April 17, 2013

Anonymous’s Next Move

At this very moment, somewhere deep in the nether regions of the Internet, a group of hackers aligned with the worldwide collective Anonymous is gathered in an encrypted chat room, hiding behind carefully designed firewalls, arguing about what to do next in Halifax, Nova Scotia .

Some are restless. Some believe Anonymous has waited too long to expose the identities of the alleged rapists who reportedly bullied a 17-year-old girl into hanging herself earlier this month. Some believe it’s time to stir up more trouble. There’s an administrator at the school Rehtaeh Parsons attended who, some say, looked the other way as Parsons complained about people spreading photographs around the school of her rape. Word is there’s even an email floating around somewhere, wherein the administrator refers to Parsons as “promiscuous.” Maybe we should dox him, argue the more malicious members of “the hive”—meaning posting the administrator’s name, his image, maybe even his Social Security number, email address, home address, online. No, we should wait, says the other side. We said we’d give the Royal Canadian Mounted Police a chance to do its job.

They argue like that, over chat, on into the night. They’d agreed Monday to put this conversation on hold, in the wake of the Boston bombings. By Tuesday, had enough time passed? Would there be room on the airwaves for the kind of publicity the hackers are looking for? Would it be the right kind of publicity? Would it make the difference they want?

Maybe they come to an agreement, to step aside or to strike. Maybe they agree on nothing, and the group splinters off, three hackers “doxing” and the rest abiding by the victim’s mother’s request: no vigilantism. No more bullying.

This is Anonymous in 2013: engaged, passionate, rebellious, careful, reckless, tireless, unpredictable and evolving. Unpredictable because they are splintered; evolving because they are human.These hackers’ unpredictability and their evolution have made Anonymous a fascinating phenomenon to watch in recent years. The group that emerged from the murky waters of imageboard 4chan with a fixation on censorship in 2003 moved decidedly to “hacktivism” in 2008, targeting the Church of Scientology, and has since expanded and exploded into “ops” against extremist churches, governments deemed oppressive (including the U.S.), those who would thwart the Arab Spring, Wall Street, Mexican drug cartels, pedophiles, rapists, communities that protect rapists and cops who fail to catch them.

“People are coming to us for help,” said one of the hackers in a recent interview with The Daily Beast. “Could you turn them away?”
It’s not just the broadening front that makes Anonymous fun to watch, though. It’s the way they do battle, talk to the world, absorb feedback and adjust to it. Were this a vacillating political party with changing leadership and changing demographics, this transformation would be easier to track: organizations must stay relevant, popular, approved at some level, to survive. But Anonymous is hundreds if not thousands of people, spread out all over the world. How and what makes this amorphous movement step in this direction or that?

Consider this: In Steubenville, Ohio, two members of the town’s beloved football team, Big Red, were charged with rape last fall after a photo surfaced of a girl being carried by her hands and feet from one room to the next at a party and a series of tweets and text messages mocked that girl, describing the “rape crew” that took advantage of her. Anonymous decided more players needed to be charged—with circulating the photos, with failing to report what they’d seen, with something—and so the hackers attacked. They broke into email accounts, stole passwords, and collected doxes on everyone they believed should have done more.

The hackers claimed they found pornography in the emails of one football booster, even evidence that he somehow directed this “rape crew,” and they posted it—all of it— online. They threatened to do more if other players weren’t brought to justice. They’d expose every parent, every coach, every teacher at Steubenville High School. Many, especially the attorneys of the football players accused of rape, called the hackers “vigilantes,” with no respect for due process: convicting people in a court of public opinion before the facts could be processed in a court of law. Ohio Attorney General Mike DeWine took particular umbrage with the release of a 12-minute video from Ohio State University student Michael Nodianos, drunkenly ranting disparaging things about the victim but admitting no crime and having no real connection to the case.

“It re-victimized the victim,” DeWine told The Daily Beast. “It didn’t change the case any. It got some publicity, but I’m not sure that’s the kind of publicity the victim wanted.”

But in the Parsons case? Despite being convinced they’ve identified two of the four alleged rapists who reportedly drove her to suicide, Anonymous has only made threats. Only if it became clear the Canadian authorities weren’t going to pursue charges in the case would the hackers step in. One member told The Daily Beast he didn’t approve of how things went down in Steubenville, for some of the same reasons given by the officials who spoke out in the press.
“There was a guilty-until-proven-innocent feel to it,” he said. In Canada, in his op, “protecting other innocents was just as important in tracking down the actual rapists.”

Why the change of heart? The most obvious answer is partly true: the Halifax hackers are an entirely different crew from those who moved in on Steubenville, a different “cell.” There is no central leadership at Anonymous. It’s a brand, to which anyone can attach themselves. One group of “Anons” could be pro-choice, another pro-life—at least hypothetically. “We’ve used a measure of restraint uncommon to Anonymous activities,” the hacker who spoke to The Daily Beast said, “not out of fear of being implicated criminally but as a tactic to motivate media coverage and community outrage. No one should be under the impression we’ve been sedated, gotten lazy, or aren’t capable of resorting to extreme measures.”

Over time, though, say experts who have studied the collective, Anonymous has changed. It’s no more centralized but it’s still, somehow, far more concerned with public opinion and limiting collateral damage than ever. But why would a group of hackers who pride themselves on dissidence develop such a conscience? And how could this happen in a group with no leaders?

Chris Wysopal has a theory. He’s the co-founder of the online security company Veracode Inc. and has worked with and around hackers since the late 1990s, in groups known as “The L0pht” and “Cult of the Dead Cow.” In the early days, before “hacktivism,” hacking was just about power; about denial-of-service attacks on corporate or government or private websites just to prove it was possible. When the Dead Cow crew learned China was blocking its citizens’ Internet access, though, they realized they could do more than just be disruptive. They could help, designing a software tool that would allow the Chinese to sneak past the government firewall.

Over time, that kind of hacking has caught on, partly because it’s more satisfying than just being a cyber-nuisance. One pivotal year was 2008, but another was 2011, Wysopal told The Daily Beast—the year dozens of hackers linked to Anonymous all over the globe were arrested, in part because they’d gone after big companies such as Sony, MasterCard, and Visa. But another thing that happened that year was that the hackers pissed off their own constituents by breaking into Sony’s PlayStation store, disabling users’ access to it, and exposing some of their usernames and passwords.

“Anonymous took a lot of criticism for that,” Wysopal said. “I think that criticism was totally valid and well received by a lot of people who are part of Anonymous. They were getting feedback, people saying, ‘Hey, we have this power, but the way we’re using it is harming more people than we’re helping.’” Since then, Wysopal gets the impression that Anonymous members are more “self-policing,” even if that’s unofficial. “If you’re doing something and attaching it to Anonymous, and there are enough people who want to disavow it, they’ll disavow it, call you out,” Wysopal said.

Conversely, its members seem to like positive feedback, said McGill University anthropologist Gabriella Coleman, who is writing a book on the collective and has spent countless hours in chat rooms talking to members over the past decade. Even though the Steubenville effort drew fire, Anonymous was mostly seen as a force for good in Ohio, organizing successful rallies there with Twitter and helping to fuel a broader discussion about rape culture in a case that might have otherwise remained focused on an isolated crime.

“I think they do care about the court of public opinion,” Coleman told The Daily Beast. “And I think they generally do want to limit collateral damage. When it’s not limited, that’s when you have the most internal strife within Anonymous.”

This all represents a kind of puberty for the hacker collective, and it can be correspondingly awkward, says one of the members coordinating the Parsons operation. Many Anons enjoy their reputations as troublemakers, even if they’re ultimately believers in a “good cause.” Start handing hackers the keys to the city and they’ll retreat back into the shadows pretty quickly.

“If I had to guess, I would say likely the next op Anonymous launches will rub people the wrong way and everyone will hate us again,” said the hacker who spoke to The Daily Beast. “I’m not sure if Anonymous always feels comfortable being hugged. We have always been a kind of anti-hero, and the image of a bunch of nice old ladies sitting around playing bridge and talking about how much they love those Anonymous boys might make some people uncomfortable. So Anonymous may do something next that is self-destructive to its image in order to restore balance to the Internet.”

When Royal Canadian Mounted Police Commissioner Bob Paulson announced last week that he was willing to “work with Anonymous” but only if they took “off the masks,” the hackers bristled. “What a load of shit,” the hacker involved it the op told The Daily Beast. “So I guess they’re shutting down Crimestoppers, since they stopped taking Anonymous help?”

Further, whether it’s a noble cause or not, Anonymous’s key toolkit is hacking, which many people consider inherently nefarious. That makes it hard for people like Wysopal to imagine the collective losing its pariah stigma.

“I don’t know if they’ll ever be accepted as the fifth estate, or something like that,” Wysopal said. “To me there’s always going to be that aspect of vigilantism. It’s something that’s core to the group. I don’t think it’ll ever totally be accepted, but I do think people over time are starting to see more and more value in it. It’s very beneficial to be able to operate outside of the legal system to gather information.”

What happens next, though? Do the hackers decide they’ve behaved for too long, that this era of basking in the glow of good public opinion must end? This much seems fairly certain to Irving Lachow, director of the Program on Technology and U.S. National Security at the Center for a New American Security: Anonymous is an entire “ecosystem” now: “a brand, a community, a set of tools and people who have access to those tools,” he told The Daily Beast. “I think it will become a permanent feature of the Internet, because it’s so powerful.” As for what’s next, expect the unexpected, says Coleman.

“It’s always a surprise where they end up, because they’re constantly changing tactics. They’re very dynamic,” she said. “Unlike most any other organization, they don’t have a reputation to keep. An organization has to pay salaries and rent. They don’t have that problem ... Their tactics are going to be controversial, and they will continue to be controversial. But on the whole, they’re operating as activists and not as troublemakers.”

For the time being, anyway.