Goldman Sachs Code Torrent
July 7th, 2009.rar 32MB. A distributed real-time co-located high-frequency trading platform… A very low latency (microseconds) event-driven market data processing, strategy and order submission engine.
Update: Some Readers Don’t Know What the Hell Any of This Means
In short: I gamed Google and tricked people who were looking for the stolen Goldman Sachs software to come to my site… So I could see which organizations they were involved with. It’s a mystery to me why more organizations don’t hide what their people are doing online (ask any 12 year old computer enthusiast how this is done if you don’t know), but for whatever reason, many of them don’t.
The bit of text above that starts out, “.rar 32MB…” Was just fodder for Google. Knowing how Google works, I knew it would show up in the index like this:
Doesn’t that look yummy? That’s the point.
Why is this bit of text an image?
Initially, I wanted to let regular readers know what I was up to, but I didn’t want Google to display my tip off in search results. Also, some people think that they’re pulling a 007 move by viewing search results in Google’s cache. But from where do the images load? Hint: Not from Google.
—End Update—
UPDATE: Goldman Sachs Sniffing Around
This story is making the rounds through Goldman Sachs now. It’s 14 visits from five different hosts at the moment:
figment22.gs.com 12.47.208.50
figment24.gs.com 206.230.48.34
figment25.gs.com 206.230.48.50
figment27.gs.com 12.47.208.58
cflodc1.gs.com 204.4.131.140
They’re a combination of direct hits and referrals from zerohedge or takeareport.
—End Update—
I have not seen as much activity from Goldman Sachs as I thought I would on my little honey pot. This is all so far. Then again, this hasn’t even been up 24 hours yet:
204.4.131.140 2009-07-07 12:01:17
/?paged=2
Referrer: http://www.google.com/search?hl=en&rls=com.microsoft%3A*&q=Mr.+Aleynikov+strat&aq=f&oq=&aqi=
Hostname: cflodc1.gs.com
* SEARCH ENGINE: Google (page: 1)
* KEYWORDS: Mr. Aleynikov strat
Other interesting visits:
Citadel Investment Group
64.22.160.1 2009-07-07 11:53:59
/?p=9712
Referrer: Direct hit
Hostname: cit1.citadelgroup.com
—
InfoNgen is the first Discovery Engine for business, finance and information professionals that knows what’s critical to you. Extracts relevant and timely information buried on the web, within emails, in desktop documents or on network drives. Identifies trends and connections between topics, companies or products that might not otherwise be apparent. And delivers results in real time.
63.87.234.186 2009-07-07 05:12:58
/?p=9712
Referrer: Direct hit
Hostname: host186.infongen.com
—
Batterymarch is a global equity specialist, investing in approximately 50 countries for clients around the world. Our unique quantitative strategies combine the power of technology with the wisdom of experienced fundamental investors.
199.58.12.24 2009-07-07 21:12:51
/?p=9712
Referrer: http://www.google.com/reader/view/
Hostname: smtp.batterymarch.com
—
U.S. Army
128.190.125.2 2009-07-07 17:59:55
/?p=9712
Referrer: Direct hit
Hostname: wks125-2.belvoir.army.mil
—
Clough Capital
74.201.46.1 2009-07-07 17:38:18
/?p=9712
Referrer: Direct hit
Hostname: host1.cloughcapital.com
—
Microsoft
131.107.0.101 2009-07-07 17:09:44
/?p=9712
Referrer: From your blog
Hostname: tide531.microsoft.com
—
The Benefit Company
66.184.209.18 2009-07-07 16:20:15
/?p=9712
Referrer: Direct hit
Hostname: 66.184.209.18
—
At ECBridge™, we know that information is the lifeblood of today’s business. Our experienced, international team helps clients plan, implement and manage innovative e-business solutions. We can help your firm gain competitive advantage, by extending the reach of your company’s information.
207.111.251.165 2009-07-07 16:12:14
/?p=9712
Referrer: Direct hit
Hostname: mail.ecbridge.com
—
New York City Police Department
206.212.185.216 2009-07-07 12:49:12
/?p=9712
Referrer: From your blog
Hostname: 206.212.185.216
—
City of Houston
204.235.227.149 2009-07-07 12:05:43
/?p=9712
Referrer: From your blog
Hostname: 204.235.227.149
—
Note: U.S. Department of Homeland Security is obsessed with this post, and with Cryptogon, today. There are at least a couple of DHS employees who read Cryptogon as a matter of routine, but the activity over the last 24 hours shows 10 visits, 43 page views from five different hosts/IPs:
sbcp5.dhs.gov 204.248.24.164
bcp1.cbp.dhs.gov 63.167.255.151
bcp3.cbp.dhs.gov 63.167.255.153
sbcp6.dhs.gov 204.248.24.165
sbcp3.dhs.gov 204.248.24.162
It would be interesting to move to a subscription model. Would DHS subscribe to Cryptogon? *chortling*
Hee hee, you nasty boy!
*appreciation*
Kevin,
I think it is tres interesante that you know how to read who hits your website. I am totally unschooled in such things and when I see what you find. Wow.
@ Eileen
It’s much easier to do this now than it was in the olden days (1990s). But it would be even easier for the people who are browsing sites to hide the organizations that they are associated with (from me) by using proxy servers. The “from me” part is an important qualifier. While I don’t make an effort to determine real IPs of people using proxy servers, there are a number of ways to do that on the server side and it would be a pretty trivial task for Them to do it, with both endpoints compromised.
Damnit Kevin! I was looking forward to checking out the source!