The story around the Linode hack
straylig.ht
The story around the Linode hack
1–10 of 175 posts
Re: The story around the Linode hack
#2There's more info about HTP5, including working mirrors of the files linked at the end of the linode document here: http://straylig.ht/zines/HTP5/
Re: The story around the Linode hack
#3I am not familiar with the crackers' terms. So does this mean that name.com is not safe? All my domains are there...
Re: The story around the Linode hack
#4That seems somewhat scary if they've compromised domain registrars and are intercepting login data from client sites that way.
Re: The story around the Linode hack
#5There is a lot of inside-baseball in this, but the one they keep talking about, is, "shred customer data" - as in,
" Recognizing their situation, we instead told them that if they acknowledged HTP in their analysis, we'd go ahead and shred their customer data anyway."
Do they honestly, for a single second, think that any LEA, corporation, or, well, anyone would believe that once the information was compromised, that there was no putting the genie back in the bottle? Also - I suspect there are probably disclosure laws that had to be followed by Linode anyways.
Re: The story around the Linode hack
#6I am not familiar with the crackers' terms. So does this mean that name.com is not safe? All my domains are there...
The point is, when you're dealing with people of this level of supposed skill, they can just walk into pretty much any network. They're all vulnerable on some level if you're capable of actually breaking them yourself in novel ways.
The only real solution is either to not depend on any single network, or to make it clear that you will simply kill anyone who troubles you. Or just remain innocuous enough that nobody will care to.
Re: The story around the Linode hack
#7There's more info about HTP5, including working mirrors of the files linked at the end of the linode document here: http://straylig.ht/zines/HTP5/
HTP5 stands for Hack The Planet 5, the fifth issue of the zine linked in the parent comment.
Re: The story around the Linode hack
#8That seems somewhat scary if they've compromised domain registrars and are intercepting login data from client sites that way.
It's more scary if they've compromised a SSL CA. A simple DNS attack won't stop your browser from displaying a broken certificate warning. (Though they can always not redirect from http to https and most users won't notice, sadly.)
Re: The story around the Linode hack
#9There is a lot of inside-baseball in this, but the one they keep talking about, is, "shred customer data" - as in, " Recognizing their situation, we instead told them that if they acknowledged HTP in their analysis, we'd go ahead and shred their customer data anyway." Do they honestly, for a single second, think that any LEA, corporation, or, well, anyone would believe that once the information was compromised, that…
[deleted]
Re: The story around the Linode hack
#10I... don't actually understand most of what they wrote there.