5 ms·

Wait. So his big "whistleblower" source for this article in April was actually the hacker? https://krebsonsecurity.com/2021/04/ubiquiti-all-but-confirms-breach

Wait. So his big "whistleblower" source for this article in April was actually the hacker? https://krebsonsecurity.com/2021/04/ubiquiti-all-but-confirms-breach-response-iniquity/ https://krebsonsecurity.com/2021/04/ubiquiti-all-but-confirm... Bad on Krebs for not at least mentioning this.

xwolfi 5y ago
He obv didnt know
- mynameisvlad 5y ago
  He can still post a retraction/update on the original article. I mean, he added an update already from later in the month, and he clearly knows now.
asymmetric 5y ago
Not surprised TBH. Brian Krebs has a history of questionable ethical behavior, like doxxing people who leave negative reviews on his book[0]. [0]: https://itwire.com/security/infosec-researchers-slam-ex-wapo-man-krebs-over-doxxing.html https://itwire.com/security/infosec-researchers-slam-ex-wapo...
- travoc 5y ago
  Is identifying a real person by their internet pseudonym really doxxing?
  - idealmedtech 5y ago
    Practically by definition, yes.
  - SEJeff 5y ago
    Krebbs doxxed one of my friends who happens to be a gay hacker in a country where both being gay and being a hacker are illegal. Krebbs doesn’t take kindly to any sort of bad reviews or even the hint that he’s not perfect FYI.
    - notsureaboutpg 5y ago
      Krebs revealed that your friend is gay?
    - zamadatix 5y ago
      Have a link to the story/event?
      - SEJeff 5y ago
        It was notdan, and he’s quite open about both of the things I mentioned both on Twitter and his blog. He is mentioned in this article.
        ianhawes 5y ago
        [flagged]
        SEJeff 5y ago
        That’s pretty shitty of him. I’m not saying anyone is a saint, only that krebs doxxes people who disagree with him, which can put their lives in direct harm. I’m not any more of a fan of wee ve than you. Also, fuck Nazis.
        YuriNiyazov 5y ago
        Weev is blind?
        SEJeff 5y ago
        No, I was thinking of him when I read hacker and nazi and was an idiot. That’s wrong but I can’t edit the comment so it stays.
        kurisufag 5y ago
        weev is not blind, nor was he recently released from prison
  - gunapologist99 5y ago
    Yes, linking the two (public and private) identities is doxxing, because... it links the two.
- afrcnc 5y ago
  ITWire is not a credible news source. The site, and especially Varghese, often writes tabloid pieces that are just character attacks.
  - lelandfe 5y ago
    I don’t know anything about the outlet but that story looks pretty fine? It links to its sources at least, which is better than most tabloid pieces
  - throw10920 5y ago
    It doesn't look like you're disputing the specific allegations about doxxing made by ITWire - only mentioning other, unrelated, vague things like "tabloid pieces". There's a Twitter screenshot showing the doxxing - are you claiming that that's fabricated?
- dfcab 5y ago
  Same happened with Crosstalk in a similar fashion. Commented on a video about a product similar to what he was describing and he removed the comment. It’s all about them and the products they want to sell. Not as open/transparent as one would think.
b112 5y ago
Like newspapers of old, he should put a retraction at the top of that old article.
varenc 5y ago
They should have definitely acknowledged they covered this before. But also to be fair, quoting the article the reputation damage was done: “Following the publication of these articles, between Tuesday, March 30, 2021 and Wednesday March 31”. And the Krebs article was on April 4th. It seems BleepingComputer broke the story and Krebs just re-reported the news.
- zamadatix 5y ago
  > And the Krebs article was on April 4th. It seems BleepingComputer broke the story and Krebs just re-reported the news. Kreb's first article was on March 30 https://krebsonsecurity.com/2021/03/whistleblower-ubiquiti-breach-catastrophic/ https://krebsonsecurity.com/2021/03/whistleblower-ubiquiti-b... Kreb's second article was on April 4th https://krebsonsecurity.com/2021/04/ubiquiti-all-but-confirms-breach-response-iniquity/ https://krebsonsecurity.com/2021/04/ubiquiti-all-but-confirm... BleepingComputer's article didn't come out until the email from Ubiquiti on April 1 and quotes Kreb's article on March 30
  - varenc 5y ago
    Whoops I stand corrected. Wish I could edit my old comment. Looks like Kreb's definitely talked to the guy now indicted in their March 30th article. That makes the complete lack of acknowledgement quite a bit more damning.

xwolfi 5y ago

He obv didnt know

mynameisvlad 5y ago
He can still post a retraction/update on the original article. I mean, he added an update already from later in the month, and he clearly knows now.

asymmetric 5y ago

Not surprised TBH. Brian Krebs has a history of questionable ethical behavior, like doxxing people who leave negative reviews on his book[0]. [0]: https://itwire.com/security/infosec-researchers-slam-ex-wapo-man-krebs-over-doxxing.html https://itwire.com/security/infosec-researchers-slam-ex-wapo...

travoc 5y ago
Is identifying a real person by their internet pseudonym really doxxing?
- idealmedtech 5y ago
  Practically by definition, yes.
- SEJeff 5y ago
  Krebbs doxxed one of my friends who happens to be a gay hacker in a country where both being gay and being a hacker are illegal. Krebbs doesn’t take kindly to any sort of bad reviews or even the hint that he’s not perfect FYI.
  - notsureaboutpg 5y ago
    Krebs revealed that your friend is gay?
  - zamadatix 5y ago
    Have a link to the story/event?
    - SEJeff 5y ago
      It was notdan, and he’s quite open about both of the things I mentioned both on Twitter and his blog. He is mentioned in this article.
      - ianhawes 5y ago
        [flagged]
        SEJeff 5y ago
        That’s pretty shitty of him. I’m not saying anyone is a saint, only that krebs doxxes people who disagree with him, which can put their lives in direct harm. I’m not any more of a fan of wee ve than you. Also, fuck Nazis.
        YuriNiyazov 5y ago
        Weev is blind?
        SEJeff 5y ago
        No, I was thinking of him when I read hacker and nazi and was an idiot. That’s wrong but I can’t edit the comment so it stays.
        kurisufag 5y ago
        weev is not blind, nor was he recently released from prison
- gunapologist99 5y ago
  Yes, linking the two (public and private) identities is doxxing, because... it links the two.
afrcnc 5y ago
ITWire is not a credible news source. The site, and especially Varghese, often writes tabloid pieces that are just character attacks.
- lelandfe 5y ago
  I don’t know anything about the outlet but that story looks pretty fine? It links to its sources at least, which is better than most tabloid pieces
- throw10920 5y ago
  It doesn't look like you're disputing the specific allegations about doxxing made by ITWire - only mentioning other, unrelated, vague things like "tabloid pieces". There's a Twitter screenshot showing the doxxing - are you claiming that that's fabricated?
dfcab 5y ago
Same happened with Crosstalk in a similar fashion. Commented on a video about a product similar to what he was describing and he removed the comment. It’s all about them and the products they want to sell. Not as open/transparent as one would think.

b112 5y ago

Like newspapers of old, he should put a retraction at the top of that old article.

varenc 5y ago

They should have definitely acknowledged they covered this before. But also to be fair, quoting the article the reputation damage was done: “Following the publication of these articles, between Tuesday, March 30, 2021 and Wednesday March 31”. And the Krebs article was on April 4th. It seems BleepingComputer broke the story and Krebs just re-reported the news.

zamadatix 5y ago
> And the Krebs article was on April 4th. It seems BleepingComputer broke the story and Krebs just re-reported the news. Kreb's first article was on March 30 https://krebsonsecurity.com/2021/03/whistleblower-ubiquiti-breach-catastrophic/ https://krebsonsecurity.com/2021/03/whistleblower-ubiquiti-b... Kreb's second article was on April 4th https://krebsonsecurity.com/2021/04/ubiquiti-all-but-confirms-breach-response-iniquity/ https://krebsonsecurity.com/2021/04/ubiquiti-all-but-confirm... BleepingComputer's article didn't come out until the email from Ubiquiti on April 1 and quotes Kreb's article on March 30
- varenc 5y ago
  Whoops I stand corrected. Wish I could edit my old comment. Looks like Kreb's definitely talked to the guy now indicted in their March 30th article. That makes the complete lack of acknowledgement quite a bit more damning.