101–110 of 169 posts
All banks in the EU are required to use 2FA, I'm curious how these hackers get around that.
If a 2FA challenge is presented, it is relayed to the victim on the phishing website, and as soon as the code is submitted, is it relayed to the real banks website in turn.
Earlier quoted context omitted.
How can it be illegal sending a few fake data to a website? And anyway I doubt they will ever sue you, at most you could be targeted for some revenge attack if they are really pissed off and you don't hide your traces.
IANAL: This is what I expect the relevant text in the CFAA is... knowingly causes the transmission of a program, information, code, or command, and as a result of such conduct, intentionally causes damage without authorization, to a protected computer;
noob question: what does an \ at the end of a bash script do? Is it the same as ; ?
The opposite. ; is the same as a newline. Prepending the newline with a backslash \ is like saying "pretend this newline isn't here". So all of the -H arguments get applied to the same command in the example, rather than being treated as commands in their own right.
As much as I think things like this can be fun, depending on your jurisdiction (and tbh the US loves extraditing people for silly computer crimes), it might not be advisable. This is all but certainly illegal at least within the US. I’m sure most competent security experts have been tempted to do things like this, or SQLi a scammer’s form and nuke their DB, and usually bad things won’t happen to you, you might find t…
What do you think the scammers are going to do, call the police?
So you DDOSed their backend but they could've whitelist their IP range and blacklist all the others for incoming requests. What you did does nothing against flexible and adaptive adversaries.
Earlier quoted context omitted.
While it may be technically illegal, considering the victims are themselves worse criminals caught in the act, I really doubt anyone is going to give you trouble over this. Unless authorities are looking for an excuse to prosecute you, of course, but there's plenty of bad PR to be had for authorities acting on behalf of criminals trying to steal people's banking credentials.
Maybe if you don't cause any collateral damage, you might have a low chance of conviction by a jury because the victim is highly non-sympathetic. (I'm not a lawyer. This is NOT LEGAL ADVICE.) That doesn't mean you won't get charged and incur a ton of legal costs if you pursue a jury trial rather than settling. Always remember that U.S. courts are courts of law, not courts of justice. That's usually a good thing (less…
Are they? My impression is that US courts rely heavily on the whims of a jury and the judge, leading to very different outcomes for similar cases. Though often leading to injustice (heavy punishments for poor and/or black people, light punishments for rich and/or white people) rather than justice.
Earlier quoted context omitted.
Well, with a spam viagra site, I think the point is keeping it up. On topic, it's crazy how willing some people are to defraud their investors.
Send like a missed opportunity to pivot into a spam viagra hosting site
Earlier quoted context omitted.
Maybe if you don't cause any collateral damage, you might have a low chance of conviction by a jury because the victim is highly non-sympathetic. (I'm not a lawyer. This is NOT LEGAL ADVICE.) That doesn't mean you won't get charged and incur a ton of legal costs if you pursue a jury trial rather than settling. Always remember that U.S. courts are courts of law, not courts of justice. That's usually a good thing (less…
> "Always remember that U.S. courts are courts of law, not courts of justice. That's usually a good thing (less left to interpretation)" Are they? My impression is that US courts rely heavily on the whims of a jury and the judge, leading to very different outcomes for similar cases. Though often leading to injustice (heavy punishments for poor and/or black people, light punishments for rich and/or white people) rathe…
`cat /dev/urandom | tr -dc '0-9' | fold -w 7 | head -n 1`
Can be accomplished in two steps instead of 4:
`tr -dc '0-9' < /dev/urandom | head -c 7`
As much as I think things like this can be fun, depending on your jurisdiction (and tbh the US loves extraditing people for silly computer crimes), it might not be advisable. This is all but certainly illegal at least within the US. I’m sure most competent security experts have been tempted to do things like this, or SQLi a scammer’s form and nuke their DB, and usually bad things won’t happen to you, you might find t…
What do you think the scammers are going to do, call the police?