Live data from Hacker News

‘Spiderman’ Hacker Daniel Kaye Took Down Liberia’s Internet

bloomberg.com

41–50 of 54 posts

Re: ‘Spiderman’ Hacker Daniel Kaye Took Down Liberia’s Internet

#41

Throwaway for obvious reasons. Around 13 years ago when I was a lot younger we were in fight with other site community, none of it was for profit. We got hit by DDOS so we wanted to retaliate. We've scanned their DDOS boxes and found out the software that was running on them and vulnerability that they were using, then we hacked that box, got their tools because all was transferred without any encryption (different t…

Did they stop fucking with you after that?

Re: ‘Spiderman’ Hacker Daniel Kaye Took Down Liberia’s Internet

#42

This was a quite interesting and enlightening read! I was in Liberia at the time, from December 2016 through June 2017, doing a project for the Liberia Ministry of Health, and got acquainted with some people working for Cellcom. I also gained a great friend in one member of my team, who later worked briefly for Lonestar and is now employed by Orange. There aren't that many opportunities for a young developer in Liber…

That's super interesting. How was your experience working with the government? I had reached out a long while back to some people formerly in the govt to ask if I could volunteer some months of my time on e-gov stuff and the main response I got was along the lines of "we need to focus on agriculture and basic needs, digital isn't relevant yet."

Re: ‘Spiderman’ Hacker Daniel Kaye Took Down Liberia’s Internet

#43

An interesting aspect is how broken the Internet is (those dodgy routers and IP webcams, what other IoT devices can be exploited?), and how critical it actually is, if you can cripple a whole country's economy.

It's not really illustrative to call it a "whole country's economy". Liberia has the same population as LA but only one third of one percent of the GDP. So of course it's not going to be able to afford the protections that a typical country can.

Re: ‘Spiderman’ Hacker Daniel Kaye Took Down Liberia’s Internet

#44
post #3

Those of you who worked at Facebook/Google, wouldn't he make more money by simply being L5-L8 at one of those firms?

> simply being L5-L8

The article says he applied to many companies, and they all turned him down because he was too suspicious.

Re: ‘Spiderman’ Hacker Daniel Kaye Took Down Liberia’s Internet

#46
Yes, this is an example of https://xkcd.com/386/ so I'm creating an account on HN for the first time.

> The attack against Liberia began in October 2016. More than a half-million security cameras around the world tried to connect to a handful of servers used by Lonestar Cell MTN, a local mobile phone operator, and Lonestar’s network was overwhelmed. Internet access for its 1.5 million customers slowed to a crawl, then stopped.

On a more serious note,this is seriously exaggerated. Internet penetration(mostly mobile broadband) was 21% during this period and was split between LoneStarCell, Cellcom, the govt carrier - Libtelco and smaller ISPs. For a population of 4.5m people, 21% meant each mobile operator had less than 500k Internet subscribers.

The post-apocalyptic description of the impact of the DDoS doesn't fit the feeling in that period ( Nov '16). Friends from outside Liberia reached out (ironically over WhatsApp) to ask whether Liberia's Internet was cut off. I checked and saw international media reporting an Internet shutdown which was even more confusing. After emailing a couple of friends at various ISPs and the regulator, I finally got confirmation that LoneStar was under attack. Apparently, they were keeping it a secret. It did not make national news for another 2 months until the formal complaint and lawsuits were filed. Mobile broadband was very patchy back then so perhaps people just assumed it was the usual state of affairs. Now, we have LTE on both operators and an upcoming pre-5G operator.

Source: I'm from and have been based in Liberia (2015-present) and used to manage services at the national Internet exchange during that period.

National Regulator: http://www.emansion.gov.lr/doc/CONSULTATION-DOCUMENT.pdf Export.Gov: https://www.export.gov/article?id=Liberia-Telecommunications... Twitter Thread: https://mobile.twitter.com/tksiakor/status/79486360223055872...

Re: ‘Spiderman’ Hacker Daniel Kaye Took Down Liberia’s Internet

#47
post #34

Earlier quoted context omitted.

I always think about this too (with people that decide to resort to this sort of activity..and any criminal activity in general). The difference: you have full control over your destiny, power that you don't have to spend a decade earning..you just take it, and you don't have ask for permission. There's also a thrill to it. Something you really don't get from a boring desk job..even for the likes of google and Facebo…

Good point!

I mean the thrill greatly outweighs the monetary reward of this type of activity.

Re: ‘Spiderman’ Hacker Daniel Kaye Took Down Liberia’s Internet

#48
post #16
post #3

Those of you who worked at Facebook/Google, wouldn't he make more money by simply being L5-L8 at one of those firms?

For certain people, making money illegally is more fun than making it legally, even in spite of the risk.

Because of the risk.

Re: ‘Spiderman’ Hacker Daniel Kaye Took Down Liberia’s Internet

#49

This was a quite interesting and enlightening read! I was in Liberia at the time, from December 2016 through June 2017, doing a project for the Liberia Ministry of Health, and got acquainted with some people working for Cellcom. I also gained a great friend in one member of my team, who later worked briefly for Lonestar and is now employed by Orange. There aren't that many opportunities for a young developer in Liber…

That's super interesting. How was your experience working with the government? I had reached out a long while back to some people formerly in the govt to ask if I could volunteer some months of my time on e-gov stuff and the main response I got was along the lines of "we need to focus on agriculture and basic needs, digital isn't relevant yet."

I was there on a contract with an NGO, funded by the US CDC. The main project was to build a system for collecting reports of suspected epidemic diseases, including but not limited to Ebola, and correlate and track them with lab tests. I quickly realized that odds of actually getting the system implemented was low, so decided to focus on team building and spreading knowledge to my Liberian, Guinean and Nigerian colleagues. We built a pretty cool system with opportunistic sync, eventually syncing data with the MoH DHIS2 system, but obviously politics was the most important thing, and I had no real chance of succeeding with that. They rolled it out for testing in two counties, then the regime changed and it was scrapped. I did my best to spend the US tax money locally instead (I'm a big believer in helping by dealing out cash).

Another project was to build a database of all local health facilities. That would have been quite easy--basically, an Excel sheet would have been good enough as far as I understand, but the problem was that the data didn't exist. Travelling around the country to see which facilities were still operating, and tracking new ones, would have been an amazing experience, but that wasn't in my job description. There was a guy tasked with that, and AFAIK nothing happened on that side of the project during the six months I was there.

On the whole, I got quite a bleak impression of NGO work. There were some seeming to do some good work, and other, more experienced and jaded, "expats" I met gave me the vibe of good luck with that, I guess. One problem is that many NGOs want to be "cool" and high tech, where what could actually help would be to basically be a smart, good spirited renegade hacker implementing as simple solutions as possible, and most importantly working directly with the health staff, lab technicians, and the people actually working the central systems. I was shielded from that, probably for small-scale organizational politic reasons, and was too inexperienced to begin with, to work around all that. It's a strange world in a strange land, and were I to do it again I would go about it quite differently. Basically commandeering what resources I could and not minding the organization I was contracted with.

Ever since, I've looked at solutions using drones, and I found a drone system which would fit the constraints (quite large distances, cooling necessary, fast, energy efficient) but that would take a cool $1M USD just to start. I'm still in touch with a couple of CDC guys who would also like to do that, closely monitoring zipline and other similar systems, but the constraints are different. The US money dried up quickly since--when Trump dropped his "shithole countries" schtick, a lot of Liberians took it as a personal insult, I think.

It's clear to me that the US has a huge part in the troubles of the country, not only it's founding but continuing to this day, but some Americans working for the embassy and other US institutions saw it quite differently.

My native Sweden also has a large presence in the country, having operated LAMCO, a huge iron mining operation as a joint venture between the Swedish government and US steel giant Bethlehem steel. They left as war was brooding, and the vast infrastructure is since taken over by Arcelor Mittal, their only mining operation, I think. The ore is extremely pure, 85-90% iron I think, so it's basically just digging up iron and carting it off by train to the port of Buchanan.

LAMCO built the railway, individual houses for thousands of people, free schools, hospital, free trade schools for adults, as well as a go cart track, five tennis courts, an 18 hole golf course and an Olympic size swimming pool, cooled by pumping water from a nearby river hundreds of feet into the ground. They did this in the 50s! It's unbelievable when you actually see it. People up there in Nimba are still waiting for the Swedes to come back, a persistent rumor, it seems. Mittal is disliked by the people.

Re: ‘Spiderman’ Hacker Daniel Kaye Took Down Liberia’s Internet

#50

This was a quite interesting and enlightening read! I was in Liberia at the time, from December 2016 through June 2017, doing a project for the Liberia Ministry of Health, and got acquainted with some people working for Cellcom. I also gained a great friend in one member of my team, who later worked briefly for Lonestar and is now employed by Orange. There aren't that many opportunities for a young developer in Liber…

>CIA's only KNOWN listening post in Africa

Point taken.
Post reply on HN