5 ms·

I downloaded the indictment (edit: complaint, not indictment) from PACER: https://www.dropbox.com/s/z7u5rxcdajuvw6t/19718675504.pdf?dl=0 https://www.dropbox.com

I downloaded the indictment (edit: complaint, not indictment) from PACER: https://www.dropbox.com/s/z7u5rxcdajuvw6t/19718675504.pdf?dl=0 https://www.dropbox.com/s/z7u5rxcdajuvw6t/19718675504.pdf?dl...

roywiggins 7y ago
It's a wild ride. Who hacks in via Tor and then posts the data to a GitLab account under their own name?
- gowld 7y ago
  Could be a frame job, remorse, freakout, or some kind of dissociative or other personality disorder.
  - 0x8BADF00D 7y ago
    Or simply the age old quest to become (in)famous.
  - peteretep 7y ago
    A news-source I won't mention, because it's trash, did a full stalk of her on social media, and she seemed to be in an _erratic_ state of mind, but maybe that's just her personality.
- paxys 7y ago
  A lot of crime would go unsolved if people just kept their mouths shut. There's a human tendency to need to talk about things you've done, I guess, especially stuff that will get you "street cred".
  - SmellyGeekBoy 7y ago
    A lot of crime does indeed go unsolved because of people keeping their mouths shut.
icelancer 7y ago
Good lord. -Paige left code used in the "attack" on her GitHub. -Paige left text files with unencrypted data there, too. -Paige openly posted about it in an open (!!!) Slack channel and publicly named her VPN service of choice, which of course, matched access logs AND GitHub server logs. (Also tor, which the FBI agent was able to confirm and add yet another data point) -Paige said "I have a leak proof IPredator router setup." nice. Nice opsec there. Sheesh. EDIT: Thanks for the PACER share, by the way.
- dmix 7y ago
  It says she posted on "social media" (Twitter) about it, claiming to have Capital One information, "and that she recognizes that she acted illegally". Nothing about Opsec here. She basically asked them to arrest her. Probably had some of the usual motivations: "look at me I'm clever", "look at this stupid big company with bad security", or maybe used the opportunity for some political thing with banks. Not the sophisticated hacker type. But who knows. Edit: originally I asked about her Github profile listed in the complaint as paigea(5x * characters)thompson but was iffy on whether that was okay on HN.
  - icelancer 7y ago
    Almost certainly deactivated/seized and part of evidence. With some googling you can find her Keybase and other pages aplenty if you like. Almost all her content is scrubbed from the Internet, however. (this person's original comment was asking for her github profile)
    - deleted 7y ago
      [deleted]
  - curiousgal 7y ago
    https://gist.github.com/paigeadelethompson https://gist.github.com/paigeadelethompson Not much is left.
    - dmix 7y ago
xxpor 7y ago
Sorry to be pedantic, but this is merely a complaint. This is the initial document used to get an arrest warrant. An indictment is returned by a grand jury. http://www.mololamken.com/news-knowledge-29.html http://www.mololamken.com/news-knowledge-29.html
- iancarroll 7y ago
  Edited, thanks.
lavezzi 7y ago
Love that the FBI agent can't even spell the company's name correctly.
wp381640 7y ago
Intersting. She ran three commands - the first downloaded IAM credentials and the second then listed buckets using those credentials. I'm curious about what the first command could have been Also this all unfurled after a report to their security line from someone monitoring gists - that public feed as well as text dump sites have always been a good source of new vulnerabilities
deleted 7y ago
[deleted]

roywiggins 7y ago

It's a wild ride. Who hacks in via Tor and then posts the data to a GitLab account under their own name?

gowld 7y ago
Could be a frame job, remorse, freakout, or some kind of dissociative or other personality disorder.
- 0x8BADF00D 7y ago
  Or simply the age old quest to become (in)famous.
- peteretep 7y ago
  A news-source I won't mention, because it's trash, did a full stalk of her on social media, and she seemed to be in an _erratic_ state of mind, but maybe that's just her personality.
paxys 7y ago
A lot of crime would go unsolved if people just kept their mouths shut. There's a human tendency to need to talk about things you've done, I guess, especially stuff that will get you "street cred".
- SmellyGeekBoy 7y ago
  A lot of crime does indeed go unsolved because of people keeping their mouths shut.

icelancer 7y ago

Good lord. -Paige left code used in the "attack" on her GitHub. -Paige left text files with unencrypted data there, too. -Paige openly posted about it in an open (!!!) Slack channel and publicly named her VPN service of choice, which of course, matched access logs AND GitHub server logs. (Also tor, which the FBI agent was able to confirm and add yet another data point) -Paige said "I have a leak proof IPredator router setup." nice. Nice opsec there. Sheesh. EDIT: Thanks for the PACER share, by the way.

dmix 7y ago
It says she posted on "social media" (Twitter) about it, claiming to have Capital One information, "and that she recognizes that she acted illegally". Nothing about Opsec here. She basically asked them to arrest her. Probably had some of the usual motivations: "look at me I'm clever", "look at this stupid big company with bad security", or maybe used the opportunity for some political thing with banks. Not the sophisticated hacker type. But who knows. Edit: originally I asked about her Github profile listed in the complaint as paigea(5x * characters)thompson but was iffy on whether that was okay on HN.
- icelancer 7y ago
  Almost certainly deactivated/seized and part of evidence. With some googling you can find her Keybase and other pages aplenty if you like. Almost all her content is scrubbed from the Internet, however. (this person's original comment was asking for her github profile)
  - deleted 7y ago
    [deleted]
- curiousgal 7y ago
  https://gist.github.com/paigeadelethompson https://gist.github.com/paigeadelethompson Not much is left.
  - dmix 7y ago

xxpor 7y ago

Sorry to be pedantic, but this is merely a complaint. This is the initial document used to get an arrest warrant. An indictment is returned by a grand jury. http://www.mololamken.com/news-knowledge-29.html http://www.mololamken.com/news-knowledge-29.html

iancarroll 7y ago
Edited, thanks.

lavezzi 7y ago

Love that the FBI agent can't even spell the company's name correctly.

wp381640 7y ago

Intersting. She ran three commands - the first downloaded IAM credentials and the second then listed buckets using those credentials. I'm curious about what the first command could have been Also this all unfurled after a report to their security line from someone monitoring gists - that public feed as well as text dump sites have always been a good source of new vulnerabilities

deleted 7y ago

[deleted]