February 2010 Australian cyberattacks

Operation Titstorm
Operation Titstorm
	A flyer for Operation Titstorm
Date	February 2010
Location	Internet and Australia
Methods	spam, street protests, denial-of-service attacks
Resulted in	Proposed laws failed to go through
Parties
Anonymous 4chan	Government of Australia

The February 2010 Australian cyberattacks were a series of denial-of-service attacks conducted by the Anonymous online community against the Australian government in response to proposed web censorship regulations.^[1] Operation Titstorm was the name given to the cyber attacks by the perpetrators. They resulted in lapses of access to government websites on 10 and 11 February 2010. This was accompanied by emails, faxes, and phone calls harassing government offices. The actual size of the attack and number of perpetrators involved is unknown but it was estimated that the number of systems involved ranged from the hundreds to the thousands. The amount of traffic caused disruption on multiple government websites.

Australian Telecommunications Minister Stephen Conroy proposed the regulations that would mainly filter sites with pornographic content. Various groups advocating uncensored access to the Internet, along with companies like Google and Yahoo!, object to the proposed filter. A spokesperson for Conroy said that the actions were not a legitimate form of protest and called it irresponsible. The attacks also drew criticism from other filter protest groups. The initial stage was followed by small in-person protests on 20 February that were called "Project Freeweb".

Background

The attack began as a protest responding to a plan by Australian Telecommunications Minister Stephen Conroy that would require internet service providers to block Australian users from accessing illegal and what the government deemed as "unwanted" content.^[2] Websites to be blocked feature pornography showing rape, bestiality, child sex abuse, small-breasted women (who may appear under the legal age), and female ejaculation. Drawn depictions of such acts are included in the proposal.^[3] The proposed filter also includes gambling sites along with others showing drug use.^[4] A leaked version of the proposed blacklist (also referred to as the "refused classification" or "RC" list) also showed sites that did not include adult content. The name "Operation Titstorm" was in reference to the material that would be censored.^[5]

Google has questioned the proposal, saying the prohibitions would be too broad.^[2]^[5] It is strongly opposed by free speech groups. A poll conducted by McNair Ingenuity Research for the Hungry Beast television program found that 80% of their 1,000 respondents were in favour of the concept of the plan.^[6] The survey also found that 91% were concerned about the government's intent to keep the list of filtered websites a secret.^[7]

The Department of Defence's Cyber Security Operations Centre discovered the attack was coming on 5 February.^[8] A statement released by Anonymous to the press two days before the attack said, "No government should have the right to refuse its citizens access to information solely because they perceive it to be 'unwanted'." It went on to read, "The Australian Government will learn that one does not mess with our porn. No one messes with our access to perfectly legal (or illegal) content for any reason".^[9]^[10] Anonymous had previously garnered media attention with protests against Church of Scientology (Project Chanology) and the Iranian government.^[11] In September 2009, Prime Minister Kevin Rudd's website was hacked in a similar protest to proposed web censorship reforms.^[6]

Attacks

Flyers distributed to recruit participants said the attack was to begin at 8 pm AEST on 10 February.^[10] On that day, government websites were targeted by denial-of-service attacks. The Communications Department said the hackers had not infiltrated government security, but had instead swamped government computer servers.^[6] Sites were left unavailable for sporadic periods throughout the attack. At one point, the Australian Parliament's website was offline for about two days due to the high volume of requests.^[12] Rudd's government site was also inaccessible for some time. As a primary target, the Communications Department also received a large amount of traffic. Government offices were also flooded with e-mail spam, junk faxes, and prank phone calls.^[3] The Prime Minister's homepage was vandalized with pornographic images.^[9] The flyer released before the attack called for the faxes to focus on cartoon pornography, female ejaculation, and small-breasted pornography.^[13]^[14]

Reports of the actual size of the attack have varied. One cyber security expert described the attacks as "the equivalent of parking a truck across the driveway of a shopping centre".^[15] A firm marketing security technology said that the peak of the attack was a relatively low 16.84 megabits per second.^[3] One writer described the 7.5 million requests per second that initially brought down the Parliament website as "massive".^[2] The site usually only receives a few hundred per second.^[10] It appears that botnets made up of compromised computers were not used.^[3] Estimates of the number of attacking systems involved have ranged from hundreds to thousands.^[4]^[11]

Response

A spokeswoman for Conroy said such attacks were not a legitimate political protest. According to her, they were "totally irresponsible and potentially deny services to the Australian public".^[16] The Systems Administrators Guild of Australia said that it "condemned DDoS attacks as the wrong way to express disagreement with the proposed law".^[17] Anti-censorship groups criticised the attacks, saying they hurt their cause.^[11]^[16] A purported spokesperson for the attackers recommended that the wider Australian public protest the filter by signing the petition of Electronic Frontiers Australia.^[18]

Anonymous coordinated a second phase with small protests outside the Parliament House in Canberra and in major cities throughout Australia on 20 February. Additional demonstrations were held at some of the country's embassies overseas.^[17] The organizers called the follow-up protests "Project Freeweb" to differentiate them from the criticised cyber attacks.^[19]

Several supporters of the attack later said on a messageboard that taking down websites was not enough to convince the government to back down on the web filtering policy and called for violence. Others disagreed with such actions and proposed launching an additional attack on a popular government site. A spokesman for Electronic Frontiers Australia said he believed there was no real intention or capacity to follow through with any of the violent threats.^[20]

The attack also resulted in criticism of Australia's terrorism laws from The University of New South Wales Law Journal.^[1] One writer wrote that the provisions leave "no place for legitimate acts of online protest, or at least sets the penalty far too high for relatively minor cyber-vandalism".^[21]

An Australian teenager was charged with four counts of inciting other hackers to impair electronic communications and two of unauthorised access to restricted data for his role in the attack. He was ordered to pay a bond instead of being convicted after pleading guilty and showing good behaviour.^[22]

In July 2010, Conroy delayed implementing the plan pending a 12-month review into how refused classification content was rated. The proposal is not expected to go forward due to the opposition from The Coalition and the Greens. Internet service providers Telstra and Optus have both agreed to voluntarily block some content.^[23]

References

^ ^a ^b Hardy, Keiran. "Operation Titstorm: hacktivism or cyber-terrorism?". The University of New South Wales Law Journal. 33 (2). Australia: 474–502. ISSN 0313-0096.
^ ^a ^b ^c Gross, Grant (10 February 2010). "Australian Parliament Web Site Attacked". PC World. IDG News. Archived from the original on 12 February 2010. Retrieved 13 February 2010.
^ ^a ^b ^c ^d Leyden, John (11 February 2010). "Aussie anti-censor attacks strafe gov websites". The Register. Retrieved 12 February 2010.
^ ^a ^b "Australia cyber attacks could last 'months': hackers". Agence France-Presse. 11 February 2010. Archived from the original on 17 February 2010. Retrieved 13 February 2010.
^ ^a ^b Kamenev, Marina (16 June 2010). "First, China. Next: the Great Firewall of... Australia?". Time. Archived from the original on 17 June 2010. Retrieved 3 August 2010.
^ ^a ^b ^c "Hackers protesting against a proposed internet filter that targets pornography shut down Federal Government website". Herald Sun. 10 February 2010. Retrieved 13 February 2010.
^ "Why Conroy loves porn". The Sydney Morning Herald. 19 February 2010. Archived from the original on 20 February 2010. Retrieved 19 February 2010.
^ "Hackers attack AU websites to protest censorship". International Business Times. 10 February 2010. Archived from the original on 13 February 2010. Retrieved 13 February 2010.
^ ^a ^b Marks, Kathy (11 February 2010). "Operation Titstorm – Hackers declare war on Aussie". The New Zealand Herald. Retrieved 13 February 2010.
^ ^a ^b ^c Kravets, David (10 February 2010). "Anonymous Unfurls 'Operation Titstorm'". Wired. Retrieved 13 February 2010.
^ ^a ^b ^c Kleinman, Zoe (12 February 2010). "Cyber attacks against Australia 'will continue'". BBC News. Retrieved 13 February 2010.
^ "Australia cyber attacks could last 'months': hackers". The Sydney Morning Herald. 11 February 2010. Archived from the original on 12 February 2010. Retrieved 11 February 2010.
^ Ragan, Steve (10 February 2010). "Anonymous issues ultimatum to Australian government". The Tech Herald. Archived from the original on 17 July 2011. Retrieved 1 March 2011.
^ Moses, Asher (10 February 2010). "Operation Titstorm hackers strike Australia". The Sydney Morning Herald. Retrieved 4 November 2013.
^ Marks, Kathy (11 February 2010). ""Operation Titstorm" hackers declare cyber war on Australia". The Independent. Retrieved 13 February 2010.
^ ^a ^b "Hacker raid condemned". The Age. 11 February 2010. Retrieved 13 February 2010.
^ ^a ^b Raywood, Dan (15 February 2010). "Australia prepares for week of protest against web filters after the Anonymous group hit key websites last week". SC Magazine. Haymarket Group. Retrieved 19 February 2010.
^ LeMay, Renai (12 February 2010). "Anonymous says Titstorm beats a petition". Ziff Davis. Retrieved 13 February 2010.
^ LeMay, Renai (15 February 2010). "Anonymous' Titstorm moves to offline protest". Ziff Davis. Retrieved 15 February 2010.
^ Moses, Asher (25 March 2010). "Conroy's net gag sparks assassination and bomb plot chatter". Brisbane Times. Retrieved 3 March 2010.
^ Vaile, David. "Forward". The University of New South Wales Law Journal. 33 (2). Australia: 428. ISSN 0313-0096. Keiran Hardy assesses Operation Titstorm' – an online protest against Australia's proposed internet filter – as an act of terrorism, arguing that the embarrassing (for the federal police) but essentially harmless offensive, is caught by Commonwealth terrorism provisions, so widely drafted are these offences borne in the often scrutiny-free territory of the 'war on terror'.11 This is problematic, he argues, because it leaves no place for legitimate acts of online protest, or at least sets the penalty far too high for relatively minor cybervandalism.
^ Ross, Norrie (7 December 2010). "Steve Slayo avoids jail term after inciting hack attack on Federal Government". Herald Sun. Retrieved 1 March 2011.
^ Foo, Fran (7 September 2010). "ISP filter could be buried". The Australian. Retrieved 1 March 2011.