Live data from Hacker News

The Mirai Botnet Was Part of a College Student Minecraft Scheme

wired.com

21–30 of 65 posts

Re: The Mirai Botnet Was Part of a College Student Minecraft Scheme

#21
post #12
post #10

Earlier quoted context omitted.

I didn't know that. Is it possible, then, that a person who leaves their door unlocked is punished while the person who stole and dumped the car is not?

And is that not a classic case of victim blaming?

It is victim blaming, but some countries obviously deem that acceptable behavior, to the point of putting it into law.

Re: The Mirai Botnet Was Part of a College Student Minecraft Scheme

#22
post #18

Earlier quoted context omitted.

Are you sure about that last claim? There's a huge load of substandard, fake or not certified electrics coming in, also thanks to big online webshops that send directly to consumers. And the consumers don't care, they have a basic expectation of quality and no idea of things like electrical safety, fire risks or RF emissions.

I read recently that a guy in Poland had his Bitcoin miners Antminers worth 100k USD confiscated at the border check because it was not certified, it didn't have CEER labels: https://translate.google.com/translate?sl=auto&tl=en&js=y&pr...

Yeah, but its akin to banning drugs through the mail. Unless we open and inspect everything mailed into a country (which would be a massive make work program of the likes we've rarely seen), you can't stop it all. AliExpress, Deal Extreme and eBay are going to keep selling goods with fake CE and UL labels that are substandard, despite regulations to the contrary.

If your country does need a make work program, hiring many postal inspectors wouldn't be the worst make work program yet. I think the TSA wins that :P

Re: The Mirai Botnet Was Part of a College Student Minecraft Scheme

#23

This was one of the best things I’ve read on wired in a while. It’s a surprisingly excellent write up on the Mirai bot net and the events surrounding it. (The HN headline title is definitely more click bait than I’d like)

Haven't read the article yet but Krebs was all over it as he was a(the) target.

https://krebsonsecurity.com/2017/01/who-is-anna-senpai-the-m...

Re: The Mirai Botnet Was Part of a College Student Minecraft Scheme

#24
post #4

Earlier quoted context omitted.

Its not illegal to leave your door unlocked.

Maybe not, but the insurance will shrug at you if you make a claim for theft.

What are you storing in your car that is worth more than your deductible? Here in Seattle, in certain bad areas you'll find numerous car doors unlocked, usually cause the owner doesn't want their window to get smashed by a crackhead over a sub-$100 potential theft.

Re: The Mirai Botnet Was Part of a College Student Minecraft Scheme

#26
post #18

Earlier quoted context omitted.

I read recently that a guy in Poland had his Bitcoin miners Antminers worth 100k USD confiscated at the border check because it was not certified, it didn't have CEER labels: https://translate.google.com/translate?sl=auto&tl=en&js=y&pr...

Yeah, but its akin to banning drugs through the mail. Unless we open and inspect everything mailed into a country (which would be a massive make work program of the likes we've rarely seen), you can't stop it all. AliExpress, Deal Extreme and eBay are going to keep selling goods with fake CE and UL labels that are substandard, despite regulations to the contrary. If your country does need a make work program, hiring…

Sure, you can't stop all of them, but stopping 96% would be enough.

Re: The Mirai Botnet Was Part of a College Student Minecraft Scheme

#27

> “We don’t know who is doing this, but it feels like a large nation-state. China or Russia would be my first guesses.” [Bruce Schneier when Mirai first appeared] This looks especially foolish now. Schneier is a so-called expert who has testified in front of congress. He should be more careful when engaging in rampant speculation like this. What basis did he have for such an assumption? I don’t understand why every s…

> Schneier is a so-called expert who has testified in front of congress

Schneier has been around for a long time, knows the industry well and has made significant contributions. Not everyone get's things right all the time including Schneier.

Credibility wise he ..

- has a master's degree in computer science

- was awarded an honorary Ph.D from the University of Westminster in London

- is chief technology officer of BT Managed Security Solutions

15 publications, 6 notable books -

- Applied Cryptograph

- Cryptography Engineering

- Secrets and Lies: Digital Security in a Networked World

- Beyond Fear: Thinking Sensibly About Security in an Uncertain World

- Liars and Outliers: Enabling the Trust that Society Needs to Thrive

- Data and Goliath: The Hidden Battles to Collect Your Data and Control Your World

Reference: https://en.wikipedia.org/wiki/Bruce_Schneier

Re: The Mirai Botnet Was Part of a College Student Minecraft Scheme

#28
post #17

If IoT botnets become more prevalent (and it doesn't seem like IoT makers have incentives to make their devices more secure), I wonder if ISPs will just start monitoring the traffic patterns of their customers for possible DDoS activity and possibly throttle or cut off their internet connection to stop the attack at its source. Probably would even be compatible with most net neutrality regulations around the world, s…

Providers in my country are already doing this. But they simply send an informal letter to notify the user that with high probability his household is part of a botnet.

Re: The Mirai Botnet Was Part of a College Student Minecraft Scheme

#29
post #27

> “We don’t know who is doing this, but it feels like a large nation-state. China or Russia would be my first guesses.” [Bruce Schneier when Mirai first appeared] This looks especially foolish now. Schneier is a so-called expert who has testified in front of congress. He should be more careful when engaging in rampant speculation like this. What basis did he have for such an assumption? I don’t understand why every s…

> Schneier is a so-called expert who has testified in front of congress Schneier has been around for a long time, knows the industry well and has made significant contributions. Not everyone get's things right all the time including Schneier. Credibility wise he .. - has a master's degree in computer science - was awarded an honorary Ph.D from the University of Westminster in London - is chief technology officer of B…

But that does not excuse knee-jerk reactions.

>China or Russia would be my first guesses

Why? If this is just based on it being a massive attack, then there's no basis to automatically blame China/Russia. Have you not noticed this trend? Every time there's a big attack or new strain of malware, it's always China/Russia/North Korea, and that finger pointing is before any concrete evidence?

Honestly, it's xenophobic and will cloud judgement as you'll be looking for evidence that it is China/Russia/North Korea rather than looking for facts.

Even if there's a good chance it is them, should we not believe in innocent until proven guilty?

Re: The Mirai Botnet Was Part of a College Student Minecraft Scheme

#30
post #6
post #4

Earlier quoted context omitted.

Its not illegal to leave your door unlocked.

At least in Germany, it's illegal to leave your car door unlocked. (Not sure about house doors.) The rationale is that it invites crime.

Actually it's illegal to lock the housedoor, because of emergency situations. In case something happend and the people need to flee, they could be trapped in the house.

Also technically it's not illegal to leave your car door unlocked, Police just handles it that way. The law demands that the car cannot be misused.

Post reply on HN