People seem to agree that it is 'too good to be true' so that is must be a hoax. I'm still a little worried and I think it is good to have some IP based access lists ready when things become more clear in the coming days.
Not just a hoax, they're out to discredit anti-sec. Anti-sec doesn't use gmail, they always sign their posts, and they certainly do not issue warnings.
Anti-sec with a ssh 0-day would've tripped over itself rm'ing boxes left and right. It's like Bin Laden warning people he is in California and would be causing great mayhem, Real Soon Now.
1) The more we talk about anti-sec the bigger anti-sec gets.
2) These guys are not exactly teen pop idols, ever ready to dispute a rumor or a tabloid story; there is a good bounty on their necks and they seem to have "better" things to do.
3) The more security mailinglists and other communication venues get trolled and haoxed, the more the security industry looks like the joke it is, and that would make anti-sec kinda happy.
