[iwar] Re: Defacement information?
From: MAGLAN 1
To: , "McIntyre
From: m1@maglan-lab.com
To: McIntyre@attrition.org,
Wed, 13 Dec 2000 07:42:24 +0200
fc Tue Dec 12 21:45:07 2000
Received: from 207.222.214.225
by localhost with POP3 (fetchmail-5.1.0)
for fc@localhost (single-drop); Tue, 12 Dec 2000 21:45:07 -0800 (PST)
Received: by multi33.netcomi.com for fc
(with Netcom Interactive pop3d (v1.21.1 1998/05/07) Wed Dec 13 05:40:46 2000)
X-From_: m1@maglan-lab.com Tue Dec 12 23:38:58 2000
Received: from fj.egroups.com ([64.211.240.231]) by multi33.netcomi.com (8.8.5/8.7.4) with SMTP id XAA25918 for ; Tue, 12 Dec 2000 23:38:57 -0600
X-eGroups-Return: sentto-279987-804-976686189-fc=all.net@returns.onelist.com
Received: from [10.1.4.53] by fj.egroups.com with NNFMP; 13 Dec 2000 05:43:16 -0000
X-Sender: m1@maglan-lab.com
X-Apparently-To: iwar@egroups.com
Received: (EGP: mail-6_3_1_3); 13 Dec 2000 05:43:08 -0000
Received: (qmail 26486 invoked from network); 13 Dec 2000 05:43:08 -0000
Received: from unknown (10.1.10.142) by l7.egroups.com with QMQP; 13 Dec 2000 05:43:08 -0000
Received: from unknown (HELO frigg.inter.net.il) (192.114.186.16) by mta3 with SMTP; 13 Dec 2000 06:44:13 -0000
Received: from fox ([192.116.242.226]) by frigg.inter.net.il (Mirapoint) with SMTP id AGD25243; Wed, 13 Dec 2000 07:42:28 +0200 (IST)
Message-ID: <004201c064c7$794c7fe0$0100000a@fox>
To: , "McIntyre" ,
References: <5.0.1.4.2.20001212091139.04f82ec0@pop.ma.ultranet.com>
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 5.00.2314.1300
X-MIMEOLE: Produced By Microsoft MimeOLE V5.00.2314.1300
From: "MAGLAN 1"
MIME-Version: 1.0
Mailing-List: list iwar@egroups.com; contact iwar-owner@egroups.com
Delivered-To: mailing list iwar@egroups.com
Precedence: bulk
List-Unsubscribe:
Date: Wed, 13 Dec 2000 07:42:24 +0200
Reply-To: iwar@egroups.com
Subject: [iwar] Re: Defacement information?
Content-Type: text/plain; charset=ISO-8859-1
Content-Transfer-Encoding: quoted-printable
Dear McIntyre,
Basically I'm absolutely agreed. Whenever a report includes a citation from
other sources, e.g. defacement mirror site, a credit should be given. I wil=
l
look for a compensation mode.
Even though a points to be explain:
MAGLAN-LAB tries to performs at least 4 cross check for any type of data we
obtain or conclude from our researches (long methodology behind the 4 times
cross checks .). Usually only information that was confirmed from at least =
3
different sources will find the way out if it's not confidential.
By this operation we have to give many credits to many people / org., while
some of them are defines as a non-exposed sources ("NES"). Since than we
internally agree to never mention any resource - "where we got it".
But - When you light that issue and we accepted wisdom, I'm absolutely agre=
e
that over on-going reports, like the one - "Cyber conflict over the Middle
East" and which is the first time we do in the lab! a credit should be give=
n
clearly - as well as in other occasions. In additional I sent an apology
latter to Attrition's Team (a copy attached).
Thanks again for lighting this point,
------------------------------ :)
Shai Blitzblau, Head
MAGLAN - Information Warfare Research Lab.
The information transmitted is intended only for the person or entity to
which it is addressed and may contain confidential and/or privileged
material. Any review, retransmission, dissemination or other use of, or
taking of any action in reliance upon, this information by persons or
entities other than the intended recipient is prohibited. If you received
this in error, please contact the sender or MAGLAN Security Officer at
m8swm@maglan-lab.com and delete the material from any computer.
----- Original Message -----
From: McIntyre
To:
Sent: Tuesday, December 12, 2000 4:22 PM
Subject: Defacement information?
Shai -
I am subscribed to Fred Cohen's iwar email list and have been noticing
several posts from Maglan regarding the Israeli/Palestine conflict. Just
this morning you sent out an email regarding the defacement of the Iran
Ministry of Foreign Affairs...except in your email you called it "Ministry
of Foreign Affairs of Islamic Republic of Iran" - exactly the designation
given to the site in Attrition.org's defacement notification.
"The Ministry of Foreign Affairs of Islamic Republic of Iran web site -
mfa.gov.ir - was defaced by the Israeli underground "m0sad", part of
the-going Cyber conflict over the Middle East. The hackers left behind a
message calling for a cyber revenge."
You made mention of other defacements in the 11/18 posting:
"The Pro-Palestinians Hacker "Peace @ Palestine and Pakistan Zindabad" =AD
known as wall as "m0r0n/nightman" that were attacked and defaced many
Israeli web sites \ networks in the last 45 days, hit last night the Mail
server "doar.inter.net.il" manage by the Israeli ISP Internet Gold. The
attackers left a few messages behind =AD while an important part of it brou=
ght
here below:"
Yet in these and other posts you've made to the "iwar" list regarding
defacement activity during the conflict, you failed to cite your source for
the information - Attrition.org. Attrition is a non-profit site whose staff
updates, manages and maintains it in what little free time they have - for
no money whatsoever. Yet you turn around and use their information, giving
them no credit whatsoever.
Feel free to correct me if I'm mistaken. I know there are many other
defacement mirrors out that....but even a majority of them rely on our
mirrors or at least our notifications in order to get their own copies of
mirrors.
In the future, should you choose to use Attrition.org originating
defacement reports in your Information Warfare email alerts, please credit
us for informing you of the particular defacement.
Thanks in advance.
[Non-text portions of this message have been removed]
-------------------------- eGroups Sponsor -------------------------~-~>
eLerts
It's Easy. It's Fun. Best of All, it's Free!
http://click.egroups.com/1/9699/1/_/595019/_/976686189/
---------------------------------------------------------------------_->
------------------
http://all.net/