Monday, September 26, 2016

IS YOUR PASSWORD ON THE LIST OF THE 25 WORST PASSWORDS?

IS YOUR PASSWORD ON THE LIST OF THE 25 WORST PASSWORDS?

http://jayleiderman.com/blog/the-worst-passwords/ 
JAY LEIDERMAN | September 26, 2016
The worst passwords

Here’s the list of the worst passwords. If you recognize your password on it, it’s time to rethink your password security and change your login:

  1. 123456 (Unchanged)
  2. password (Unchanged)
  3. 12345678 (Up 1)
  4. qwerty (Up 1)
  5. 12345 (Down 2)
  6. 123456789 (Unchanged)
  7. Football (Up 3)
  8. 1234 (Down 1)
  9. 1234567 (Up 2)
  10. baseball (Down 2)
  11. welcome (New)
  12. 1234567890 (New)
  13. abc123 (Up 1)
  14. 111111 (Up 1)
  15. 1qaz2wsx (New)
  16. dragon (Down 7)
  17. master(Up 2)
  18. monkey (Down 6)
  19. letmein (Down 6)
  20. login (New)
  21. princess (New)
  22. qwertyuiop (New)
  23. solo (New)
  24. passw0rd (New)
  25. starwars (New)


http://jayleiderman.com/blog/the-worst-passwords/

Monday, September 1, 2014

Jay Leiderman’s case in the New Yorker magazine:The Masked Avengers How Anonymous incited online vigilantism from Tunisia to Ferguson (The Life and Times of Commander X)




… Three months later, Doyon’s pro-bono lawyer, Jay Leiderman, was in a federal court in San Jose. Leiderman had not heard from Doyon in a couple of weeks. “I’m inquiring as to whether there’s a reason for that,” the judge said. Leiderman had no answer. Doyon was absent from another hearing two weeks later. The prosecutor stated the obvious: “It appears as though the defendant has fled.”
***
… Doyon is still in hiding. Even Jay Leiderman, his attorney, does not know where he is. Leiderman says that, in addition to the charges in Santa Cruz, Doyon may face indictment for his role in the PayPal and Orlando attacks. If he is arrested and convicted on all counts, he could spend the rest of his life in prison. Following the example of Edward Snowden, he hopes to apply for asylum with the Russians. When we spoke, he used a lit cigarette to gesture around his apartment. “How is this better than a fucking jail cell? I never go out,” he said. “I will never speak with my family again. . . . It’s an incredibly high price to pay to do everything you can to keep people alive and free and informed.”

8ca78-02bimg_2379

Thursday, August 21, 2014

Jay Leiderman - TIME MAGAZINE - Anonymous and the Ferguson MO Protests

http://time.com/3148925/ferguson-michael-brown-anonymous/


 CRIME

What Anonymous is Doing In Ferguson

Ferguson Anonymous
Missouri State Highway Patrol Captain Ron Johnson speaks to a protester wearing a "Guy Fawkes" mask while he walks through a peaceful demonstration in Ferguson, Mo. on Aug. 14, 2014.Lucas Jackson—Reuters

What the "hacktavist" group does, how it dealt with the affiliated member who misidentified Michael Brown's killer and how many members are involved in Operation Ferguson

On Aug. 12, Ferguson City Hall’s website went black, its phone lines died and officials had to communicate by text, according to the St. LouisDispatch and the New YorkTimes. Self-identified members of the amorphous, hard-to-define hacker community Anonymous had struck again, according to the papers, this time in response to the shooting of a black teenager, Michael Brown, by a white police officer. A Twitter account allegedly associated with Anonymous—@TheAnonMessage—threatened Jon Belmar, the St. Louis County police chief, with publicly releasing his daughter’s information “in one hour” unless he released the name of the officer who killed Brown. While Belmar didn’t give in, and @TheAnonMessage dropped the ultimatum, the account and other self-identified Anonymous members would post two days later the home address, social security number and phone number of Belmar, telling him to “run, Jon, run.” While that practice, known as “doxing,” is a common Anonymous cyber attack, @TheAnonMessage would go on to wrongly accuse a citizen of killing Brown. Twitter subsequently shut down the @TheAnonMessage without much uproar from the Anonymous community, which prides itself on fighting censorship.
A week later, Anonymous is still at work, marking Thursday as a nation-wide “Day of Rage” to protest police brutality. To better understand why Anonymous, whose targets have been varied (including MasterCard, a Tunisia dictator and Kiss singer Gene Simmons), is interested in the Michael Brown shooting, TIME spoke with Jay Leiderman, an attorney who includes among his clients Anonymous hackers, and Gabriella Coleman, a McGill University anthropology professor who is writing a book on the loose-knit community. We also spoke about how many people were involved in Operation Ferguson and how the organization dealt with one of its own after falsely accusing someone of murder.
Why is Anonymous involved in the Ferguson protests?
Anonymous’ “main demand” is “justice” for Michael Brown and his family, Leiderman says. They can grab the attention of the Ferguson police and “let them know that they’re serious,” he says. Operation Ferguson falls in line with previous Anonymous efforts to unmask alleged perpetrators, such as the 2012 Operation Red Roll, which released private information about people allegedly complicit in the rape of a 16 year-old girl in Steubenville, Ohio.
The “whole reason why” Anonymous got involved was a local rap artist—Tef Po—who called out for help on Twitter, according to Coleman, and the affiliated members responded. A day after the Brown shooting, Anonymous, through Operation Ferguson, released a statement asking Congress to pass a bill to set “strict national standards for police conduct.” It also warned the Ferguson government and police department of cyber counterattacks if the protesters were abused, harassed or otherwise harmed.
“If you attack the protesters, we will attack every server and computer you have,” wrote the Operation Ferguson author. “We will dox [document trace] and release the personal information on every single member of the Ferguson Police Department, as well as any other jurisdiction that participates in the abuse. We will seize all your databases and e-mail spools and dump them on the Internet. This is your only warning.”
Coleman says that there isn’t unanimous support within the hacker community nor Anonymous on shutting down websites. “It’s a big contentious debate between hackers who have a purist, free speech view, and others who have a more contextual one,” says Coleman. “There’s also a debate within Anonymous itself where a lot of hackers who really do the work of intrusion are not fans of doxing for two reasons: A) it’s technically uninteresting and B) sometimes they’re actually trying to gain access to those sites to hack them.”
“Really the main point is to gain media attention,” she says. “That’s kind of why that’s done more than anything else.”
How many Anonymous members are involved in Ferguson?
Anonymous is by definition a secretive group, one without leaders, an agenda or a set list of members. “No one has any idea” how many people are involved in Operation Ferguson, according to Leiderman, who called Anonymous a “nebulous and decentralized collective.”
“It’s impossible to say who is and who isn’t a member of Anonymous,” says Leiderman. “There is now way to disprove it.”
But Coleman says you can see which causes are more popular than others.
After the arrest of WikiLeaks’ founder Julian Assange in 2010, and Anonymous disrupted the websites of MasterCard, Visa and Paypal for declining to serve WikiLeaks, around 7,000 people logged onto the Anonymous chat channel and downloaded hacking tools, according to Coleman. That ad hoc association was “probably the largest ever,” according to Coleman, and by her estimates, much more than the current Operation in Ferguson. (Anonymous distanced itself from Assange in October 2012 after he asked supporters to pay money for access to documents.) The Ferguson channel is used by up to 160 people, Coleman says, although “thousands and thousands” are “within the orbit” supporting the cause through Twitter.
“It is really hard to tell in terms of the numbers,” says Coleman. “You do get a sense of which ones are bigger and smaller and I would probably put this in the definitely not small, [but] definitely not as big as something like WikiLeaks. Probably in between.”
How is the Anonymous community dealing with the member who misidentified the officer who shot Michael Brown?
The @TheAnonMessage account was not a very well respected one within the Anonymous community, according to Coleman and Leiderman, despite the fact that it had been around for awhile.
“People had suspicions but because he was being really active and contributing a lot to the operation,” says Coleman. “They kind of put their skepticism aside in some ways until it was too late…This is something that in some ways is perennially a problem and just has to do with the kind of architecture of Anonymous where you can’t really control what people are doing. There are norms and rules and ethics that definitely push behavior towards certain areas and not others, but by no means [are they] fool proof.”
After Twitter took down the account, an Anonymous memberwrote a post to show a detailed tick-tock “that this was the work of an Anon who was acting against the advice of others.” Other Twitter accounts associated with the group, like Operation Ferguson’s account, declined to name the Brown shooter as it looked for additional sources.
Coleman says that with the exception of a few cases, Anonymous has “generally been correct” in uncovering the right information. She calls @TheAnonMessage a “loose cannon” that had earned “skepticism” because of erratic actions in the past. Coleman says there “was no outcry” when Twitter shut down @TheAnonMessage despite Anonymous being “so famous for hating censorship.”
“Anonymous attracts people who are willing to push the envelope,” she says. “But there is always a hope that people who are doing it are getting the right names and information… I think that there was this expectation that people are doing that work carefully so when they’re not, people in Anonymous get really pissed off.”
When asked if Anonymous’ reputation was hurt after @TheAnonMessage released inaccurate information, Leiderman first blamed the media for going with an untrusted source before saying that Anonymous usually does a better job of establishing a correct verdict.
“Really you can’t pin that all on Anonymous,” he says. “The media that ran with it [failed] to confirm or deny the veracity of the statement… If the older and larger accounts run with something, it usually has a better chance of being more accurate.”
“You really want to see more consensus in the collective before you run with something like that,” he adds. “People that identify with Anonymous are really good at asking ‘Are you sure?’, ‘How do you know?’ ‘Can you share the data with us in a secure way?’…and I’m not sure that happened in this case.”