Hackers Assault Epilepsy Patients via Computer

N&P: Discuss governments, nations, politics and recent related news here.

Moderators: Alyrium Denryle, Edi, K. A. Pital

Post Reply
User avatar
Warsie
BANNED
Posts: 521
Joined: 2007-03-06 02:08pm
Location: Chicago, IL USA

Hackers Assault Epilepsy Patients via Computer

Post by Warsie »

Assuming that this isn't a scientology attack to make anonymous look bad, this does seem to fit the "Hackers on Steroids" fearmongering. I mean, this can be dangerous to people.
Internet griefers descended on an epilepsy support message board last weekend and used JavaScript code and flashing computer animation to trigger migraine headaches and seizures in some users.

The nonprofit Epilepsy Foundation, which runs the forum, briefly closed the site Sunday to purge the offending messages and to boost security.

"We are seeing people affected," says Ken Lowenberg, senior director of web and print publishing at the Epilepsy Foundation. "It's fortunately only a handful. It's possible that people are just not reporting yet -- people affected by it may not be coming back to the forum so fast."

The incident, possibly the first computer attack to inflict physical harm on the victims, began Saturday, March 22, when attackers used a script to post hundreds of messages embedded with flashing animated gifs.

The attackers turned to a more effective tactic on Sunday, injecting JavaScript into some posts that redirected users' browsers to a page with a more complex image designed to trigger seizures in both photosensitive and pattern-sensitive epileptics.

RyAnne Fultz, a 33-year-old woman who suffers from pattern-sensitive epilepsy, says she clicked on a forum post with a legitimate-sounding title on Sunday. Her browser window resized to fill her screen, which was then taken over by a pattern of squares rapidly flashing in different colors.

Fultz says she "locked up."

"I don't fall over and convulse, but it hurts," says Fultz, an IT worker in Coeur d'Alene, Idaho. "I was on the phone when it happened, and I couldn't move and couldn't speak."

After about 10 seconds, Fultz's 11-year-old son came over and drew her gaze away from the computer, then killed the browser process, she says.

"Everyone who logged on, it affected to some extent, whether by causing headaches or seizures," says Browen Mead, a 24-year-old epilepsy patient in Maine who says she suffered a daylong migraine after examining several of the offending posts. She'd lingered too long on the pages trying to determine who was responsible.

Circumstantial evidence suggests the attack was the work of members of Anonymous, an informal collective of griefers best known for their recent war on the Church of Scientology. The first flurry of posts on the epilepsy forum referenced the site EBaumsWorld, which is much hated by Anonymous. And forum members claim they found a message board thread -- since deleted -- planning the attack at 7chan.org, a group stronghold.

Fultz says the attack spawned an uncommonly bad seizure. "It was a spike of pain in my head," she says. "And the lockup, that only happens with really bad ones. I don't think I've had a seizure like that in about a year."

But she's satisfied with the Epilepsy Foundation's relatively fast response to the attack, about 12 hours after it began on Easter weekend. "We all really appreciate them for giving us this forum and giving us this place to find each other," she says.

Epilepsy affects an estimated 50 million people worldwide, about 3 percent of whom are photosensitive, meaning flashing lights and colors can trigger seizures.
http://www.wired.com/politics/security/ ... 3/epilepsy

EDIT: wow this got 1700 diggs
http://tinyurl.com/2uwpfn

This group apparently also recently hacked Stage6 (before it shut down due to lack of funds) redirecting it to goatse and 2girls1cup.
http://digg.com/odd_stuff/Breaking_Stage_6_Hacked

So is this the Anonymous who attacked scientology or scientologists doing this?

EDIT 2: if this is the chan anon..

I think the Anon will end up in a civil war like what happened during the secession and exodus to 7chan in 2005 due to the conflict between the newer anon (many of them being newer, more mainstream people who mainly joined as anti-scientology anon) and the older anon who formed "anonymous" basically as an antithesis to the mainstream ("becoming the very thing you hate").

discuss please.
User avatar
Darth Wong
Sith Lord
Sith Lord
Posts: 70028
Joined: 2002-07-03 12:25am
Location: Toronto, Canada
Contact:

Post by Darth Wong »

Frankly, the anonymity of the Internet is always going to encourage this kind of shit. There's a large percentage of the population that just doesn't give a damn about other people. They're the same kind of fucktards who toss beer bottles out the car window while they're driving, dump litter on the side of the road, and speed through school zones. You can damned well believe that these people would think it was absolutely hilarious to do something like this.
Image
"It's not evil for God to do it. Or for someone to do it at God's command."- Jonathan Boyd on baby-killing

"you guys are fascinated with the use of those "rules of logic" to the extent that you don't really want to discussus anything."- GC

"I do not believe Russian Roulette is a stupid act" - Embracer of Darkness

"Viagra commercials appear to save lives" - tharkûn on US health care.

http://www.stardestroyer.net/Mike/RantMode/Blurbs.html
User avatar
Gandalf
SD.net White Wizard
Posts: 16379
Joined: 2002-09-16 11:13pm
Location: A video store in Australia

Post by Gandalf »

Man, I hope that this doesn't catch on as some lame meme.

I guess that if worse really came to worse, the "images off" button might have to be continually activated.
"Oh no, oh yeah, tell me how can it be so fair
That we dying younger hiding from the police man over there
Just for breathing in the air they wanna leave me in the chair
Electric shocking body rocking beat streeting me to death"

- A.B. Original, Report to the Mist

"I think it’s the duty of the comedian to find out where the line is drawn and cross it deliberately."
- George Carlin
User avatar
Napoleon the Clown
Jedi Council Member
Posts: 2446
Joined: 2007-05-05 02:54pm
Location: Minneso'a

Post by Napoleon the Clown »

Disabling Javascript and .gifs is the easiest way to prevent this sort of bullshit, and I'm surprised that a board specifically for those affected by epilepsy wouldn't take such measures in the first place. A board I occasionally visit has a higher than average number of epileptics, and as such disables .gifs as a means of preventing accidental posting of dangerous images.


I honestly don't know why any message board would leave Javascript enabled in posts. That's a bad idea from any standpoint.
Sig images are for people who aren't fucking lazy.
User avatar
Illuminatus Primus
All Seeing Eye
Posts: 15774
Joined: 2002-10-12 02:52pm
Location: Gainesville, Florida, USA
Contact:

Post by Illuminatus Primus »

That's the most disgusting shit I've heard all day. If they track down these scum, the judge should throw the book at them.
"You know what the problem with Hollywood is. They make shit. Unbelievable. Unremarkable. Shit." - Gabriel Shear, Swordfish

"This statement, in its utterly clueless hubristic stupidity, cannot be improved upon. I merely quote it in admiration of its perfection." - Garibaldi in reply to an incredibly stupid post.

The Fifth Illuminatus Primus | Warsie | Skeptical Empiricist | Florida Gator | Sustainability Advocate | Libertarian Socialist |
Image
User avatar
Warsie
BANNED
Posts: 521
Joined: 2007-03-06 02:08pm
Location: Chicago, IL USA

Post by Warsie »

Gandalf wrote:Man, I hope that this doesn't catch on as some lame meme.
probably "don't seize me bro"; a rip-off of "don't taze me bro"
I guess that if worse really came to worse, the "images off" button might have to be continually activated.
they said they would block .gifs from now on in forums.

But yeah it is odd that .gifs were not blocked...unless the anon exploited a glitch as it seems based of the article, or they hacked an admin account.
User avatar
Wyrm
Jedi Council Member
Posts: 2206
Joined: 2005-09-02 01:10pm
Location: In the sand, pooping hallucinogenic goodness.

Post by Wyrm »

Destructionator XIII wrote:A board can't really disable gifs. If I rename a gif to a image that is allowed, say, png, it will still be properly displayed if everyone's software is doing their jobs correctly - the file extension is mostly irrelevant.
You do realize that GIF files have these things called "headers" in a particular format, do you not? That's how the image display code of your browser knows to use the GIF codec on the data rather than, say, the JPEG codec. (Obviously, using the wrong codec on an image data file leads to madness and confusion.)

It should be a simple matter for the board to check out the file it's linked to to see if that first block looks like a GIF formatted image. Shit, you could check to see if it was an animated GIF specifically.
Darth Wong on Strollers vs. Assholes: "There were days when I wished that my stroller had weapons on it."
wilfulton on Bible genetics: "If two screaming lunatics copulate in front of another screaming lunatic, the result will be yet another screaming lunatic. 8)"
SirNitram: "The nation of France is a theory, not a fact. It should therefore be approached with an open mind, and critically debated and considered."

Cornivore! | BAN-WATCH CANE: XVII | WWJDFAKB? - What Would Jesus Do... For a Klondike Bar? | Evil Bayesian Conspiracy
User avatar
Gandalf
SD.net White Wizard
Posts: 16379
Joined: 2002-09-16 11:13pm
Location: A video store in Australia

Post by Gandalf »

Warsie wrote:
Gandalf wrote:Man, I hope that this doesn't catch on as some lame meme.
probably "don't seize me bro"; a rip-off of "don't taze me bro"
Sorry, I misused the term meme. I was concerned that it might start a trend in which people try to post stuff like this across the internet. Hence my concern that I might get around with "images off" for a while.
"Oh no, oh yeah, tell me how can it be so fair
That we dying younger hiding from the police man over there
Just for breathing in the air they wanna leave me in the chair
Electric shocking body rocking beat streeting me to death"

- A.B. Original, Report to the Mist

"I think it’s the duty of the comedian to find out where the line is drawn and cross it deliberately."
- George Carlin
User avatar
FSTargetDrone
Emperor's Hand
Posts: 7878
Joined: 2004-04-10 06:10pm
Location: Drone HQ, Pennsylvania, USA

Post by FSTargetDrone »

Destructionator XIII wrote:The only effective way to put a stop to it is for each individual user to adjust his settings, and that is probably not going to happen.
Why not? I have a hard time seeing how most epilepsy-sufferers would not routinely do something like this. If it's so easily triggered, it would be foolish of them not to make their settings "safe," especially for surfing normal sites that feature animation of all kinds.
Image
User avatar
Wyrm
Jedi Council Member
Posts: 2206
Joined: 2005-09-02 01:10pm
Location: In the sand, pooping hallucinogenic goodness.

Post by Wyrm »

Destructionator XIII wrote:
Wyrm wrote:It should be a simple matter for the board to check out the file it's linked to to see if that first block looks like a GIF formatted image. Shit, you could check to see if it was an animated GIF specifically.
When would it do this check? If it is done when the picture is posted, the attacker just needs to post something fine, then immediately pull the ol' switcharoo and the users see the naughty image.

Getting it on every load of that forum page would be really slow for the users, and is also trivially easy for the attacker to work around, but it does require him to do a special image for when the server asks for it as opposed to a user.
...Right. I was forgetting how HTTP and webpages worked, in regards to the workaround. It won't even kill the script kiddies.

Though in my defense, the GIF file can be distinguished from its header which is significantly shorter. But that would scale linearly with demand.
Darth Wong on Strollers vs. Assholes: "There were days when I wished that my stroller had weapons on it."
wilfulton on Bible genetics: "If two screaming lunatics copulate in front of another screaming lunatic, the result will be yet another screaming lunatic. 8)"
SirNitram: "The nation of France is a theory, not a fact. It should therefore be approached with an open mind, and critically debated and considered."

Cornivore! | BAN-WATCH CANE: XVII | WWJDFAKB? - What Would Jesus Do... For a Klondike Bar? | Evil Bayesian Conspiracy
Crazy_Vasey
Jedi Council Member
Posts: 1571
Joined: 2002-07-13 12:56pm

Post by Crazy_Vasey »

You could always disallow the displaying of third-party images and require any pictures to be served through the forum to be uploaded to the forum's server. Still not perfect by any stretch of the imagination - short of blocking any and all linking you can't stop this sort of thing entirely - but better than nothing if you're really worried about this sort of attack. Probably wouldn't do much for your bandwidth bills, though.
User avatar
Sephirius
Jedi Master
Posts: 1093
Joined: 2005-03-14 11:34pm

Post by Sephirius »

Word out there from most of 'anonymous' is that this is in fact a ploy by Scientology, as mentioned in the article.
Saying smaller engines are better is like saying you don't want huge muscles because you wouldn't fit through the door. So what? You can bench 500. Fuck doors. - MadCat360
Image
User avatar
The Yosemite Bear
Mostly Harmless Nutcase (Requiescat in Pace)
Posts: 35211
Joined: 2002-07-21 02:38am
Location: Dave's Not Here Man

Post by The Yosemite Bear »

heck I set my computer to the most eye friendly settings I can. And I'm only mildly in the autism spectrum.
Image

The scariest folk song lyrics are "My Boy Grew up to be just like me" from cats in the cradle by Harry Chapin
User avatar
TithonusSyndrome
Sith Devotee
Posts: 2569
Joined: 2006-10-10 08:15pm
Location: The Money Store

Post by TithonusSyndrome »

Sephirius wrote:Word out there from most of 'anonymous' is that this is in fact a ploy by Scientology, as mentioned in the article.
Honestly though, what would keep them from saying that if it was them?
Image
User avatar
The Yosemite Bear
Mostly Harmless Nutcase (Requiescat in Pace)
Posts: 35211
Joined: 2002-07-21 02:38am
Location: Dave's Not Here Man

Post by The Yosemite Bear »

Nothing

basically, who ever did this was a low empathy asshole, however given the nature of the site and the condition that it was supposed to be helping with, setting up it's script so that animated gifs could be uploaded was a bad idea. I know someone who had an eplieptic fit from the new style cash registers, to some folks an unfiltered monitor is the equivalent of a Looker Gun.
Image

The scariest folk song lyrics are "My Boy Grew up to be just like me" from cats in the cradle by Harry Chapin
User avatar
Warsie
BANNED
Posts: 521
Joined: 2007-03-06 02:08pm
Location: Chicago, IL USA

Post by Warsie »

Sephirius wrote:Word out there from most of 'anonymous' is that this is in fact a ploy by Scientology, as mentioned in the article.
the chans can simply blame scientology and claim the scientologists 'fair game' policy and some won't look too deeper into it. I wonder if the anon you talked to were newer joiners who don't know of the older anonymous habits.

also EncyclopediaDramatica has an article on this (surprised they didn't pick up the Stage6 hacked story or I didn't notice it)

link (WARNING: SOME OF THE IMAGES HOSTED ON THE SITE AND THE YOUTUBE VIDEO LINKED CAN CAUSE SEIZURES, SO DON'T GO THERE IF YOU'RE SENSITIVE TO THAT)

There's also the NSFW-nature of ED.
http://www.encyclopediadramatica.com/Ep ... Foundation
User avatar
Warsie
BANNED
Posts: 521
Joined: 2007-03-06 02:08pm
Location: Chicago, IL USA

Post by Warsie »

Gandalf wrote: Sorry, I misused the term meme. I was concerned that it might start a trend in which people try to post stuff like this across the internet. Hence my concern that I might get around with "images off" for a while.
okay.
User avatar
Sephirius
Jedi Master
Posts: 1093
Joined: 2005-03-14 11:34pm

Post by Sephirius »

Warsie wrote:
Sephirius wrote:Word out there from most of 'anonymous' is that this is in fact a ploy by Scientology, as mentioned in the article.
the chans can simply blame scientology and claim the scientologists 'fair game' policy and some won't look too deeper into it. I wonder if the anon you talked to were newer joiners who don't know of the older anonymous habits.

also EncyclopediaDramatica has an article on this (surprised they didn't pick up the Stage6 hacked story or I didn't notice it)

link (WARNING: SOME OF THE IMAGES HOSTED ON THE SITE AND THE YOUTUBE VIDEO LINKED CAN CAUSE SEIZURES, SO DON'T GO THERE IF YOU'RE SENSITIVE TO THAT)

There's also the NSFW-nature of ED.
http://www.encyclopediadramatica.com/Ep ... Foundation
I know it makes me a bit of a dick for saying this, but the Benny hill music in the video made me laugh.

Also, Old anon would say they did it, and that'd be the end of it if it was them. This doesn't seem like that so much.
Saying smaller engines are better is like saying you don't want huge muscles because you wouldn't fit through the door. So what? You can bench 500. Fuck doors. - MadCat360
Image
User avatar
LMSx
Jedi Knight
Posts: 880
Joined: 2002-07-03 09:23pm

Post by LMSx »

I really hope they find whomever did this. I think there's a line between pissing off someone by wasting their time with crashing servers and whatever, versus actual potential physical harm.

I realize that it's possible to visit 4chan or other places and not be a raving lunatic, but the embrace of this "anon" thing is sounding stupider and stupider. The whole Scientology issue was lame enough, but reading talk of "alignment" (chaotic neutral!!!!) and arbitrary designations like newfag being thrown around against other anonymous people just makes me laugh. Anarchic pretension meets a desperate sense of trying to belong to something bigger then themselves.
Post Reply