Hacker Who Sent Me Heroin Faces Charges in U.S

Re:Hacker Who Sent Me Heroin Faces Charges in U.S by hackuser on Friday October 16, 2015 @05:56PM (#10402258)

This statement has very serious implications:

    According to a trusted source in the security community, that
    email account was somehow compromised in 2013. The source said
    the account was full of emailed reports from a keylogging
    device ...

If I understand "security community" to mean law enforcement or intelligence agencies, that means they are sharing data from surveillance of private individuals with journalists.

This suggests that assurances about the security of that data and the integrity of their processes are not reliable. Who else is given this data? You may like Krebs and think it's justified, but who decides whose private data is ok to leak? What about your private data?

[ Parent | on HN ]

Re:Hacker Who Sent Me Heroin Faces Charges in U.S by jcrawfordor on Friday October 16, 2015 @07:40PM (#10402685)

I'm not sure that I agree with your policework there. The "security community" here almost certainly refers to a private security researcher or firm. I can't see why it would have been a government source.

In general direct information sharing is one of the most important things in information security, but the government has its hands tied in this area in a way that private companies do not.

[ Parent | on HN ]