City of Ottawa website hacked


Locutus
#1


City of Ottawa (external - login to view)

why? who knows.

https://twitter.com/aerithxor/status/535928872593010688 (external - login to view)
 
Twila
#2
Been hacked by a banana? that sux.
 
Sal
#3
how strange...
 
Twila
#4
This seems a bit more worrisome
Russian hackers hijack webcams worldwide — including at least four in Ottawa | Ottawa Citizen (external - login to view)
Have you checked your webcam lately?

Hackers have created a website to hijack the webcam feeds of more than 73,000 people, including hundreds from Canada — and apparently at least four from Ottawa — and are sharing those video feeds with peeping Toms the world over.

The hackers’ website, believed to be based in Moscow, has collected live feeds from webcams around the world, showing the daily goings on within people’s homes, daycares, businesses and thousands of other locations. The site has 243 webcams that it claims originate in Canada.

One camera, which has geolocation data claiming that it originates in Orléans, shows the inside of someone’s kitchen where a load of groceries appears to have been dumped on the countertop. Another, located in a person’s apartment downtown, showed an orange-clad woman sitting at a table for a good part of the afternoon. A third simply monitors an Ottawan’s front driveway, while the fourth stands guard over somebody’s back door.

Ottawa wasn’t hit as hard as many other cities. One hacked camera in Arizona was tapped into a daycare showing the daily activities and napping routine of a group of toddlers.

The hackers have been able to access the live feeds as a result of lax security practices by the webcam owners.
 
Sal
#5
ew, not good
 
Locutus
#6
City of OttawaVerified account ‏@ottawacity (external - login to view)

We’re experiencing some technical issues with our website and it is currently unavailable. For urgent inquiries please call 311.


really?





wouldn't want to be their IT guy right now.
 
SLM
#7
Quote: Originally Posted by LocutusView Post


wouldn't want to be their IT guy right now.

Nope, that guy is gonna have a lousy weekend!
 
Twila
+1
#8
Maybe we could help him? Call him up and suggest he turn it off and then on again.

isn't that what they always tell lay folk?
 
darkbeaver
#9
Ottawa has a web site?
 
Twila
#10
Quote: Originally Posted by darkbeaverView Post

Ottawa has a web site?

Of course. How else is going to advertise its' products....and sell stuff...and be internet famous? sheesh!
 
darkbeaver
#11
Quote: Originally Posted by TwilaView Post

Of course. How else is going to advertise its' products....and sell stuff...and be internet famous? sheesh!

I know a couple of guys who do web development, Ottawa sucks. Ive done millions of searches, never saw Ottawa, what are they into anyway?
 
taxslave
+1
#12
Quote: Originally Posted by darkbeaverView Post

I know a couple of guys who do web development, Ottawa sucks. Ive done millions of searches, never saw Ottawa, what are they into anyway?

Taking money for nothing mostly.
 
darkbeaver
#13
Quote: Originally Posted by taxslaveView Post

Taking money for nothing mostly.

Yeah it's nothing, but it looks exciting.
 
Twila
#14
Quote: Originally Posted by taxslaveView Post

Taking money for nothing mostly.

Maybe they're on the dark net......
 
darkbeaver
#15
Money for nothing your chicks for free.

Link to Ottwa plese?
 
Locutus
#16
Kevin O'Donnell ‏@ODonnell_K (external - login to view)

X10hosting servers give out the 'bad' IP that is the source of the 'hacked website' content. Actual website is fine

 
darkbeaver
#17
What was the security compromise anyway?
 
Locutus
#18
username: user
password: admin

or some such bullsh!t
 
spaminator
#19
Anonymous pledges more attacks in Canada
By Aedan Helmer , Doug Hempstead, Ottawa Sun
First posted: Saturday, November 22, 2014 01:02 PM EST | Updated: Saturday, November 22, 2014 06:09 PM EST
OTTAWA ─ The Anonymous hacker group that carried out Friday's cyber attack on Ottawa’s City Hall has pledged attacks on eight more targets, including Ottawa Police and the Supreme Court.
The group has taken responsibility for hacking Ottawa.ca, hijacking the site with a taunting image of a dancing banana, and naming an Ottawa police officer with the ominous message "You know what we want..."
Anonymous launched the hacking campaign Operation Soaring Eagle two weeks ago, and claims they have already penetrated the Ottawa police server.
The group taunted police to find a "digital footprint" left behind as proof of their capabilities, and threatened to deface the Ottawa police website, as well as publishing e-mail exchanges between officers and the home addresses of investigators.
"For every one technical (expert) you think you have, we have 20.. 50.. 100.. Do you believe us now?" the group posted following Friday's hack.
"Are we serious enough? This is just the start, Operation Soaring Eagle will continue, until we see fit that it is completed. We will be taking over all ottawa police networks, shutdown communications on the internet, hijack domains, servers, and soo much more (sic). It all starts today (Friday)."
Both Chief Charles Bordeleau and Supt. Tyrus Cameron were dismissive of Anonymous' threats.
"We're investigating," Cameron said Saturday, adding he doubts the hackers have infiltrated the Ottawa Police e-mail server and are prepared to post names and addresses of officers.
"Police operations and systems continue to function normally."
Later, Anonymous carried through by posting the phone number and home address of the Ottawa police officer named during Friday's cyber attack.
The officer is one of the investigators in a massive joint investigation with the FBI that netted 60 charges against a Barrhaven teen in May.
The teen is accused of "swatting," which is a trend of making prank calls reporting fake bomb threats, hostage situations and active shootings, while impersonating another person, commonly an online gaming rival. Emergency personnel will then respond to the call in vast numbers ─ often in SWAT teams ─ only to discover the ruse on arrival.
"(The officer) knows exactly why he forced this to happen," Anonymous said Saturday.
It is believed the group carried out the attack when new evidence that supposedly exonerates the Barrhaven teen ─ and alleges another man in New Jersey is actually behind the swatting frame-up ─ was ignored by investigators, as Anonymous alleges.
Bordeleau would not comment on Anonymous' claims.
The family's lawyer, Joshua Clarke, said his client has maintained his innocence "from the very beginning."
"While we don't condone the actions and are in no way affiliated with Anonymous, we understand that this group exists and have chosen to assist my client," Clarke said.
A Twitter user under the handle Aerith, speaking on behalf of Anonymous, said the group offered information to Ottawa police that would prove the innocence of the teen.
"Enough is enough. We offered to give (police) information on (the) real swatter... in exchange let (the Barrhaven suspect) go, they laughed... They questioned our skills... That young lad is innocent, this is just pure bull----."
QMI Agency could not reach the New Jersey man named by Anonymous.
Aerith said he was "happily going through every single (police) e-mail, and operation discussed in their e-mails, and preparing a press release."
The group also said it was planning on replacing the police home page with "a dancing hitler banana with ISIS logo just to piss off (Stephen) Harper."
In a lengthy anti-police and anti-establishment rant on Nov. 12, Anonymous warned that the hacker collective would be carrying out "DDoS attacks" targeting the servers of nine websites, notably Ottawa.ca, Ottawa Police and the Supreme Court.
The group lists several other targets, including Guelph Hydro, the City of Waterloo, Telus, WindMobile, Koodo Mobile and Fido, though it is not immediately clear why those companies and institutions are targeted.
On Saturday, after that first cyber-attack was verified, the group posted another message warning, "This is just the start... We will not rest."
The group signed off by warning of another attack coming on Monday, pledging, "We have a shocker planned."
aedan.helmer@sunmedia.ca (external - login to view)
Anonymous pledges more attacks in Canada | Canada | News | Toronto Sun
 
Locutus
#20
 
spaminator
#21
Ottawa police website 'secure' says chief
By Doug Hempstead, Ottawa Sun
First posted: Sunday, November 23, 2014 01:28 PM EST | Updated: Sunday, November 23, 2014 01:35 PM EST
OTTAWA -- The Ottawa police website -- ottawapolice.ca (external - login to view) -- was offline Saturday night until sometime just after 1 a.m. Sunday.


It has been up and down intermittently ever since. As of 11:30 a.m. Sunday, it was still down.


University of Ottawa professor Patrick McCurdy says the hack is likely a "denial of service attack" -- essentially loading a web page multiple times to crash a server and get it offline.


A hacker identified as Aerith has taken responsibility ­-- the same one who took responsibility for the City of Ottawa site switching to a black screen Friday night, with an image of a dancing banana and a threatening message toward an Ottawa cop.


Around noon Saturday police said they had no evidence their website or systems had been compromised, and operations were continuing as normal.


But Chief Charles Bordeleau issued a brief statement Sunday morning.


"Our investigative team alongside our Information Technology experts are working on identifying the source of the technical problems that occurred last night. Our network remains secure," he said.


The Supreme Court of Canada site was also down Saturday night but was restored shortly before 10 a.m. Sunday.


The city's website was taken down altogether to be restored, and reappeared by Saturday morning.


Aerith's Twitter account -- which indicated, likely falsely, that he/she was based in Turkey -- has since been suspended.


It was being used as a means for the suspected hacker to communicate with media as well as explaining future plans for other targets.


Those targets included the Toronto police website and "Aerith" told QMI Agency a high-profile display of hacking is planned for Monday, part of what has been called Operation Soaring Eagle.


doug.hempstead@sunmedia.ca (external - login to view)


Twitter: @DougHempstead (external - login to view)
Ottawa Police Service. (QMI Agency File Photo)

Ottawa police website 'secure' says chief | Ontario | News | Toronto Sun
 
spaminator
#22
Hacker threatens Toronto cops and city website
By Maryam Shah, Toronto Sun
First posted: Sunday, November 23, 2014 09:10 PM EST | Updated: Sunday, November 23, 2014 09:16 PM EST
A hacker — who claims to be part of the group Anonymous — has threatened to target websites belonging to the City of Toronto and Toronto Police Service.


The pledge made by a hacker, who goes by the name Aerith, comes days after an attack on the City of Ottawa’s website. That city’s homepage was replaced with an image of a dancing banana and the name of an Ottawa police officer involved in a massive “swatting” case against a teen.


City of Toronto spokesman Jackie DeSouza confirmed the city is aware of what happened in Ottawa and that officials will “remain extra vigilant” as they monitor toronto.ca for suspicious activity.


“Similar attacks have occurred in the industry in the past and as a result, the city has ensured we have implemented security best practices to protect our corporate network and website,” she said in an e-mail Sunday night.


“In the unlikely event of a successful attack, we will respond immediately to restore service if interrupted,” DeSouza said.


Tory aware


A spokesman for Mayor-elect John Tory said the civic leader was “aware of the situation.”


“(We) will ask for a briefing from city officials at the earliest opportunity,” Amanda Galbraith said Sunday.


By Sunday evening, torontopolice.on.ca was unavailable online. Toronto Police did not respond to questions posed before and after the website went dark.


Aerith has said the targeted hacks come because a teen from Barrhaven — a suburban area southwest of Ottawa — faces swatting charges from Toronto, not just Ottawa. The hacker claims to have proof the kid was framed.


The youth’s father held a small press conference in Larkin Park on Sunday where he brought media up to speed with the case against his son.


“I want to thank the group Anonymous for the beautiful gift they have given me — the proof of my son’s innocence,” he said.


The man read an e-mailed statement on behalf of Aerith who proclaimed the Conservative Party of Canada’s website was among the next ones to be targeted, along with parl.gc.ca.


“We are helping the youth clear his name,” read the statement.


“He was framed. We will be disclosing documents in the coming days.”


Broken light bulb


At the press conference, the father showed a photo of a broken light bulb with what he claimed was a listening device found inside.


Ottawa Police Chief Charles Bordeleau said he wouldn’t comment on the photo, except to say it “looks like a light bulb.”


He wouldn’t say if Ottawa police use listening devices and if the device shown is in fact a listening device.


Aerith said that Anonymous tipped the father off about the listening devices because police e-mails had been intercepted.

Hacker threatens Toronto cops and city website | Home | Toronto Sun

Hackers vow 'complete rape' of Ottawa cop website
By Doug Hempstead, Ottawa Sun
First posted: Sunday, November 23, 2014 01:28 PM EST | Updated: Sunday, November 23, 2014 05:35 PM EST
OTTAWA -- The hacker who claims to have shut down the Ottawa police website most of the weekend plans to "completely rape" the site -- and many more.


Going by the name Aerith, he refers to "we" when speaking about the actions.


"We killed ottawapolice.ca with a denial of service," he said.


A "denial of service attack" happens by loading a web page multiple times to crash a server and get it offline.


Noted expert on the hacker group Anonymous, Gabriella Coleman said "DDos (distributed denial-of-service) campaigns" are easy to achieve -- a string of "zombie computers" are linked together to repeatedly open a particular website.


This service can be rented by hackers for about $20 a day, she said.


QMI Agency received a letter Nov. 12 which stated this is exactly what would happen.


"We will launch large DDoS campaigns at all governments, police forces. We will also hack into anything and everything," the note warned.


Aerith has also taken responsibility for the City of Ottawa site switching to a black screen Friday night, with an image of a dancing banana and a threatening message toward an Ottawa cop.


Around noon Saturday police said they had no evidence their website or systems had been compromised, and operations were continuing as normal.


Coleman said DDos campaigns are "low-level" stuff. Even the dancing banana defacement is easy to achieve.


"It's like graffiti," she said.


"Our investigative team alongside our information technology experts are working on identifying the source of the technical problems that occurred last (Saturday) night. Our network remains secure," Chief Charles Bordeleau said a brief statement issued Sunday morning.


The Supreme Court of Canada site was also down Saturday night but was restored shortly before 10 a.m. Sunday.


The city's website was taken down altogether and had to be restored, and reappeared by Saturday morning. A statement was released that afternoon.


"Ottawa.ca has now been restored, however, there may be delays in refresh times for some Internet service providers. We are confident that no corporate or resident information was compromised as a result of the breach. Issues were related to a third party service provider and have since been resolved. Residents can continue to access city services by contacting 311."


Aerith's Twitter account -- which indicated, likely falsely, that he/she was based in Turkey -- was suspended early Sunday but a new one was created later in the afternoon.


It was being used as a means for the suspected hacker to communicate with media as well as explaining future plans for other targets.


Those targets included the Toronto police website and "Aerith" told QMI Agency a high-profile display of hacking is planned for Monday, part of what has been called Operation Soaring Eagle.


doug.hempstead@sunmedia.ca (external - login to view)


Twitter: @DougHempstead (external - login to view)
Ottawa Police Service. (QMI Agency File Photo)

Hackers vow 'complete rape' of Ottawa cop website | Ontario | News | Toronto Sun
 
Liberalman
+1
#23
Post office mail is harder to hack.
 
spaminator
#24
Syrian Electronic Army hacks CBC, other news sites
QMI Agency
First posted: Thursday, November 27, 2014 08:57 AM EST | Updated: Thursday, November 27, 2014 11:55 AM EST
The Syrian Electronic Army claimed responsibility for hacking numerous news websites Thursday morning, including sites for CBC News and U.K. publications OK Magazine, The Guardian and The Independent.
Some users would get a blank screen and a pop up window stating, "You've been hacked by the Syrian Electronic Army," and were then redirected to the group's logo, an image of an eagle bearing the Syrian flag and a message in Arabic.

The SEA is an amorphous hacker collective that supports Syrian President Bashar al-Assad. The group posted on its Twitter feed: "Happy thanks giving, hope you didn't miss us! The press: Please don't pretend #ISIS are civilians. #SEA"

"A part of our website run by a third-party was compromised earlier today," The Telegraph said on its official Twitter feed. (external - login to view) "We've removed the component. No Telegraph user data was affected."

SEA has targeted The New York Times, the BBC and Microsoft sites in the past, as well as Twitter accounts of other media organizations.
Syrian Electronic Army hacks CBC, other news sites | News | Tech | Toronto Sun
 
B00Mer
#25
The Secure Shell (SSH) Protocol by default uses port 22, they need to just change the port to something obscure and that only the server admin knows and they are out of luck.

Also, change all passwords using $, #, or @ in them and update scripts so there are no script vulnerabilities...

Then the Syrian Army can go packing.
 
Canbyte
#26
Why hack a website? To show I can or to make others worry unnecessarily are often the only reasons.
 
B00Mer
#27
Quote: Originally Posted by CanbyteView Post

Why hack a website? To show I can or to make others worry unnecessarily are often the only reasons.

asked and answered.

Why Do Hackers Hack Websites?? | Website Guardian | Protect Your Website From Hackers (external - login to view)

 
spaminator
#28
Hacker strikes Ontario government website
QMI Agency
First posted: Saturday, December 13, 2014 12:06 AM EST | Updated: Saturday, December 13, 2014 12:50 AM EST
TORONTO -- The Ontario government's website -- ontario.ca -- appeared to be the victim of a hacker attack for a couple of hours on Friday evening.
Around 9 p.m. ET Friday, people began to report on Twitter that a video for MC Hammer's 1990 hit "Can't Touch This" appeared on the ontario.ca website, along with a name and photo of a young boy and a message saying, "follow my f------ twitter or ill (sic) f------ dox ur ssns."
"Dox" is a reference to taking personal information from the Internet, and "SSNS" appears to be a reference to "social security numbers" used in the U.S.
CBC News reported Friday evening that they contacted the boy whose name and photo appeared on the website and that he denied any involvement.
The boy claimed someone who had been bullying him was behind the attack, CBC News said.
The Ontario government said no personal information was accessed or affected during the hack.
"A 3rd party domain routing traffic to ontario.ca was hacked -- not the govt's websites," the provincial government's press office tweeted. "No personal info or govt data was compromised."
The website appeared to be back to normal by late Friday evening.
- With files from David Akin
The Ontario government's website -- ontario.ca -- appeared to be the victim of a hacker attack for a couple of hours on Friday evening. A boy, whose name and photo appeared on the website, denied any involvement in the attack and claimed he was the victim of a bully. (David Akin/Twitter)

Hacker strikes Ontario government website | Ontario | News | Toronto Sun
 
spaminator
#29
Anonymous claims responsibility for attack on Canadian government websites
Jim Bronskill, The Canadian Press
First posted: Wednesday, June 17, 2015 02:35 PM EDT | Updated: Wednesday, June 17, 2015 08:30 PM EDT
OTTAWA - No personal information was compromised during a cyberattack that temporarily crippled some federal government websites, says Public Safety Minister Steven Blaney.
The Anonymous online collective claimed responsibility for the attack -- which shut down several federal sites and played havoc with email -- as a protest against the recent passage of the federal anti-terrorism bill.
Early Wednesday afternoon, Treasury Board President Tony Clement tweeted that until full service was restored, the public should use 1-800-OCanada.
Several hours of government silence on the incident, known as a denial of service attack, followed.
The federal Cyber Incident Response Centre, which routinely publishes alerts and advisories, posted nothing about the events.
"We are working on restoring services as soon as possible," said a brief, late-afternoon statement from Dave Adamson, the government's acting chief information officer.
"We continue to be vigilant in monitoring any potential vulnerabilities."
Denial-of-service attacks, which bombard a site with traffic, are a common means of shutting down a web server.
Anonymous has carried out cyberattacks against governments, corporations and others in the name of free speech, Internet liberties and anti-capitalist causes.
There was no immediate confirmation that the loosely knit coalition was actually behind the assault on federal sites.
However, Blaney said there were no excuses for such an attack, noting "law-enforcement agencies" were looking into the matter.
"We are living in a democracy," Blaney said. "And there are many ways to express your views."
The incident follows a high-profile hacking of the National Research Council last year -- an episode the federal government blamed on a Chinese state-sponsored player. Beijing has denied involvement, accusing Canada of making irresponsible accusations.
Assaults that crippled computer systems at the Finance Department and Treasury Board in 2010 were linked to efforts -- possibly originating in China -- to gather data on the potential takeover of a Canadian potash company.
The government stresses it has since invested energy and millions of dollars in a national cybersecurity strategy.
"Cybersecurity is an issue that we take very seriously," Blaney said.
Two members of Anonymous sporting Guy Fawkes masks. AFP PHOTO/JOHANNA LEGUERRE

wwwyoutubecomwatchvgb2LT312DeA


Anonymous claims responsibility for attack on Canadian government websites | Can
 
spaminator
#30
RCMP national website goes offline, Anonymous claims responsibility
THE CANADIAN PRESS
First posted: Sunday, July 19, 2015 03:28 PM EDT
OTTAWA -- The RCMP's website is down, but the cause is not clear.
However it comes a day after the cyber group Anonymous vowed to target the force to raise awareness about an RCMP officer involved in a shooting incident in B.C.
Anonymous has no identifiable leadership but online posters who say they're members have claimed responsibility in the past for hacking incidents including the shutdown of the city of Cleveland's website last fall.
Public Safety Minister Stephen Blaney's office and the Mounties did not immediately respond to questions about the RCMP website.
The website of Canada's spy agency, the Canadian Security Intelligence Service, was recently taken down by a cyberattack.
Police in the northern B.C. community of Dawson Creek shot and killed a man last Thursday who they say refused to comply with directions.
Social media posts claim the man was affiliated with Anonymous.
RCMP national website goes offline, Anonymous claims responsibility | Canada | N
 
no new posts