The series Hackers around the world continues with another hacker from the Southern Hemisphere. This time, I've had the opportunity to speak to a hacker from New Zealand, an actor from the hacking scene you may remember for his many attempts to convince the University of Melbourne to patch up their security.
St0rm, the hacker I’m talking about, provided some precious insight regarding the life of a gray hat that sometimes takes a step to the dark side.
Softpedia: What is your hacker name and does it have any significance?
St0rm: Online, it's
_St0rm. No real significance, but I was given it due to my team members always saying, "Quiet before the storm," whenever we used to do raids. Also,
St0rm and
Storm were taken on Twitter, so I chose
_St0rm. Softpedia: So what do you consider yourself? White hat, gray hat, black hat, hacktivist? And were you always part of this category?
St0rm: I started hacking as a Black Hat, which then later made me turn into a Grey Hat. But every now and then you might find me rooting through something which could be classed as illegal. ;)
Softpedia: Some hackers are driven by the intention of making justice, some do it to make money, others do it just for fun. Also, there’s a category that does it out of boredom. In which category are you?
St0rm: To begin with, it was for mere boredom, but then it got more interesting and fun as it went on. Whilst taking down scamming websites, it was for justice.
Softpedia: Are you part of a group currently, or do you work solo?
St0rm: I started solo, went into a group which then disbanded. Now I weave in and out, and don't really claim to be in any groups.
Softpedia: How many websites did you take down or breached so far?
St0rm: I lost count after it clocked 100+. I have no real number. It's almost like asking, how many times have you put your shoes on and off.
Softpedia: How long ago did you start hacking and how old are you now?
St0rm: I started hacking round, 2.5 years ago and I am currently 18.
Softpedia: Hacking is illegal in most countries and authorities are begining to treat hacking opearations more seriously. Did you have any problems with the law so far?
St0rm: Never been arrested, but have been told that numerous people have sent my information to police forces. I also was told that the Victorian Police in Melbourne, Au, made subpoenas to people to get more information about me.
Softpedia: What were the most important operations you pulled off? The ones that attracted the attention of the authorities..
St0rm: Well, my team posted some information on Facebook. Then a man came on it and started causing abuse. -Basically- I was told to hack him, I rooted his 2 servers, and leaked them online. He sent that to the police.
Then the AU police were after my information from hacking into the University of Melbourne numerous times.
Softpedia: In the first situation, you were told to hack him? So you acted like a mercenary?
St0rm: Lol. Yeah pretty much. It was a case of, if you come and abuse us, we will abuse you. This was back in the Black Hat days. The good old days.
Softpedia: So, are you afraid of getting caught? Or do you use some sophisticated measures to hide your identity while hacking?
St0rm: Other than SSH tunneling and using frequent VPN's when hacking, not much coverage, and no, I'm not afraid of getting arrested for hacking.
Softpedia: How come you're not affraid?
St0rm: I guess I don't really see the side of the administrators, so I don't know how frustrating it must be when someone like me gains access. I don't really see any harm in anything I do. -Oblivious.-
Softpedia: So you don't leak credit card details or anything like that.
St0rm: No, most carders are hated among hackers.
Softpedia: So what about your personal life? Where are you from?
St0rm: I was originally from the U.K. I live in New Zealand at the present. I moved to be close to some family ties I have out here, I will move back soon though.
I've been here for around 4 years now, and I started hacking after I came over.
Softpedia: How about your education? What schools did you go to? Did you learn some programming skills from school, or where did you learn everything you know about hacking?
St0rm: When I left the U.K I was in High School. As I came to New Zealand, I went into another High School. Which actually didn't teach any form of computing, and the first school only taught you how to use Excel.
I learned how to hack from really just watching YouTube videos, various CON videos such as Defcon, Kiwicon etc. From there I gained a small base of knowledge, and then after that I broadened it from listening to other hackers.
Softpedia: Do you think you'll ever quit hacking?
St0rm: I think if I was faced with a lot of criminal charges against hacking, then yeah. But until that time comes, not at the moment ;).
Softpedia: So how did the Melbourne university incident end? Did they finally patch up their security?
St0rm: They patched 2/5 domains by taking them offline for 2 months, and no they're still vulnerable on various other methods of hacking as I implemented a few nights ago. They will always be vulnerable to hackers.
I emailed
security@unimelb.edu.au and a man named John Dubois last night on all the vulnerabilities I found in total. (John was the man whom you interviewed). - Still no feedback -
Softpedia: What do you do in your everyday life besides hacking? What are your hobbies?
St0rm: I like to play the drums, see mates, read Chris Ryan books (Big fan of military writers). My favorites are
The Avenger and
Killing for the company. Also, generally I like to chill out.
Softpedia: What are your future plans? Where do you see yourself in 10 years? I know this sounds like a question for a job interview, but it's a much more interesting question when the response is comming from a hacker.
St0rm: I'd like to have a successful job in the I.T. sector, moving away from hacking, starting to appreciate computer systems in a more legit fashion rather than illegal.
Softpedia: So do you have any particular colleges in mind where you think you could learn how to be an IT expert? Melboure University maybe?
St0rm: Lol. I think I should teach at that university, but there's one local to me which does CNNP and CISSP certs.
Find us on Google+
