Live data from Hacker News

Another Hacker’s Laptop, Cell Phones Searched at Border

wired.com

31–40 of 89 posts

Re: Another Hacker’s Laptop, Cell Phones Searched at Border

#31
post #9

Let me get this straight. This is a person who has openly admitted to knowing how to hack banking systems among others, then travels to countries like Abu Dhabi and the Dominican Republic to present that information. We are surprised that he is searched at the border to the US? He was treated politely, not physically harmed and had his hardware returned. Sounds like the government is finally doing their job. Maybe th…

No, try again. You did not "get it straight" at all.

You seem to have a strong (negative) opinion on the matter, yet you demonstrate a very poor grasp of some basic infosec concepts. You should perhaps consider reserving judgement when that is the case.

Not only did he NOT "admit to knowing how to hack banking systems", but he was not presenting anything related to that in Abu Dhabi. He was speaking, ironically enough, on privacy.

Last year he demonstrated a weakness in how website encryption is handled. He did not hack any banks. Banks, among other things, use HTTPS, so the author used them as an easy example. This also does not breach those sites in any way, it just allows for eavesdropping and attacking end users.

Here is why your short-sighted attitude towards legitimate security research is highly foolish. There are people who find and disclose these vulnerabilities and work with vendors to fix them (indeed, Moxie ensured that his bug was fixed before he even went public with it). There are also people who do NOT work to get them fixed, keep them underground, and use them to exploit people.

So, you vilify and harass the guys getting the bugs fixed and they drop out of the game. Who does that leave as the only group in possession of that information? Yeah, now your networks and your infrastructure is getting owned, and there is no one left to tell you how or why.

If you think the "bad guys" DON'T already have this knowledge, and are not using it to their advantage, you are very mistaken.

Re: Another Hacker’s Laptop, Cell Phones Searched at Border

#32
post #9

Let me get this straight. This is a person who has openly admitted to knowing how to hack banking systems among others, then travels to countries like Abu Dhabi and the Dominican Republic to present that information. We are surprised that he is searched at the border to the US? He was treated politely, not physically harmed and had his hardware returned. Sounds like the government is finally doing their job. Maybe th…

The conference, which was for computer security professionals, just happened to be hosted in Abi Dhabi, it could just as well have been Las Vegas, or Berlin. You make it sound as if he were going to brief to a foreign secret intelligence agency. http://www.blackhat.com/html/bh-ad-10/registration/bh-ad-10-...

Re: Another Hacker’s Laptop, Cell Phones Searched at Border

#33
post #24

Earlier quoted context omitted.

Why would he tell people where he keeps the clone?

To make people think he's keeping it there but he really isn't? A bluff?

That's what I thought for a sec...and then realized he probably wouldn't prefer to be searched, even if they weren't going to find anything.

Re: Another Hacker’s Laptop, Cell Phones Searched at Border

#34
post #25
post #9

Let me get this straight. This is a person who has openly admitted to knowing how to hack banking systems among others, then travels to countries like Abu Dhabi and the Dominican Republic to present that information. We are surprised that he is searched at the border to the US? He was treated politely, not physically harmed and had his hardware returned. Sounds like the government is finally doing their job. Maybe th…

i suspect that many people on HN have the skills to break into quite a few computer systems, and travel to places that are hotbeds of computer crime such as New York, SF, and of course internationally. does that mean we should all be detained and have our computers ad phones taken away and searched whenever we go within 100 miles of a border?

You're right, this place is rife with technological supermen. Give me a sawzall and an acetylene torch and I could 'hack' the Gibson.

Re: Another Hacker’s Laptop, Cell Phones Searched at Border

#35
post #19

Interestingly, I just had a discussion with my roomate about this. We were sitting in a coffee shop, and he was mad at himself because he forgot the latest copy of a game he is working on at the house... Why is this a problem at all anymore? Hosting is cheaap . I have a linux VPS at linode that I pay $20/mo for and almost everything that i do is stored there. Honestly, the only things I can think of that aren't store…

Funny, I keep a lot of stuff local because I want to make sure I have access to it when I am out somewhere, but my music collection is now http://www.grooveshark.com

Re: Another Hacker’s Laptop, Cell Phones Searched at Border

#36
post #19

Interestingly, I just had a discussion with my roomate about this. We were sitting in a coffee shop, and he was mad at himself because he forgot the latest copy of a game he is working on at the house... Why is this a problem at all anymore? Hosting is cheaap . I have a linux VPS at linode that I pay $20/mo for and almost everything that i do is stored there. Honestly, the only things I can think of that aren't store…

Sounds like I have a similar set up to you. I have a Macbook, a Nettop (HTPC and other stuff) and a Linode VPS.

My Macbook is backed up to my TimeCapsule over the air once an hour, although it doesn't have anything particularly important on it. My Linode VPS is backed up to my Nettop at home once a day with an rsync (incremental). My Linode VPS's MySQL db's are replicated over a VPN to the Nettop too so I have up to the second copies of my MySQL dbs.

If I lost my laptop or my Linode died then I wouldn't lose anything. If I wanted to reinstall my laptop I wouldn't have to worry about copying anything off it, I just put the disc in and reboot.

Re: Another Hacker’s Laptop, Cell Phones Searched at Border

#37
post #19

Interestingly, I just had a discussion with my roomate about this. We were sitting in a coffee shop, and he was mad at himself because he forgot the latest copy of a game he is working on at the house... Why is this a problem at all anymore? Hosting is cheaap . I have a linux VPS at linode that I pay $20/mo for and almost everything that i do is stored there. Honestly, the only things I can think of that aren't store…

Not a good idea if you know that you're targeted by the government. ;) In fact this makes it much easier for them to get access to your data.

If they know your name they can get to your credit card transactions. From you're credit card transactions they get to your hoster. And from your hoster they get the data that's stored on your VPS.

You can somehow mitigate this issue by storing your important data on an encrypted filesystem, but this does not really solve this problem as the key has still to be kept in memory.

Re: Another Hacker’s Laptop, Cell Phones Searched at Border

#38
> “I can’t trust any of these devices now,” says Marlinspike, who asked that Threat Level not report his real name. “They could have modified the hardware or installed new keyboard firmware.”

I thought when you get searched they have to keep your possessions within your view at all times.

Re: Another Hacker’s Laptop, Cell Phones Searched at Border

#39
post #19

Interestingly, I just had a discussion with my roomate about this. We were sitting in a coffee shop, and he was mad at himself because he forgot the latest copy of a game he is working on at the house... Why is this a problem at all anymore? Hosting is cheaap . I have a linux VPS at linode that I pay $20/mo for and almost everything that i do is stored there. Honestly, the only things I can think of that aren't store…

It's cheaper at dropbox, 2gb for free.

Re: Another Hacker’s Laptop, Cell Phones Searched at Border

#40
post #38

> “I can’t trust any of these devices now,” says Marlinspike, who asked that Threat Level not report his real name. “They could have modified the hardware or installed new keyboard firmware.” I thought when you get searched they have to keep your possessions within your view at all times.

I believe that's generally true for the TSA, but not customs.
Post reply on HN