Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

“Warning: Do Not use my mirrors/services until I have reviewed the situation”

article.gmane.org

Post reply on HN
Print view View original

11–20 of 167 posts

Re: “Warning: Do Not use my mirrors/services until I have reviewed the situation”

#11

Post by meowface »

alfiedotwtf wrote: post #8
lazyjones wrote: post #7

Earlier quoted context omitted.

Um, it's useful for other Tor operators to know what to look for if they find their servers rebooting / going down for a while without good reason. Also, warning people not to use those mirror sites is a responsible reaction to possible compromise.

Sorry, I think you misunderstood me... what I meant was - what is the purpose of the TLAs continuing with their raids if everyone knew it was about happen. That's what I meant by fear mongering.

It's possible that they suspect the servers are hosting other services/content and aren't just Tor exit nodes.

Other than that, I agree, I don't see what the point of this would be. Especially when there was some early warning. It is possible that the warning from a few days ago is entirely unrelated to this incident, though.

Re: “Warning: Do Not use my mirrors/services until I have reviewed the situation”

#12

Post by _RPM »

ChuckMcM wrote: post #10

Interesting. It is entirely possible it is survivor bias on my part but I get the suspicion that a global sort of 'cyberwar' that has been rumbling along for years is heating up rapidly. I've seen a 10x increase in various scripted attacks being attempted (patch early and often folks!) and a number of APT level compromises of systems either staging malware or deploying it (see the latest bulletin on the Afghan govern…

Does ISIS really have the resources to carry out criminal computer activities? From what I understand, they are a group with limited technological advantage, and there is no way they could carry out a major attack on the Internet.

Re: “Warning: Do Not use my mirrors/services until I have reviewed the situation”

#14

Post by alfiedotwtf »

gnu8 wrote: post #13

How did these criminals penetrate the ISP? Is there security footage? It should be no trouble to identify the perpetrators and have them arrested if their pictures are posted online.

The criminals were probably carrying a warrant.

Re: “Warning: Do Not use my mirrors/services until I have reviewed the situation”

#16

Post by ossreality »

alfiedotwtf wrote: post #3

As the Tor community knew of a possible compromise in advance, what what is the purpose of this? Sounds like fear mongering by the TLAs with the aim to discredit anonymity within the network rather than actual malice.

Did we read the same thing?

Re: “Warning: Do Not use my mirrors/services until I have reviewed the situation”

#17

Post by ossreality »

_RPM wrote: post #12
ChuckMcM wrote: post #10

Interesting. It is entirely possible it is survivor bias on my part but I get the suspicion that a global sort of 'cyberwar' that has been rumbling along for years is heating up rapidly. I've seen a 10x increase in various scripted attacks being attempted (patch early and often folks!) and a number of APT level compromises of systems either staging malware or deploying it (see the latest bulletin on the Afghan govern…

Does ISIS really have the resources to carry out criminal computer activities? From what I understand, they are a group with limited technological advantage, and there is no way they could carry out a major attack on the Internet.

What "resouces" do you need? A credit card and a curious 20 year old could inflict a massive amount of damage with little effort, given a vulnerability to exploit.

I can spin up a thousand VMs in 4 cloud providers in seconds.

By the way, I'm aware I was hellbanned. It was well over a year ago. My comments were on-topic and polite before I was banned. The funny thing is, the person I was banned for arguing with has burned through half a dozen accounts. I refuse to play ball with HN's shitty policy of hellbanning and so I post like an asshole.

Hellbanning is exceedingly rude and everytime I want to comment I remember how much it pisses me off so I decide to let it affect my comments.

(For context, my original HN account was nearly in the Top 10 [with an average of ~10] when it was banned for arguing with the same person ironically.)

Awe, that's too bad. Jamesaguilar and I see eye-to-eye on most things and I respect their attention to bs sexism and racism on HN :)

Re: “Warning: Do Not use my mirrors/services until I have reviewed the situation”

#18

Post by lazyjones »

alfiedotwtf wrote: post #8
lazyjones wrote: post #7

Earlier quoted context omitted.

Um, it's useful for other Tor operators to know what to look for if they find their servers rebooting / going down for a while without good reason. Also, warning people not to use those mirror sites is a responsible reaction to possible compromise.

Sorry, I think you misunderstood me... what I meant was - what is the purpose of the TLAs continuing with their raids if everyone knew it was about happen. That's what I meant by fear mongering.

OK, they might simply seek control of those servers in preparation for some large-scale action. Or they are after some people who they know absolutely depend on Tor to operate. Just wild speculation though...

Re: “Warning: Do Not use my mirrors/services until I have reviewed the situation”

#19

Post by nullflow » 

  the chassis of the servers was opened and an unknown USB device was plugged in only 30-60 seconds before the connection was broken.
In which country did this happen?

As an European I expected the US/EU governments would keep their hands of Tor because dissidents use it in countries where US/EU want regime change.

Re: “Warning: Do Not use my mirrors/services until I have reviewed the situation”

#20

Post by tankenmate »

nullflow wrote: post #19

the chassis of the servers was opened and an unknown USB device was plugged in only 30-60 seconds before the connection was broken. In which country did this happen? As an European I expected the US/EU governments would keep their hands of Tor because dissidents use it in countries where US/EU want regime change.

Nederlands

$ whois 77.95.229.11

Post reply on HN