{"id":78516,"date":"2013-05-22T22:53:40","date_gmt":"2013-05-22T20:53:40","guid":{"rendered":"http:\/\/mybroadband.co.za\/news\/?p=78516"},"modified":"2013-05-23T08:22:26","modified_gmt":"2013-05-23T06:22:26","slug":"saps-website-hacker-interviewed","status":"publish","type":"post","link":"https:\/\/mybroadband.co.za\/news\/security\/78516-saps-website-hacker-interviewed.html","title":{"rendered":"SAPS website hacker interviewed"},"content":{"rendered":"

A simple SQL injection attack was all that was needed to get hold of data stored in the database of the South African Police Service<\/a> website, the hacker responsible for the breach recently told MyBroadband.<\/p>\n

Going by \u201cDomainer\u201d (or @DomainerAnon<\/a> on Twitter), the hacker said the attack was made possible by a poorly designed website.<\/p>\n

Domainer confirmed that the attack on the SAPS website on Friday (17 May 2013) was in retaliation for \u201cthe lack of adequate justice for the slaughtered miners\u201d at Marikana.<\/p>\n

\u201cIt also highlighted the fact that SAP\u2019s own duty of care, namely the security of information on its servers is questionable,\u201d Domainer said.<\/p>\n

On Wednesday (22 May 2013), Divisional Commissioner of Technology Management Services, Lieutenant General Bonginkosi Ngubane<\/a> responded to Domainer\u2019s statement, saying that he doesn\u2019t think it\u2019s a fair comment to make.<\/p>\n

\u201cThere is a commission of inquiry that\u2019s ongoing [into the events at Marikana],\u201d Ngubane said. \u201cI think it\u2019s an unfair statement to judge the police before the commission is finished.\u201d<\/p>\n

Following Domainer\u2019s release of the data from the SAPS website, eNCA reported that \u201chundreds of whistle-blowers have had their private details exposed\u201d, resulting in a mixed response on social media.<\/p>\n

\"SAPS

Criticism of SAPS website hack by Domainer<\/p><\/div>\n

\u201cYes, it seemed as though my release of the SAP data fired up some South African people,\u201d Domainer said, adding that whether stemming from criticism or praise, the debate and understanding that follows it is important.<\/p>\n

However, Domainer didn\u2019t put much stock in people\u2019s concerns over the information he exposed.<\/p>\n

\u201cI laughed when I was accused of \u2018blowing\u2019 covers of so-called whistle-blowers,\u201d Domainer said. \u201cI read one e-mail which complained to the police of their lack of service. Another mail reported their missing cat!\u201d<\/p>\n

Regardless of the content of the data put online, Domainer said that it must be emphasised that it is the duty of the police that hold this information to ensure its security.<\/p>\n

\u201cBack in late 2012 I tweeted the fact that I believed the SAP servers were vulnerable to attack, but at that time had no reason to continue the hack,\u201d Domainer said.<\/p>\n

Questioned about why the information obtained through the hack was released publicly, Domainer explained that it was released the same way as all Anonymous<\/a> data is released.<\/p>\n

\u201cThat is to say, within public mediums whether it be WikiLeaks, Twitter, et cetera.\u201d<\/p>\n

\"Daniel

Daniel Mashao<\/p><\/div>\n

Are you worried about getting caught?<\/h3>\n

At a press event held on Wednesday (22 May 2013), head of critical systems at the State Information Technology Agency (SITA), Daniel Mashao said that they are concerned about the security of the government websites they host, but are working hard to ensure that they are secure.<\/p>\n

Domainer wouldn\u2019t say if he had attacks on other South African government websites in mind.<\/p>\n

\u201cIt would not be wise or prudent of me to discuss any further attacks on any government,\u201d Domainer said.<\/p>\n

Domainer wasn\u2019t worried about being caught by the SAPS, however, despite Ngubane stating that an investigation by Crime Intelligence Division had already yielded some results.<\/p>\n

\u201cCrime Intelligence?\u201d Domainer quipped. \u201cSorry I had to laugh. They have nothing\u2026 just pretending that they are doing their job.\u201d<\/p>\n

\"Bonginkosi

Bonginkosi Solomon Ngubane<\/p><\/div>\n

More information security and website hacking articles<\/h3>\n

No confidential data leaked in website hack: SAPS<\/strong><\/a><\/p>\n

SAPS website hacked, sensitive info leaked: reports<\/strong><\/a><\/p>\n

Spyware servers in South Africa: the plot thickens<\/strong><\/a><\/p>\n

Dictators used SA surveillance equipment: WikiLeaks<\/strong><\/a><\/p>\n

ANCYL website hacker tells all<\/strong><\/a><\/p>\n

Original ANCYL website hacker speaks out<\/strong><\/a><\/p>\n","protected":false},"excerpt":{"rendered":"

Domainer, the Anonymous hacker behind the release of data from the SAPS website reveals how he breached the site\u2019s security<\/p>\n","protected":false},"author":15,"featured_media":78520,"comment_status":"open","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[27],"tags":[19582,19580,19584,19578,19576,35,19238,18068],"class_list":["post-78516","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-security","tag-bonginkosi-solomon-ngubane","tag-crime-intelligence-division","tag-daniel-mashao","tag-domainer","tag-domaineranon","tag-headline","tag-south-african-police-service-saps","tag-state-information-technology-agency-sita"],"_links":{"self":[{"href":"https:\/\/mybroadband.co.za\/news\/wp-json\/wp\/v2\/posts\/78516"}],"collection":[{"href":"https:\/\/mybroadband.co.za\/news\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/mybroadband.co.za\/news\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/mybroadband.co.za\/news\/wp-json\/wp\/v2\/users\/15"}],"replies":[{"embeddable":true,"href":"https:\/\/mybroadband.co.za\/news\/wp-json\/wp\/v2\/comments?post=78516"}],"version-history":[{"count":1,"href":"https:\/\/mybroadband.co.za\/news\/wp-json\/wp\/v2\/posts\/78516\/revisions"}],"predecessor-version":[{"id":78522,"href":"https:\/\/mybroadband.co.za\/news\/wp-json\/wp\/v2\/posts\/78516\/revisions\/78522"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/mybroadband.co.za\/news\/wp-json\/wp\/v2\/media\/78520"}],"wp:attachment":[{"href":"https:\/\/mybroadband.co.za\/news\/wp-json\/wp\/v2\/media?parent=78516"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/mybroadband.co.za\/news\/wp-json\/wp\/v2\/categories?post=78516"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/mybroadband.co.za\/news\/wp-json\/wp\/v2\/tags?post=78516"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}