Kosovo in the news

Ardit Ferizi, AKA “Th3Dir3ctorY,” from Kosova Hacker’s Security (KHS) is working for ISIS supposedly

here is his g+ page :

https://plus.google.com/100318735867157577814/posts

http://www.databreaches.net/feds-charge-ardit-ferizi-aka-th3dir3ctory-with-creating-hit-list-of-american-military-govt-employees-for-isis/

anyone know him?

James Michael DuPont
Kansas Linux Fest http://kansaslinuxfest.us
Free/Libre Open Source and Open Knowledge Association of Kansas http://openkansas.us
Member of Free Libre Open Source Software Kosova http://www.flossk.org
Saving Wikipedia™ articles from deletion http://SpeedyDeletion.wikia.com

I don’t think anyone wants to have known him.

There should be a hacker kind of execution to get rid of isis collaborators. I am glad he got caught but we should do something to get such scum bags out of our society.

Hackers should not cause pain in people.
Hackers should not serve evil people.
//Agron

I have already heard from one person who knows someone who helped him. I have to tell you all, stay away from crime.
mike

We should check if he ever was a member of any of our social media groups like Facebook flossk.org or this mailing list, Google groups, our yearly conferences, and contribute such data to the authorities

I did not see him. Also anything we have is public. I am not on fb anymore, but on twitter he was not connected to me in any way. It seems to be a separate group from the KHG. Also, if you read how he was caught, it shows he was not even smart about his own security.
https://www.emptywheel.net/2015/10/15/fbi-caught-their-isis-hacker-by-tracking-his-signed-email/

It seems he was also known :

http://finance.yahoo.com/news/man-accused-hacking-u-data-160702628.html

Please control your emotions don’t get too excited. I think some of our members don’t understand the concept of innocent until proven guilty. This is only a criminal complaint and belief, no hard evidence tying him physically to the incident. The US Justice Department assumes him guilty until proven so.

I belief as a technology based organization it is not our job or responsibility to go on a witch hunt for the United States Govt or any other government for that matter; or impose our political believes here and beating the drums to go on a witch hunt against ISIS, IRA, communists or Serbs. This organization is meant to forward the cause of FLOSS in Kosov and many others no matter if you personally have anything against them or not.

Finally, I’m a malaysian citizen. I’m shocked that anyone can be kidnapped from our lands with the help of our govt. I apologize to the Kosovars for the actions of my govt but we all know who they really serve, just like you know who yours does. Peace.

What’s you name?

Of course people are innocent until proven guilty, and this applies to this person as well. I hope that I am clear that this guy is only allegedly involved in any of these issues.

But the reason why I bring this up in our public forum is one to make sure that know what potential impact this could have on our reputation and two to distance ourselves from these so called “hacker” groups.

This guy’s twitter account is a self declared member of a “hacker” group and he is stating on his twitter that he is involved in crime.

I think that it is important that our organisation does not get involved in any criminal activities or be associated with any “hacker” groups or crime.

I would like to propose that our group officially distance ourselves from such “hacker” groups, for the simple reason that they give the word hacker a bad name and any association with them will cause problems.

See : https://www.gnu.org/philosophy/rms-hack.html

People should make a choice if they want to be involved and associated with flossk that they are not going to bringing our group a bad name. Consider the disaster for our reputation if our group would have a member be arrested or even accused of such a crime.

I totally agree.

One more thing,

One of our goals with the conference is to bring visitors to Kosovo, to help the people of Kosovo make connections with the world. It is hard for people from Kosovo to travel to other countries and get Visas. We need to make sure that potential visitors are not scared to come and visit us. We have done a lot of work to make a good name and have a good reputation for Kosovo.

Many of our visitors to the conference have visited Kosovo for the first time because of the Conference and they have left with a positive experience. If we are associated with crime or get too political this could make our job very difficult.

mike

+1 with Mike

Redon Skikuli

Mike et. al.,

This is a very serious matter so we should tread carefully.

  1. FLOSSK and Ardit. We had no contact with him as an organization. First time I heard of him was on the news. As far as I know he hasn’t attended any of our events (not that it would mean anything anyways) and at any one time the police knew enough about him. Distancing means affiliation and we had none. To say otherwise paints us a target on our backs.

  2. FLOSSK position on cracking. We’ve been very clear that cracking is illegal and through our activities we have shown what genuine hacking is.

  3. Ardit. I still haven’t read the document with gov accusations against him, but as is often the case against hackers and of anti-terrorism efforts in general, this also could be an exaggeration. Getting .mil and .gov addresses from an SQL injected commercial site is no major feat. I’m sure Ashley Madison dump is full of them without any hack. US servicemen are in no bigger threat after his alleged hack than they were before that.

Ardit seems to be promoting smoking of the good stuff and some other behaviour that is quite far from ISIS material. If he did anything, that was probably due to his immaturity rather than any real political feelings that he may have developed. That said, if you are 18+ be very very careful as this will not serve as an excuse and the hammer will be dropped on you.

So I recommend we do nothing.

Arianit

Dear All,

I knew this kid personally, he was a script kiddie from Gjakova.

He had the bad luck of getting caught… He’s not part of ISIS he was just a scapegoat for them i guess…

My 2 cents,

Hero

Meqe eshte fjala per 2-cents, nje histori tjeter per personin ne fjale, nga e cila ka dicka per te mesuar mbi “CYBER-TRAPS”.

;tldr: Nje person i prezantuar si Ardit Ferizi para ca vitesh kishte print-screen access mbi nje faqe te nje databaze clientesh. Print-screen e kishte marre nga nje serb.

Para 3 vjetesh, nje nga scriptet qe perdorim ne nje production website pati nje “day-0”, mbi 50% e instancave te ketij scripti ne internet u hackuan brenda 12 oresh (deri casti i patch). Nga instanca jone pati nje rrjedhje te databazes se klienteve. Nga ai cast, vendosem nje “bounty” per kedo qe do jepte informacione te ngjashme per probleme sigurie!

Nje person prezantohet ne FB dhe kerkon te raportoje nje vrime “te madhe” sigurie. Bie dakort ta shoh me te problemin (sigurisht nga nje VM remote) dhe brenda pak sec kuptoj qe ishte tentative per session-hijack. I shpjegoj djaloshit qe nuk do i funksiononte dhe ai konfuz pse nuk po futej dot ne faqen tone, me prezanton me dike tjeter qe quhej Ardit Ferizi, ndoshta i njejti person qe eshte arrestuar. Arditi insiston te thote qe jemi vulnerabel. Pasi i shpjegoj cfare po tentonin te benin ndryshon duke thene qe kemi qene dhe me tregon printscreen te disa faqeve. Databaza e vjeter ishte online ne nje faqe. Bie dakort t’i jap “bounty” dhe e pyes per burimin e print-screen. Me thote qe sapo ia kaloi nje hacker serb.

Nese eshte i njejti person, nuk do habitesha nese do kete ngrene karremin e ndonej tjeter sherbimi sigurie. Me mend ne koke cuna!

Tung,

Armandi

Çkemi Armend,

Po i njejti Ardit është. Thjesht e ka zon koken tashi. Nuk mund të jesh aq i pakujdesshëm e të mos kapesh. Tashi po flasim 35 vjet në burg federal. Mson djali Anglisht ma ne fund…

Hero

If you read the complaint against him and the supporting evidence. It does support what you’re saying. Unbelievably amateurish makes you think if it was even possible. The use of Twitter and Facebook in his adventures. But it could also have been anyone, if another name was used instead of his, there is no hard evidence tying him to the IP address. Anyways, crime doesn’t pay unless you work for the governments.

What am I saying? I am saying it is a shame. I am saying stay away from
crime. It is a shame for Kosovo.

I agree that it is not believable this story, total amateur he was. But
also he was setting himself up. It is possible that he is a scapegoat but
he also make it very easy for someone to hang someone on him. If you do not
get involved in crime then you wont be made a target so easily.

mike

Correction: it is not a shame for Kosovë but for the individual in question.

What I mean that it is a shame for Kosovo is this, I am sad for Kosovo when I hear this, of course it is not your fault. So I don’t want to offend you, and I am sorry if i did.

I worked hard to help people in Kosovo and to help you to live freely by showing you how you can use free software and open source to improve your life. It is just sad to see these kids destroy themselves.

mike

I think FLOSSK has done enough to get people like him away from those things. We’ve already put a lot of people under our sleeve, who used to be “crackers”, so i feel very content. Especially with what we did back in the day, and now we can see how many supporters we have. Ferizi’s case is very sad, because I knew him and at some point he attended a FLOSSK Gjakova meeting, and I also encountered him at the conference in 2011 if i recall. He never showed any interest in FLOSSK, and I can say that we have no relation to people like that. Unless they want to be saved.

hero