5 ms·
Brian Krebs is great. Back in 2018, I discovered a flaw in a website enabling anyone to track any US cellphone’s location without consent, and I contacted US-CE
by nneonneo 2y ago
Brian Krebs is great. Back in 2018, I discovered a flaw in a website enabling anyone to track any US cellphone’s location without consent, and I contacted US-CERT and Krebs to break the news (https://krebsonsecurity.com/2018/05/tracking-firm-locationsmart-leaked-location-data-for-customers-of-all-major-u-s-mobile-carriers-in-real-time-via-its-web-site/ https://krebsonsecurity.com/2018/05/tracking-firm-locationsm...). After checking the locations of several numbers he provided, I remember discussing his need for location privacy - and his shock when he found it was so easy to break. His opsec might be very strict, but when every cellular carrier is eager to sell off your location data, that level of security is absolutely justified.
- jorvi 2y ago> but when every cellular carrier is eager to sell off your location data, that level of security is absolutely justified. Before everyone gets scared: this is mostly a US thing.
- nozzlegear 2y ago> [...] any US cellphone’s location [...] I contacted US-CERT and Krebs [an American] to break the news I know we all like to score free points by dunking on the US, but I'm pretty sure everyone understood that "this is mostly a US thing" already.
- jszymborski 2y agoI'll be honest, I just assumed it was everywhere. Is this also true of Canada?
- sneak 2y agoNo, he’s not. He’s threatened to dox people who leave bad reviews on his books; he should not be promoted or praised. It’s purely an ego thing. It saddens me to see his links posted to aggregators. Most people only know his carefully cultivated image.
- magneticstain 2y agoGot any sources to back that up? First I've ever heard about this.
- SapporoChris 2y agoI did a quick internet search and found https://itwire.com/business-it-news/security/krebs-accused-of-doxxing-man-based-on-single-source-in-twitter-scam-yarn.html https://itwire.com/business-it-news/security/krebs-accused-o... And while not doxxing, I think it's relevant: https://en.wikipedia.org/wiki/Brian_Krebs#Allegations_of_defamation,_lawsuit_and_apology https://en.wikipedia.org/wiki/Brian_Krebs#Allegations_of_def...
- twisteriffic 2y agohttps://itwire.com/business-it-news/security/infosec-researchers-slam-ex-wapo-man-krebs-over-doxxing.html https://itwire.com/business-it-news/security/infosec-researc... https://www.emptywheel.net/2017/11/28/the-russian-metadata-in-the-shadow-brokers-dump/ https://www.emptywheel.net/2017/11/28/the-russian-metadata-i...
- deleted 2y ago[deleted]
- JPLeRouzic 2y agoAccording to the WSJ article, he makes his living from advertising on his website. That's perfectly legitimate, but whether he did it or not, he has every incentive to embellish things.