LulzSec: "We might be brought to justice, but we just don't care."

A new press release has hit the Web today from Lulz Security in celebration of their 1000th tweet which states their motives and intentions up to this point, as well as how they feel about their actions and how others are responding. With plenty of guesswork happening on behalf of media outlets everywhere (not excluding yours truly), LulzSec truly is just doing it all “for the lulz.” To quote:

For the past month and a bit, we’ve been causing mayhem and chaos throughout the Internet, attacking several targets including PBS, Sony, Fox, porn websites, FBI, CIA, the U.S. government, Sony some more, online gaming servers (by request of callers, not by our own choice), Sony again, and of course our good friend Sony.

While we’ve gained many, many supporters, we do have a mass of enemies, albeit mainly gamers. The main anti-LulzSec argument suggests that we’re going to bring down more Internet laws by continuing our public shenanigans, and that our actions are causing clowns with pens to write new rules for you. But what if we just hadn’t released anything? What if we were silent? That would mean we would be secretly inside FBI affiliates right now, inside PBS, inside Sony… watching… abusing…

Do you think every hacker announces everything they’ve hacked? We certainly haven’t, and we’re damn sure others are playing the silent game. Do you feel safe with your Facebook accounts, your Google Mail accounts, your Skype accounts? What makes you think a hacker isn’t silently sitting inside all of these right now, sniping out individual people, or perhaps selling them off? You are a peon to these people. A toy. A string of characters with a value.

This is what you should be fearful of, not us releasing things publicly, but the fact that someone hasn’t released something publicly. We’re sitting on 200,000 Brink users right now that we never gave out. It might make you feel safe knowing we told you, so that Brink users may change their passwords. What if we hadn’t told you? No one would be aware of this theft, and we’d have a fresh 200,000 peons to abuse, completely unaware of a breach.

In the passage above, it seems as though they feel their stance is a noble one for exposing what is possible through example. There’s no doubt that what they’ve done has caused people to pay attention and consider just how safe their data is or isn’t not just by their own control, but by the control of entities they are supposed to be able to trust. One can’t help but wonder what else they have pillaged from the countless multitude of servers containing private information.

While sane, rational eyes not disconnected from caring about the livelihood of other human beings allows one to easily to see the flaw of their logic, the insult added to injury is the fact that they don’t care what happens with the data once its released. In fact, they rather enjoy watching the havoc being created by anonymous evil-personified individuals.

LulzSec’s Twitter stream has been filled with retweets from people who have used the previously-leaked 62,000 email addresses and passwords to do everything from prank 80 year-old women by sending them adult novelty items, to supposedly ruining relationships on Facebook. But that’s just the start of it.

LulzSec sums up quite well how they feel about their “shenanigans” in the following passage of their press release:

Yes, yes, there’s always the argument that releasing everything in full is just as evil, what with accounts being stolen and abused, but welcome to 2011. This is the lulz lizard era, where we do things just because we find it entertaining. Watching someone’s Facebook picture turn into a penis and seeing their sister’s shocked response is priceless. Receiving angry emails from the man you just sent 10 dildos to because he can’t secure his Amazon password is priceless. You find it funny to watch havoc unfold, and we find it funny to cause it. We release personal data so that equally evil people can entertain us with what they do with it.

If you’ve been holding out hope that their intentions have been anything but frivolous, you can stop wondering. LulzSec does everything they’re doing simply because they can. It’s only by pure accident that they can say they’re proving a point in the process. It’s no secret that infrastructures around the globe aren’t secure as they should be, but now we all know to what extent. Regardless, this is fun and games the Lulz way in the Internet age, at the expense of the helpless and uninformed everywhere. The following essentially wraps up just how they feel:

We’ve been entertaining you 1000 times with 140 characters or less, and we’ll continue creating things that are exciting and new until we’re brought to justice, which we might well be. But you know, we just don’t give a living f#*k at this point - you’ll forget about us in 3 months’ time when there’s a new scandal to gawk at, or a new shiny thing to click on via your 2D light-filled rectangle. People who can make things work better within this rectangle have power over others; the whitehats who charge $10,000 for something we could teach you how to do over the course of a weekend, providing you aren’t mentally disabled.

How do you feel about LulzSec’s intentions at this point? Obviously, they’re just doing it for fun and not much else. Share your thoughts in the comments below!

-Stephen Chapman
SEO Whistleblower

• LulzSec leaks 62,000 emails and passwords, also targets CIA
• LulzSec, Anonymous and hacktivism: Crappy security has caught up with us
• Lulz Security hackers launch telephone request line
• United States Senate has been hacked by Lulz Security
• 26,000 email addresses and passwords leaked. Check this list to see if you’re included.
• LulzSec, Anonymous and hacktivism: Crappy security has caught up with us
• Nintendo becomes latest server hack victim of Lulz Security
• Sony hacked again, another 1m passwords exposed
• Mitnick: Lulzsec ‘quite bold’
• CNET: Keeping up with the hackers (chart)
• CNET: LulzSec fields calls via hacking request line