4 ms·
A Year Later, Cybercrime Groups Still Rampant on Facebook
- ryanlol 7y agoI wonder if these are “real” cybercrime groups or just people from poor countries trying to make a living by scamming each other. I would expect these FB groups to be more like scam sites Alboraaq or Cardmafia than “real” crime forums like Verified.
- HenryBemis 7y agoSo when poor people are scamming other poor people 'it is ok'? It is only bad when middle class or rich lose money? I am surprised Krebs is doing that and e.g. Western Union (as he mentioned in his article - Twitter) isn't actively hunting these down every-single-day!!
- cronix 7y agoWhere did you read that GP said it was "OK," or whether they thought anything was "bad" or not?
- jtbayly 7y agoImplication is there by saying it wasn't "real" cybercrime
- codetrotter 7y agoI don’t think it necessarily implies that. He could mean in terms of scale and sophistication for example.
- ryanlol 7y agoThe implication was that these groups probably mostly consist of scammers scamming scammers and may act to deter the kind of cybercrime which actually affects innocent people.
- rhizome 7y agoThe scare quotes imply that it's unclear what definition of "cybercrime groups" is being described.
- Panino 7y agoIt's good to see Krebs ending his piece with a conversation starter on the costs/benefits of using Facebook, and whether people are changing their usage or deleting their accounts. I wonder when this discussion will expand from tech sites to the general press? Years ago Krebs did something similar whenever there was a new hole in the Java interpreter. He regularly advocated that people remove Java support from their web browsers, and that they consider removing it entirely from their computers if they don't use any Java apps. In a related comment found below the original article, "MrB" writes how Facebook still tracks people without accounts. This is why I block Facebook's BGP prefixes in my router, their domains in my DNS resolver, and key hostnames in /etc/hosts. With this combination, Facebook is unlikely to be able to track me even when I'm in between setups. For example it should work in cases where I temporarily fail to re-populate /etc/hosts while doing testing, or set up a new computer (still using the same router), etc. And since their IP blocks and domains are relatively stable, it doesn't take much babysitting on my part.
- reutinger 7y agoWhat're the hostnames that you put into /etc/hosts?
- Panino 7y agoIt's pretty minimal, at the moment only connect.facebook.net, connect.facebook.com, pixel.facebook.com, and apparently facebookinc.122.2o7.net. If I had to rely solely on it I'd add a lot of hosts and in particular known ones under fbcdn.{net,com}. In contrast, DNS and IP blocking is extensive.
- opwieurposiu 7y agoYou can find blocklists on github, here is an example: https://github.com/jmdugan/blocklists/blob/master/corporations/facebook/all https://github.com/jmdugan/blocklists/blob/master/corporatio...
- jammygit 7y agoI'm curious. Its so hard to be anonymous online. How do they do it?