Monday, August 23, 2010

CRU Hack: Sifting Through The Ashes

Frank Bi has got hold of notes from the meeting between the Muir Russell inquiry and CRU's IT personnel, and has some comments re the nature of the CRU Hack.

For me, the most interesting bit of information from the notes is:

JCF – hackers were in from Oct (we believe they offered info to BBC in early October) and again mid Nov. Not sure if they were continuously hacking in the meantime.

The BBC writer referenced above is almost certainly Paul Hudson; it seems likely that, after Hudson's piece --"Whatever Happened To Global Warming"-- generated a series of negative e-mail comments from CRU staff, the hackers shopped these emails to Hudson in hopes that he might take offense and write another story along the same lines as his original. When this did not occur, the hackers gathered further material and looked around for a place to dump it.

So it looks as though their plans evolved significantly over the course of the ongoing crime.

2 comments:

frank -- Decoding SwiftHack said...

Thanks. Have you got any reply from Hudson on the exact nature of the information he received?

frank -- Decoding SwiftHack said...

Just took another look at the file access times in FOI2009.zip. Seems that from 16 Sep--3 Oct, the cracker was unpacking document files and data sets and program code. From 8 Oct onwards, the only files being unpacked were document files (except for mannuncert.txt and mbh98-osborn.zip). After 12 Oct, only a few files were unpacked: marooned.jpg, mannuncert.txt, Extreme2100.pdf, trend_profiles_dogs_dinner.png, and the stuff in mbh98-osborn.zip. Not quite sure what it all means.