4 ms·

Good lord. -Paige left code used in the "attack" on her GitHub. -Paige left text files with unencrypted data there, too. -Paige openly posted about it in an

Good lord. -Paige left code used in the "attack" on her GitHub. -Paige left text files with unencrypted data there, too. -Paige openly posted about it in an open (!!!) Slack channel and publicly named her VPN service of choice, which of course, matched access logs AND GitHub server logs. (Also tor, which the FBI agent was able to confirm and add yet another data point) -Paige said "I have a leak proof IPredator router setup." nice. Nice opsec there. Sheesh. EDIT: Thanks for the PACER share, by the way.

dmix 7y ago
It says she posted on "social media" (Twitter) about it, claiming to have Capital One information, "and that she recognizes that she acted illegally". Nothing about Opsec here. She basically asked them to arrest her. Probably had some of the usual motivations: "look at me I'm clever", "look at this stupid big company with bad security", or maybe used the opportunity for some political thing with banks. Not the sophisticated hacker type. But who knows. Edit: originally I asked about her Github profile listed in the complaint as paigea(5x * characters)thompson but was iffy on whether that was okay on HN.
- icelancer 7y ago
  Almost certainly deactivated/seized and part of evidence. With some googling you can find her Keybase and other pages aplenty if you like. Almost all her content is scrubbed from the Internet, however. (this person's original comment was asking for her github profile)
  - deleted 7y ago
    [deleted]
- curiousgal 7y ago
  https://gist.github.com/paigeadelethompson https://gist.github.com/paigeadelethompson Not much is left.
  - dmix 7y ago
    That also links to her gitlab profile which contains her resume/CV in PDF format (among other OSS work). She did indeed work at Amazon on AWS in 2016 , specifically on s3: https://i.imgur.com/DRBKYsc.png https://i.imgur.com/DRBKYsc.png That PDF also contains her home address and other personal information so I'd rather not link directly.
  - dvdbloc 7y ago
    In https://gist.github.com/paigeadelethompson/620192d8c4b344d24fe3f566a9590e00 https://gist.github.com/paigeadelethompson/620192d8c4b344d24... Interesting note that she comments that they skipped 3 for the fan values. Seemingly an oversight for the fact that these fan values of 1,2,4 indicate that it is probably a bitfield with each bit indicating a fan speed.
  - rajeshp1986 7y ago
    Her gitlab account shows it was updated just few hours ago. How is this possible? https://gitlab.com/netcrave https://gitlab.com/netcrave
    - curiousgal 7y ago
      When you star a project it gets "updated" even if you unstar it. Kinda like Unix's touch command.
xxpor 7y ago
Generally having a screenshot of someone telling you "don't go to jail plz" in a criminal complaint against you is not ideal.
deleted 7y ago
[deleted]
c3534l 7y ago
I hope the reality is that criminals are really dumb and not that we only catch the really dumb ones.
- xwdv 7y ago
  Heh, not even close. I know several individuals who should be in prison for their cyber crimes. But the fact is, not only have they never been caught, the victims probably don’t even know that anything happened. There is such a lack of talent out there right now in the cybersecurity industry that it’s very easy for criminals to slip around undetected. You’d have to be a total idiot to get caught, or catch the attention of someone really motivated to catch someone.
- icelancer 7y ago
  It's both, if that helps.
david_draco 7y ago
Why do you use first name here instead of last? No one calls Snowden just Edward, this comes across as a form of degrading women to girls.
- icelancer 7y ago
  Mostly people call me by my first name and I do the same to most people (likely more to men than women, if I had to guess). People call Edward Snowden by his last name because it's unique and catchy. Theo de Raadt is often just called "Theo" here for similar reasons. Rarely if ever have I seen him called "de Raadt" on this forum. Your comment is unfortunately typical of drive-by Internet outrage these days.

dmix 7y ago

It says she posted on "social media" (Twitter) about it, claiming to have Capital One information, "and that she recognizes that she acted illegally". Nothing about Opsec here. She basically asked them to arrest her. Probably had some of the usual motivations: "look at me I'm clever", "look at this stupid big company with bad security", or maybe used the opportunity for some political thing with banks. Not the sophisticated hacker type. But who knows. Edit: originally I asked about her Github profile listed in the complaint as paigea(5x * characters)thompson but was iffy on whether that was okay on HN.

icelancer 7y ago
Almost certainly deactivated/seized and part of evidence. With some googling you can find her Keybase and other pages aplenty if you like. Almost all her content is scrubbed from the Internet, however. (this person's original comment was asking for her github profile)
- deleted 7y ago
  [deleted]
curiousgal 7y ago
https://gist.github.com/paigeadelethompson https://gist.github.com/paigeadelethompson Not much is left.
- dmix 7y ago
  That also links to her gitlab profile which contains her resume/CV in PDF format (among other OSS work). She did indeed work at Amazon on AWS in 2016 , specifically on s3: https://i.imgur.com/DRBKYsc.png https://i.imgur.com/DRBKYsc.png That PDF also contains her home address and other personal information so I'd rather not link directly.
- dvdbloc 7y ago
  In https://gist.github.com/paigeadelethompson/620192d8c4b344d24fe3f566a9590e00 https://gist.github.com/paigeadelethompson/620192d8c4b344d24... Interesting note that she comments that they skipped 3 for the fan values. Seemingly an oversight for the fact that these fan values of 1,2,4 indicate that it is probably a bitfield with each bit indicating a fan speed.
- rajeshp1986 7y ago
  Her gitlab account shows it was updated just few hours ago. How is this possible? https://gitlab.com/netcrave https://gitlab.com/netcrave
  - curiousgal 7y ago
    When you star a project it gets "updated" even if you unstar it. Kinda like Unix's touch command.

xxpor 7y ago

Generally having a screenshot of someone telling you "don't go to jail plz" in a criminal complaint against you is not ideal.

deleted 7y ago

[deleted]

c3534l 7y ago

I hope the reality is that criminals are really dumb and not that we only catch the really dumb ones.

xwdv 7y ago
Heh, not even close. I know several individuals who should be in prison for their cyber crimes. But the fact is, not only have they never been caught, the victims probably don’t even know that anything happened. There is such a lack of talent out there right now in the cybersecurity industry that it’s very easy for criminals to slip around undetected. You’d have to be a total idiot to get caught, or catch the attention of someone really motivated to catch someone.
icelancer 7y ago
It's both, if that helps.

david_draco 7y ago

Why do you use first name here instead of last? No one calls Snowden just Edward, this comes across as a form of degrading women to girls.

icelancer 7y ago
Mostly people call me by my first name and I do the same to most people (likely more to men than women, if I had to guess). People call Edward Snowden by his last name because it's unique and catchy. Theo de Raadt is often just called "Theo" here for similar reasons. Rarely if ever have I seen him called "de Raadt" on this forum. Your comment is unfortunately typical of drive-by Internet outrage these days.