渟ql injections鈥 to extract information about files within a server, and email/fax bombing by constant barrage with the group鈥檚 demands. Messages are signed: 鈥淲e Are Anonymous. We Are Legion. We Do Not Forgive. We Do Not Forget. Expect Us.鈥

Topics: Computer crime / Hacking