6 ms·

Can you provide any sources? Surprised to see Credit Karma on here...

sergiomattei 7y ago
This. It's easy to come on places and spew conspiracy theories, but this is a really heavy accusation to many reputable companies. Back it up or nothin'.
rshnotsecure 7y ago
It comes mainly from mapping the subdomains over time and analysis of the ASNs. This is key. You will often see a company with perhaps 200 or so subdomains, that only does business in the United States. But then you will see one subdomain that maps to ASN 4803 or whatever, which then leads to “China Telecom xinjiang”. In fact I encourage you to type: org:”China Telecom xinjiang” “NSFOCUS” into Shodan. Also look at the capital expenditures psychz.net claims on their about page. There is no IaaS company in the world that can afford to lay down as much hardware as they are claiming. Another thing btw is these sites never seem to have job openings. That is common pattern that applies to perhaps 60% of the firms listed.
- modwest 7y ago
  These claims are not credible. Publish your analysis techniques & results.
- ChuckMcM 7y ago
  So you're saying "typical intelligence analyst stuff" is the reasoning here? Generally analysts produce questions which operations runs down to figure out if what they think is going on, is actually going on. Correct me if I'm wrong here but you're basically saying that you have done the first part and found some suspicious links but not the second part do develop actual evidence one way or the other, is that a fair assessment?
  - rshnotsecure 7y ago
    I am writing this all on a phone and I am more than happy to produce a 5000 word report which will be posted in 96 hours. I will follow up via a comment here and also send to Michael Forsythe at the New York Times for additional review. You have my word. EDIT: 5000 words not pages
    - jacquesm 7y ago
      So, where is that post?
      - rshnotsecure 7y ago
        Check below for latest update. Wanted to comment so you got notification. My real name is in my profile with my email address so you’ve got me dead to rights on this one.
    - ChuckMcM 7y ago
      Awesome, looking forward to it.
    - godelski 7y ago
      If you make a post (assuming I see it, because I want to) I'll gladly read (and upvote) it. I think this is exactly the kind of thing HN wants to see.
    - sergiomattei 7y ago
      I'm very interested. Commenting as reminder to check this later.
    - lowtto 7y ago
      That's the spirit. I've always loved a good challenge accepted attitude.
    - J_cst 7y ago
      That's a bookmark
    - 7y ago
- GhettoMaestro 7y ago
  Never heard of psychz.net. Are you suggesting they are an "open secret"? EG, They are not "covert", but they are secretive in that they only sell to maybe western intelligence agencies, etc. Could be why they never have real "openings", they got a hot pipeline constantly exiting from the intelligence community looking to make some real money.
- Apofis 7y ago
  Wait... you're basing this based on who the domain is registered with?
- zer0tonin 7y ago
  > org:”China Telecom xinjiang” “NSFOCUS” into Shodan. I'm going to admit I didn't try putting this into Shodan because for whatever reason I don't have access to it right now. But won't this just show a list of servers running a NSFOCUS WAF? How do you connect that to ProtonMail or LeaseWeb?
- ryanlol 7y ago
  >org:”China Telecom xinjiang” “NSFOCUS” into Shodan. No results found
  - rshnotsecure 7y ago
    Check your double quotes. Also do you have a registered / paid account? Lowest level of paid is fine.
- gspd 7y ago
  They subcontract their support to India. William Lu is a scammer and a well known liar. He pays people on web hosting forums to keep it quiet about how he scams his customers. The guy has cockroaches in his data center. He has no money and has lost more than half his ip space in the past year. He even got recorded a few months back in a big conference call admitting he lies about everything and charges his customers for services he doesn't even provide. https://www.youtube.com/watch?v=PzHS4E2e8Bg https://www.youtube.com/watch?v=PzHS4E2e8Bg there's also a dope ass diss track about how garbage their service is on there too. https://www.youtube.com/watch?v=mZBWd1Z2yY0 https://www.youtube.com/watch?v=mZBWd1Z2yY0

This. It's easy to come on places and spew conspiracy theories, but this is a really heavy accusation to many reputable companies. Back it up or nothin'.

rshnotsecure 7y ago

It comes mainly from mapping the subdomains over time and analysis of the ASNs. This is key. You will often see a company with perhaps 200 or so subdomains, that only does business in the United States. But then you will see one subdomain that maps to ASN 4803 or whatever, which then leads to “China Telecom xinjiang”. In fact I encourage you to type: org:”China Telecom xinjiang” “NSFOCUS” into Shodan. Also look at the capital expenditures psychz.net claims on their about page. There is no IaaS company in the world that can afford to lay down as much hardware as they are claiming. Another thing btw is these sites never seem to have job openings. That is common pattern that applies to perhaps 60% of the firms listed.

modwest 7y ago
These claims are not credible. Publish your analysis techniques & results.
ChuckMcM 7y ago
So you're saying "typical intelligence analyst stuff" is the reasoning here? Generally analysts produce questions which operations runs down to figure out if what they think is going on, is actually going on. Correct me if I'm wrong here but you're basically saying that you have done the first part and found some suspicious links but not the second part do develop actual evidence one way or the other, is that a fair assessment?
- rshnotsecure 7y ago
  I am writing this all on a phone and I am more than happy to produce a 5000 word report which will be posted in 96 hours. I will follow up via a comment here and also send to Michael Forsythe at the New York Times for additional review. You have my word. EDIT: 5000 words not pages
  - jacquesm 7y ago
    So, where is that post?
    - rshnotsecure 7y ago
      Check below for latest update. Wanted to comment so you got notification. My real name is in my profile with my email address so you’ve got me dead to rights on this one.
  - ChuckMcM 7y ago
    Awesome, looking forward to it.
  - godelski 7y ago
    If you make a post (assuming I see it, because I want to) I'll gladly read (and upvote) it. I think this is exactly the kind of thing HN wants to see.
  - sergiomattei 7y ago
    I'm very interested. Commenting as reminder to check this later.
  - lowtto 7y ago
    That's the spirit. I've always loved a good challenge accepted attitude.
  - J_cst 7y ago
    That's a bookmark
  - 7y ago
GhettoMaestro 7y ago
Never heard of psychz.net. Are you suggesting they are an "open secret"? EG, They are not "covert", but they are secretive in that they only sell to maybe western intelligence agencies, etc. Could be why they never have real "openings", they got a hot pipeline constantly exiting from the intelligence community looking to make some real money.
Apofis 7y ago
Wait... you're basing this based on who the domain is registered with?
zer0tonin 7y ago
> org:”China Telecom xinjiang” “NSFOCUS” into Shodan. I'm going to admit I didn't try putting this into Shodan because for whatever reason I don't have access to it right now. But won't this just show a list of servers running a NSFOCUS WAF? How do you connect that to ProtonMail or LeaseWeb?
ryanlol 7y ago
>org:”China Telecom xinjiang” “NSFOCUS” into Shodan. No results found
- rshnotsecure 7y ago
  Check your double quotes. Also do you have a registered / paid account? Lowest level of paid is fine.
gspd 7y ago
They subcontract their support to India. William Lu is a scammer and a well known liar. He pays people on web hosting forums to keep it quiet about how he scams his customers. The guy has cockroaches in his data center. He has no money and has lost more than half his ip space in the past year. He even got recorded a few months back in a big conference call admitting he lies about everything and charges his customers for services he doesn't even provide. https://www.youtube.com/watch?v=PzHS4E2e8Bg https://www.youtube.com/watch?v=PzHS4E2e8Bg there's also a dope ass diss track about how garbage their service is on there too. https://www.youtube.com/watch?v=mZBWd1Z2yY0 https://www.youtube.com/watch?v=mZBWd1Z2yY0