Earlier quoted context omitted.
[flagged]
But how do you find the prostitute?
Asking for a friend?
German police raid DDoS-friendly host FlyHosting
21–30 of 48 posts
Re: German police raid DDoS-friendly host FlyHosting
#22I wonder what sort of person is aware enough of DDoS attacks to want to buy one, savvy enough to find where to buy one, yet dumb enough to pay with PayPal. Or accept PayPal if you ran such a service. Given, it says the people running it were 16-24 and adolescent hubris knows no bounds... Maybe the customers were the same general age as the owners?
Isn't almost any online payment method trivially trackable? Bitcoin (and most other cryptocoins) needs a bit of effort to grovel the public transaction history, and XMR does things that supposedly make that not really work at all, but other than that...
You can at least make some people believe bitcoin isn't traceable at all, and it can be quite hard or even impossible to trace if you do it right.
Re: German police raid DDoS-friendly host FlyHosting
#23I wonder what sort of person is aware enough of DDoS attacks to want to buy one, savvy enough to find where to buy one, yet dumb enough to pay with PayPal. Or accept PayPal if you ran such a service. Given, it says the people running it were 16-24 and adolescent hubris knows no bounds... Maybe the customers were the same general age as the owners?
What identity verification does paypal actually do? I'd assume (potentially incorrectly) that criminals using it were doing so under an assumed (or stolen) identity so the account wouldn't lead back to them. Which would limit what you could do with the money, but isn't that true of any crime related money?
As far as I remember you need a credit card or banking account. Ok, you might have stolen those, but many people probably used their own.
Re: German police raid DDoS-friendly host FlyHosting
#24Earlier quoted context omitted.
What identity verification does paypal actually do? I'd assume (potentially incorrectly) that criminals using it were doing so under an assumed (or stolen) identity so the account wouldn't lead back to them. Which would limit what you could do with the money, but isn't that true of any crime related money?
PayPal has a banking license it does a pretty full KYC in most places or relies on others that do. Outside of cash transfer services which often also require an ID on both ends albeit that is often easier to fake there aren’t ways to transfer money anonymously. So companies use either alternative settlement methods such as crypto or gift cards or what is also quite common twin settlement. You want a VPC? We’ll give y…
Before hordes of people respond with "PayPal is not a bank!", it is indeed not a bank in US, but its European subsidiary is legally a bank.
Re: German police raid DDoS-friendly host FlyHosting
#25Looks like RIPE is revoking their ASN: $ whois -h whois.ripe.net AS202437 [...] aut-num: AS202437 as-name: FLYHOSTING remarks: ------------------------------------------------------------- remarks: This internet resource will be deregistered by 9 June 2023. remarks: ------------------------------------------------------------- [...] last-modified: 2023-03-31T13:34:39Z There's no equivalent remark on their IP space (1…
Does anyone know what standards / processes are for de-peering, or as in this case, revoking ASN entirely, of rogue networks? The notion of ignoring networks (ASNs) which have predominantly hostile traffic at the BGP level has been bandied about for a long time, but so far as I know, most network operators are exceedingly reluctant to do this, absent a few, mostly political, instances. Israel and its Arab neighbours…
> Would RIPE be acting on the request of German legal authorities and/or courts, or on some other basis? And how would this be determined?
This is a guess but either a) giving out incorrect information (which is a clear basis, all AS operators must be either a person or a legal company, yes you could practically bypass this by registering a shell company but considering that they've used PayPal I'm pretty sure that they have not planned this well) or b) a German or Hessian (it seems that it's registered in Hesse) court might have forcibly transferred the legal entity to the state, in which case since the state now owns the entity they could simply file paperwork to voluntarily relinquish the AS.
Depeering is much more easier: all major transit networks have a provision in their contract to terminate the transit if it's unnecessarily burdening their systems or if it is used for malicious purposes.
Re: German police raid DDoS-friendly host FlyHosting
#26> The U.K.’s National Crime Agency announced last week that it’s been busy setting up phony DDoS-for-hire websites that seek to collect information on users, remind them that launching DDoS attacks is illegal, and generally increase the level of paranoia for people looking to hire such services. This... might actually be effective. One major reason I stopped using Kazaa/LimeWire back in the day was growing fear (and…
Basically DDoS for hire has become alike torrenting, real estate market, and online dating. Where young people are suppoused to have fun?! All they're left with is gaming and gambling.
Re: German police raid DDoS-friendly host FlyHosting
#27Off-topic, but why do these seizure notices always look like shitposts? They always give off "graphic design is my passion" vibes.
It's because of the ratio between how much it costed the taxpayer and how much the intern creating it was paid. Every person in the pipeline was high paid best-in-class expert. In fact no pixel is accidentally in its place.
Re: German police raid DDoS-friendly host FlyHosting
#28Re: German police raid DDoS-friendly host FlyHosting
#29I wonder what sort of person is aware enough of DDoS attacks to want to buy one, savvy enough to find where to buy one, yet dumb enough to pay with PayPal. Or accept PayPal if you ran such a service. Given, it says the people running it were 16-24 and adolescent hubris knows no bounds... Maybe the customers were the same general age as the owners?
Most criminals who are caught are not criminal masterminds. The opposite, actually, otherwise they'd probably not be caught, since their opponents aren't of the Sherlock Holmes kind either. Especially in the cyber crime field, where barrier to entry is pretty low. Source: been acting on both sides, for research.
Re: German police raid DDoS-friendly host FlyHosting
#30I wonder what sort of person is aware enough of DDoS attacks to want to buy one, savvy enough to find where to buy one, yet dumb enough to pay with PayPal. Or accept PayPal if you ran such a service. Given, it says the people running it were 16-24 and adolescent hubris knows no bounds... Maybe the customers were the same general age as the owners?
Isn't almost any online payment method trivially trackable? Bitcoin (and most other cryptocoins) needs a bit of effort to grovel the public transaction history, and XMR does things that supposedly make that not really work at all, but other than that...
Considering it's criminals we're talking about here, they can easily use some rasomware attack on a few people and then use those bitcoins to pay for whatever they need, and noone can identify them through bitcoin "traffic".