Live data from Hacker News

An ‘Iceberg’ of Unseen Crimes: Many Cyber Offenses Go Unreported

nytimes.com

1–10 of 51 posts

Re: An ‘Iceberg’ of Unseen Crimes: Many Cyber Offenses Go Unreported

#2
Many, if not most, crimes go unreported offline. Is it really a shock that the same might be true online? It’s not as though police are likely to find and return your stolen property from a mugging or burglary.

Above all, policing needs “better systems for gathering data,” the report said.

Oooooh. Well that was predictable. Stingrays and lobbying for cryptographic backdoors not enough to do the job hm?

Re: An ‘Iceberg’ of Unseen Crimes: Many Cyber Offenses Go Unreported

#4
Skimming the article, it seems to me that what they need most right now is not systems for gathering more data, but systems for analyzing data they already have. Like, the iPhone thing - they didn't notice because they classified each event as one-off, so nobody looked for possible connection. I assume police stations don't exchange data with each other as much as they should either.

As for the crimes going unreported, a cost-effective way of solving that would be investing in solving the crimes they know about, or at least making it look like they're good at solving them. Make people believe the police works effectively, and they'll hesitate less before reporting.

Re: An ‘Iceberg’ of Unseen Crimes: Many Cyber Offenses Go Unreported

#5
Looking at one of my servers that services an external address, I see about 100 IPs listed in the authlog file that are trying various passwords and such to break in. Its not even a main server (www, mail, dns, etc.). Of course, I use keys only for login, but it is a bit annoying. I guess I am getting quite a block list built.

So, does the author expect me to report all these IPs? Who would I send them to? Is there an easy reporting system? I suspect that any report will be treated like many police departments treat a stereo being robbed from a car, they'll give a incident number but not much else.

PS: what the heck uses "chef" as a username? That is really getting common.

Re: An ‘Iceberg’ of Unseen Crimes: Many Cyber Offenses Go Unreported

#6
Technology is threatening the steady supply of petty crime committed in person on which law enforcement's current business model is built. Woe is them. /s

Based on their history of respecting people's rights and their privacy I'm 100% ok with the FBI not having efficient cooperation with local law enforcement.

Re: An ‘Iceberg’ of Unseen Crimes: Many Cyber Offenses Go Unreported

#7

Looking at one of my servers that services an external address, I see about 100 IPs listed in the authlog file that are trying various passwords and such to break in. Its not even a main server (www, mail, dns, etc.). Of course, I use keys only for login, but it is a bit annoying. I guess I am getting quite a block list built. So, does the author expect me to report all these IPs? Who would I send them to? Is there a…

Maybe a common user for chef automation and chef client runs ? https://www.chef.io/

Re: An ‘Iceberg’ of Unseen Crimes: Many Cyber Offenses Go Unreported

#8

Looking at one of my servers that services an external address, I see about 100 IPs listed in the authlog file that are trying various passwords and such to break in. Its not even a main server (www, mail, dns, etc.). Of course, I use keys only for login, but it is a bit annoying. I guess I am getting quite a block list built. So, does the author expect me to report all these IPs? Who would I send them to? Is there a…

Maybe a common user for chef automation and chef client runs ? https://www.chef.io/

Interesting, well I guess folks using it should be just as careful as the rest of us. Someone with a 116.90.81.14 ip was really interested in it. Username "bernard" is also a new one on me.

Re: An ‘Iceberg’ of Unseen Crimes: Many Cyber Offenses Go Unreported

#10

Earlier quoted context omitted.

Maybe a common user for chef automation and chef client runs ? https://www.chef.io/

Interesting, well I guess folks using it should be just as careful as the rest of us. Someone with a 116.90.81.14 ip was really interested in it. Username "bernard" is also a new one on me.

I think these attackers just use wordlists for the most part. I had an SSH server log tens of thousands of attempts with the username ‘initech’ before I got fail2ban running and turned off password auth. Not sure there many people out there actually naming user accounts after the company from Office Space.
Post reply on HN