Live data from Hacker News

Interview with the Guy Who Tried to Frame Me for Heroin Possession

krebsonsecurity.com

21–30 of 95 posts

Re: Interview with the Guy Who Tried to Frame Me for Heroin Possession

#22
post #4

Earlier quoted context omitted.

A hell of a guy who doxes people he doesn't like on Twitter.

A statement devoid of context intended for shock value is better off not said.

What shock-value do you speak of? Cursory Googling[0][1] reveals that Mr. Krebs is quite possibly not above reproach.

Is there something else that needs to be said about the situation?

[0] - https://hacked.wtf/2019/04/26/dear-brian-krebs-no-more-doxxi...

[1] - https://www.itwire.com/security/86867-infosec-researchers-sl...

Re: Interview with the Guy Who Tried to Frame Me for Heroin Possession

#23
post #17
post #16

Earlier quoted context omitted.

Our son (10 yo) had a delinquent medical bill for reasons we don't understand. The creditor can't tell us who sent the bill because we aren't the named party and I'll be damned if I put him on the phone with them, because he is a minor. So, we're at an impasse and no one can tell us anything. Someone managed to get his name and address and did not realize he was a minor. Brilliant system you have!

hire a lawyer and write a letter. You're not at an impasse. You can have this cleared, if they don't have evidence and you write a letter, they have to shut it down.

I'll do no such thing. Someone else made a mistake and therefore I have to pay a lawyer to fix it? It's not a legitimate debt, but it goes to show how anyone can put anything in anyone's file and these information brokers will suck it up and pass it around without even the most basic sanity checks. The FCRA was a good start but an American GDPR would be better.

Re: Interview with the Guy Who Tried to Frame Me for Heroin Possession

#24
post #17
post #16

Earlier quoted context omitted.

Our son (10 yo) had a delinquent medical bill for reasons we don't understand. The creditor can't tell us who sent the bill because we aren't the named party and I'll be damned if I put him on the phone with them, because he is a minor. So, we're at an impasse and no one can tell us anything. Someone managed to get his name and address and did not realize he was a minor. Brilliant system you have!

hire a lawyer and write a letter. You're not at an impasse. You can have this cleared, if they don't have evidence and you write a letter, they have to shut it down.

No letter, just ask for Proof of Debt... most of these companies can't even validate how much you owe...

Re: Interview with the Guy Who Tried to Frame Me for Heroin Possession

#25
post #23
post #17

Earlier quoted context omitted.

hire a lawyer and write a letter. You're not at an impasse. You can have this cleared, if they don't have evidence and you write a letter, they have to shut it down.

I'll do no such thing. Someone else made a mistake and therefore I have to pay a lawyer to fix it? It's not a legitimate debt, but it goes to show how anyone can put anything in anyone's file and these information brokers will suck it up and pass it around without even the most basic sanity checks. The FCRA was a good start but an American GDPR would be better.

Are you sure you want to risk long-term credit problems because you refuse to interact with a debt collector? I don't think that's wise.

Re: Interview with the Guy Who Tried to Frame Me for Heroin Possession

#26
Damn. It does seem that stupid mistakes took him down. Revealing too much about himself on his forum. I mean, if he'd been careful, compromise of that forum would have revealed nothing about him. And for Dog's sake, using the same password on low- and high-security accounts!

Of course, the real story could be hidden through parallel construction. But on it's face, this does support the argument that it's stupid mistakes that take people down. Krebs' blog is full of them.

Edit: And just to be clear, I'm not even suggesting support for that Ukrainian dickhead. It's just that criminal takedowns are well reported, and so provide cautionary lessons for the rest of us.

Re: Interview with the Guy Who Tried to Frame Me for Heroin Possession

#27
post #23
post #17

Earlier quoted context omitted.

hire a lawyer and write a letter. You're not at an impasse. You can have this cleared, if they don't have evidence and you write a letter, they have to shut it down.

I'll do no such thing. Someone else made a mistake and therefore I have to pay a lawyer to fix it? It's not a legitimate debt, but it goes to show how anyone can put anything in anyone's file and these information brokers will suck it up and pass it around without even the most basic sanity checks. The FCRA was a good start but an American GDPR would be better.

You shouldn't need a lawyer, but it may require a couple hours of time (but not all at once).

The next time they call, tell them that the person they are looking for is a minor and you are their guardian and because of that you are required to speak on their behalf.

Immediately inform them that all further communication must be done in writing and that you are requesting that they validate the debt in writing. They are required by law to communicate in writing if you request it and to also validate the debt.

If the next letter from them is not a debt validation, you should send them a simple cease and desist response stating they have not validated the debt and may no longer contact you. Send it certified, return receipt requested. Keep a copy for yourself.

If it doesn't stop at that point, you will need a lawyer, but it will most likely be at no cost to you:

If they send you another letter or call you again attempting to collect, get their information and if you are inclined, contact a debt collection attorney. You would be able to sue them for up to $1,000 per incursion plus the fees from your lawyer. Provided you collected their information and have your initial letter, it should require very little time from you to go through the legal process.

Re: Interview with the Guy Who Tried to Frame Me for Heroin Possession

#28
post #23
post #17

Earlier quoted context omitted.

hire a lawyer and write a letter. You're not at an impasse. You can have this cleared, if they don't have evidence and you write a letter, they have to shut it down.

I'll do no such thing. Someone else made a mistake and therefore I have to pay a lawyer to fix it? It's not a legitimate debt, but it goes to show how anyone can put anything in anyone's file and these information brokers will suck it up and pass it around without even the most basic sanity checks. The FCRA was a good start but an American GDPR would be better.

Asking for proof of debt doesn't require a lawyer and almost always results in them going away.

Re: Interview with the Guy Who Tried to Frame Me for Heroin Possession

#29
post #23
post #17

Earlier quoted context omitted.

hire a lawyer and write a letter. You're not at an impasse. You can have this cleared, if they don't have evidence and you write a letter, they have to shut it down.

I'll do no such thing. Someone else made a mistake and therefore I have to pay a lawyer to fix it? It's not a legitimate debt, but it goes to show how anyone can put anything in anyone's file and these information brokers will suck it up and pass it around without even the most basic sanity checks. The FCRA was a good start but an American GDPR would be better.

You have avenues open to you. Is it fair? No, but since when is life always fair? Don't cut off your nose to spite your face.

Re: Interview with the Guy Who Tried to Frame Me for Heroin Possession

#30
post #5

I'm not sure it's possible to "give" inaccurate information to Equifax.

I work at one of the big 3 credit bureaus so thought I’d chime in - It is entirely possible to report inaccurate information to the bureaus. Although more often than not it’s on accident, not malicious. Additionally bureaus collect a lot of information from other sources. Some public some private. It’s possible for these datasets to be error prone themselves. There are however official procedures for disputing/correc…

> There are however official procedures for disputing/correcting errors in reporting and in my experience they do a pretty good job of validating everything (as that’s literally the business they’re in)

I'd disagree with that. The three agencies have a couple of names I've never gone by (I go by my middle name, so I expect "Middle Last" and "First Last" but I never went by "First Mother's-Maiden-Name"), and a couple addresses I've never lived at on my records for 20 years. They refuse to remove them.

Post reply on HN