The purported hacker who infiltrated the BART's Police Officers Association website today claims to be a French girl ("Humiliating, huh?") who executed her first hack, SF Weekly has learned. SF Weekly chatted online with someone who claimed to be the mind behind today's attack. She provided us with the security hole she used, saying the whole thing was incredibly simple.
Lamaline_5mg -- her online handle -- doesn't claim to be part of Anonymous, the Internet-based movement that masterminded Monday's BART protest. She even took issue with referring to the attack as a hack: "They had zero security," she wrote. "Listen, don't ask questions. I'll tell you what's important to know first."
Did we mention she's also a little bit bossy?
Lamaline wrote that she figured out how to get into BART's website by a one-page PDF tutorial and googling "site:bartpoa.com inurl:.asp?". She said s
"exploited a gaping hole" in the site's security to find all the BART
officers' names, e-mails, and addresses. Here's the list of information
, and here was her creation, though the URL no longer works: http://bartpoa.com/forms/contact_form.asp?i=0%27%20UNION%20ALL%20SELECT%201,2,3,4,5,%28%27%3C%28%20%27%2buserId%29,%28firstname%2b%27%20%27%2blastname%29,%28address%2b%27%20city:%27%2bcity%29,9,10,11,12,13,14,15,16,%28email%2b%27%20--Password:%20%27%2buserpwd%2b%27%20%29%3E%27%29,18,19,20,21,22,23,24,25,26,27,28,29,30%20FROM%20%2
"The way she explained sounds pretty plausible, and that's pretty trivial," says Pete Fein
an Anonymous member who facilitated the online discussion, though he
reiterates he had nothing to do with the hack. "If you can write a
little code and she found that technique in a PDF, that's really
Lamaline first told us her motivation came from outrage at BART turning off cellphone reception at downtown stations: "People trying to stand for themselves in peaceful protest ends up being such a big deal that the police has to shut down cellphone and WiFi access.This is exactly like the beginning of the tahrir protests."
But then she changed her tune, claiming she did it just for the "lulz," or for the kicks, in Internet parlance.
"I got pissed. I learned some stuff. They didn't have protections. I won."
All right, then.
You can see a full transcript of our chat on the next page.