Former Ubiquiti employee charged with stealing data and extorting company

Post by pdimitar » Thu, Dec 02, 2021, 10:45 AM UTC

colechristensen wrote: post #29

LiquidPolymer wrote: post #19

I've always been fascinated by the idea that intelligence lies within a spectrum. Someone might be incredibly smart about a narrow topic or field, yet be blind to their own stupidity within another realm. To me, this seems like a classic example. To quote the press release: "During the execution of that search, SHARP made numerous false statements to FBI agents, including, among other things, in substance, that he wa…

It's not really about intelligence. When faced correcting a false reality you have created, it can be quite hard to decide to phase change into telling the truth. The lies that come out come from not being prepared and not being a very good liar. For people who lie like this, a good way to think about it is as though it were a disease. Actually intelligent people just don't do things like this, even if they have nefa…

Post by blitzar » Thu, Dec 02, 2021, 10:51 AM UTC

dotBen wrote: post #31

mjamil wrote: post #13

Mr. Sharp is apparently not so sharp. He carried out the attack from his home network. He connected directly for enough time that his bare IP was logged. The rest of the time, he carried out the attack using a commercially purchased VPN solution that was trivial to trace back to him via the purchase record. He lied to the FBI. (I have yet to understand why people talk to law enforcement instead of staying silent so a…

(I have yet to understand why people talk to law enforcement instead of staying silent so as to not implicate themselves.) When the FBI knock at the door you totally do the whole "no comment/talk to my lawyer" thing. But what happens next if you're actually part of an investigation is they hand you a grand jury subpoena (which they were going to do anyway, even if you just talked willingly, because they have already…

Post by danielheath » Thu, Dec 02, 2021, 10:57 AM UTC

kabes wrote: post #90

throwuxiytayq wrote: post #80

Earlier quoted context omitted.

> wrote everything in Node, but absolutely _refused_ to use any existing libraries except for ones he personally wrote. He didn't "trust" them. Sounds like the single sensible thing he did. Have you seen the npm ecosystem?

Are node apps getting way more hacked than say php or java servers? Was his code any better?

Post by blitzar » Thu, Dec 02, 2021, 11:06 AM UTC

fencepost wrote: post #82

The things that really jumped at me looking at his LinkedIn profile were 1) job hopper and 2) lots of overlapping - perhaps it was all part time gigs but some of the overlap surprised me. I was shocked at the number of sub-year positions.

Post by blitzar » Thu, Dec 02, 2021, 11:08 AM UTC

TedDoesntTalk wrote: post #47

> SHARP used a virtual private network service that he subscribed to from a company named Surfshark to mask his Internet Protocol (“IP”) address when he accessed Company-1’s AWS and GitHub infrastructure without authorization. How did they know it was SurfShark?