[cite as: F. Bi. 2009. What we know about the CRU attacker. Intl. J. Inact., 2:99]
Kevin Grandia issues a challenge:
Who stole all this private data from [the Climatic Research Unit of] the University [of East Anglia] in the first place?
[…] Terry Hurlbut at the Examiner has a time line of the stolen data going public which is a good start. I am sure one of our intrepid readers will get to the bottom of this. Tell you what. I’ll race you.
Well, right now what we know is that the attacker
- is familiar with climate conspiracy theories;
- knows about how to upload a huge file to an
incoming/folder on a Russian server,
- initially tried to get the information uploaded to
Clearly not your usual “i r 31337 h4x0r u haz b33n pwn3d!!!!!!”, but other than that, there’s not a lot to go on in this case (at least for us). Perhaps the only useful lead is the initial attempt to upload to RealClimate; I’ve asked the RC folks if they can furnish any further details on it.
Update 2009-11-22: I forgot to mention one other thing we know:
- TrueSceptic reports over at Greenfyre’s blog that the e-mails in the
.ziparchive all have a modification time of 1 Jan 2009 00:00. Why the attacker felt compelled to doctor the file modification times is anyone’s guess.