February 2010 Australian Cyberattacks

February 2010 Australian Cyberattacks
Date February 2010 Location Internet and Australia Characteristics spam, street protests, denial of service attacks
Parties to the civil conflict
Anonymous	Government of Australia

The February 2010 Australian Cyberattacks were a series of denial-of-service attacks conducted by the Anonymous online community against the Australian government in response to proposed web censorship regulations. Operation Titstorm was the name given to the cyber attacks by the perpetrators. They resulted in lapses of access to government websites on the 10th and 11th of February 2010. This was accompanied by emails, faxes, and phone calls harassing government offices. The actual size of the attack and number of perpetrators involved is unknown, but it was estimated that the number of systems involved ranged from the hundreds to the thousands. The amount of traffic caused disruption on multiple government websites.

Australian Telecommunications Minister Stephen Conroy was the proposer of the proposed regulations that would mainly filter sites with pornographic content. Various groups advocating uncensored access to the Internet, along with web-based companies such as Google and Yahoo!, object to the proposed filter. A spokesperson for Conroy said that the actions were not a legitimate form of protest and called it irresponsible. The attacks also drew criticism from other filter protest groups. The initial stage was followed by small in-person protests on 20 February that were called "Project Freeweb".

Background

Stephen Conroy

The attack began as a protest responding to a plan by Australian Telecommunications Minister Stephen Conroy that would require internet service providers to block Australian users from accessing illegal and what the government deemed as "unwanted" content.^[1] Websites to be blocked feature pornography showing rape, bestiality, child sex abuse, small-breasted women (who may appear under the legal age), and female ejaculation. Drawn depictions of such acts are included in the proposal.^[2] The proposed filter also includes gambling sites along with others showing drug use.^[3] A leaked version of the proposed blacklist (also referred to as the "refused classification" or "RC" list) also showed sites that did not include adult content. The name "Operation Titstorm" was in reference to the material that would be censored.^[4]

Google has questioned the proposal, saying the prohibitions would be too broad.^[1][4] It is strongly opposed by free speech groups. A poll conducted by McNair Ingenuity Research for the Hungry Beast television program found that 80% of their 1000 respondents were in favour of the concept of the plan.^[5] The survey also found that 91% were concerned about the government's intent to keep the list of filtered websites a secret.^[6]

The Department of Defence's Cyber Security Operations Centre discovered the attack was coming on 5 February.^[7] A statement released by Anonymous to the press two days before the attack said, "No government should have the right to refuse its citizens access to information solely because they perceive it to be 'unwanted'." It went on to read, "The Australian Government will learn that one does not mess with our porn. No one messes with our access to perfectly legal (or illegal) content for any reason."^[8][9] Anonymous had previously garnered media attention with protests against Church of Scientology (Project Chanology) and the Iranian government.^[10] In September 2009, Prime Minister Kevin Rudd's website was hacked in a similar protest to proposed web censorship reforms.^[5]

Attacks

A flyer for Operation Titstorm

Flyers distributed to recruit participants said the attack was to begin at 8:00 pm AEST on 10 February.^[9] On that day, government websites were targeted by denial-of-service attacks. The Communications Department said the hackers had not infiltrated government security, but had instead swamped government computer servers.^[5] Sites were left unavailable for sporadic periods throughout the attack. At one point, the Australian Parliament's website was offline for about 2 days due to the high-volume of requests.^[11] Rudd's government site was also inaccessible for some time. As a primary target, the Communications Department also received a large amount of traffic. Government offices were also flooded with e-mail spam, junk faxes, and prank phone calls.^[2] The Prime Minister's homepage was vandalized with pornographic images.^[8] The flyer released before the attack called for the faxes to focus on cartoon pornography, female ejaculation, and small-breasted pornography.^[12][13]

Reports of the actual size of the attack have varied. One cyber security expert described the attacks as “the equivalent of parking a truck across the driveway of a shopping centre”.^[14] A firm marketing security technology said that the peak of the attack was a relatively low 16.84 megabits per second.^[2] One writer described the 7.5 million requests per second that initially brought down the Parliament website as "massive".^[1] The site usually only receives a few hundred per second.^[9] It appears that botnets made up of compromised computers were not used.^[2] Estimates of the number of attacking systems involved have ranged from hundreds to thousands.^[3][10]

Response

A spokeswoman for Conroy said such attacks were not a legitimate political protest. According to her, they were "totally irresponsible and potentially deny services to the Australian public".^[15] The Systems Administrators Guild of Australia said that it "condemned DoS attacks as the wrong way to express disagreement with the proposed law."^[16] Anti-censorship groups criticised the attacks, saying they hurt their cause.^[10][15] A purported spokesperson for the attackers recommended that the wider Australian public protest the filter by signing the petition of Electronic Frontiers Australia.^[17]

Anonymous coordinated a second phase with small protests outside the Parliament House in Canberra and in major cities throughout Australia on 20 February. Additional demonstrations were held at some of the country's embassies overseas.^[16] The organizers called the follow-up protests "Project Freeweb" to differentiate them from the criticised cyber attacks.^[18]

Several supporters of the attack later said on a messageboard that taking down websites was not enough to convince the government to back down on the web filtering policy and called for violence. Others disagreed with such actions and proposed launching an additional attack on a popular government site. A spokesman for Electronic Frontiers Australia said he believed there was no real intention or capacity to follow through with any of the violent threats.^[19]

The attack also resulted in criticism of Australia's terrorism laws from the The University of New South Wales Law Journal.^[20] One writer wrote that the provisions leave "no place for legitimate acts of online protest, or at least sets the penalty far too high for relatively minor cybervandalism."^[21]

An Australian teenager was charged with four counts of inciting other hackers to impair electronic communications and two of unauthorised access to restricted data for his role in the attack. He was ordered to pay a bond instead of being convicted after pleading guilty and showing good behaviour.^[22]

In July 2010, Conroy delayed implementing the plan pending a 12-month review into how refused classification content was rated. The proposal is not expected to go forward due to the opposition from The Coalition and the Greens. Internet service providers Telstra and Optus have both agreed to voluntarily block some content.^[23]

See also

• Internet censorship in Australia
• Operation Payback

References

1. ^ ^{a b c} Gross, Grant (2010-02-10). "Australian Parliament Web Site Attacked". IDG News. PC World. http://www.pcworld.com/article/189023/australian_parliament_web_site_attacked.html. Retrieved 2010-02-13. 
2. ^ ^{a b c d} Leyden, John (2010-02-11). "Aussie anti-censor attacks strafe gov websites". The Register. http://www.theregister.co.uk/2010/02/11/oz_anti_censorship_ddos_latest/. Retrieved 2010-02-12. 
3. ^ ^{a b} "Australia cyber attacks could last 'months': hackers". Agence France-Presse. 2010-02-11. http://www.google.com/hostednews/afp/article/ALeqM5jnujRPFE6kMQ8Ns22WpjgTun-PHQ. Retrieved 2010-02-13. 
4. ^ ^{a b} Kamenev, Marina (2010-06-16). "First, China. Next: the Great Firewall of... Australia?". Time. http://www.time.com/time/world/article/0,8599,1995615,00.html. Retrieved 2010-08-3. 
5. ^ ^{a b c} "Hackers protesting against a proposed internet filter that targets pornography shut down Federal Government website". Herald Sun. 2010-02-10. http://www.heraldsun.com.au/news/hackers-protesting-against-a-proposed-internet-filter-that-targets-pornography-shut-down-federal-government-website/story-e6frf7jo-1225828766740. Retrieved 2010-02-13. 
6. ^ "Why Conroy loves porn". The Sydney Morning Herald. 2010-02-19. http://digihub.smh.com.au/node/1553. Retrieved 2010-02-19. 
7. ^ "Hackers attack AU websites to protest censorship". International Business Times. 2010-02-10. http://www.ibtimes.com/articles/7219/20100210/hackers-attack-au-websites-protest-censorship.htm. Retrieved 2010-02-13. 
8. ^ ^{a b} Marks, Kathy (2010-02-11). "Operation Titstorm - Hackers declare war on Aussie". The New Zealand Herald. http://www.nzherald.co.nz/compute/news/article.cfm?c_id=1501832&objectid=10625493. Retrieved 2010-02-13. 
9. ^ ^{a b c} Kravets, David (2010-02-10). "Anonymous Unfurls ‘Operation Titstorm’". Wired. http://www.wired.com/threatlevel/2010/02/anonymous-unfurls-operation-titstorm/. Retrieved 2010-02-13. 
10. ^ ^{a b c} Kleinman, Zoe (2010-02-12). "Cyber attacks against Australia 'will continue'". BBC News. http://news.bbc.co.uk/2/hi/technology/8513073.stm. Retrieved 2010-02-13. 
11. ^ "Australia cyber attacks could last 'months': hackers". The Sydney Morning Herald. 11 February 2010. http://news.smh.com.au/breaking-news-technology/australia-cyber-attacks-could-last-months-hackers-20100211-nuzc.html. Retrieved 11 February 2010. 
12. ^ Ragan, Steve (2010-02-10). "Anonymous issues ultimatum to Australian government". The Tech Herald.com. http://www.thetechherald.com/article.php/201006/5218/Anonymous-issues-ultimatum-to-Australian-government. Retrieved 2011-03-01. 
13. ^ Moses, Asher. "Operation Titstorm hackers strike Australia". Sydney Morning Herald. http://www.stuff.co.nz/world/3312167/Operation-Titstorm-hackers-strike-Australia. Retrieved 2011-03-01. 
14. ^ Marks, Kathy (2010-02-11). ""Operation Titstorm" hackers declare cyber war on Australia". The Independent. http://www.independent.co.uk/news/world/australasia/operation-titstorm-hackers-declare-cyber-war-on-australia-1895838.html. Retrieved 2010-02-13. 
15. ^ ^{a b} "Hacker raid condemned". The Age. 2010-02-11. http://www.theage.com.au/national/hacker-raid-condemned-20100210-nsgy.html. Retrieved 2010-02-13. 
16. ^ ^{a b} Raywood, Dan (2010-02-15). "Australia prepares for week of protest against web filters after the Anonymous group hit key websites last week". SC Magazine (Haymarket Group). http://www.scmagazineuk.com/australia-prepares-for-week-of-protest-against-web-filters-after-the-anonymous-group-hit-key-websites-last-week/article/163785/. Retrieved 2010-02-19. 
17. ^ LeMay, Renai (2010-02-12). "Anonymous says Titstorm beats a petition". Ziff Davis. http://www.zdnet.com.au/news/security/soa/Anonymous-says-Titstorm-beats-a-petition/0,130061744,339301021,00.htm. Retrieved 2010-02-13. 
18. ^ LeMay, Renai (2010-02-15). "Anonymous' Titstorm moves to offline protest". Ziff Davis. http://www.zdnet.com.au/news/security/soa/Anonymous-Titstorm-moves-to-offline-protest-/0,130061744,339301090,00.htm. Retrieved 2010-02-15. 
19. ^ Moses, Asher (2010-03-25). "Conroy's net gag sparks assassination and bomb plot chatter". Brisbane Times. http://www.brisbanetimes.com.au/technology/technology-news/conroys-net-gag-sparks-assassination-and-bomb-plot-chatter-20100325-qyv2.html. Retrieved 2010-03-3. 
20. ^ Hardy, Keiran. "Operation Titstorm: hacktivism or cyber-terrorism?". The University of New South Wales Law Journal (Australia) 33 (2): 474–502. ISSN 0313-0096. 
21. ^ Vaile, David. "Foward". The University of New South Wales Law Journal (Australia) 33 (2): 428. ISSN 0313-0096. "Keiran Hardy assesses Operation Titstorm’ – an online protest against Australia’s proposed internet filter – as an act of terrorism, arguing that the embarrassing (for the federal police) but essentially harmless offensive, is caught by Commonwealth terrorism provisions, so widely drafted are these offences borne in the often scrutiny-free territory of the ‘war on terror’.11 This is problematic, he argues, because it leaves no place for legitimate acts of online protest, or at least sets the penalty far too high for relatively minor cybervandalism." 
22. ^ Ross, Norrie (2010-12-07). "Steve Slayo avoids jail term after inciting hack attack on Federal Government". Herald Sun. http://www.heraldsun.com.au/news/national/steve-slayo-avoids-jail-term-after-inciting-hack-attack-on-federal-government/story-e6frf7l6-1225967134603. Retrieved 2011-03-01. 
23. ^ Foo, Fran (2010-09-07). "ISP filter could be buried". The Australian. http://www.theaustralian.com.au/australian-it/government/isp-filter-plan-could-be-buried/story-fn4htb9o-1225915395171. Retrieved 2011-03-01. 

Further reading

• "Distributed Denial of Service Attacks Against Independent Media and Human Rights Sites". The Berkman Center for Internet & Society at Harvard University. December 2010. Archived from the original on 2011-05-01. http://www.webcitation.org/5ws9RPpXi. Retrieved 2011-03-02.