6 ms·

I doubt anyone is after them because even 50K pages of paper /ink is not much financial damage and I'm sure very few whose printer joined the party bothered rep

I doubt anyone is after them because even 50K pages of paper /ink is not much financial damage and I'm sure very few whose printer joined the party bothered reporting it. Am I missing something?

bch 8y ago
Even if the costs were minimal, the more attention they get the better example they’ll set if caught. You wouldn’t steal a car.[0] [0] https://youtu.be/HmZm8vNHBSU https://youtu.be/HmZm8vNHBSU
- deleted 8y ago
  [deleted]
- isostatic 8y ago
  You wouldn't steal a baby. [0] https://www.youtube.com/watch?v=ALZZx1xmAzg https://www.youtube.com/watch?v=ALZZx1xmAzg
Buge 8y ago
Weev found that certain urls had private AT&T user information on them, and scraped them to get 114k users' information. Then he notified a journalist and sent the information to the journalist as proof. He was found to have done $73k damages. Why? AT&T sent a physical letter to all 114k people, and that was the cost of the postage. Convicted to 41 months in prison. https://techcrunch.com/2013/03/22/weev-files-appeal-gets-new-lawyer/ https://techcrunch.com/2013/03/22/weev-files-appeal-gets-new...
- beezischillin 8y ago
  Wow! This is disgusting. In a sane reality AT&T would've been the one paying damages...
- hooloovoo_zoo 8y ago
  However, he did win on appeal and did not serve most of the conviction. https://www.eff.org/press/releases/appeals-court-overturns-andrew-weev-auernheimer-conviction https://www.eff.org/press/releases/appeals-court-overturns-a...
  - Buge 8y ago
    Yes, but the overturn wasn't based on urls, or scraping, or disclosure, or security, or damages, it was based on him being charged in the wrong state. The court system still thinks everything else about the case was fine.
- CaptainZapp 8y ago
  Let's not forget that this gentleman is a neo nazi and white supremacist of the vilest sort.[1] I may be downvoted to hell and then some, but it's impossible to look beyond those facts before mythologizing him into some sort of hacker hero https://en.wikipedia.org/wiki/Weev#After_prison https://en.wikipedia.org/wiki/Weev#After_prison
  - shakna 8y ago
    One can both dislike a person and believe their actions were above board. He doesn't have to be hero worshipped - his actions in this particular case should stand on their own. His terrible beliefs may only come into it if they are relevant to what actions he performed. Serving prison time for notifying people of a serious privacy breach doesn't seem to be a balanced approach.
    - CaptainZapp 8y ago
      I don't agree what happened to him based on his "hack" and deem AT&T's (and the legal system's) actions despicable in this manner. Reporting on his "hacker hero antics" without putting it in context of what a personality he really is is, in my book, whitewashing of history and engaging in revisionism.
      - shakna 8y ago
        Tone can be hard to convey over the internet - try and imagine this conversation is happening in a cafe over a coffee. I'm calm, and not trying to disagree with you for internet points or anything of the like. Just trying to have a conversation. I just lack the skill to write things in a sensitive enough manner. --- Whilst I agree with you in part, I also believe that over-emphasising personality traits or behaviours of a person also engages in revisionism. One should be able to view an event entirely separate from the person, if the person's generalised behaviour isn't relevant. We don't need to think about the man at all, in my own opinion, in this particular case. Redact his name if you have concerns that the man is unworthy of attention. Adding complaints of a person to any mention of them is calling for jury and judgement. It's a distraction from what's important. It takes an event that should be discussed and explored, and twists it so you are forced to take sides about the person. You can use these tactics to derail any conversation. It's a debating tactic commonly used in politics to avoid answering questions. It might be better in future just to say something along the lines of "Aside: Can we not use his name? The guy is actually a racist, and has a pretty deplorable past." We don't want to get lost in the debate of a man's merits, when his actions may themselves be meritorious.
jaabe 8y ago
Europol just shut down a site where you could buy DDOS attacks and as a result 150.000 people who had done so were targeted by police[1]. DDOSing has been a scourge. I work in the public sector of Denmark and we see then from time to time, and, you frankly feel rather helpless. I mean, these days we have ways of dealing with them technically, but I don’t think anyone ever expected the culprits to face any sort of consequences. Yet here we are. https://www.dr.dk/nyheder/indland/dansk-politi-med-i-kaempe-politiaktion-150000-personer-bestilte-fire-millioner https://www.dr.dk/nyheder/indland/dansk-politi-med-i-kaempe-...
- rebuilder 8y ago
  150 000 people bought DDOS services? That boggles the mind.
  - r1ch 8y ago
    These services are / were very popular in online gaming to knock opponents offline, you only need a few minutes of DDoS time to kill a residential connection. Console games in particular are quite vulnerable as a good amount of them still use peer to peer connections so you can easily find IPs to target. Other techniques such as booby trapped links, P2P voice chat, fake servers etc can find player IPs for PC games.
- alasdair_ 8y ago
  The site had 151K registered usernames. This doesn't at all mean that there 151,000 actual people involved - it just sounds better that way in the press release. More information here: https://www.europol.europa.eu/newsroom/news/authorities-across-world-going-after-users-of-biggest-ddos-for-hire-website https://www.europol.europa.eu/newsroom/news/authorities-acro...

I doubt anyone is after them because even 50K pages of paper /ink is not much financial damage and I'm sure very few whose printer joined the party bothered reporting it. Am I missing something?

bch 8y ago

Even if the costs were minimal, the more attention they get the better example they’ll set if caught. You wouldn’t steal a car.[0] [0] https://youtu.be/HmZm8vNHBSU https://youtu.be/HmZm8vNHBSU

deleted 8y ago
[deleted]
isostatic 8y ago
You wouldn't steal a baby. [0] https://www.youtube.com/watch?v=ALZZx1xmAzg https://www.youtube.com/watch?v=ALZZx1xmAzg

Buge 8y ago

Weev found that certain urls had private AT&T user information on them, and scraped them to get 114k users' information. Then he notified a journalist and sent the information to the journalist as proof. He was found to have done $73k damages. Why? AT&T sent a physical letter to all 114k people, and that was the cost of the postage. Convicted to 41 months in prison. https://techcrunch.com/2013/03/22/weev-files-appeal-gets-new-lawyer/ https://techcrunch.com/2013/03/22/weev-files-appeal-gets-new...

beezischillin 8y ago
Wow! This is disgusting. In a sane reality AT&T would've been the one paying damages...
hooloovoo_zoo 8y ago
However, he did win on appeal and did not serve most of the conviction. https://www.eff.org/press/releases/appeals-court-overturns-andrew-weev-auernheimer-conviction https://www.eff.org/press/releases/appeals-court-overturns-a...
- Buge 8y ago
  Yes, but the overturn wasn't based on urls, or scraping, or disclosure, or security, or damages, it was based on him being charged in the wrong state. The court system still thinks everything else about the case was fine.
CaptainZapp 8y ago
Let's not forget that this gentleman is a neo nazi and white supremacist of the vilest sort.[1] I may be downvoted to hell and then some, but it's impossible to look beyond those facts before mythologizing him into some sort of hacker hero https://en.wikipedia.org/wiki/Weev#After_prison https://en.wikipedia.org/wiki/Weev#After_prison
- shakna 8y ago
  One can both dislike a person and believe their actions were above board. He doesn't have to be hero worshipped - his actions in this particular case should stand on their own. His terrible beliefs may only come into it if they are relevant to what actions he performed. Serving prison time for notifying people of a serious privacy breach doesn't seem to be a balanced approach.
  - CaptainZapp 8y ago
    I don't agree what happened to him based on his "hack" and deem AT&T's (and the legal system's) actions despicable in this manner. Reporting on his "hacker hero antics" without putting it in context of what a personality he really is is, in my book, whitewashing of history and engaging in revisionism.
    - shakna 8y ago
      Tone can be hard to convey over the internet - try and imagine this conversation is happening in a cafe over a coffee. I'm calm, and not trying to disagree with you for internet points or anything of the like. Just trying to have a conversation. I just lack the skill to write things in a sensitive enough manner. --- Whilst I agree with you in part, I also believe that over-emphasising personality traits or behaviours of a person also engages in revisionism. One should be able to view an event entirely separate from the person, if the person's generalised behaviour isn't relevant. We don't need to think about the man at all, in my own opinion, in this particular case. Redact his name if you have concerns that the man is unworthy of attention. Adding complaints of a person to any mention of them is calling for jury and judgement. It's a distraction from what's important. It takes an event that should be discussed and explored, and twists it so you are forced to take sides about the person. You can use these tactics to derail any conversation. It's a debating tactic commonly used in politics to avoid answering questions. It might be better in future just to say something along the lines of "Aside: Can we not use his name? The guy is actually a racist, and has a pretty deplorable past." We don't want to get lost in the debate of a man's merits, when his actions may themselves be meritorious.

jaabe 8y ago

Europol just shut down a site where you could buy DDOS attacks and as a result 150.000 people who had done so were targeted by police[1]. DDOSing has been a scourge. I work in the public sector of Denmark and we see then from time to time, and, you frankly feel rather helpless. I mean, these days we have ways of dealing with them technically, but I don’t think anyone ever expected the culprits to face any sort of consequences. Yet here we are. https://www.dr.dk/nyheder/indland/dansk-politi-med-i-kaempe-politiaktion-150000-personer-bestilte-fire-millioner https://www.dr.dk/nyheder/indland/dansk-politi-med-i-kaempe-...

rebuilder 8y ago
150 000 people bought DDOS services? That boggles the mind.
- r1ch 8y ago
  These services are / were very popular in online gaming to knock opponents offline, you only need a few minutes of DDoS time to kill a residential connection. Console games in particular are quite vulnerable as a good amount of them still use peer to peer connections so you can easily find IPs to target. Other techniques such as booby trapped links, P2P voice chat, fake servers etc can find player IPs for PC games.
alasdair_ 8y ago
The site had 151K registered usernames. This doesn't at all mean that there 151,000 actual people involved - it just sounds better that way in the press release. More information here: https://www.europol.europa.eu/newsroom/news/authorities-across-world-going-after-users-of-biggest-ddos-for-hire-website https://www.europol.europa.eu/newsroom/news/authorities-acro...