4 ms·

This reminds me of the Eldo Kim bomb threat: https://www.schneier.com/blog/archives/2013/12/tor_user_identi.html https://www.schneier.com/blog/archives/2013/12

This reminds me of the Eldo Kim bomb threat: https://www.schneier.com/blog/archives/2013/12/tor_user_identi.html https://www.schneier.com/blog/archives/2013/12/tor_user_iden... I guess the guy was the only one on the network using tor, making him easy to identify. So unless tor gets a huge userbase in DC, it seems like an encrypted url would be safer. (I don't know much about tor; am I wrong?) Everyone reads WaPo; no suspicion getting on that site. But I think the main difficulty in becoming a leaker is that you have to hide your mental evolution as you decide to become a leaker. By expressing your dissatisfaction to your colleagues before you decide to leak, you make yourself a suspect post-leak. Leakers should be aware that traditional investigative mechanisms are very powerful, and even if the crypto is rock solid, it is still very likely they'll be caught. It's then a question of whether they are willing to 'take one for the team'.

crb002 10y ago
SSH tunnel to a bitcoin paid server, connect from there. That's how the tool sending me threatening pictures of my house operated. Fortunately his opsec sucked and he scoped me out on LinkedIn with an account under the same pseudonym of Mr. "Dendler". One email to LinkedIn to make a backup of his account in case a subpoena was needed and he stoped immediately. Must have connected to them with a traceable means.
- iamatworknow 10y ago
  That seems pretty drastic (sending photos of your house). Mind if I ask why you were targeted? For what it's worth when I was a young jerkoff in college I was spamming on some forums and pissed off a guy who later sent me my college address. I got his IP from the forum, tracked down his ISP, and messaged them and the FBI about it along with the threatening chat logs and never heard from him again. Not that I think they took real action, but it was some script kiddie I wanted to set straight with the threat of real consequences. This was back around 2004 or 2005 when things were a bit more loose in terms of encryption and privacy online.
  - strathmeyer 10y ago
    An admin of HackerNews targeted me once because.... I posted a comment on a article that was later linked from here. Kept asking me what my boss would say when he talked to him on the phone. Except she was a woman and only took e mails.

crb002 10y ago

SSH tunnel to a bitcoin paid server, connect from there. That's how the tool sending me threatening pictures of my house operated. Fortunately his opsec sucked and he scoped me out on LinkedIn with an account under the same pseudonym of Mr. "Dendler". One email to LinkedIn to make a backup of his account in case a subpoena was needed and he stoped immediately. Must have connected to them with a traceable means.

iamatworknow 10y ago
That seems pretty drastic (sending photos of your house). Mind if I ask why you were targeted? For what it's worth when I was a young jerkoff in college I was spamming on some forums and pissed off a guy who later sent me my college address. I got his IP from the forum, tracked down his ISP, and messaged them and the FBI about it along with the threatening chat logs and never heard from him again. Not that I think they took real action, but it was some script kiddie I wanted to set straight with the threat of real consequences. This was back around 2004 or 2005 when things were a bit more loose in terms of encryption and privacy online.
- strathmeyer 10y ago
  An admin of HackerNews targeted me once because.... I posted a comment on a article that was later linked from here. Kept asking me what my boss would say when he talked to him on the phone. Except she was a woman and only took e mails.