Hasta La Creative!

Smuggling Goatse into digital billboards is an old school (and gross) hack-prank by now, I know that I’ve tried it , but seldom as successful as this one. Atlanta police are investigating after Goatse appeared on a digital billboard in Buckhead on Saturday evening. It wasn’t a small billboard either, and that image can make anyone gag at first sight, so people were obviously very upset. Several people who saw it even called 911.

11 alive reports that ‘Atlanta City Councilman Howard Shook is hoping police will catch whoever is behind what he said is hardly an innocent prank’.

“It is highly disturbing, aggravating, obnoxious and illegal,” said Shook.

Dan Tentler a espected security researcher who works for Carbon Dynamics, has tweeted that he’s been in contact with the company who owns the billboard, but was brushed off.
“I wanted to let you guys know that your customers are deploying these signs and not changing the default passwords, which, if an actual bad guy found this out, could lead to some unwanted tinkering with the signs, possibly some defacement,” Tentler wrote in an email to the company back in April. Now Dan Tentler will probably find his name forever linked with “goatse bilboard” in Google searches for trying to be helpful.

Yesterday, “not intersested”. pic.twitter.com/2SkNg1tT3u— Dan Tentler (@Viss) May 14, 2015

“It would probably be a good idea to do one or more of the following: Contact the owners of the signs, ask them politely to apply some firewall rules … reconfigure the security posture of the signs … at least notify the customers that there is a potential security risk” wrote Dan Tentler, full sanitized email below.

oops, had to nuke the april 8 tweet. Here’s a better sanitized one: pic.twitter.com/uqNpbLukO0— Dan Tentler (@Viss) May 14, 2015

Many things are connected to the internet, easily found via shodan.io, lots with no reason to really be connected to the Internet in this manner. Here’s a toilet screen in Singapore for example.

USA Today reported that a group calling themselves ‘Assange Shuffle Collective’ claimed responsibility for the prank on Reddit. Meanwhile, many more electronic billboards like this are out there waiting to be hijacked.

Wonderful. When you google my name in the first page of results you see “GOATSE BILBOARD HORRIFIES DRIVERS IN ATLANTA”.
Thanks for that.— Dan Tentler (@Viss) May 18, 2015