4 ms·
Am I being extremely thick here? The evidence submitted by the FBI [1] shows the phpmyadmin page running on address 192.168.1.24. Are they claiming to have con
by BuildTheRobots 12y ago
Am I being extremely thick here?
The evidence submitted by the FBI [1] shows the phpmyadmin page running on address 192.168.1.24. Are they claiming to have connected over the internet to a public facing RFC1918 address and it was routable?
(Saying that, I'm now realising that I could knock up a similar screenshot showing me connecting to any "real-world" IP address anyway; it seems to prove nothing.
[1] http://krebsonsecurity.com/wp-content/uploads/2014/10/70-8.pdf http://krebsonsecurity.com/wp-content/uploads/2014/10/70-8.p...
- pyre 12y agoInteresting that they are: 1) using IceWeasel and 2) searching the login page for "downloads."
- skolor 12y agoLooks to me like they're just using Kali. Not that surprising, for someone doing that type of work.
- samcrawford 12y agoJust a guess, but I imagine that's a clone of the original server (using the server image they took) running on a local network.
- BuildTheRobots 12y agoIt's no longer a clone if they've made config changes... o_0
- skolor 12y agoThe way I read that was that the phpmyadmin screenshot was not supplied by the FBI, rather it came from Krebs for the purpose of demonstration.
- andrewjkerr 12y agoI don't think it came from Krebs. The pdf is labeled like the rest of the evidence submitted.
- skolor 12y agoLooking at it again, you're right. Its definitely from the case files.