Facebook hires geohot - Polidicks

[URL]http://www.huffingtonpost.com/2011/06/26/facebook-hires-george-hotz-geohot-hacker-jailbreak-iphone-playstation_n_884734.html[/URL] [quote]If you can't beat 'em, join 'em--or, in Facebook's case, hire 'em full time. According to [URL="http://techunwrapped.com/2011/06/25/geohot-now-working-at-facebook/"]TechUnwrapped[/URL], Facebook now employs [URL="http://www.facebook.com/geohot?sk=wall"]George Hotz[/URL], the young hacker who has drawn the legal ire of tech giants Apple and Sony. Hotz, who also goes by the online handle "Geohot," is said to be working at Facebook, possibly on a [URL="http://www.huffingtonpost.com/2011/06/17/facebook-ipad-app-release_n_879015.html"]secretive new iPad app[/URL]. TechUnwrapped reported on Saturday that Chronic-Dev Team member Joshua Hill first outed Hotz's status at Facebook. During an [URL="http://techunwrapped.com/2011/06/25/geohot-now-working-at-facebook/"]online interview[/URL], Hill stated that Hotz had backed out of an iPad 2 hacking challenge because of his current day job at the social network. Techmeme's [URL="http://twitter.com/#%21/gaberivera"]Gabe Rivera[/URL] later [URL="http://twitter.com/#%21/gaberivera/status/84788299968954368"]tweeted[/URL] that [URL="http://www.facebook.com/geohot"]Hotz's Facebook profile[/URL] corroborated Hill's claims. "Facebook is really an amazing place to work...first hackathon over," reads a June 22 post on Hotz's Facebook wall. A Facebook spokesperson was not immediately available for comment. In 2007, Hotz gained notoriety for [URL="http://select.nytimes.com/gst/abstract.html?res=F00717FD3A580C768EDDA10894DF404482"]jailbreaking Apple's iPhone[/URL], allowing the handset (and, subsequently, other devices running Apple's iOS software) to be used outside AT&T's network. Then, in 2010, Hotz published a [URL="http://www.engadget.com/2011/01/12/sony-follows-up-officially-sues-geohot-and-fail0verflow-over-ps/"]jailbreak for Sony's PlayStation 3[/URL] gaming console, which Sony countered with a high-profile suit against Hotz in early 2011. The company eventually [URL="http://www.huffingtonpost.com/2011/04/11/sony-settles-playstation-hacker-george-hotz_n_847835.html"]settled[/URL] with Hotz out of court, but their action against the hacker led to a major cyberattack on the PlayStation gaming network by hacktivist collective Anonymous. A host of other attacks on the PSN followed, including one that led Sony to take the entire global network offline for weeks.[/quote]

omg facebook ipad app ! cant wait ! good job geo!!! nice one!!!!

Not really surprising, another company will probably do the same with Lulzsec (once they get out of jail)

Only thing I would trust Lulzsec with is a mop and a broom.

[QUOTE=Starpluck;30724602]Not really surprising, same will happen with Lulzsec.[/QUOTE] Except lulzsec are sql injectors, thus quite worthless.

[QUOTE=Atlascore;30724665]Exactly, ddos attacks and sql injections can be done by any retard with a "hacking-for-dummies" book.[/QUOTE] I'm not saying what LulzSec did is just, but the fact that several high-profile websites were taken down with such supposedly easy methods, don't you think it's good that they brought attention to the issue of poor security?

[QUOTE=Atlascore;30724665]Exactly, ddos attacks and sql injections can be done by any retard with a "hacking-for-dummies" book.[/QUOTE] I find it funny how you make it seem so easy to hack EA, AT&T the CIA, the Senate and various other government websites

[QUOTE=Starpluck;30724691]I find it funny how you make it seem so easy to hack EA, AT&T the CIA, the Senate and various other government websites[/QUOTE] They basically DDOSed all of those (and SQL injected a few). Doesn't exactly take much skill, all they did was pay for a botnet. They didn't steal anything of worth off them.

[QUOTE=Starpluck;30724691]I find it funny how you make it seem so easy to hack EA, AT&T the CIA, the Senate and various other government websites[/QUOTE] Your only telling a botnet to spam a website with a ridiculous amount of requests, it isn't rocket science.

Lulzsec are destroyers, not creators. Guess which is harder to do. Guess which is attractive to an employer.

[QUOTE=Fatal-Error;30724736]Your only telling a botnet to spam a website with a ridiculous amount of requests, it isn't rocket science.[/QUOTE] I'm not dumb I know what a ddos is. Battlefield Heroes data wasn't "ddosd", nor was AT&T and AOL and you can't really say it was a "simple SQL injection" when those high-class organizations are beyond that

:foxnews: [b]Facebook now hiring hackers to become an underground hacker community Could Facebook be hacking you? More at 11 [/b] :foxnews:

[QUOTE=Starpluck;30724807]I'm not dumb I know what a ddos is. Battlefield Heroes data wasn't "ddosd", nor was AT&T and AOL and you can't really say it was a "simple SQL injection" when those high-class organizations are beyond that[/QUOTE] Do you program in php? If you do, you'd know how easy it is to not notice an sql injectable hole in your scripts. It becomes even harder when the website is huge and there's tons of people constantly working and reworking it. Sql injection holes are easy to prevent but hard to find. One little slip, and bam, you got a hole you most likely didn't even notice. Combine that with remote include exploiting, and there you go, a hole in a big corp's site. As the user gets more interactions with the site, the site has more potential holes. Especially stuff like senate site, I bet they're hosted on some linux box in the senate room with a kid for admin who knows how to set up apache. It's not like that website actually contained anything valuable. And sony had no regards for security at all, yet they are a huge megacorp. It's just that most people either don't bother hacking these places or if they hack them, they do it silently. Lulz did it for attention, thus it seemed like it was a lot. In reality I bet many hackers dumped the sql from some corp site and then left without a trace, leaving the hole so they can possibly use it later again.

[QUOTE=MasterG;30724848]No, they were SQL injections which aren't much harder to do.[/QUOTE] The injection isn't jack shit, what matters is finding the vulnerability in the first place.

[QUOTE=Combin0wnage;30724636]Only thing I would trust Lulzsec with is a mop and a broom.[/QUOTE] They'll find a way to use those to back door into the Pentagon..so no.

I cringe every time somebody who doesn't know a jack shit about computers talks about hackers/hacking in Facebook.

[QUOTE=Starpluck;30724602]Not really surprising, another company will probably do the same with Lulzsec (once they get out of jail)[/QUOTE] Heh.

"SQL injections" will become the new "Enhance that" catch phrase. Now be right back while I create a GUI interface using visual basic.

[QUOTE=SomeGuest;30725387]"SQL injections" will become the new "Enhance that" catch phrase. Now be right back while I create a GUI interface using visual basic.[/QUOTE] Have you got a 10 core pipe to do those SQL injections? You just need some extra kernels on that GUI and you're all set.

[QUOTE=Starpluck;30724602]Not really surprising, another company will probably do the same with Lulzsec (once they get out of jail)[/QUOTE] I think you've been watching too many American movies.

[QUOTE=Trumple;30725511]Have you got a 10 core pipe to do those SQL injections? You just need some extra kernels on that GUI and you're all set.[/QUOTE] 10 core? That's not possible in visual basic, use pascal instead.

[QUOTE=Trumple;30725511]Have you got a 10 core pipe to do those SQL injections? You just need some extra kernels on that GUI and you're all set.[/QUOTE] Pfft I got a 16 core running a UNIX back end to render the DLLs.

"Stfu b4 i hack yu, me nd my buddies have LOIC charged." -Lulsec

Everyone says herp de derp derp derp fucking derp, sql injections r so easy. If they r so easy what would be the MLG PRO way to haxxor somebody, since you ALL seem to be SO knowledgeable about it.

[QUOTE=The Bee Gees;30725952]Everyone says herp de derp derp derp fucking derp, sql injections r so easy. If they r so easy what would be the MLG PRO way to haxxor somebody, since you ALL seem to be SO knowledgeable about it.[/QUOTE] There isn't any "MLG PRO way to haxxor somebody". I assume if you look long enough for vulnerabilities you'll find them.

[QUOTE=The Bee Gees;30725952]Everyone says herp de derp derp derp fucking derp, sql injections r so easy. If they r so easy what would be the MLG PRO way to haxxor somebody, since you ALL seem to be SO knowledgeable about it.[/QUOTE] Because the pipe transflucator isn't parallel to the reinitialization process.

[QUOTE=RopaDope;30725882]"Stfu b4 i hack yu, me nd my buddies have LOIC charged." -Lulsec[/QUOTE] It's "lulzsec" and they don't use LOIC. Somebody needs to understand what they're talking about before they say it.

[QUOTE=Combin0wnage;30724636]Only thing I would trust Lulzsec with is a mop and a broom.[/QUOTE] I wouldn't even trust them with that.

[QUOTE=SomeGuest;30725851]Pfft I got a 16 core running a UNIX back end to render the DLLs.[/QUOTE] Yeah but my triple GPU GUI can render 12 streams at 50 Hash/s I've also overclocked the motherboard so I can also upgrade the firmware to support Linux modules on the southbridge :smug:

[QUOTE=The Bee Gees;30725952]Everyone says herp de derp derp derp fucking derp, sql injections r so easy. If they r so easy what would be the MLG PRO way to haxxor somebody, since you ALL seem to be SO knowledgeable about it.[/QUOTE] Maybe I already hacked EA, Valve and microsoft and dumped their database, it's just that I am not an attention whore and never told anyone because I don't want to get caught. You can never know.