Live data from Hacker News

German police name alleged leaders of GandCrab and REvil ransomware groups

krebsonsecurity.com

21–30 of 175 posts

Re: German police name alleged leaders of GandCrab and REvil ransomware groups

#21

Putting someone on a (most) wanted list is "doxing"? [Edit] "An international search is underway for Daniil Maksimovich SHCHUKIN on suspicion of numerous counts of gang-related and commercial extortion using ransomware to the detriment of commercial enterprises, public facilities, and institutions."

Unfortunately language tends to get diluted. Nowadays in pop culture it means publishing anyone's personal information, usually against their wishes.

Re: German police name alleged leaders of GandCrab and REvil ransomware groups

#22
post #8

Feels odd for an infosec blog to use 'doxxing' this way. Doxxing is generally considered to be unethical exposure of personal information. Identifying a criminal is ethical.

>Identifying a criminal is ethical. This outsourcing of one's morals to the state is excessive even by already high western white collar internet standards. Now, make no mistake, these guys are up to no good and probably should be identified and prosecuted, but to just declare that a bad thing is now good because government is doing it is basically an abdication of one's moral compass. At best this is still a bad thi…

Certainly, criminals also have a right to privacy. However, the limited publication of personal data of criminals by law enforcement is generally a legally legitimate measure. Doxxing, on the other hand, is generally a process that violates the fundamental right to privacy.

Re: German police name alleged leaders of GandCrab and REvil ransomware groups

#23
post #21

Putting someone on a (most) wanted list is "doxing"? [Edit] "An international search is underway for Daniil Maksimovich SHCHUKIN on suspicion of numerous counts of gang-related and commercial extortion using ransomware to the detriment of commercial enterprises, public facilities, and institutions."

Unfortunately language tends to get diluted. Nowadays in pop culture it means publishing anyone's personal information, usually against their wishes.

“When I use a word,” Humpty Dumpty said, in rather a scornful tone, “it means just what I choose it to mean — neither more nor less.”

Re: German police name alleged leaders of GandCrab and REvil ransomware groups

#24

Putting someone on a (most) wanted list is "doxing"? [Edit] "An international search is underway for Daniil Maksimovich SHCHUKIN on suspicion of numerous counts of gang-related and commercial extortion using ransomware to the detriment of commercial enterprises, public facilities, and institutions."

Yeah, I’m not okay with this. Doxxing is a term with an extremely negative connotation and is often done to people who, bluntly, weren’t hiding or doing anything wrong. The correct term for the same act here is either “accuse” or “unmask”.

Re: German police name alleged leaders of GandCrab and REvil ransomware groups

#26
post #8

Feels odd for an infosec blog to use 'doxxing' this way. Doxxing is generally considered to be unethical exposure of personal information. Identifying a criminal is ethical.

I think they obviously just took it as 'exposure of personal information' period.

[dead]

Re: German police name alleged leaders of GandCrab and REvil ransomware groups

#28
post #6

[flagged]

Found his record in Russia's official company registry. This is what he officially does as an entepreneur: 56.10 — Restaurant activities and food delivery services 47.23 — Retail sale of fish, crustaceans, and mollusks in specialized stores 47.25.12 — Retail sale of beer in specialized stores 47.25.2 — Retail sale of soft drinks in specialized stores 47.29.39 — Retail sale of other food products in specialized stores…

> 56.10 — Restaurant activities and food delivery services

That one is a classic for russian criminals and warlords.

Re: German police name alleged leaders of GandCrab and REvil ransomware groups

#29
post #8

Feels odd for an infosec blog to use 'doxxing' this way. Doxxing is generally considered to be unethical exposure of personal information. Identifying a criminal is ethical.

> Identifying a criminal is ethical.

I agree that “doxxing” is being misused in TFA, but criminals have privacy rights like anyone else. Violating these rights requires specific justification, it’s not automatically ethical.

Re: German police name alleged leaders of GandCrab and REvil ransomware groups

#30

Earlier quoted context omitted.

>Identifying a criminal is ethical. This outsourcing of one's morals to the state is excessive even by already high western white collar internet standards. Now, make no mistake, these guys are up to no good and probably should be identified and prosecuted, but to just declare that a bad thing is now good because government is doing it is basically an abdication of one's moral compass. At best this is still a bad thi…

Certainly, criminals also have a right to privacy. However, the limited publication of personal data of criminals by law enforcement is generally a legally legitimate measure. Doxxing, on the other hand, is generally a process that violates the fundamental right to privacy.

>criminals

>law

>legally

You keep using these words but it causes circular logic as those are all defined by the same entity that is acting unilaterally.

The action the government took was not a "good" action by any moral standard. But it was perhaps the least worse action available all things considered. Can't just whisk people off the street in a foreign country or drone them over such matters, those options would be worse.

Post reply on HN