Alert Updates Jun 28, 2000
Press the RELOAD button on
your Browser to see the latest Updates. Last updated 17 March 2001
Lee Ashurst has his own Support Web page (08/Jul/00)
This Poll Started on 4 October
2000
|
THE
HACKER SAGA |
|
| Obviously a lot has been
happening the past week. As we watched the almost farceful saga unfold, here is what we
see. No intelligible information being released by EIM (Emirates Internet & Multimedia) asides from wild accusations about hacking - which not surprisingly are unsubstantiated so far. One wonders if EIM and/or Etisalat's spokespeople are aware of the difference between "hacking" and "cracking" and "DOS" (Denial of Service) attacks. With the total PR debacle resulting from at first blatant outright lies of: |
"it isn't our
problem" "it's your hardware" "or set up," -- changing soon to "there was a technical problem with our servers which will be fixed any time" Then to the explosive press release of 21st June Followed by the pathetic email of 22nd June etc. etc. Then the system stuttering again over the weekend, one could not be faulted for seeing this as a disgraceful attempt by Etisalat to camouflage their gross inefficiencies by targeting what is fast appearing to be a scapegoat. |
| Any kind of attack on the
password authentication servers could have been safeguarded against within a short period
of discovery. Months of disruptions followed by two weeks of severe problems cannot be explained away by "hacking." Multiple dial up attempts just to get a login screen, then multiple redials in to get past the password authentication. Indefinite delays being stalled at the proxy server have been going on for ages and progressively getting to the point of absurdity, where one must repeatedly re-enter the URL and try for a fresh hit, or change manually to one of the various proxy servers run by EIM, or just wait it out for indeterminable minutes. |
Those who need to FTP a
great deal, such as in maintaining and updating web sites based in servers overseas, have
by now torn their hair out in frustration.
A bit of the story below as reported in the local press. We feature Gulf News's coverage simply because Khaleej Times do not archive their old papers beyond a week. |
Update on 17 March 2001 |
|
| Etisalat hacking: Defense challenges technical report By Hani M. Bathish | |
| THE lawyer defending Lee
Ashurst, a 21-year-old Briton accused of hacking into the Etisalat computer network and
causing damage to its systems and database, has requested the court to allow him to
cross-examine the technical experts who prepared a detailed report on methods used to
penetrate the Etisalat computer network. The court on Sunday (11 Mar) set March 19 as the date for next hearing in the case. The defense lawyer, Dr Habib Al Mulla, told Khaleej Times yesterday that what concerned him was not the charge of penetrating the Etisalat computer network but the charge of causing damage to their system, which he aimed to disprove. |
"Lee is charged with
penetrating the Etisalat network, causing damage to its systems and networks and assuming
the identity of an Etisalat employee by using the latter's password. The charge of penetrating Etisalat networks is punishable by a maximum of six months in prison and Dh10,000 fine, according to the Etisalat internal law," Dr Al Mulla said. He said that when the prosecution completed the presentation of its evidence, the defense would present evidences based on reports of its own technical experts. |
Update on 15 February 2001 "The latest farcical story about the Lee Ashurst case in Gulf News - 12 Feb '01. Seems quite extraordinary, that all stories before today talked about Lee denying having done anything at ALL stages of this investigation. Now suddenly, there is talk of confessions from day one and Lee having admitted using certain programs and done certain things. The charge sheet against Lee had apparently not even been given to his Lawyer before the trial, as the news article clearly states: "The case was suspended until March 11 after Ashurst's lawyer, Dr Habib Al Mulla, asked the court for a copy of the case file against him in order to prepare his defence." So a bit of analysis:- |
|
| Article states: "The prosecution claimed that during the police raid on his
company flat on June 21, Ashurst confessed and explained to Etisalat's engineers how he
had broken into the Etisalat system, telling them what programs he had used." Gulf News' own article of 25 June 2000 states: "Ashurst was arrested at his flat on June 14"
Article states: "Etisalat claims that on June 21, Ashurst misused the Internet service for illegal purposes" June 21st? Talk about reporters confusion? Or if not, then whose confusion? The problems in Etisalat's password authentication servers peaked more around June 8th and 9th. The police and Etisalat Employees visited Lee on June 14th. Mix up by the reporter? or the Accuser? |
Article states: "using two hacking programs, "Saint" and "Jack
the Ripper" SAINT is actually derived from SATAN, and both are quite standard tools included with many distributions of Linux. Every other Network Administrator, or aspiring Admin would have them. "Jack the Ripper?" Sounds like a pent-up over-reactive imagination. The program probably being referred to is "John the Ripper". As the writers of the program will candidly tell you, "John the Ripper is a password cracker, currently available for UNIX, DOS, Win32. Its primary purpose is to detect weak UNIX passwords". Again it is just about a standard tool used by Network Administrators to make sure their users are not using simple passwords that can be easily guessed. Both programs simply check for COMMON vulnerabilities and mis-configurations. Why would a hugely cash rich and technically efficient ISP like Etisalat, who forever blame the whole world for all their problems, never admitting to ever have any technical problems caused by their own technical set up - be vulnerable to these "COMMON" problems? |
| Article sates: "confiscated his personal computer and some books on how to
hack into computers." Now suddenly, where has "BOOKS" come from? Since when have "How to hack into computer" books been available? Did they really confiscate anything other than his laptop? Sounds like the writer, or someone else, is trying to create hype. Article states: " He has also been accused under Article No 380 of Federal Penal Law No 3 of 1987 which covers the opening of mail other than his own." Interesting that a Law promulgated years before Internet and Email was known and used in the UAE would cover this case. We shall see. Article states: "pleaded not guilty during the first court hearing yesterday." Seven ( 7 ) months for Etisalat to prepare its so called technical report? WOW - talk about efficiency from Etisalat. We wonder how many times the "report" needed to be tweaked and modified to try and fit into their story. And such patience from the Courts to allow this to drag on so long, keeping the defendant in limbo. |
Article states: "The prosecution bases its accusations on a Police Criminal
Laboratory report, an Etisalat technical report and Ashurst's confession. Come to think of it, who prepared the expert technical reports? And where did the "technical experts" come from? How impartially was it done. We hope we won't hear one day that they used the cynical ploy of taking a Network Admin from say the Public Prosecutions office, or a similar such positioned person, and used him as an "independent" source and "expert"? And here too is the reference to "Ashurst's confession." A counter suit was launched against Etisalat after a confession was made? Interesting new development!
Gulf News, you have disappointed us by so obviously printing a story which is twisted and one sided. Shame on you. |
Update on 13 November 2000 |
|
| Another 2½ months have
passed since our last review of the situation. With Etisalat keeping so quiet on the issue, one can only conclude that they have reached a dead end as far as proof of damage to their systems is concerned. This is hardly surprising. They have not even presented the vaguest form of the alleged damage. Was there in fact ever any damage at all? Just look at the past months. |
Etisalat goes all out to
deny all their current Internet problems. The help desk recite their usual spiel for days,
asking us to check and recheck our settings. Then they send out a feeble email apologizing for the terrible service. On top of it they have the gall to include a reference to it being a worldwide problem too. Yes, we can safely assume that their problems now are their own, just as they were back in April/May this year. .......continued....... >>> |
Update 13/Nov continued ... >>> |
|
| So Etisalat are delaying
resolving the whole "alleged hacker" saga. No court date is set. Everything is
on hold. Does Lee have to just wait it out? What do you think? Have the press been "asked" to leave the story be? Should Ashurst be passive against this highly arrogant and smug multi-billion dollar earning monolith? Should he keep quiet and wait for them to offer a settlement? |
Should the issue be
brought back into the public's eye, thus forcing Etisalat's hand? Will Etisalat react like they often do, with venomous vindication as their main goal? Will Etisalat prefer to quickly limit the Public Relations damage they may face? A lot of questions for thought. Especially for Lee. Perhaps you can help by airing your views. |
Update on 26 August 2000 |
|
| Etisalat delays
presenting evidence, and has still not produced its supposed technical evidence against
alleged Internet hacker Lee Ashurst. Meanwhile the Dubai Prosecution Department has put on hold the defamation complaint against Etisalat. This has been protested by Lee's lawyer through a letter to the Attorney General. - GN reported 25/8 Are the forces against Lee gathering? Will Lee get a fair chance to defend himself? |
Etisalat's mighty
monetary reserves and clout - against an out of job and out of house Lee. Delays and procrastination are in the interest of L'il sister E. Then again, justice here moves slowly during the summer months when everyone wants to be on holiday. Perhaps September will see some movement. (26/Aug/00) |
|
|
Interesting Links: Hacker Group Attacks Middle Eastern Targets - 11/Feb/00 | Gulf News on Hackers and E-Biz & Another Oct 25
Your Feedback
wrote on February 14, 2001 at 09:58:32 :
Regarding the latest report from GULF NEWS. I see that Lee supposedly used SAINT, a
"hacking" program? Isn't SAINT and SATAN tools for network admins? If so ALL
netAdmins are guilty of hacking.
Some comments given through the Survey above:
Do you have any comments on this Article?
Etisalat Hack Themselves.
The full story as reported by us and the local and foreign press.
Survey and
an in depth #Dubai Article 28/Jun (Last Updated Oct/4/00)
Lee Ashurst's own Support Web page (08/Jul/00)
A total PR debacle by Etisalat.
This resulted from at first blatant outright lies of "it isn't our problem, it's your hardware or set up," changing soon to "there was a technical problem with our servers which will be fixed any time."
Then it progressed to the explosive press release of 21st June, followed by the pathetic email of 22nd June, etc. etc., then the system stuttering again over the weekend, one could not be faulted for seeing this as a disgraceful attempt by Etisalat to camouflage their gross inefficiencies by targeting what is fast appearing to be a scapegoat.
The full story as reported by us and the local and foreign press. In depth #Dubai Article 28/Jun (28/Jun/00 - Last Updated - 4/Oct/00)
We sincerely apologize that the Alert below was not posted last night when it was ready for posting. The reason being that the FTP service through Emirates Internet was so slow that we had to finally abandon trying for the night. And this was after the so called hackers were arrested. Anyway, it is all in the local newspapers this morning. (21/Jun/00)
It appears the KUNA (Kuwait) news service has carried forth a press release from Etisalat that a European Hacker, which the report says is employed by an International IT company, has been arrested in the UAE for Hacking into the Etisalat System for at least the past 2 weeks, and causing Denial of Service attacks which caused problems for many users. This is our best effort at translating from Arabic a first release, so please understand there may be inaccuracies. If the report is true, be assured it will be linked to the terrible service connecting, and the absolutely horrendous delays at the proxy server for the past week or more. (20/Jun/00)
Email the Page construction
Team
Please note that
the channel #Dubai home pages are sponsored by your patronage of the link
http://etisalat.charges.too.much.net
This page visited
times since September 27 2000
Copyleft © 1998-99 All rights and wrongs reserved. Copyright