4 ms·

I'd like to know on what grounds?

by cjsuk 9y ago

LyndsySimon 9y ago
Same here. I reserve judgement until there's more information on the reason for his arrest.
- cjsuk 9y ago
  Exactly. This may be entirely unrelated to wannacry.
wudangmonk 9y ago
I guess not everyone was happy that he stopped Wannacry. US agencies in particular.
- ryanlol 9y ago
  This is utter nonsense. He didn't stop Wannacry. The Wannacry devs stopped Wannacry, if he didn't grab the domain it'd have been picked up by some other TI firm within minutes or hours.
  - slurppurple 9y ago
    I mean he had to notice that it was contacting that website, might not have been an obvious thing to look for.
    - ryanlol 9y ago
      Nah, this was one of the first things you'd notice. No need to reverse the binary, you see the domain in pcaps when you run it. Registering unregistered domains the malware connects to is a very obvious thing to do, in this case he got "lucky".
  - araneae 9y ago
    I mean, he literally stopped WannaCry. Just because someone else could have stopped it, doesn't mean he didn't stop it. That's... just a fact...
    - ryanlol 9y ago
      You're mixing up could and would here. This was inevitable because of how WannaCry was designed.
      - vanattab 9y ago
        If Newton had not discovered and articulated his 3 laws of motion when he did someone else WOULD have in the decades that followed. Is it an error to say Newton was the first to discover his laws of motion? By this definition how can anything be attributed to anyone?
        ryanlol 9y ago
        Do you attribute a car bombing to the person that set up the bomb or the guy that inevitably turned on the car and set off the bomb? In this case WannaCry creators built a system that would inevitably be triggered within a few hours from the malware going live. I think it is meaningless to attribute the WannaCry killswitch to him instead of the authors. If he hadn't registered the domain some other threat intelligence firm would've done it moments later.
justboxing 9y ago
EDIT: Here's the indictment: https://www.scribd.com/document/355466286/Kronos-Indictment-R https://www.scribd.com/document/355466286/Kronos-Indictment-... > for "his role in creating and distributing the Kronos banking Trojan," according to a spokesperson from the U.S. Department of Justice. > The charges relate to alleged conduct occurring between July 2014 and July 2015. ====== They are awfully quiet about the charges. > It is not clear why Hutchins has been arrested or if he will face charges in the US. The US Marshals office confirmed it was the FBI who arrested Hutchins. Source: OP and on motherboard.vice.com > The friend told Motherboard they "tried to visit him as soon as the detention centre opened but he had already been transferred out." Motherboard granted the source anonymity due to privacy concerns. > "I've spoken to the US Marshals again and they say they have no record of Marcus being in the system. At this point we've been trying to get in contact with Marcus for 18 hours and nobody knows where he's been taken," the person added. "We still don't know why Marcus has been arrested and now we have no idea where in the US he's been taken to and we're extremely concerned for his welfare." Source: https://motherboard.vice.com/en_us/article/ywp8k5/researcher-who-stopped-wannacry-ransomware-detained-in-us-after-def-con https://motherboard.vice.com/en_us/article/ywp8k5/researcher...

I'd like to know on what grounds?

by cjsuk 9y ago

I'd like to know on what grounds?

LyndsySimon 9y ago

Same here. I reserve judgement until there's more information on the reason for his arrest.

cjsuk 9y ago
Exactly. This may be entirely unrelated to wannacry.

wudangmonk 9y ago

I guess not everyone was happy that he stopped Wannacry. US agencies in particular.

ryanlol 9y ago
This is utter nonsense. He didn't stop Wannacry. The Wannacry devs stopped Wannacry, if he didn't grab the domain it'd have been picked up by some other TI firm within minutes or hours.
- slurppurple 9y ago
  I mean he had to notice that it was contacting that website, might not have been an obvious thing to look for.
  - ryanlol 9y ago
    Nah, this was one of the first things you'd notice. No need to reverse the binary, you see the domain in pcaps when you run it. Registering unregistered domains the malware connects to is a very obvious thing to do, in this case he got "lucky".
- araneae 9y ago
  I mean, he literally stopped WannaCry. Just because someone else could have stopped it, doesn't mean he didn't stop it. That's... just a fact...
  - ryanlol 9y ago
    You're mixing up could and would here. This was inevitable because of how WannaCry was designed.
    - vanattab 9y ago
      If Newton had not discovered and articulated his 3 laws of motion when he did someone else WOULD have in the decades that followed. Is it an error to say Newton was the first to discover his laws of motion? By this definition how can anything be attributed to anyone?
      - ryanlol 9y ago
        Do you attribute a car bombing to the person that set up the bomb or the guy that inevitably turned on the car and set off the bomb? In this case WannaCry creators built a system that would inevitably be triggered within a few hours from the malware going live. I think it is meaningless to attribute the WannaCry killswitch to him instead of the authors. If he hadn't registered the domain some other threat intelligence firm would've done it moments later.

justboxing 9y ago

EDIT: Here's the indictment: https://www.scribd.com/document/355466286/Kronos-Indictment-R https://www.scribd.com/document/355466286/Kronos-Indictment-... > for "his role in creating and distributing the Kronos banking Trojan," according to a spokesperson from the U.S. Department of Justice. > The charges relate to alleged conduct occurring between July 2014 and July 2015. ====== They are awfully quiet about the charges. > It is not clear why Hutchins has been arrested or if he will face charges in the US. The US Marshals office confirmed it was the FBI who arrested Hutchins. Source: OP and on motherboard.vice.com > The friend told Motherboard they "tried to visit him as soon as the detention centre opened but he had already been transferred out." Motherboard granted the source anonymity due to privacy concerns. > "I've spoken to the US Marshals again and they say they have no record of Marcus being in the system. At this point we've been trying to get in contact with Marcus for 18 hours and nobody knows where he's been taken," the person added. "We still don't know why Marcus has been arrested and now we have no idea where in the US he's been taken to and we're extremely concerned for his welfare." Source: https://motherboard.vice.com/en_us/article/ywp8k5/researcher-who-stopped-wannacry-ransomware-detained-in-us-after-def-con https://motherboard.vice.com/en_us/article/ywp8k5/researcher...