Police - Masonic Connections

[Magda Hassan]

"Note to irritated members of law enforcement

Don't bother with legal threats or trying to get UK law enforcement to seek revenge. This is me playing nice.
If you want to go nuclear with me, feel free to do so, but trust me when I say you might want to think long and hard before you do.
I'm not known for bluffing, and I know many more of your secrets. About 18TB all in all actually, all unpublished yet.
"I dare you - I double dare you motherfucker" "

Magda, who is it who's said this (above)? Is it the 'confidential source', or a response to that?

The Fraternal Order of Police Are Full of Shit

30th January 2016 17:17

by Cthulhu

3 Comments

Since the release of the FOP files, they have made a few hilarious statements. The problem with most of them is that it shows either incompetence, that they are liars, or both. So I am going to cover a few of them and let everyone know how things really are. I have no stake in the hack; I didn't commit it, and I only was told about it after the fact. Therefore, I have no conflict of interests or desire to make anyone look better or worse than the evidence is, nor am I up for any election, so I don't have to be friendly to people I don't like. But blatantly misleading the public to suit your agenda is something the FOP seem to be specialists at.
Myth 1: The attack was conducted by Anonymous
The attack was not carried out by Anonymous. I will not profile the person any more than to say he has never claimed to be a part of Anonymous or by a sympathiser to their movement, and so the claims made it was somehow done by Anonymous is a baseless accusation. I imagine the tag was given to it because Anonymous retweeted my initial release of the material and the Anonymous groups also retweeted the incident. But on that assumption, it would make anyone who retweeted news about a murder is a murderer right? That would be a silly position to hold of course, but not in the minds of the FOP clearly.

Myth 2: The attack originated from a UK IP address
From my understanding of the attack, it was not done by a UK IP address or a single IP address at all. My source has requested I don't expand on this much, other than to say this is also incorrect.

Myth 3: The attack was sophisticated
A while ago thegrugq tweeted that any attack within the OWASP 10 should not be called sophisticated and I agree. On those grounds, the attack was not sophisticated at all. In fact, from what I know of how the attacker conducted it, you should be ashamed of how trivial it was that your servers were rooted. If your "computer experts" have identified the flaw as you claim to have, you should realise you are either lying or have not hired experts if they call it sophisticated.

Myth 4: A 0-day was used
No 0-day was utilized in the attack. Whoever came out with this is a total moron.

Myth 5: Cthulhu is an anonymous persona
I am not in any way acting to be anonymous online. My real name is Thomas White; I have made this clear, and many publications included my real name. I am a researcher, developer and activist and have worked with many media outlets in the past with my work. The handle of CthulhuSec was an alias I initially used where I needed anonymity at first when conducted a project, and later revoked my anonymity when it was no longer needed. I have made myself available via email to you and have a contact form on my blog if you did want to get in touch, whether it be the FOP itself or any law enforcement agency who has questions or requests. I am being transparent as all my communications with law enforcement or the FOP will be made public.

Myth 6: A pseudo-encryption key is used
What the actual fuck is a pseudo-encryption key? Now you are making shit up. As it turns out, I was told what you might be hinting at here, and it's clear you have no idea what the heck you are talking about.

Myth 7: Disclosing how the site was hacked would be damaging to them
The fix for the security hole in your system is rather simple get a proper security company to test your systems. I would recommend Xiphos Research who I know some of the team of and are the kind of people who will give you the straight facts and help you get them patched. Whoever you have already hired is utterly incompetent if they haven't already fixed the matter. When your site comes back online, I predict many others will attack to repeat the attack on your site, so if you don't heed my recommendation to get a proper audit done by a company with actual skills to do it, don't blame anyone but yourselves when this fiasco repeats itself.

If there are any other myths anyone would like me to clarify, I am more than happy to do so. FOP: Lying out your ass isn't going to make this situation any better.


https://www.thecthulhu.com/the-fraternal...l-of-shit/