Live data from Hacker News

Former Ubiquiti employee charged with stealing data and extorting company

justice.gov

91–100 of 244 posts

Re: Former Ubiquiti employee charged with stealing data and extorting company

#91
post #75
post #17

Earlier quoted context omitted.

I can't imagine just using some random VPN is really going to help much anyway. When the cops come knocking they're just going to give you up right?

Surfshark VPN advertises "strict no-logs policy", "independently audited" and "obfuscated, RAM-only servers". Of course, advertising is just advertising, reality may be different.

Paypal, and apparently this guy's email server, don't have a no-receipts policy though.

Re: Former Ubiquiti employee charged with stealing data and extorting company

#92
post #54

Earlier quoted context omitted.

It is very, VERY difficult to not answer questions from a trained law enforcement interrogator even if you a) are smart and b) know not to answer questions. I can't stress this enough. It actually takes explicit training and practice, as it goes against every social habit and "instinct" we have developed throughout our entire adult lives.

Any tips for how one might maintain composure enough to handle these situations if they ever find themselves in them? I imagine the obvious answer is just practice saying "no comment, I need my lawyer present" but I'm not convinced this would make one immune to their Jedi mind tricks when the day comes to exercise it

I recommend watching this videos on how to talk to police (hint don't):

https://www.youtube.com/watch?v=d-7o9xYp7eE

Re: Former Ubiquiti employee charged with stealing data and extorting company

#93
post #54

I've always been fascinated by the idea that intelligence lies within a spectrum. Someone might be incredibly smart about a narrow topic or field, yet be blind to their own stupidity within another realm. To me, this seems like a classic example. To quote the press release: "During the execution of that search, SHARP made numerous false statements to FBI agents, including, among other things, in substance, that he wa…

It is very, VERY difficult to not answer questions from a trained law enforcement interrogator even if you a) are smart and b) know not to answer questions. I can't stress this enough. It actually takes explicit training and practice, as it goes against every social habit and "instinct" we have developed throughout our entire adult lives.

Reminded me when I watched people try and get out of jury duty by claiming biases.

A big part of the lawyers job is to question people. Their stories fell apart pretty quickly.

Re: Former Ubiquiti employee charged with stealing data and extorting company

#94

He could've prevent all of this by a) making sure his traffic was blackholed when the VPN went down and b) adding another layer from a free service (like TOR or a proxy or another VPN). He also should've been actively using the VPN so his traffic patterns wouldn't stand out as much, and so his purchase would be justifiable. If he really did buy the VPN 6 months ahead then he was a fool to leave the subscription dorma…

I really dislike theses kinds of comments in theses kind of posts. This is just bragging.

I would like the bad people to be caught and you are just giving away free advice to any future thief like him and also kind of encouraging other people which is kind of worrisome.

Privacy is a double edge sword and this is case that I happy that he was caught because of his lack of knowledge.

Re: Former Ubiquiti employee charged with stealing data and extorting company

#95
post #54

Earlier quoted context omitted.

It is very, VERY difficult to not answer questions from a trained law enforcement interrogator even if you a) are smart and b) know not to answer questions. I can't stress this enough. It actually takes explicit training and practice, as it goes against every social habit and "instinct" we have developed throughout our entire adult lives.

Any tips for how one might maintain composure enough to handle these situations if they ever find themselves in them? I imagine the obvious answer is just practice saying "no comment, I need my lawyer present" but I'm not convinced this would make one immune to their Jedi mind tricks when the day comes to exercise it

You are right: Having watched the "don't talk to the police" video over a half dozen times, I unwillingly volunteered information to a cop when in the moment. It's really hard to put into practice when someone domineering and armed is implicitly threatening you with arrest/violence for not doing precisely what they want you to do.

I actually rehearse now, because police in the USA are so corrupt and unreliable.

Something along the lines of "I know you are just doing your job, but, respectfully, I must consult with my attorney before answering any questions."

Then (to their dismay and annoyance) I repeat the exact same thing over and over again when they inevitably ask me other, follow up questions, trying to work around my initial refusal. (It's so disrespectful, as well as illegal, for them to keep going at that point.)

Re: Former Ubiquiti employee charged with stealing data and extorting company

#96
post #93
post #54

Earlier quoted context omitted.

It is very, VERY difficult to not answer questions from a trained law enforcement interrogator even if you a) are smart and b) know not to answer questions. I can't stress this enough. It actually takes explicit training and practice, as it goes against every social habit and "instinct" we have developed throughout our entire adult lives.

Reminded me when I watched people try and get out of jury duty by claiming biases. A big part of the lawyers job is to question people. Their stories fell apart pretty quickly.

That’d be interesting to see.

Once I got quizzed when boarding ElAl flights. They have well trained interrogators. It turns out a complicated life story and ADHD method of story telling doesn’t make them happy. A lot of “I said X because the full story is way too complicated, so here’s the full version” ;)

Re: Former Ubiquiti employee charged with stealing data and extorting company

#97

Ex-Ubiquiti employee here. Nick Sharp wasn't just a senior software engineer. He was the Cloud Lead and ran the whole cloud team. His LinkedIn profile will confirm it. This is why he had access to everything. Nick had his hands in everything from GitHub to Slack and we could never understand why or how. He rose to power in the company by claiming to find a vulnerability that let him access the CEO's personal system,…

> He rose to power in the company by claiming to find a vulnerability that let him access the CEO's personal system

Do you mean he got promotions cause he found a non existent vuln? Surely whoever handed out those promotions is to blame here?

Re: Former Ubiquiti employee charged with stealing data and extorting company

#98
post #57
post #44

Earlier quoted context omitted.

The difference is that every step after the initial "no comment" can/should be done with explicit guidance from an attorney, and no attorney in the country will have their client blatantly lie in front of the FBI or a grand jury despite there being solid evidence proving otherwise.

Most people don't understand that they can't explain themselves out of a legal investigation. LEOs exploit this.

Imagine the simple scenario of "someone who looks like you was spotted in area X doing crime Y" and in your pocket you have a receipt that puts many miles away at that time (or something else that would immediately stop you from being a suspect).

In what way would "fuck you talk to my lawyer" be helpful?

Re: Former Ubiquiti employee charged with stealing data and extorting company

#99
post #61

I do that that the media that breathlessly amplified this persons attack should learn from it. In particular, As much as I like and appreciate his reporting, Brian Krebs was the key person amplifying this message - which makes him a unwitting accomplice to many billions of dollars of damage to ubiquiti shareholders. Responsible disclosure exists for a reason.

Brian Krebs isn't a good reporter or a good person. He has a history of doxxing people without basis (or for the basis of leaving bad reviews on his books). It disappoints me that he has the audience he does.

Source?

Re: Former Ubiquiti employee charged with stealing data and extorting company

#100

He could've prevent all of this by a) making sure his traffic was blackholed when the VPN went down and b) adding another layer from a free service (like TOR or a proxy or another VPN). He also should've been actively using the VPN so his traffic patterns wouldn't stand out as much, and so his purchase would be justifiable. If he really did buy the VPN 6 months ahead then he was a fool to leave the subscription dorma…

> he also could've bought the subscription with stolen credit cards

Now they're looking at you from two angels.

Instead of all this jumping through hoops with anonymous VPN and payment methods, why not just do it from Starbucks?

Post reply on HN