There's no other way of reporting this except with a big grin all over the face, because of the target and the message left behind by the hackers. It's one of those good jokes that might have a very unfortunate ending should the hacker ever get caught, and it would be a shame, really.
The Metropolitan Police's careers website was defaced over the weekend, The Register reports, while providing a screenshot to prove it. The image of the female
officer, probably a special constable driving proudly her patrol car is simply outshined by the monster-type creature that was left behind by the hacker(s) with a sense of humor.
There was also a message left behind that mocked the Scotland Yard's anti-terrorism unit. "OFFICER BROBEE SEZ: OH HAI GUYS do joo wanna bes a policeman lulz? I see that teh so15 anti-terrorism anti-lulz police are hiring more incompetent nervy edgy sociopaths to male London's streets just that little bit safer! OH LULZ. SHOUTS TO l0g1kal for being such a leet dude and to LULKITTEH for being so fancy".
The message was since removed and so was the sad looking Brobee, but it's embarrassing any way you look at it and I expect shots to be taken at the Met Police from every angle because of this. According to Netcraft, the hacked site runs on a Windows 2000 platform. Not to sound too snobbish, but what is that Windows 2000 I read about? Is there any other site running that after being found to be one of the most buggy platforms ever?
The method used seems to be a simple SQL injection, but so far there's nothing for certain, and if I were the chief there I'd keep this under the QT for ever and ever more. Check out the video in case you don't know who Brobee is and then you'll understand why the humiliation and embarrassment.
I nearly choked on my cup of coffee, very amusing, even more amused to read it was a machine running windows 2000. Their are conflicting stories all over the net as to what actually happened, SQL injection is what we’re being told was the cause but who made that extremely bright assessment? The same officers responsible for the website’s up keep or was it their service provider?
Just how does someone upload a picture with an SQL injection?
If it was indeed a windows 2000 machine then it sounds far more plausible that the front-page password was decrypted and used to upload the offending image and text.
At first the police said nothing of importance was taken, but then that statement was revised to say that the details of 50′000 of their officers could have been compromised.
