9 ms·
That sort of hardened environment is what I would expect the sysadmins/operators of the darknet marketplaces to run. Home directories in memory, proxied outbou
by comprev 3y ago
That sort of hardened environment is what I would expect the sysadmins/operators of the darknet marketplaces to run.
Home directories in memory, proxied outbound SSH connections, high levels of encryption and absolute minimum installed software to do the job required.
The consequences of OpSec failure is.... well, rather serious :)
- paulnpace 3y agoEspecially given that only an admin is likely to have a computer with PS/2 ports.
- prmoustache 3y agoWhat do you mean? We are talking openBSD, not GNU HURD.
- gosub100 3y agonah they just use SWATd: https://github.com/defuse/swatd https://github.com/defuse/swatd (it was featured on hn a few years back)
- deleted 3y ago[deleted]
- pvg 3y agoThat sort of hardened environment is what I would expect the sysadmins/operators of the darknet marketplaces to run. That's the impression a lot of these 'hardening guides' give, intentionally or not. But fundamentally they're like 'tactical' pants except for nerds.
- A4ET8a8uTh0 3y agoWhile I disagree if a given darknet is to remain dark for long, this is the funniest comparison I read in a while and I am stealing it for future use.
- jandrese 3y agoThe NSA had a hardening guide you could download for free and deploy on a Windows system if you so desired. Following all of the advice in the document was an excellent way to end up with a completely useless system. Worse, thanks to Windows horrible logging infrastructure it was almost impossible to figure out exactly what change was causing a particular bit of breakage. You never EVER get an error message that reads anything like "HKLM\SYSTEM\CurrentControlSet\Services\Ramdisk" : Permission Denied reading key "StartOverride", service halted". Instead it is some generic "the system failed to start" message that doesn't help at all.
- PrimeMcFly 3y agoThere are plenty of windows tools that let you see those real error messages and troubleshoot in more detail.
- jandrese 3y agoGood luck getting any of them to run on a locked down machine.
- PrimeMcFly 3y agoThey just need admin access, that's it.
- PrimeMcFly 3y agoThey're not useless in the way tactical pants worn by nerds are.
- zitterbewegung 3y agoThat isn’t what they do though. Defcon 30 shared what an actual Darknet user did. https://youtu.be/01oeaBb85Xc?si=6vFztCVsbMKWByVD https://youtu.be/01oeaBb85Xc?si=6vFztCVsbMKWByVD
- red-iron-pine 3y agogood presentation. watched it a few weeks back. > That isn’t what they do though. Defcon 30 shared what an actual Darknet user did. and he got arrested, and did actual prison time. now it sounds like it wasn't all his technical opsec that got him in trouble, but just cuz some dude played fast and loose doesn't mean they all do. the ones who ain't been caught are probably a lot stricter... or a lot more lucky.
- zitterbewegung 3y agoUnfortunately the people who you never hear of are the most successful for obvious reasons
- rainbowzootsuit 3y agoThanks for the link. He's the guest on a Darknet Diaries episode too. https://darknetdiaries.com/episode/132/ https://darknetdiaries.com/episode/132/ YouTube from above without the tracking: https://www.youtube.com/watch?v=01oeaBb85Xc https://www.youtube.com/watch?v=01oeaBb85Xc