Live data from Hacker News

German police name alleged leaders of GandCrab and REvil ransomware groups

krebsonsecurity.com

11–20 of 175 posts

Re: German police name alleged leaders of GandCrab and REvil ransomware groups

#11
post #8

Feels odd for an infosec blog to use 'doxxing' this way. Doxxing is generally considered to be unethical exposure of personal information. Identifying a criminal is ethical.

>Identifying a criminal is ethical. This outsourcing of one's morals to the state is excessive even by already high western white collar internet standards. Now, make no mistake, these guys are up to no good and probably should be identified and prosecuted, but to just declare that a bad thing is now good because government is doing it is basically an abdication of one's moral compass. At best this is still a bad thi…

"Identifying a criminal" doesn't imply that it's done by the government, and being done by the government doesn't imply that it's done to a criminal. This comment seems like quite a leap.

Re: German police name alleged leaders of GandCrab and REvil ransomware groups

#12
post #8

Feels odd for an infosec blog to use 'doxxing' this way. Doxxing is generally considered to be unethical exposure of personal information. Identifying a criminal is ethical.

>Identifying a criminal is ethical. This outsourcing of one's morals to the state is excessive even by already high western white collar internet standards. Now, make no mistake, these guys are up to no good and probably should be identified and prosecuted, but to just declare that a bad thing is now good because government is doing it is basically an abdication of one's moral compass. At best this is still a bad thi…

Innocent until proven guilty (in a court of law)?

Re: German police name alleged leaders of GandCrab and REvil ransomware groups

#13

[flagged]

Go look at the al Qaeda emails recovered from the raid that killed bin Laden and you'll find all the same stuff. Turns out that the way businesses operate is just a good way to operate human organizations in general, whether their goal is to sell widgets or blow up infidels.

Re: German police name alleged leaders of GandCrab and REvil ransomware groups

#14

Earlier quoted context omitted.

>Identifying a criminal is ethical. This outsourcing of one's morals to the state is excessive even by already high western white collar internet standards. Now, make no mistake, these guys are up to no good and probably should be identified and prosecuted, but to just declare that a bad thing is now good because government is doing it is basically an abdication of one's moral compass. At best this is still a bad thi…

"Identifying a criminal" doesn't imply that it's done by the government, and being done by the government doesn't imply that it's done to a criminal. This comment seems like quite a leap.

It's the government who defines what "criminal" means.

Re: German police name alleged leaders of GandCrab and REvil ransomware groups

#15
post #8

Feels odd for an infosec blog to use 'doxxing' this way. Doxxing is generally considered to be unethical exposure of personal information. Identifying a criminal is ethical.

>Identifying a criminal is ethical. This outsourcing of one's morals to the state is excessive even by already high western white collar internet standards. Now, make no mistake, these guys are up to no good and probably should be identified and prosecuted, but to just declare that a bad thing is now good because government is doing it is basically an abdication of one's moral compass. At best this is still a bad thi…

not the state, but the law

Re: German police name alleged leaders of GandCrab and REvil ransomware groups

#16
post #8

Feels odd for an infosec blog to use 'doxxing' this way. Doxxing is generally considered to be unethical exposure of personal information. Identifying a criminal is ethical.

>Identifying a criminal is ethical. This outsourcing of one's morals to the state is excessive even by already high western white collar internet standards. Now, make no mistake, these guys are up to no good and probably should be identified and prosecuted, but to just declare that a bad thing is now good because government is doing it is basically an abdication of one's moral compass. At best this is still a bad thi…

ethics and morality are not interchangeable are they?

anyway individuals willingly give to teh state some autonomy in return for the safety of governance... that's the social contract free people have with government

"doxxing" a Russian ransomware group is the kind thing to do. bombing them out of existence is within the remit of the range of ideas a government could resort to...

Re: German police name alleged leaders of GandCrab and REvil ransomware groups

#17

Earlier quoted context omitted.

"Identifying a criminal" doesn't imply that it's done by the government, and being done by the government doesn't imply that it's done to a criminal. This comment seems like quite a leap.

It's the government who defines what "criminal" means.

Not necessarily. I'm free to make my own determination on the matter.

Re: German police name alleged leaders of GandCrab and REvil ransomware groups

#18
post #15

Earlier quoted context omitted.

>Identifying a criminal is ethical. This outsourcing of one's morals to the state is excessive even by already high western white collar internet standards. Now, make no mistake, these guys are up to no good and probably should be identified and prosecuted, but to just declare that a bad thing is now good because government is doing it is basically an abdication of one's moral compass. At best this is still a bad thi…

not the state, but the law

[deleted]

Re: German police name alleged leaders of GandCrab and REvil ransomware groups

#19

Earlier quoted context omitted.

>Identifying a criminal is ethical. This outsourcing of one's morals to the state is excessive even by already high western white collar internet standards. Now, make no mistake, these guys are up to no good and probably should be identified and prosecuted, but to just declare that a bad thing is now good because government is doing it is basically an abdication of one's moral compass. At best this is still a bad thi…

ethics and morality are not interchangeable are they? anyway individuals willingly give to teh state some autonomy in return for the safety of governance... that's the social contract free people have with government "doxxing" a Russian ransomware group is the kind thing to do. bombing them out of existence is within the remit of the range of ideas a government could resort to...

Not disagreeing with your preface but I was under the impression that while it took governments some time to figure things out, kinetic bombing in retaliation for cyberwarfare was pretty much ruled out unless the cyberwarfare results in direct mass casualties (for example cyber sabotaging a refinery results in an explosion which results in casualties.). Else we’d have bombed North Korea, China, Ukraine, Russia, Romania, etc.

Re: German police name alleged leaders of GandCrab and REvil ransomware groups

#20
Putting someone on a (most) wanted list is "doxing"?

[Edit] "An international search is underway for Daniil Maksimovich SHCHUKIN on suspicion of numerous counts of gang-related and commercial extortion using ransomware to the detriment of commercial enterprises, public facilities, and institutions."

Post reply on HN