4 ms·

Hell, as a Georgia Alumni, I think it's hilarious! I'm surprised a GT student was so careless TBH. Tor + an anonymous proxy if you're gonna be futzing around

by rjbwork 12y ago

Hell, as a Georgia Alumni, I think it's hilarious! I'm surprised a GT student was so careless TBH. Tor + an anonymous proxy if you're gonna be futzing around in someone else's network, even if you don't intend to cause any tangible damage!

lloyddobbler 12y ago
Interestingly enough, it may not even have been as complicated as that. According to one Reddit commenter, the UGA calendar is left wide open for submissions - and in some cases, posts may be under minimal (if any) review. So it may be that he simply found the wide open URL, filled out a form, and hit 'submit'. http://www.reddit.com/r/gatech/comments/2quflw/georgia_tech_student_indicted_for_uga_website_hack/cna5jjz http://www.reddit.com/r/gatech/comments/2quflw/georgia_tech_... Seems like that would be fair game without using Tor or some other proxy - since there are no terms or conditions of use mentioned on the form, seems like it's open to anyone to post. But who's to say?
- CodeWriter23 12y ago
  So UGA's theory is he was trespassing because that wide open system is only intended for use by UGA Students, Faculty, etc? Seems flimsy to me.
chubot 12y ago
I'll just leave this here: http://www.dailydot.com/crime/tor-harvard-bomb-suspect/ http://www.dailydot.com/crime/tor-harvard-bomb-suspect/
- dollaaron 12y ago
  So use Tor from someplace that won't be able to tell that you were one of a few people accessing Tor at that moment. Just go to a coffee shop or something.
  - sgrove 12y ago
    Or presumably use a VPN to a server in another country, then hop on Tor. Any obvious problem with that?
    - dollaaron 12y ago
      Technically it'd be fine, there wouldn't be any direct evidence... but using a VPN on campus at the same time a bomb threat comes in through Tor could be enough to draw some suspicion. For something like this though I don't think they'd dig that deep.
deleted 12y ago
[deleted]
sasas 12y ago
A recent Defcon presentation [1] has highlighted the risk of using "anonymous" proxies. As such, it is advised never to use any public domain proxy. [1] https://www.youtube.com/watch?v=kLt_uqSCEUA https://www.youtube.com/watch?v=kLt_uqSCEUA

by rjbwork 12y ago

lloyddobbler 12y ago

Interestingly enough, it may not even have been as complicated as that. According to one Reddit commenter, the UGA calendar is left wide open for submissions - and in some cases, posts may be under minimal (if any) review. So it may be that he simply found the wide open URL, filled out a form, and hit 'submit'. http://www.reddit.com/r/gatech/comments/2quflw/georgia_tech_student_indicted_for_uga_website_hack/cna5jjz http://www.reddit.com/r/gatech/comments/2quflw/georgia_tech_... Seems like that would be fair game without using Tor or some other proxy - since there are no terms or conditions of use mentioned on the form, seems like it's open to anyone to post. But who's to say?

CodeWriter23 12y ago
So UGA's theory is he was trespassing because that wide open system is only intended for use by UGA Students, Faculty, etc? Seems flimsy to me.

chubot 12y ago

I'll just leave this here: http://www.dailydot.com/crime/tor-harvard-bomb-suspect/ http://www.dailydot.com/crime/tor-harvard-bomb-suspect/

dollaaron 12y ago
So use Tor from someplace that won't be able to tell that you were one of a few people accessing Tor at that moment. Just go to a coffee shop or something.
- sgrove 12y ago
  Or presumably use a VPN to a server in another country, then hop on Tor. Any obvious problem with that?
  - dollaaron 12y ago
    Technically it'd be fine, there wouldn't be any direct evidence... but using a VPN on campus at the same time a bomb threat comes in through Tor could be enough to draw some suspicion. For something like this though I don't think they'd dig that deep.

deleted 12y ago

[deleted]

sasas 12y ago

A recent Defcon presentation [1] has highlighted the risk of using "anonymous" proxies. As such, it is advised never to use any public domain proxy. [1] https://www.youtube.com/watch?v=kLt_uqSCEUA https://www.youtube.com/watch?v=kLt_uqSCEUA