LEGIONS OF THE UNDERGROUND▊
A U.S. hacker crew looked at the human-rights records of Iraq and China, decided it had had enough, and in the last week of 1998 called an IRC press conference to declare "cyber war" — up to and including "the complete destruction of all computer systems" in both countries. It was the kind of grand gesture the underground loves. And then the underground did something it had never done before: it turned on one of its own. Within days, the scene's royalty — Cult of the Dead Cow, the Chaos Computer Club, L0pht, Phrack, 2600 — signed a single joint statement saying, in effect, we do not do this. Faced with the whole family telling it to sit down, LoU sat down. This is the file on the crew that declared a war nobody in hacking would fight with them.
We strongly oppose any attempt to use the power of hacking to threaten or destroy the information infrastructure of any country, for any reason.
The international hacker coalition — Cult of the Dead Cow, L0pht Heavy Industries, Chaos Computer Club, Phrack, !Hispahack, Pulhas and others — joint statement, January 7, 1999, disowning Legions of the Underground's declaration of "cyber war" (as reported by HNN and CNN/IDG)
- WHO
- Legions of the Underground (LoU) — a 1990s U.S. hacker crew; members largely pseudonymous. Statements in this episode were released under the handle "Bronc Buster" FACT
- SCENE
- The late-1990s hacktivism moment — IRC, defacements, and the first arguments about where protest ends and cyberwar begins (see the scene timeline)
- THE DRAMA
- Declared "cyber war" on Iraq and China over human-rights abuses — then got publicly disowned by a coalition of the world's most respected hacker groups in the first joint statement of its kind, and backed down within days
- THE STATEMENT
- January 7, 1999: Cult of the Dead Cow, L0pht Heavy Industries, Chaos Computer Club, Phrack, !Hispahack, Pulhas — and 2600 and others in the contemporaneous account — jointly condemn the declaration FACT
- STATUS
- CLIMBED DOWN — LoU retracted, said it "will not take any actions against the systems, networks, or computers in China or Iraq," and blamed individual members freelancing
This file is not a verdict on the crew's cause; the human-rights record it was protesting is a matter of grim public fact. It is a record of a threshold moment — the day hacking's elder statesmen decided, in writing and in concert, that some things the scene could do it should not do. The through-line is the gap between the gesture (a declaration of war on two nations' networks) and the reckoning (a one-page statement from everyone who mattered, and a quiet retreat). What makes it drama rather than a press release is that the fight was internal: the loudest condemnation of these hackers came not from a government but from other hackers.
the drama timeline
ACT I — THE DECLARATION (Oct–Dec 1998)
A crew with a grievance and a modem decides that protest is not enough, and announces a war.
-
OCT 1998
The warm-up — a defacement with a message
Before the war talk, there was targeted hacktivism. Per contemporaneous reporting, LoU hacked into China's human-rights website — the kind of pointed, symbolic defacement the scene had long treated as legitimate protest. Nothing about it was destruction of infrastructure; it was a message left on a wall. The distinction is the whole story of what came next.
-
DEC 28, 1998
"Cyber war" — announced on IRC
Late on Tuesday, December 28, 1998, LoU convened an IRC press conference to announce its intention to disable the network infrastructure of Iraq and China — in CNN's account, calling for "the complete destruction of all computer systems." The crew cited the two governments' human-rights abuses as its reason, pointing in particular to death sentences handed down in China and weapons of mass destruction in Iraq. A crew of pseudonymous hackers had just declared war on two nation-states.
ACT II — THE SCENE DISOWNS ITS OWN (JAN 7, 1999)
For the first time in its history, the underground closes ranks — against a member.
-
JAN 7, 1999 · 12:00 GMT
The joint statement
At noon GMT, an international coalition of seven-plus of the oldest and most respected hacker groups released a single joint statement condemning the declaration. CNN's account named the signatories as Cult of the Dead Cow, L0pht Heavy Industries, Phrack, Pulhas, the Chaos Computer Club, and !Hispahack; the contemporaneous HNN report also counted 2600 and others among them. The core line was unambiguous: they "strongly oppose any attempt to use the power of hacking to threaten or destroy the information infrastructure of any country, for any reason." It was, by every account, the first time so many crews had ever signed one document.
-
JAN 7, 1999
The argument, not just the veto
The coalition did not merely say no; it made a case. "Though we may agree with LoU that the atrocities in China and Iraq have got to stop, we do not agree with the methods they are advocating. They are short-sighted and potentially counterproductive. One cannot legitimately hope to improve a nation's free access to information by working to disable its data networks." Declaring war, they added, "reduces the hacker to the level of the group or country that they are attacking" — and warns that "if hackers are establishing themselves as a weapon, hacking in general will be seen as an act of war." The scene was drawing a line under its own feet.
ACT III — THE CLIMBDOWN (JAN 7–13, 1999)
The war ends the way the boldest scene gestures usually do: with a walk-back and a face-saving footnote.
-
JAN 7–8, 1999
LoU stands down
The same night the condemnation landed, LoU released a response, credited to Bronc Buster, retreating from the declaration. The crew now said it "do[es] not support the damaging of other nations computers, networks, or systems in anyway" and that it "will not take any actions against the systems, networks, or computers in China or Iraq." The apparent contradiction, LoU said, came from individual members acting on their own rather than any concerted effort by the group. It reserved the right to "take action against other Chinese Systems" in the future — but limited to "pure hactivism," not the destruction of a country's information infrastructure.
-
JAN 13, 1999
The record goes to press
By the time the mainstream press caught up — CNN and the IDG News Service ran Mary Lisbeth D'Amico's dispatch from Munich on January 13 — the story was no longer "hackers threaten Iraq and China." It was "hackers spar over cyber war on Iraq, China": a story about the scene policing itself. The support for the coalition, HNN reported, had been "overwhelming," arriving from hackers, groups, and even corporations. LoU's war lasted about ten days, and its most lasting product was the statement written to stop it.
both sides, on the record
The coalition's case: a declaration of "war" on the networks of Iraq and China was reckless on its face. Disabling a country's data infrastructure punishes its ordinary users — the dissidents, students, and ordinary citizens LoU claimed to be helping — not its regime, and "one cannot legitimately hope to improve a nation's free access to information by working to disable its data networks" [2].
It legitimizes the thing hackers should fear: by casting itself as a weapon, LoU handed governments the exact frame they wanted — that hacking is an act of war and hackers are combatants. The coalition's warning was self-interested and correct: "if hackers are establishing themselves as a weapon, hacking in general will be seen as an act of war" [2].
The grievance was real: LoU was not protesting nothing. The human-rights abuses it named — death sentences in China, WMD in Iraq — were not invented for the occasion, and its earlier conduct (the October defacement of China's human-rights site) was symbolic protest, not infrastructure destruction [2].
LoU says the war was never group policy: in its own retraction, LoU said it never endorsed destroying other nations' systems and that the war talk came from individual members freelancing, not a concerted group effort. It committed to "pure hactivism" going forward and explicitly disclaimed action against China's or Iraq's networks [1].
It listened: whatever the declaration was, LoU stood down within days of the coalition's statement — the opposite of the ego-driven escalation the scene feared. The system the coalition was trying to build (hackers policing hackers) worked on its very first test [1].
YOU DECIDE
The cause was defensible and the method was not, and the people who said so loudest were not cops or courts but hacking's own elders. Strip the war rhetoric away and you are left with a crew that overreached, a coalition that drew a first-of-its-kind red line, and a retreat that arrived before a single Iraqi or Chinese system was touched. Whether LoU truly meant to level two nations' networks or a few members simply got loud on IRC, the outcome is the same: the underground decided, in public and in unison, that "war" was a word it would not let one of its own use in its name.
The archive does not enlist. It keeps the declaration — and the one page that made a war disappear.
evidence locker
PRIMARY / CONTEMPORANEOUS RECORD
Hacker News Network (Space Rogue) — "LoU Speaks," Jan 8, 1999 FACT — the contemporaneous scene report: LoU's Dec 28, 1998 IRC press conference and "cyber war" declaration, the Jan 7 joint statement by "over seven of the world's oldest and most respected hacker groups" (Chaos Computer Club, Phrack, 2600, Cult of the Dead Cow, and others), the verbatim core line, and LoU's same-night retraction credited to Bronc Buster.
spacerogue.net/hnn/010899.html CNN / IDG News Service — "Hackers spar over cyber war on Iraq, China," Jan 13, 1999 (Mary Lisbeth D'Amico) FACT — names the six signatory groups (Cult of the Dead Cow, L0pht Heavy Industries, Phrack, Pulhas, Chaos Computer Club, !Hispahack), quotes the joint statement at length, and records LoU's stated reasons (death sentences in China, WMD in Iraq) and October human-rights-site defacement.
cnn.com/TECH/computing/9901/13/cyberwar.idg/
CONTEXT & CROSS-LINKS
Wikipedia — Hacktivism ATTRIBUTED — secondary summary of the December 1998 LoU declaration against Iraq and China and the opposing hackers' condemnation; cites the CNN report above.
en.wikipedia.org/wiki/Hacktivism troll.fan — Crew Rivalries CROSS-LINK — the scene's internal fights, of which "everyone versus LoU" is the rare one that ended in consensus.
troll.fan/crew-rivalries.html
The standard. The declaration, the January 7, 1999 joint statement, the six-plus signatory groups, and LoU's retreat are matters of contemporaneous public record, stated as fact and sourced to Space Rogue's Hacker News Network report and the CNN/IDG dispatch, both live. The coalition's words and LoU's climbdown are quoted from those sources. LoU's members were largely pseudonymous; the only handle named here is "Bronc Buster," credited in the record with releasing LoU's statements, and no handle is tied to any legal name. Characterizations are attributed to their sources; no motive is asserted to any person. If a line here couldn't survive scrutiny, it wouldn't be on the page.