4 ms·

>>> in response to getting scammed you hacked into this guys accounts to gather information? Not really hacking when they gave you the passwords already. That'

>>> in response to getting scammed you hacked into this guys accounts to gather information? Not really hacking when they gave you the passwords already. That's like me accusing you of breaking into my house after I gave you a key to the lock. >>>> And then admit to it publicly? I agree this probably isn't the best thing, but considering the targets are in eastern Europe, and they are criminals, I doubt they're going to press charges. >>>> And then dox the guy? This is their own fault for having poor opsec. The fact he got busted and now his information is public is not the responsibility of those he scammed. IF they didn't want their shit exposed and on the internet, they should have done a better job of covering their tracks.

notahacker 12y ago
>> Not really hacking when they gave you the passwords already. That's like me accusing you of breaking into my house after I gave you a key to the lock. If you lend me keys to your house for a specific purpose, am I also legally entitled to rifle through your drawers until I've found your car keys and then have a drive around in that? They used the word "password hacking" in the email, and using a password somebody has stupidly shared with you for a specific purpose to also access their email accounts and eBay, Namecheap is undisputably hacking of the illegal variety, even if the targets in this instance are particularly obnoxious criminals themselves as well as incredibly slack when it comes to security. I can understand why someone might feel entitled to abuse the password they'd been given in order to see whether it helps them to recover their property, but to then boast about the felony they've committed on a corporate blog?
- at-fates-hands 12y ago
  >> but to then boast about the felony they've committed on a corporate blog? You must have missed the part in my original post where I said bragging about it probably isn't the best thing they did. It also means as a hacker, if you fuck with someone's business, be advised, you might end up getting the horns. I think to a degree, it helps put people on notice these guys don't take this stuff lying down and if you commit fraud on their watch, they're not just going to write it off. It probably also helps potential clients feel safer, knowing they don't just write off their losses, they actually do something about it - regardless of how the general public interpret it. Also, by your standards, then do you believe what Andrew "weev" Auernheimer did was illegal as well? Just curious. . .
  - notahacker 12y ago
    As a potential client I'd feel safer if they admitted that fraud had occurred and said what steps they were taking to avoid fraud in future, but considerably less safe from the revelation the fraudsters were rank amateurs and that the website operator might be prepared to use hacking and doxing as a means of redressing grievances. I haven't payed particularly close attention to weev's trial but IIRC, the main points in his defence were that the "hacked" data was actually accessible via the public internet with no real subterfuge or misuse of private information required, and they'd tried to disclose it through appropriate channels. Neither seem to apply here, even if Russian hackers don't particularly deserve the Feds rushing to their aid.

notahacker 12y ago

>> Not really hacking when they gave you the passwords already. That's like me accusing you of breaking into my house after I gave you a key to the lock. If you lend me keys to your house for a specific purpose, am I also legally entitled to rifle through your drawers until I've found your car keys and then have a drive around in that? They used the word "password hacking" in the email, and using a password somebody has stupidly shared with you for a specific purpose to also access their email accounts and eBay, Namecheap is undisputably hacking of the illegal variety, even if the targets in this instance are particularly obnoxious criminals themselves as well as incredibly slack when it comes to security. I can understand why someone might feel entitled to abuse the password they'd been given in order to see whether it helps them to recover their property, but to then boast about the felony they've committed on a corporate blog?

at-fates-hands 12y ago
>> but to then boast about the felony they've committed on a corporate blog? You must have missed the part in my original post where I said bragging about it probably isn't the best thing they did. It also means as a hacker, if you fuck with someone's business, be advised, you might end up getting the horns. I think to a degree, it helps put people on notice these guys don't take this stuff lying down and if you commit fraud on their watch, they're not just going to write it off. It probably also helps potential clients feel safer, knowing they don't just write off their losses, they actually do something about it - regardless of how the general public interpret it. Also, by your standards, then do you believe what Andrew "weev" Auernheimer did was illegal as well? Just curious. . .
- notahacker 12y ago
  As a potential client I'd feel safer if they admitted that fraud had occurred and said what steps they were taking to avoid fraud in future, but considerably less safe from the revelation the fraudsters were rank amateurs and that the website operator might be prepared to use hacking and doxing as a means of redressing grievances. I haven't payed particularly close attention to weev's trial but IIRC, the main points in his defence were that the "hacked" data was actually accessible via the public internet with no real subterfuge or misuse of private information required, and they'd tried to disclose it through appropriate channels. Neither seem to apply here, even if Russian hackers don't particularly deserve the Feds rushing to their aid.