Anonymous: behind the masks of the cyber insurgents
Since 2008, the internet collective have hacked the CIA, the Sun newspaper, the Church of Scientology and a host of other large corporations, sparking a global police crackdown last year. But who and what are Anonymous? A radical new form of activism – or just bored teenagers? We talk to some of the 'hacktivists' and the experts who tracked them down in the deep web /by Carole Cadwalladr @ The Guardian 8 September 2012
Spalding railway station in Lincolnshire is not a big place. It takes me about two seconds to scan the platform and spot who I'm looking for:Jake Davis, aka Topiary, the computer hacker who at one point last year was the subject of one of the biggest manhunts on the planet.
For a period in 2011, LulzSec – an offshoot of Anonymous, the internet"hacktivist" collective who came to prominence around the time of the Wikileaks affair – wreaked a trail of chaos across the web. Their actions ranged from the transgressive – they had taken down the CIA's website and hacked into Sony's database and released more than a million user names and passwords – to the absurd: after the American network PBS aired a critical documentary about Julian Assange, LulzSec hacked into their website and replaced the homepage with an article about Tupac Shakur, the (very much dead) rapper, which bore the headline "Tupac Still Alive in New Zealand". During the Arab spring, members of the group hacked and defaced Tunisian and Egyptian government sites. One hacker, Tflow (later discovered to be a 16-year-old London schoolboy), allegedly wrote a webscript that enabled activists to circumvent government snooping.
LulzSec had also hacked into the website of Soca, the UK's Serious Organised Crime Agency, and replaced the front page of the Sun online with a "report" that Rupert Murdoch had been found dead (with a helpful hint for the FBI in the closing paragraph: he'd been found, it said, "in his famous topiary garden").
For a time, LulzSec demanded and caught the world's attention. Their tweets made headlines. Their jokes were retweeted by thousands. And there, waiting for me at Spalding station, is LulzSec's PR guru. "Look out for the pale kid that needs a haircut," he'd texted me. And he's not wrong. He is quite pale and could do with a haircut. And he's impossibly young: just 19. A skinny teenager with a soft Scottish accent who – for a period of time last year, during "the 50 days of Lulz" – ran rings around law enforcement agencies on several continents.
Of course, I already know what Jake Davis looks like, because in July last year, Davis, then 18, was arrested at his home in the Shetland Isles. And after being charged with five hacking-related crimes and released on bail, he emerged into the sun outside Westminster magistrates court for the world to see. Anonymous suddenly had a face: and the face was of a furtive, greasy-haired youth, wearing a pair of dark glasses and carrying a book called Free Radicals: The Secret Anarchy of Science. If you had to imagine what a teenage computer hacker would look like, this was it.
The episode was front-page news on websites across the world, as a string of arrests were made: 19-year-old Ryan Cleary from Essex; 16-year-old Tflow from London; 27-year-old Jeremy Hammond from Chicago; a 25-year-old former soldier, Ryan Ackroyd, from Doncaster; 19-year-old Darren Martyn (or PwnSauce), from Galway, and Donncha O'Cearrbhail (or Palladium), also 19 and from Offaly, Ireland. The most recent arrest, 12 days ago, was of another American, 20-year-old Raynaldo Rivera of Arizona.
In March this year came the news of how it happened: the FBI had turned a LulzSec member in New York, a 28-year-old Puerto Rican father of two called Hector Xavier Monsegur, known online as "Sabu", and used him as their informant. It was like The Sopranos, but instead of organised crime and Italian hitmen it involved teenagers sitting at computer screens. And perhaps most confusing of all, the vast majority of the main players seemed to be living in Britain or Ireland.
Gabriella Coleman, professor of scientific and technological literacy at McGill University, in Montreal, probably knows more about Anonymous than anybody on the planet. She has studied them from the moment they first emerged as a new political force in 2008, and says that it's no coincidence that so many of the arrests were of British and Irish nationals. Anonymous is a vast, new, poorly understood global force who specialise in "ultra-co-ordinated motherfuckery", as one of Coleman's contacts puts it. And it attracts a huge British following.
In the chatrooms where Anons gather, Parmy Olson, a London-based journalist with Forbes magazine, found the British connection blindingly obvious. Her book, We Are Anonymous: Inside the Hacker World of LulzSec, Anonymous, and the Global Cyber Insurgency, published in America this June, offers a brilliant insight into the hacktivists' world. Almost by accident, Olson charted the emergence and domination of LulzSec, following the twists and turns of the story as it happened. "And," she says, "you could just see a lot of people talking about British things, British television shows, they were speaking with English spellings. You could tell they were British."
Olson met Jake Davis before he reverted to Jake Davis – when he was still Topiary – in the Shetlands. "It took a day and a half just to get there," she says. "And it was embarrassing really. He was one of the most wanted hackers on the planet, and he just seemed so young."
A year is a long time, though, when you're 18. I'd been expecting a socially awkward geek, but Davis turns out to be open-faced, chatty, good at eye contact and not geeky at all, though this may have something to do with the fact that he hasn't been allowed access to the internet for more than 12 months. He's pleaded guilty to conspiracy to commit computer misuse under the Computer Misuse Act and is back in court in April next year. He's also waiting to see if he'll stand trial on another charge: conspiracy to commit fraud (the CPS is currently assessing whether a trial is in the public interest, given that he's already pleaded guilty to the first charge). He's currently at liberty on condition that he wears an electronic tag, is home by 10pm, and lives with his mum (who moved to Spalding shortly before his arrest).
And that he goes nowhere near the internet. His only means of communicating with the outside world is a mobile phone that looks like it was a recent model circa 1995. And the greatest surprise – not just to me, but to him – is that he's barely missing the internet at all. "I actually feel a lot better within myself. My life was the internet, pretty much. It was chatting on the internet and amassing groups of friends. And I had no life outside it. A year ago I would just be head-down kind of walking along, mumbling monosyllabically."
It's that lack of contact with the outside world that has led Jake Davis to me. He helped Parmy Olson with her book, and he seems keen to have some form of communication with the outside world. Because communicating was both his speciality and what got him into this mess in the first place.
"Living in the Shetlands, I didn't understand the impact of what we were doing," he says. "I didn't understand the impact on the real world. And now that I'm here in Spalding, and I've been a lot in London, I kind of see that the world does go round and it's not about hiding in a bedroom."
What seems incredible, even now (and maybe, especially, to Jake), is how a slightly troubled teenager living on the two-sheep island of Yell, in the Shetland Isles – a place as isolated and remote as anywhere on Earth – came to find himself at the heart of a radical global political movement.
But then, maybe that's the point. When I met Gabriella Coleman in Edinburgh she'd spent the previous evening meeting one of her contacts, who lived in a remote croft in the Scottish countryside. "He cooked me pheasant," she said. Olson, too, found that a disproportionate number of contacts she met "lived in out-of-the-way places".
For Jake, living in the Shetlands, the internet became his everything. It was where he made friends and socialised. "It's where I learned almost everything I now know. The thing I miss the most is Wikipedia. I mean, at school I learned to knit. I'm actually a pretty good knitter now." Jake had a somewhat difficult childhood, and that (combined with the knitting lessons) led him to drop out of school at 13, shortly after his stepfather was killed in an accident.
What's surprising, at first, is that he's not unhappy that he was caught, or that he faces the prospect of several years in prison. "People say that prison is bad, but I lived in my bedroom with a computer for years. It's not going to be as bad as that. I just want to go and do my sentence and get my education in there. I want to get a really good education and just read loads of books."
That's if he doesn't get extradited – because he's been charged in America, too, where his fellow hackers are facing up to 20 years inside. By contrast, in Ireland no charges have been brought against the arrested hackers. Anonymous may be an international phenomenon but there's no consensus (yet) on how to police the internet.
What's immediately apparent about Jake Davis (and about a lot of the people involved with Anonymous) is just how bright and intelligent he is. And how the internet is where they find an outlet for their intellect – an outlet that somehow seems to have eluded them in real life. "These weren't just normal individuals who found themselves in extraordinary circumstances," says Parmy Olson. "They really were extraordinary individuals in extraordinary circumstances."
What I find so interesting about Davis is how completely he seems to have been let down by the education system. It entirely failed to uncover or nurture his talents. "I literally have not a single qualification to my name," he tells me at one point, and looks rather sheepish. Davis rose to prominence in Anonymous and then LulzSec not because he was some expert hacker – he wasn't; his technical skills were limited – but because he is a naturally gifted writer and communicator. Among other things, he controlled the LulzSec Twitter account, from which issued forth a stream of jokey pronouncements, the last of which had the feeling of prophecy to it: "You cannot arrest an idea," he said. Which may be true, but almost exactly a month later a team of police officers burst into his living room, and then flew him by specially chartered plane to London, a place he'd never been to before. "It was like going to the future or something," he says.
You can't arrest an idea, though. And although Anonymous's impact may have been exaggerated (not least by itself), at its heart is a radical idea: that the internet can enable mass, participatory, possibly illegal action in a way the world has never seen before. Actions that can be controlled by neither governments nor international agencies, and which are decided by the horde, enacted by the horde, and policed by the horde.
According to Parmy Olson, the "hivemind", or getting people to "believe in the power" of the hivemind, is probably Anonymous's greatest achievement. There is no central organisation (though there are organisers) and no official membership. In some ways it resembles that other recent un-organisation, al-Qaida. If you believe in Anonymous, and call yourself Anonymous, you are Anonymous.
And in 2008, it seemingly came out of nowhere. At the time, Gabriella Coleman was studying the Open Source community (the network of programmers who believe in, and develop, free software open to all) and was based at the University of Alberta, which happened to have the largest Scientology archive in the world. And she couldn't help but notice what happened when a video of Tom Cruise being interviewed about Scientology appeared on the internet. A group of online hackers began "trolling" (mocking; trying to get a rise out of) the Church of Scientology. For a lot of people, the video – meant for internal PR purposes only within the church – was provocation enough: Cruise appears as a genuine, bona fide, swivel-eyed religious nutcase. Then things escalated. The church began issuing legal threats against the sites hosting the video, and it was this attempt to police the internet that prompted certain people to rise up and try to defend it.
"What I realised," says Coleman, "is that the Church of Scientology was like the perfect nemesis. It was the geeks' worst nightmare, because it is a religion of science and technology, but the technology doesn't work and the science is pseudoscience. And it's an extremely proprietary religion: they have very aggressive control over trademarks and copyright, so in every way it seemed like the hackers saw how the church was like them, but their evil twin."
And in doing so, they also realised that they possessed a hitherto unrealised power: strength in numbers. Instead of merely staging online protests, a day of global protest was organised. And on 10 February 2008, 7,000 people showed up in 127 cities around the world. They didn't know it then but a new political movement was born. "We are Anonymous," read one of the flyers. "We are Legion. We do not forgive. We do not forget. Expect us."
Talking to Coleman and Olson, I think I'm getting a handle on Anonymous, and what it is and what it has done. And then I start going into Anonymous chatrooms, on IRC (internet relay chat), on the so-called "deep web", a place unsearchable by Google. And I realise I don't understand a thing. People just seem to be talking about random crap in acronyms I don't understand. It's confusingly chaotic. There are people entering the room every five seconds, people leaving, people changing their nicknames. And then there's the slang. Everyone is a fag: there are newfags (newcomers) and oldfags (old-timers) and fagfags (homosexuals) and moralfags (those perceived as taking the moral high ground). I realise that I am a newsfag. But I can't spot the plans to conquer the universe between the casual misogynism and the Aids jokes.
It's only on the reporter channel that I find people who can type in sentences and speak a language that I recognise as English. It's where self-selected Anons interact with the press and explain Anonymous's objectives. A 17-year-old called The_Poet, who tells me he's of Iranian parentage, says he became involved because of Operation Iran (or OpIran as it's known, Anonymous's campaign to help activists in Iran following the re-election of Mahmoud Ahmadinejad in 2009). He wanted to feel that he was doing something to help activists there. He's at school, he says, and he was about as computer-savvy as I am when he found the forum (ie, not very) but now he spends up to five or more hours a day on it. We chat away, and he tells me that having helped draft press releases and the like, and having become interested in world affairs, he's now considering diplomacy as a career. Though saying you're in Anonymous is possibly not the most obvious CV-building step, I venture.
It's late when we chat, around 1am UK time, and it's obvious he's in Europe somewhere, and it's school the next day. "Go to bed," I keep telling him. And I can't help but feel relieved when he tells me that he hasn't done anything illegal. Because via the encrypted chat protocol,Jabber (the first step to communicating with anyone in Anon world), I have chatted to another teenage Anon who was arrested, but never charged. He was lucky. "I was immature and stupid and reckless," he says. "I caused a lot of damage. Hurt a lot of innocent people. I put millions of people at risk of identity theft by leaking their passwords. It is never justified. Never."
But you did it because…?
"At the time, it seemed great fun."
Because fun is the bedrock of it all. "Trolling". Agitating. Taking the piss. Lying to, manipulating and taking in fellow internet users. Making a joke of everything. Jake suspects it's why it's so big in Britain. "Anon humour is quite dark and ironic and is pretty similiar to British humour," he says. The origin of "lulz" is a corruption of LOLs, meaning "laugh out loud" (and not "lots of love", as David Cameron thought when he put LOL at the end of a text to Rebekah Brooks).
It's all about the lulz. On 4chan, the "image board" (like a chat board, but where people came initially to share images, and whose /b/ – or "random" – board spawned the idea of Anonymous), anything goes. Just so long as it's not taken seriously. In fact, 4chan is the originator of hundreds of internet memes and viral videos, many of which have found their way into mainstream media.
It's easy to grow paranoid researching an article on Anonymous. Some terrible things have happened to people who have tangled with them. LulzSec's first collective action was against Aaron Barr, the CEO of an internet security firm, HBGary Inc, who claimed to have penetrated Anonymous and worked out who the central players were. To cut a long story short, he hadn't. LulzSec cracked his email password, downloaded 40,000 of his emails and released them in a torrent online for anyone to read.
Soon after I start hanging out in Anonymous chatrooms, my computer starts running slowly. My phone starts glitching. I start waking in the night with paranoid dreams. Quinn Norton, a reporter for Wiredmagazine, tells me that there is a strong culture within the group of not attacking the press. Even so, she suspects there may be a "cache of [my] documents somewhere, but they're not doing anything bad with them". The main thing to bear in mind if writing about them, she says, is "not to be an asshole".
I tell Jake about my paranoia. "I had that every day," he says. "Every morning I spent an hour doing searches and running certain scripts to make me feel better." But in his case, at least, it comes down to the old truism that just because you're paranoid, it doesn't mean that there isn't someone following you.
When Sabu, the Anonymous turncoat, was intercepted by the FBI, he disappeared offline for 24 hours, and when he came back his story didn't quite hang together. "I was completely suspicious of him," says Jake. "I was just too stupid to do anything about it. The idea that there was a group of Feds out to get me is the kind of stuff that happens in films. And I'm from the Shetland Islands. The FBI aren't going to be using one of my friends to spy on me. That happens in American action films, it is not real life. And it turns out that this is exactly what happened."
It was even stranger in some ways for Gabriella Coleman. She met Sabu in New York before any of the arrests, and immediately she knew that he must be working for the FBI. "I just knew," she says. "There was no way while he was still the world's most wanted hacker that he'd be wanting to meet me unless he'd been arrested. I knew he'd been arrested. But of course, I couldn't tell anyone. And that was really hard."
As an anthropologist studying Anonymous, at times, she says, she felt like a cross between "a detective and a priest". She watched the group take shape from the time of the Scientology uprising, and was online, in the chatrooms, at the moment it hit the big time: WikiLeaks.
Julian Assange had just released the US diplomatic cables, PayPal had announced that it would no longer accept donations on Wikileaks' behalf, and the internet was in uproar. "There were 7,000 people a time logging into the channels [chat rooms] when, usually, at the very most there would be 1,000," says Coleman. "More than 35,000 people downloaded the software."
"The software" was something called low orbit ion cannon (LOIC), and it meant that anyone with a few clicks of a mouse could become a "hacker", or at least a website attacker. Computers all over the world started sending packets of information to the PayPal and Visa websites, flooding its servers with a DDoS attack (distributed denial of service). In her book, Parmy Olson explains what actually happened. The PayPal and Visa websites were attacked successfully, but the main perpetrators weren't the "hive": the real firepower came from a couple of individuals with "botnets", illegal networks of compromised computers. Olson suggests the hive was a PR myth.
Still, it's a dangerous PR myth. A few months after the attacks, the FBI began to arrest people: people who had been drawn into Anonymous by the rhetoric, and either didn't realise that what they were doing was illegal, didn't have enough technical nous to cover their tracks, or simply didn't care. There were students, middle-class professionals… Anonymous wasn't just "the stereotypical kids living in their mum's basement", as Coleman puts it. "You'll probably find at least a couple in your IT department."
But when you look, for example, at the stunning visual nature of some of Anonymous's designs, that shouldn't come as too great a shock. Nor the brilliance of its operations in Egypt and Tunisia, and recently in Syria. At its most powerful and compelling, it has leaped to the defence of the internet itself. It was only when Anonymous started highlighting what was happening in Tunisia, for example, after the government banned Wikileaks in late 2010, that the rest of the world's press started paying attention to what became the Arab spring.
It is "political art as spectacle", according to Coleman. And it stands in opposition to almost everything mainstream society holds dear. Individual fame is neither sought nor welcomed. Anons who draw attention to themselves or claim to speak for Anonymous are ostracised. "It's almost like the polar opposite of everything that social media stands for," says Coleman. "They dramatise the importance of anonymity and privacy in an era when both are rapidly eroding. They are the anti-Facebook."
Being anonymous was the source of Jake's power: no one knew he was a kid. That, and the idea of the hive. "Everyone secretly knows that everyone else [in Anonymous] is kind of a lonely, geeky guy," says Jake. "But we all ignore it, and we all play this Anon game where we are all these invincible Anons."
And they were mostly guys. Anonymous is very male. In the Rules of the Internet, which came out of the 4chan site, Rule 30 states "there are no girls on the internet". The previous rule states that "all girls are men and all kids are undercover FBI agents", which contains a grain of truth.
At times it seems like Anonymous is a nest of slightly naive teenagers who are going to get into trouble. Teenagers have always acted out. Now they get to act out on a global stage, where just a few clicks of a mouse could lead to them spending the next 20 years behind bars. It's impossible to generalise, however. One figure behind one of the most popular Anonymous Twitter feeds told Coleman that he is a "member of the 1 per cent". "He's always in Paris on vacation," she tells me. "He's a very, very wealthy engineer and he's extremely careful in concealing his identity."
And on the #reporter channel, I chat for a while to an Anon called "nsh", who tells me that what we're witnessing is "the emergence of a new kind of identity, and with it a new form of identity politics. Traditional politics caters to fixed demographics, requires that participants have continuity of identity, can be located in geography. These are things that can be dispensed [with] online, and have been, with great effect."
He's a bit fond of his long words, nsh, and he likes his historical analogies. The random attacks on websites are really the contemporary version of writing a political slogan on a wall, he says. It's like online vandalism. "But the Vandals," he writes, "got the short stick, historically, didn't they?" He won't tell me anything about himself, but my guess is he's British and studying at one of our better universities. It's probably not a coincidence that both Cambridge and Oxford universities have been targeted in the past two weeks, as part of Anonymous's ongoing Operation Free Assange. If you're going to spray-paint a wall, you might as well do it somewhere your mates will see it. I like joshing with nsh, but I do feel the generational difference. When he makes a joke, he signals it with an emoticon. When I make a joke, he says "lol". I have to say, "Ha, ha!" because otherwise, I tell him, "I'll sound like Ali G. It'd be embarrassing. Like hearing your gran try to rap."
There is "no clear-cut moral assessment" of Anonymous that can be made, says Gabriella Coleman. "But if you hurt the internet, be careful, because the internet may well hurt you back."
In Spalding, Jake Davis can make even less sense of it, even though, for a time, he was it. His lawyers have made him read hundreds of pages of his chat logs as part of his case. "And I just think 'Who is this Topiary guy?'" he says. "He is just full of crap. We tried to do something funny, something political, something ideological, and it ended up just being a mess."
I'm possibly more confused about Anonymous now than when I started researching this article. When I look at pastebin.com, which is where hackers put up the latest data dumps, the results of their latest hacking and defacement operations, the targets seem random, perverse.
"Cadwal, there is always mad shit going on in Anonymous," an Anon called KnowledgeUS tells me. "It is even hard for an Anon to know all that's going on with Anonymous."
It makes me feel a little better. "Ha, ha!" I say. Because Anonymous is something that belongs to a new generation. It's their internet. Their Anonymous. And at my age, I'm just too old for the lulz.