Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Infosec company pwned by 4chan user

maia.crimew.gay

Post reply on HN
Print view View original

41–50 of 234 posts

Re: Infosec company pwned by 4chan user

#41

Post by dmbche »

albatross13 wrote: post #12
dmbche wrote: post #8

Earlier quoted context omitted.

But what's the trap here? Checking who downloads the file? I don't see how they can get any actionable info out of this

1. post link to jenkins job in a 4chan thread relating to something nefarious 2. see who clicks it 3. now you have IP addresses of possibly nefarious people without needing to subpoena 4chan Something like that.

I think we're safe, anyone being half serious would be using a good vpn hopefully, it's likely to be a lot of false positives I would guess!

Re: Infosec company pwned by 4chan user

#43

Post by b800h »

albatross13 wrote: post #19
henning wrote: post #13

Earlier quoted context omitted.

Do not attribute to NSA conspiracy what can more simply be explained by the company being fucking stupid and not caring about walking the walk of infosec

[flagged]

Odd, what was particularly boomerish about that comment?

Re: Infosec company pwned by 4chan user

#44

Post by stonogo »

sybercecurity wrote: post #27
treeman79 wrote: post #18

Back in 90s. I commented to a friend that there sure were a lot of NASA employees on A certain IRC channel. His response was NASA had great computers and no security.

Heck, I've heard stories that several big agencies only started deploying firewalls at their network perimeter in the late 90's. I guess one of the saving graces was that a lot of stuff like personnel records were hard to reach or still only on paper.

Perimeter security with firewalls didn't really come into vogue until the mid 1990s (post-Cheswick and Bellovin), so that seems like a pretty speedy adoption for a big agency.

Re: Infosec company pwned by 4chan user

#45

Post by lopekaa »

boomboomsubban wrote: post #36
alexjplant wrote: post #6

This page reminds me of the old web. I kind of miss it, auto-playing MIDI songs and custom cursors and all. I'll take that over having to wade through Reddit 12 times out of 10.

As the creator was born in 1999, it's interesting to me because she's nostalgic for a period she did not fully experience. It's something I did, and it's neat yet strange to see it being done to a part of my past.

[flagged]

Re: Infosec company pwned by 4chan user

#47

Post by c7DJTLrn »

I suspect this leak was made by the author themselves and submitted to 4chan via Tor or a VPN. I don't have hard evidence to back this up but if you read the Wikipedia article about them, it's pretty easy to put two and two together.

Re: Infosec company pwned by 4chan user

#48

Post by flatline »

sofixa wrote: post #5
philipwhiuk wrote: post #3

Who makes their Jenkins instance world accessible!

Who still uses Jenkins? It's an abomination of an obsolete system that is just a pain to use, manage, maintain, setup, etc. while there are much better, more featured, easier to use and maintain alternatives out there. And it has been like this for close to ten years now . It should have been ripped out in favour of either the "native" CI/CD (e.g. GitLab CI if GitLab is used for VCS, GitHub Actions if GitHub, etc.) o…

Is there an F/OSS alternative to Jenkins that I’m not aware of?

Re: Infosec company pwned by 4chan user

#49

Post by brodouevencode »

yccs27 wrote: post #15
generalizations wrote: post #7

Found this on the same blog. Wild read. Apparently they found a copy of the nofly list from 2019. https://maia.crimew.gay/posts/how-to-hack-an-airline/

She has a pretty comprehensive wikipedia entry: https://en.wikipedia.org/wiki/Maia_arson_crimew

Appears to be self-authored.

Re: Infosec company pwned by 4chan user

#50

Post by akritrime »

boomboomsubban wrote: post #36
alexjplant wrote: post #6

This page reminds me of the old web. I kind of miss it, auto-playing MIDI songs and custom cursors and all. I'll take that over having to wade through Reddit 12 times out of 10.

As the creator was born in 1999, it's interesting to me because she's nostalgic for a period she did not fully experience. It's something I did, and it's neat yet strange to see it being done to a part of my past.

I am in a similar age range and I am drifting towards this aesthetic. I think it's the counterculture of the increasingly sleek websites, with their overcomplicated 3D animations. Not saying either is better than the other, just it is the opposite end of the spectrum and way of still having fun when creating a website while making it feel personal.
Post reply on HN