5 ms·

This publication seems to be a major violation of privacy in several jurisdictions. Regardless of whether this guy is a criminal and whether his relative is com

This publication seems to be a major violation of privacy in several jurisdictions. Regardless of whether this guy is a criminal and whether his relative is complicit, their personal details should not be published in any form that is not an arrest order by law enforcement. Now not only their private information is disclosed, but they also can become targets for other criminals (he is probably a rich person and unless he is a member of some offline syndicate, e.g. FSB, he can be a subject for kidnapping and extortion). If the purpose of the publication is to put him in the spotlight, I do not see how those cybersecurity researchers are different from him.

antihero 5y ago
Also there’s the fact that if you were going to do some serious cybercrime, it would make sense to leave a bunch of hard to find but still findable trails to a real person that isn’t you, so it could be a frame up!
- bellyfullofbac 5y ago
  For extra clever points, make it a person who already does protect their privacy by e.g. encrypting everything on local storage, doesn't like the cloud, and not being all over social media. If the cops bust them and can't find any evidence, they'll accuse them of hiding things, if they comply and decrypts their stuff and there's still nothing, the cops will still insist it was this person and they're still hiding something. If there's other incriminating stuff in the encrypted disks, boom the cops will bust them for that instead and will still think they got the master hacker...
bennyp101 5y ago
That was my first thought when he mentioned the Skype handle being a relative, "perhaps even his sister" - that seems like it crosses the line. If he has been stealing money from drug dealers etc, then outing his (potential) family - or worse, someone being fitted up - could have very bad repercussions.
renewiltord 5y ago
Live by the sword, die by the sword.
sam_lowry_ 5y ago
Civil protest is often associated with privacy violations. Belarusians that had to flee the country after August, 2020 set up a whole website where they meticulously map all those involved in stealing elections and beating protestors, see http://blackmap.org/ http://blackmap.org/ They even publish addresses of people who deliberately reported protestors to the authorities, together with the report summaries. In a society run by bandits, violating privacy to expose their deeds is not even a lesser evil but a moral obligation. Also, how is the work of Brian different from the work of Bellingcat or Navalny Team? Both are prased by media. So is Brian. I have an answer: Privacy is a luxury, not a right. In peaceful times an democratic societies everyone can have some privacy. When people starve to death, get beaten or killed while others amass riches, privacy means little in the face of defiance, hate and revenge.
- pphysch 5y ago
  You seem to be implying that Bellingcat/Navalny aren't proven hucksters and info-mercenaries who will say anything to keep their moneyed interests happy. At least Brian is a plausibly independent (from powerful governments) blogger who occasionally publishes some high-signal, low-noise content. Although this sort of doxxing is out of hand even if Russians are "fair game" to his Western audience.
  - Ansil849 5y ago
    Do you have evidence of these claims about Bellingcat?
    - pphysch 5y ago
      Aaron Maté has done a lot of investigative journalism[1] into them. Basically, Bellingcat is an "intelligence launderer" for the NATO-aligned IC. Agencies can feed them real or bogus intel and they will gladly publish it in return for $$$ and media clout. In some cases, they even fabricate propaganda as in the case of their collaborations with Navalny's team. I think they are closer to "useful idiots" rather than actual intelligence operatives, though. What they are not is a largely independent OSINT group a la WikiLeaks. Bellingcat is firmly aligned with the most powerful government intelligence agencies on the planet and a darling to their media. They can be counted on to never undermine NATO's agenda (which Julian Assange is suffering immensely for doing), and are ostensibly compensated well for that. [1] - https://thegrayzone.com/2021/03/24/author-bellingcat-opcw-whistleblower/ https://thegrayzone.com/2021/03/24/author-bellingcat-opcw-wh...
flerchin 5y ago
Wazawaka could probably sue. She probably won't.
ahofmann 5y ago
Brian Krebs regularly publishes articles in which he reveals people's private data. I don't think that's okay either, but Brian is often celebrated for it and will continue to do so. I used to enjoy reading krebsonsecurity.com, but since I realized that he is blatantly vigilante with these articles, I avoid the site. His argumentation is that he would only doxx criminals. However, this is not true, a few years ago he doxxed the developer of a large German imageboard and many volunteers of the imageboard, who wanted to remain anonymous for good reason. The criticized software of the developer had nothing to do with the imageboard and the developer also communicated that with Brian, but he didn't care about all that. The main thing was to sell the story well for him. Brian Krebs, if you read this: a hearty "fuck you" from me for this action! You started something, that in the end destroyed one of the last places on the Internet, where one could still talk undisturbed. In my opinion, you are the biggest scum of all.
- shadowgovt 5y ago
  Which image board?
  - reducesuffering 5y ago
    Here's the Krebs story: https://krebsonsecurity.com/2018/03/who-and-what-is-coinhive/ https://krebsonsecurity.com/2018/03/who-and-what-is-coinhive... The board was "pr0gramm". In Krebs' words, "Multiple longtime pr0gramm members have remarked that since cha0s departed as administrator, the forum has become overrun by individuals with populist far-right political leanings." He also justifies the "dox" because: "So I set about trying to figure out who’s running pr0gramm. It wasn’t easy, but in the end all of the information needed to determine that was freely available online. Let me be crystal clear on this point: All of the data I gathered (and presented in the detailed ‘mind map’ below) was derived from either public Web site WHOIS domain name registration records or from information posted to various social media networks by the pr0gramm administrators themselves. In other words, there is nothing in this research that was not put online by the pr0gramm administrators themselves."
    - 5y ago
deleted 5y ago
[deleted]
Ansil849 5y ago
Brian Kreb has a history of doxing essentially anyone he doesn't like. He literally once doxed someone whose crime was leaving a negative review of his book [1]. That kind of behavior is not OK, full stop. What I think has happened is Krebs has spent too much time immersed in online troll culture, to the point where he now acts exactly like the people he writes about. [1] https://itwire.com/images/authors-images/samvarghese/krebs_doxxing2.jpg https://itwire.com/images/authors-images/samvarghese/krebs_d...
- f38zf5vdt 5y ago
  I can't imagine law enforcement or intelligence has a favourable opinion of him either. This sort of vigilantism tips off cybercriminals to the fact that someone is on their trail and causes them to become proactive about moving themselves outside of any place they could be arrested. By publishing this information it leads FSB recruiters to cybercriminals while at the same time ensuring they stay within Russian soil where extradition treaties do not exist, meaning they will never be brought to trial.
- stickfigure 5y ago
  This wasn't just "someone whose crime was leaving a negative review of his book". From that image you posted, quoting Krebs: The guy is a convicted cybercrook who's in jail. Of course he hates me Omitting that fact is incredibly misleading. For the record, I'm pretty ok seeing the crook's CV posted.
  - Ansil849 5y ago
    By this logic, would it likewise be acceptable to dox someone who wrote a positive review of the book, if it is found that the author of the review works somewhere favorable to Krebs (with the implication being that their review would then have a positive bias, much like the other review has a negative bias)? The problem with doxing and vigilantism is that it exposes people to undue harm. That is not an acceptable way to conduct yourself.
    - stickfigure 5y ago
deleted 5y ago
[deleted]

antihero 5y ago

Also there’s the fact that if you were going to do some serious cybercrime, it would make sense to leave a bunch of hard to find but still findable trails to a real person that isn’t you, so it could be a frame up!

bellyfullofbac 5y ago
For extra clever points, make it a person who already does protect their privacy by e.g. encrypting everything on local storage, doesn't like the cloud, and not being all over social media. If the cops bust them and can't find any evidence, they'll accuse them of hiding things, if they comply and decrypts their stuff and there's still nothing, the cops will still insist it was this person and they're still hiding something. If there's other incriminating stuff in the encrypted disks, boom the cops will bust them for that instead and will still think they got the master hacker...

bennyp101 5y ago

That was my first thought when he mentioned the Skype handle being a relative, "perhaps even his sister" - that seems like it crosses the line. If he has been stealing money from drug dealers etc, then outing his (potential) family - or worse, someone being fitted up - could have very bad repercussions.

renewiltord 5y ago

Live by the sword, die by the sword.

sam_lowry_ 5y ago

Civil protest is often associated with privacy violations. Belarusians that had to flee the country after August, 2020 set up a whole website where they meticulously map all those involved in stealing elections and beating protestors, see http://blackmap.org/ http://blackmap.org/ They even publish addresses of people who deliberately reported protestors to the authorities, together with the report summaries. In a society run by bandits, violating privacy to expose their deeds is not even a lesser evil but a moral obligation. Also, how is the work of Brian different from the work of Bellingcat or Navalny Team? Both are prased by media. So is Brian. I have an answer: Privacy is a luxury, not a right. In peaceful times an democratic societies everyone can have some privacy. When people starve to death, get beaten or killed while others amass riches, privacy means little in the face of defiance, hate and revenge.

pphysch 5y ago
You seem to be implying that Bellingcat/Navalny aren't proven hucksters and info-mercenaries who will say anything to keep their moneyed interests happy. At least Brian is a plausibly independent (from powerful governments) blogger who occasionally publishes some high-signal, low-noise content. Although this sort of doxxing is out of hand even if Russians are "fair game" to his Western audience.
- Ansil849 5y ago
  Do you have evidence of these claims about Bellingcat?
  - pphysch 5y ago
    Aaron Maté has done a lot of investigative journalism[1] into them. Basically, Bellingcat is an "intelligence launderer" for the NATO-aligned IC. Agencies can feed them real or bogus intel and they will gladly publish it in return for $$$ and media clout. In some cases, they even fabricate propaganda as in the case of their collaborations with Navalny's team. I think they are closer to "useful idiots" rather than actual intelligence operatives, though. What they are not is a largely independent OSINT group a la WikiLeaks. Bellingcat is firmly aligned with the most powerful government intelligence agencies on the planet and a darling to their media. They can be counted on to never undermine NATO's agenda (which Julian Assange is suffering immensely for doing), and are ostensibly compensated well for that. [1] - https://thegrayzone.com/2021/03/24/author-bellingcat-opcw-whistleblower/ https://thegrayzone.com/2021/03/24/author-bellingcat-opcw-wh...

flerchin 5y ago

Wazawaka could probably sue. She probably won't.

ahofmann 5y ago

Brian Krebs regularly publishes articles in which he reveals people's private data. I don't think that's okay either, but Brian is often celebrated for it and will continue to do so. I used to enjoy reading krebsonsecurity.com, but since I realized that he is blatantly vigilante with these articles, I avoid the site. His argumentation is that he would only doxx criminals. However, this is not true, a few years ago he doxxed the developer of a large German imageboard and many volunteers of the imageboard, who wanted to remain anonymous for good reason. The criticized software of the developer had nothing to do with the imageboard and the developer also communicated that with Brian, but he didn't care about all that. The main thing was to sell the story well for him. Brian Krebs, if you read this: a hearty "fuck you" from me for this action! You started something, that in the end destroyed one of the last places on the Internet, where one could still talk undisturbed. In my opinion, you are the biggest scum of all.

shadowgovt 5y ago
Which image board?
- reducesuffering 5y ago
  Here's the Krebs story: https://krebsonsecurity.com/2018/03/who-and-what-is-coinhive/ https://krebsonsecurity.com/2018/03/who-and-what-is-coinhive... The board was "pr0gramm". In Krebs' words, "Multiple longtime pr0gramm members have remarked that since cha0s departed as administrator, the forum has become overrun by individuals with populist far-right political leanings." He also justifies the "dox" because: "So I set about trying to figure out who’s running pr0gramm. It wasn’t easy, but in the end all of the information needed to determine that was freely available online. Let me be crystal clear on this point: All of the data I gathered (and presented in the detailed ‘mind map’ below) was derived from either public Web site WHOIS domain name registration records or from information posted to various social media networks by the pr0gramm administrators themselves. In other words, there is nothing in this research that was not put online by the pr0gramm administrators themselves."
  - 5y ago

deleted 5y ago

[deleted]

Ansil849 5y ago

Brian Kreb has a history of doxing essentially anyone he doesn't like. He literally once doxed someone whose crime was leaving a negative review of his book [1]. That kind of behavior is not OK, full stop. What I think has happened is Krebs has spent too much time immersed in online troll culture, to the point where he now acts exactly like the people he writes about. [1] https://itwire.com/images/authors-images/samvarghese/krebs_doxxing2.jpg https://itwire.com/images/authors-images/samvarghese/krebs_d...

f38zf5vdt 5y ago
I can't imagine law enforcement or intelligence has a favourable opinion of him either. This sort of vigilantism tips off cybercriminals to the fact that someone is on their trail and causes them to become proactive about moving themselves outside of any place they could be arrested. By publishing this information it leads FSB recruiters to cybercriminals while at the same time ensuring they stay within Russian soil where extradition treaties do not exist, meaning they will never be brought to trial.
stickfigure 5y ago
This wasn't just "someone whose crime was leaving a negative review of his book". From that image you posted, quoting Krebs: The guy is a convicted cybercrook who's in jail. Of course he hates me Omitting that fact is incredibly misleading. For the record, I'm pretty ok seeing the crook's CV posted.
- Ansil849 5y ago
  By this logic, would it likewise be acceptable to dox someone who wrote a positive review of the book, if it is found that the author of the review works somewhere favorable to Krebs (with the implication being that their review would then have a positive bias, much like the other review has a negative bias)? The problem with doxing and vigilantism is that it exposes people to undue harm. That is not an acceptable way to conduct yourself.
  - stickfigure 5y ago

deleted 5y ago

[deleted]