Register a SA Forums Account here!
JOINING THE SA FORUMS WILL REMOVE THIS BIG AD, THE ANNOYING UNDERLINED ADS, AND STUPID INTERSTITIAL ADS!!!

You can: log in, read the tech support FAQ, or request your lost password. This dumb message (and those ads) will appear on every screen until you register! Get rid of this crap by registering your own SA Forums Account and joining roughly 150,000 Goons, for the one-time price of $9.95! We charge money because it costs us money per month for bills, and since we don't believe in showing ads to our users, we try to make the money back through forum registrations.
 
  • Locked thread
Last Chance
Dec 31, 2004

hobbesmaster posted:

my favorite random little detail in this story is that he didn't bring his laptop charger with him so the FBI agents had to scramble to find an ac adapter compatible with that type of laptop

Don't you just hate when that happens

Adbot
ADBOT LOVES YOU

anthonypants
May 6, 2007

by Nyc_Tattoo
Dinosaur Gum

Lutha Mahtin posted:

no, his mycrimes.txt were encrypted with FDE. that's why they nabbed him at the library. they wanted a place where both (a) he had the computer on, encryption password activated, screen unlocked, and (b) where they could sneak up behind him, cause a distraction, and snag the machine from him while it was in the unlocked state
yes that's what i said

Shame Boy
Mar 2, 2010

anthonypants posted:

they caught silk road kingpin ross ulbricht at a public library while his disk was encrypted and he was caught with a bunch of unencrypted mycrimes.txt documents

for desktops there's this
https://www.youtube.com/watch?v=-G8sEYCOv-o

lol that thing's great, a long-rear end time ago i was in an IRC channel with Weev cuz i used to be edgy and he was telling me all about how he kept all his crimes on a machine that only had encryption keys in memory and never saved them anywhere so if the big dumb cops came for it they'd just render it permanently locked :allears:

Wiggly Wayne DDS
Sep 11, 2010



https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170317-cmp

quote:

A vulnerability in the Cisco Cluster Management Protocol (CMP) processing code in Cisco IOS and Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause a reload of an affected device or remotely execute code with elevated privileges.

The Cluster Management Protocol utilizes Telnet internally as a signaling and command protocol between cluster members. The vulnerability is due to the combination of two factors:
  • The failure to restrict the use of CMP-specific Telnet options only to internal, local communications between cluster members and instead accept and process such options over any Telnet connection to an affected device, and
  • The incorrect processing of malformed CMP-specific Telnet options.
An attacker could exploit this vulnerability by sending malformed CMP-specific Telnet options while establishing a Telnet session with an affected Cisco device configured to accept Telnet connections. An exploit could allow an attacker to execute arbitrary code and obtain full control of the device or cause a reload of the affected device.

Cisco will release software updates that address this vulnerability. There are no workarounds that address this vulnerability.

quote:

Exploitation and Public Announcements
The Cisco Product Security Incident Response Team (PSIRT) is not aware of any public announcements or malicious use of the vulnerability that is described in this advisory.

Source
This vulnerability was found during the analysis of documents related to the Vault 7 disclosure.

Carbon dioxide
Oct 9, 2012

*cracks knuckles*

Okay, I think it's about time I'll attempt to convince my work's security board that using LastPass as a company password manager is a bad idea.

Does anyone know if there's an overview of recent LastPass vulnerabilities somewhere?

Carbon dioxide
Oct 9, 2012

Unrelatedly,

http://www.dallasnews.com/news/crime/2017/03/17/fbi-arrests-man-accused-trolling-dallas-journalist-kurt-eichenwald-tweet-triggered-seizure

Pikavangelist
Nov 9, 2016

There is no God but Arceus
And Pikachu is His prophet




quote:

According to a criminal complaint, messages sent from Rivello's Twitter account mentioned Eichenwald, saying "I know he has epilepsy," "I hope this sends him into a seizure" and "let's see if he dies."

Authorities also found an screenshot of Eichenwald's Wikipedia page on Rivello's iCloud account, the criminal complaint said, altered to list his date of death as Dec. 16, 2016. Other files on the iCloud account include a list of things that trigger epileptic seizures and a screenshot of a Dallas Observer article about Eichenwald's attempts to find the person who tweeted at him.

if nothing else rivello should be arrested for criminal stupidity

Volmarias
Dec 31, 2002

EMAIL... THE INTERNET... SEARCH ENGINES...

quote:

Eichenwald's attorney, Steven Liberman, told Newsweek that "What Mr. Rivello did with his Twitter message was no different from someone sending a bomb in the mail or sending an envelope filled with anthrax spores."

I feel like it's maybe a little different.

Bhodi
Dec 9, 2007

Oh, it's just a cat.
Pillbug
armchair lawyers (but with actual law degrees) are less optimistic about his chances. because it's the internet, of course people piled on

https://twitter.com/kurteichenwald/status/842754912249434112

spit on my clit
Jul 19, 2015

by Cyrano4747

Bhodi posted:

armchair lawyers (but with actual law degrees) are less optimistic about his chances. because it's the internet, of course people piled on

https://twitter.com/kurteichenwald/status/842754912249434112

"It was a flashing gif with pepe the frog moving around" - Kurt Eichenwalde, discussing the tragic event on live tv

EndlessRagdoll
May 20, 2016

spit on my clit posted:

"It was a flashing gif with pepe the frog moving around" - Kurt Eichenwalde, discussing the tragic event on live tv

I pray you're telling the truth here

:captainpop:

hifi
Jul 25, 2012



power botton
Nov 2, 2011

just saying threats, or doing the digital equivalent of a mail bomb or letter full of anthrax. which one is worse.

Midjack
Dec 24, 2007




it seems like this stunt gets rediscovered every few years

flakeloaf
Feb 26, 2003

Still better than android clock

Midjack posted:

it seems like this stunt gets rediscovered every few years

i'm rgb.swf

Subjunctive
Sep 12, 2006

✨sparkle and shine✨

<blink> is timed according to the military spec for flashing that is seizure-safe.

AggressivelyStupid
Jan 9, 2012


Not wrong tho

anthonypants
May 6, 2007

by Nyc_Tattoo
Dinosaur Gum

Bhodi posted:

armchair lawyers (but with actual law degrees) are less optimistic about his chances. because it's the internet, of course people piled on

https://twitter.com/kurteichenwald/status/842754912249434112
"his wife" immediately jumped on twitter after the gif was sent to tell the person who sent the gif that he was having a seizure

here's an article with more background on this guy

rjmccall
Sep 7, 2007

no worries friend
Fun Shoe

threat prosecutions are very rare. the problem with 4chan-style brigading from a crim law perspective is that it's not clear that anything about it is illegal, and certainly not prosecutable — the individual acts are usually one-off and too small. even when someone goes further, making repeated threats with personal info etc., it's still really hard to prosecute because it's hard to prove they had any ability or inclination to actually carry those threats out, which is usually a legal requirement. even if there was a law specifically against piling on, you're expecting some DA to file a thousand cross-jurisdictional misdemeanor harassment charges? many against minors? it's just a poo poo-ton of work

i think a more effective law would let them maintain a registry and then charge people with repeated threats against different people, so it's a clear pattern of harassing people online. maybe the problem would go away if there was some accountability for always being part of it. but i don't have much hope

Bhodi
Dec 9, 2007

Oh, it's just a cat.
Pillbug

anthonypants posted:

"his wife" immediately jumped on twitter after the gif was sent to tell the person who sent the gif that he was having a seizure

here's an article with more background on this guy
not gonna read all that, but if you're implying his wife didn't do that, it'll definitely come out in court

Bhodi fucked around with this message at 19:07 on Mar 18, 2017

anthonypants
May 6, 2007

by Nyc_Tattoo
Dinosaur Gum

Bhodi posted:

not gonna read all that, but if you're implying his wife didn't do that, it'll definitely come out in court
i'm extremely looking forward to them explaining what happened and not only because kurt is physically incapable of telling the same story twice

raminasi
Jan 25, 2005

a last drink with no ice

rjmccall posted:

threat prosecutions are very rare. the problem with 4chan-style brigading from a crim law perspective is that it's not clear that anything about it is illegal, and certainly not prosecutable — the individual acts are usually one-off and too small. even when someone goes further, making repeated threats with personal info etc., it's still really hard to prosecute because it's hard to prove they had any ability or inclination to actually carry those threats out, which is usually a legal requirement. even if there was a law specifically against piling on, you're expecting some DA to file a thousand cross-jurisdictional misdemeanor harassment charges? many against minors? it's just a poo poo-ton of work

i think a more effective law would let them maintain a registry and then charge people with repeated threats against different people, so it's a clear pattern of harassing people online. maybe the problem would go away if there was some accountability for always being part of it. but i don't have much hope

this isn't wrong, but it's really frustrating when juxtaposed with how apeshit cops go if you do it to one of them and not a journalist or whatever

power botton
Nov 2, 2011

Bhodi posted:

not gonna read all that, but if you're implying his wife didn't do that, it'll definitely come out in court

he looked at tons of child porn and claimed he was investigating it.

"hey guys heres this child porn sharing ring, to prove it ill send you my login and you can see it for yourself, but I have spent a *lot* of time checking it out myself to confirm"

rjmccall
Sep 7, 2007

no worries friend
Fun Shoe

raminasi posted:

this isn't wrong, but it's really frustrating when juxtaposed with how apeshit cops go if you do it to one of them and not a journalist or whatever

yeah, i don't mean to downplay the factor of cops not taking poo poo seriously when it's happening to people they don't give a poo poo about. but there's feedback there, too, like cops don't want to put weeks into a case that probably won't ever come to anything

probably getting out of scope for this thread, tho

The MUMPSorceress
Jan 6, 2012


^SHTPSTS

Gary’s Answer

rjmccall posted:


i think a more effective law would let them maintain a registry and then charge people with repeated threats against different people, so it's a clear pattern of harassing people online. maybe the problem would go away if there was some accountability for always being part of it. but i don't have much hope

that part is hard even. all the sa doxxing victims can't do poo poo to even get their info pulled down because the servers holding the information are in like iceland or something and it's not a big enough deal for police to work with icelandic police or whatever. you could probably do it with twitter and facebook, but a lot of harassment comes in other ways that isn't so traceable.

rjmccall
Sep 7, 2007

no worries friend
Fun Shoe
the nice thing about a prolonged-history-of-harassment standard is there isn't as much pressure to connect all of their activity just to get the case started. you can just say "this one twitter account has been used to threaten people for years", and just from that you have a semi-viable case against the operator, without having to first establish that the same person made these posts on 4chan and facebook. once you've made that case, you go get a name and a warrant and maybe prove that they run a server in iceland, just like how they found the screenshots that this dude in maryland had made. but you have to get over that initial bump somehow where the case just seems hopeless

Midjack
Dec 24, 2007



password length adminfuck:

verizon has recently decided they want out of the email racket and is giving current customers the opportunity to either lose their current email accounts or transfer them to aol. having used a couple of those verizon.net accounts since the dsl days 14 years ago, i elected to move them to aol though i plan to pursue an alternate email solution since lol aol. when setting up the account, aol will let you enter a password of any length and log you in that first time. however, subsequent login attempts will fail with a "wrong username or password" message if your password is more than their limit of 16 characters.

neutral milf hotel
Oct 9, 2001

by Fluffdaddy

Midjack posted:

password length adminfuck:

verizon has recently decided they want out of the email racket and is giving current customers the opportunity to either lose their current email accounts or transfer them to aol. having used a couple of those verizon.net accounts since the dsl days 14 years ago, i elected to move them to aol though i plan to pursue an alternate email solution since lol aol. when setting up the account, aol will let you enter a password of any length and log you in that first time. however, subsequent login attempts will fail with a "wrong username or password" message if your password is more than their limit of 16 characters.

try typing in the first 16 characters of the password

Midjack
Dec 24, 2007



BeOSPOS posted:

try typing in the first 16 characters of the password

didn't work. first thing I tried was lopping off one character at a time

ate shit on live tv
Feb 15, 2004

by Azathoth

Midjack posted:

didn't work. first thing I tried was lopping off one character at a time

Nice. aol proving they are still a product of the 90's.

Last Chance
Dec 31, 2004

REMEMBER AOL DISCS LOL

ohgodwhat
Aug 6, 2005

I had an AOL floppy with Indiana Jones on it :3

ate shit on live tv
Feb 15, 2004

by Azathoth

Last Chance posted:

REMEMBER AOL DISCS LOL

My computer nerds and I in High School would collect those things. We got up to 2500 of them.

Last Chance
Dec 31, 2004

i used a 3.5" aoldisk to store an old copy of leisure suit larry hehe

ate shit on live tv
Feb 15, 2004

by Azathoth

Last Chance posted:

i used a 3.5" aoldisk to store an old copy of leisure suit larry hehe

Same, except instead of leisure suit larry it was an AMI Bios cracker that I downloaded from a BBS so that I could figure out the password to my dad's computer and play while he was at work.

Shame Boy
Mar 2, 2010

Last Chance posted:

REMEMBER AOL DISCS LOL

i found one in the back room at my last job and kept it because it was still in the original sleeve and everything, it's practically a museum piece

ate poo poo on live tv posted:

My computer nerds and I in High School would collect those things. We got up to 2500 of them.

my dad would punch holes in them and tie them together into this shiny CD curtain wall art thing

e: also the floppies were reused for cool games ofc

fishmech
Jul 16, 2006

by VideoGames
Salad Prong

Midjack posted:

verizon has recently decided they want out of the email racket and is giving current customers the opportunity to either lose their current email accounts or transfer them to aol.

they want to get out of the email game, so they're transferring their email services to a different internal division of the company? that ain't really getting out of the email game.

fisting by many
Dec 25, 2009



Last Chance posted:

REMEMBER AOL DISCS LOL

they made good frisbees, and what really spiced up the game of catch was the slight probability of the disc exploding into jagged shrapnel on contact

infernal machines
Oct 11, 2012

we monitor many frequencies. we listen always. came a voice, out of the babel of tongues, speaking to us. it played us a mighty dub.
i once tossed an aol disc out the back of a store i worked at and nearly hit a couple guys 300 feet away. it took three of us and another manager to convince them that the computer store had no idea where a flying aol disc could have come from

Adbot
ADBOT LOVES YOU

Midjack
Dec 24, 2007



fishmech posted:

they want to get out of the email game, so they're transferring their email services to a different internal division of the company? that ain't really getting out of the email game.

fios division, thanks for keeping me honest fishmech

  • Locked thread