Live data from Hacker News

How to own an airline in 3 easy steps and grab the TSA nofly list along the way

maia.crimew.gay

461–470 of 677 posts

Re: How to own an airline in 3 easy steps and grab the TSA nofly list along the way

#461
post #318

TIL https://en.wikipedia.org/wiki/Maia_arson_crimew > In March 2021, crimew was indicted by a grand jury in the United States on criminal charges related to her alleged hacking activity between 2019 and 2021. The charges were unrelated to the hack of Verkada. Her home and her parents' home were raided by the Swiss police at the request of United States authorities, and her electronic devices were seized. People used…

“Jan 19, 2023” — OP article date.

Re: How to own an airline in 3 easy steps and grab the TSA nofly list along the way

#462
post #455

Earlier quoted context omitted.

Are you asking, what purpose was there in bringing the hammer of the American Justice Department and down onto a random grey hat hacker? The same as always: enforce rigid authoritarianism and blind bureaucratic SOP. Remember kids, clicking the "next page" button on court document websites is legal, doing it with javascript is a felony, off to jail with you, join the rapists and murderers!

[flagged]

two wrongs dont make one rigth

Re: How to own an airline in 3 easy steps and grab the TSA nofly list along the way

#464

Earlier quoted context omitted.

Don't all sorts of person-related details come in handy to stage a social engineering hack? Maybe a caller could demonstrate legitimacy by coughing up a passport number. At this point, it may impress me more than someone having found my SSN (_love you for that, Equifax_). Yet, SSN is still by many institutions considered something that should be stored in the vault.

>Don't all sorts of person-related details come in handy to stage a social engineering hack? Maybe? But also maybe not really? Passport numbers change very frequently, nobody uses them to identify people.

I don't know if you are joking or I need to break it to you that in most cases passports are the de facto identification for foreigners and passport S/Ns are being used as part of identification procedures.

Re: How to own an airline in 3 easy steps and grab the TSA nofly list along the way

#465
post #413
post #318

TIL https://en.wikipedia.org/wiki/Maia_arson_crimew > In March 2021, crimew was indicted by a grand jury in the United States on criminal charges related to her alleged hacking activity between 2019 and 2021. The charges were unrelated to the hack of Verkada. Her home and her parents' home were raided by the Swiss police at the request of United States authorities, and her electronic devices were seized. People used…

How such supposedly talented hacker end up to be doxxed? It's not that hard to become 99.99% anonymous online...

No doxxing was necessary, Tillie did it all publically, publishing on a home server, making announcements on Telegram under their real name. I don't quite get it either, but they specifically didn't want to hide in (pseudo)anonymity.

Re: How to own an airline in 3 easy steps and grab the TSA nofly list along the way

#466

Earlier quoted context omitted.

The laws around digital access to networks are archaic and very broad, they were mostly defined in the 80s and 90s. I believe any unauthorized access (i.e. not having consent from the owner/operator) to a private network is technically a crime. Even if the Jenkins server was open, I bet finding and using the S3 credentials would have crossed the line of the law. Those S3 buckets are private and if you didn't have per…

Regards the archaic laws I'm not convinced, they tend to just parallel real world crimes. For example if you parallel it to the real world then the crime of trespass covers the Jenkins server situation (you can trespass on land that is open and easy to access) and you still commit a crime if you enter a house where you found the key on the floor outside the door, which covers the S3 situation.

[flagged]

Re: How to own an airline in 3 easy steps and grab the TSA nofly list along the way

#467
post #225

Earlier quoted context omitted.

This is downvoted, but the homepage really does say "hello i am maia arson crimew (it/she)". I'd feel uncomfortable referring to anyone as "it" though, as there are some connotations with that :-/

Why do we only get to choose our pronouns? I want to choose my prepositions: in, up and above. Also, my conjunctions are: however, moreover, and whereupon.

Because we already arbitrarily assign different pronouns to different people, usually based solely on their appearance, and there is no harm in letting people pick which type of gendered (or less gendered, in the binary sense) association they'd rather have.

Re: How to own an airline in 3 easy steps and grab the TSA nofly list along the way

#468
post #455

Earlier quoted context omitted.

Are you asking, what purpose was there in bringing the hammer of the American Justice Department and down onto a random grey hat hacker? The same as always: enforce rigid authoritarianism and blind bureaucratic SOP. Remember kids, clicking the "next page" button on court document websites is legal, doing it with javascript is a felony, off to jail with you, join the rapists and murderers!

[flagged]

Nice whataboutism. Are you trying to say as long as there are worse authoritarian regimes exists critiquing the American regime is bad?

Re: How to own an airline in 3 easy steps and grab the TSA nofly list along the way

#469

Earlier quoted context omitted.

Amusingly, "they" is not one of the pronouns it prefers.

“They” is a perfectly acceptable pronoun when you don’t know somebody’s gender, or preferences.

Sure, but we do, half the thread is arguing about the validity of it(s) pronouns.

Re: How to own an airline in 3 easy steps and grab the TSA nofly list along the way

#470
post #465
post #413

Earlier quoted context omitted.

How such supposedly talented hacker end up to be doxxed? It's not that hard to become 99.99% anonymous online...

No doxxing was necessary, Tillie did it all publically, publishing on a home server, making announcements on Telegram under their real name. I don't quite get it either, but they specifically didn't want to hide in (pseudo)anonymity.

Can Confirm. I was big into telegram communities at that time and joined when her group was public. I have nothing to prove because I delete all my stuff but the indictment shows screenshots and transcripts from the group. She literally posted selfies on Twitter sometimes.

I don't agree with most of her more radical views and find her methods to be too extreme, but she clearly stood behind them and didn't hide

Post reply on HN