News for hackers. Stuff that matters.
Re:Former Ubiquiti employee charged with stealing data and e... by LiquidPolymer on Wednesday December 01, 2021 @10:23PM (#29412163)
I've always been fascinated by the idea that intelligence lies within a spectrum. Someone might be incredibly smart about a narrow topic or field, yet be blind to their own stupidity within another realm.

To me, this seems like a classic example. To quote the press release: "During the execution of that search, SHARP made numerous false statements to FBI agents, including, among other things, in substance, that he was not the perpetrator of the Incident and that he had not used Surfshark VPN prior to the discovery of the Incident. When confronted with records demonstrating that SHARP purchased the Surfshark VPN service in July 2020, approximately six months prior to the Incident, SHARP falsely stated, in part and substance, that someone else must have used his PayPal account to make the purchase."

This man was a senior developer yet this quote sounds like it comes from a nine year-old. Not to mention "hire a lawyer, don't talk to the police" has always been pretty solid advice.

He now faces significant prison time, and the strong potential for a dismal life.

Re:Former Ubiquiti employee charged with stealing data and e... by colechristensen on Wednesday December 01, 2021 @11:01PM (#29412433)
It's not really about intelligence.

When faced correcting a false reality you have created, it can be quite hard to decide to phase change into telling the truth. The lies that come out come from not being prepared and not being a very good liar. For people who lie like this, a good way to think about it is as though it were a disease.

Actually intelligent people just don't do things like this, even if they have nefarious intent. There are quite smarter ways to accomplish substantially the same thing that this crime does not reflect.

I'm not convinced that this person was particularly intelligent in the first place.

Re:Former Ubiquiti employee charged with stealing data and e... by ivalm on Thursday December 02, 2021 @12:55AM (#29412995)
> When faced correcting a false reality you have created, it can be quite hard to decide to phase change into telling the truth. The lies that come out come from not being prepared and not being a very good liar. For people who lie like this, a good way to think about it is as though it were a disease.

Or just don’t talk to the police and lawyer up. I agree the best thing is to not do the crime, but if you are a criminal then the intelligent and simple thing is to use a lawyer.

Re:Former Ubiquiti employee charged with stealing data and e... by duped on Thursday December 02, 2021 @01:42AM (#29413223)
Even if you're not guilty the intelligent and simple thing is to politely decline to speak to the investigators and consult an attorney.
Re:Former Ubiquiti employee charged with stealing data and e... by trelane on Thursday December 02, 2021 @07:10AM (#29415142)
Indeed. In my understanding, the authorities have the depth of training and the experience to easily talk us regular folks in circles and catch us in contradictions. Especially if you're innocent: lawyer up.
Re:Former Ubiquiti employee charged with stealing data and e... by staticassertion on Thursday December 02, 2021 @08:33AM (#29415864)
Having a lawyer doesn't mean you can just not answer questions when subpoenad. "Don't talk to cops" is complicated.
Re:Former Ubiquiti employee charged with stealing data and e... by jfrunyon on Thursday December 02, 2021 @12:10PM (#29418994)
If you've been subpoenaed, you're not talking to a cop, so "don't talk to cops" isn't complicated at all.

The full phrase - "don't talk to cops except upon the advice of your lawyer" - isn't complicated either.

Re:Former Ubiquiti employee charged with stealing data and e... by krisoft on Thursday December 02, 2021 @10:00AM (#29416942)
Yes, it is complicated. And that is why you need the lawyer.
Re:Former Ubiquiti employee charged with stealing data and e... by staticassertion on Thursday December 02, 2021 @10:09AM (#29417050)
I missed where it said he didn't have a lawyer?
Re:Former Ubiquiti employee charged with stealing data and e... by TedDoesntTalk on Thursday December 02, 2021 @12:23AM (#29412829)
> Actually intelligent people just don't do things like this

Are you really claiming that intelligent people don’t commit crime or don’t lie? That seems incredibly naive.

Re:Former Ubiquiti employee charged with stealing data and e... by colechristensen on Thursday December 02, 2021 @12:35AM (#29412890)
No, just things like that. The whole situation screams “stupid criminal” or more like “compulsive liar/manipulator without a plan”.

Intelligent criminals and liars are better at it, better at obfuscating, better at making it unclear whether or not a crime was actually committed, better at never having their crime discovered and not getting caught if it is.

Re:Former Ubiquiti employee charged with stealing data and e... by birdyrooster on Thursday December 02, 2021 @12:34AM (#29412884)
I thought they were claiming intelligent people are better at lying in the course of committing crimes or otherwise.
Re:Former Ubiquiti employee charged with stealing data and e... by pdimitar on Thursday December 02, 2021 @05:45AM (#29414595)
Yeah, he seems to have been operating under the illusion that he'll never get caught. Amateur mistake.
Re:Former Ubiquiti employee charged with stealing data and e... by klabb3 on Wednesday December 01, 2021 @11:32PM (#29412592)
> I've always been fascinated by the idea that intelligence lies within a spectrum. Someone might be incredibly smart about a narrow topic or field, yet be blind to their own stupidity within another realm.

I've been seriously bitten by this, and find it more scary than fascinating. Growing up, I thought people who followed cult leaders and charismatic narcissists were so stupid (still do), it appeared so transparent to me. Later, in my professional and adult life I found myself to be equally gullible when intelligent people were abusive or outright dumb in other areas. This has been a challenge to unlearn, like learning an old dog to sit. Basically, our proxies for predicting people's character range from bad to terrible.

Re:Former Ubiquiti employee charged with stealing data and e... by xwolfi on Thursday December 02, 2021 @01:44AM (#29413242)
I think the first thing you must learn when trending towards adulthood is that nobody has any clue and we're just marginally fancier than ants in the grand scheme.

Hell I grew up in Normandy and was 16 when some Americans became so mad we refused to follow their war in Iraq they called us ungrateful. Talk about the fall of an idol :D So all that freedom we were supposed to be grateful for was only ever supposed to be used when deciding between buying a coca cola or a pepsi cola, but never for real big boy decision ? Thanks I guess ?

Rules have no intrinsic meaning, authorities are there by luck and circumstances and not their mystical ability to always lead towards the right direction, people try their best and often fail and nobody truly is intelligent in all circumstances.

Re:Former Ubiquiti employee charged with stealing data and e... by doctor_eval on Thursday December 02, 2021 @12:12AM (#29412772)
> I found myself to be equally gullible when intelligent people were abusive or outright dumb in other areas. This has been a challenge to unlearn, like learning an old dog to sit. Basically, our proxies for predicting people's character range from bad to terrible.

oh I am 100% with you on this. I tried to elaborate but I just sound bitter and twisted, and that's probably true. But I've spent the last few years unlearning things I thought I knew. It has been a painful and expensive set of lessons.

long story short: I think we judge people's reaction to a situation by projecting how we would act... but that's not how people actually act.

Re:Former Ubiquiti employee charged with stealing data and e... by TedDoesntTalk on Thursday December 02, 2021 @12:24AM (#29412836)
I would like to hear more about your experience.
Re:Former Ubiquiti employee charged with stealing data and e... by doctor_eval on Thursday December 02, 2021 @04:52AM (#29414280)
I’ve finally worked out that people who want something from me, like my company or my software or my expertise, will say whatever they have to say to get a deal - but once the deal is done they just do whatever the hell they want, regardless of what they said. It’s the opposite of what I expect. I can’t deal with it.

The people who do this are smart, confident and charismatic. It is clearly a negotiating strategy. But in reality, the only thing that matters is who controls the flow of money. If they control the money then it doesn’t matter what they said, they can do what they damn well please. They know this up front, and they count on it.

Despite these setbacks I’ve done alright for myself, but honestly, I’m really bummed out about how useless I am when it comes to judging people and creating businesses where I’m free to actually do my best work.

Anyway, I don’t know if that helps you, but you asked and honestly it has helped me a bit to vent even if it’s all in the abstract.

Re:Former Ubiquiti employee charged with stealing data and e... by nython on Thursday December 02, 2021 @07:40AM (#29415373)
Thisstory about ebay's attempted takeover of craigslist might interest you.

Even before Omidyar stepped down from Craigslist’s board, his appointed agent, Garrett Price, started bullying Craigslist’s owners. In an email to Buckmaster, Price wrote that Craiglist was “driving [eBay’s] execs (especially Meg) to distraction.” He told Buckmaster that eBay’s takeover was “inevitable” and that Craigslist needed to accept their fate, telling “Buckmaster that he and Newmark were mortal, but eBay was not, and eBay would acquire 100 percent of craigslist whether it took decades and, if necessary, over Newmark’s and Buckmaster’s dead bodies.”

Buckmaster replied by reminding Price that when they negotiated the sale of their stake, eBay had agreed to abide by a three-year “courtship period” during which time, if Craigslist felt their two cultures were incompatible, eBay had agreed it would sell back its shares.

Price’s response to Buckmaster:

    “that was then, this is now.”
https://web.archive.org/web/20150623005252/https://pando.com...
Re:Former Ubiquiti employee charged with stealing data and e... by doctor_eval on Thursday December 02, 2021 @10:10PM (#29426207)
Hey nython, i just wanted to reply again and say that I got a chance to read the whole article just now. It has really helped me put my recent experiences into context. THANK YOU.

It's been one thing for me to be on the receiving end of bad behaviour and to form an opinion and suspicions about what happened.

But it's quite another to see it played out deliberately, in the large, using trust and friendship as a weapon to defeat a group of people who aren't even playing the same game.

The remarkable thing for me is that people really are capable of this kind of shitty behaviour; that it can be entirely intentional, and planned well ahead of time. And that it doesn't matter how rich some people are, they are happy to cheat and steal just to get a little bit more. It's disgusting.

Thanks again for linking to it.

Re:Former Ubiquiti employee charged with stealing data and e... by doctor_eval on Thursday December 02, 2021 @02:20PM (#29421083)
That is certainly the nature of things as I’ve experienced them. Thanks for posting this.
Re:Former Ubiquiti employee charged with stealing data and e... by hoseja on Thursday December 02, 2021 @06:30AM (#29414867)
I sometimes wonder if the snakes learn their craft in some consistent manner (schoolyard politics? non-naive parents?) or if it's mostly instinctual.
Re:Former Ubiquiti employee charged with stealing data and e... by doctor_eval on Thursday December 02, 2021 @02:34PM (#29421283)
Yeah - I wonder that too. I suspect all of the above. Having a privileged education and family contacts probably reinforces it.

From what I’ve seen, openness and honesty are highly regarded in technical work but these traits are considered disadvantages in business.

Re:Former Ubiquiti employee charged with stealing data and e... by bschne on Thursday December 02, 2021 @04:24AM (#29414101)
Reminded me of this I read recently and found quite fascinating — http://knowingless.com/2021/11/27/frame-control/
Re:Former Ubiquiti employee charged with stealing data and e... by klabb3 on Thursday December 02, 2021 @08:12AM (#29415648)
Fascinating, and indeed related. One of the most interesting tactics was people who admit they're wrong or otherwise signal that they're willing to change their view, but they're really not. That's an excellent example of a blind spot in my manipulator radar.
Re:Former Ubiquiti employee charged with stealing data and e... by rodgerd on Wednesday December 01, 2021 @11:04PM (#29412442)
> This man was a senior developer yet this quote sounds like it comes from a nine year-old.

Tech has a contempt culture problem, and this can be one manifestation of it: feeling that being moderately bright about getting computers to do things makes you a tremendous intellect, and everyone else around you an easily hoodwinked moron.

Perhaps the most extreme example was Hans Reiser. Anyone who followed the twists and turns of the case against him for murdering his wife will remember how many trivially disproved lies he told, apparently under the illusion that he was a mastermind who could put one over on the courts based on his faulty understanding of ideas like reasonable doubt.

Re:Former Ubiquiti employee charged with stealing data and e... by SilasX on Thursday December 02, 2021 @12:51AM (#29412973)
Yes, and I remember Reiser having rejected a plea deal whereby he'd only serve 3 years, which is just about winning the lottery when it comes to being prosecuted for murder:

https://www.theregister.com/2008/07/10/reiser_rejected_volun...

Re:Former Ubiquiti employee charged with stealing data and e... by devonkim on Thursday December 02, 2021 @08:17AM (#29415710)
A lot of the tech community have pretty hostile attitudes in general for reasons I can only wildly conjecture, but the question I also would pose is if the distribution is all that different from the rest of the population. Look at the doctors and lawyers we’ve been seeing that are at least in public saying some of the most ridiculous things imaginable oftentimes even without an obvious financial motive involved like in most cases I’ve heard with engineers being deceitful.
Re:Former Ubiquiti employee charged with stealing data and e... by sneak on Thursday December 02, 2021 @12:30AM (#29412861)
It is very, VERY difficult to not answer questions from a trained law enforcement interrogator even if you a) are smart and b) know not to answer questions. I can't stress this enough.

It actually takes explicit training and practice, as it goes against every social habit and "instinct" we have developed throughout our entire adult lives.

Re:Former Ubiquiti employee charged with stealing data and e... by refurb on Thursday December 02, 2021 @02:45AM (#29413553)
Reminded me when I watched people try and get out of jury duty by claiming biases.

A big part of the lawyers job is to question people. Their stories fell apart pretty quickly.

Re:Former Ubiquiti employee charged with stealing data and e... by elcritch on Thursday December 02, 2021 @03:03AM (#29413651)
That’d be interesting to see.

Once I got quizzed when boarding ElAl flights. They have well trained interrogators. It turns out a complicated life story and ADHD method of story telling doesn’t make them happy. A lot of “I said X because the full story is way too complicated, so here’s the full version” ;)

Re:Former Ubiquiti employee charged with stealing data and e... by refurb on Thursday December 02, 2021 @08:41AM (#29415949)
Very similar approach. Repeated questioning to try and poke holes in your story.

People think they can stand up to it but it’s hard when it’s someone whose full time job is exposing fake stories.

Re:Former Ubiquiti employee charged with stealing data and e... by CurrentB on Thursday December 02, 2021 @12:47AM (#29412955)
Any tips for how one might maintain composure enough to handle these situations if they ever find themselves in them? I imagine the obvious answer is just practice saying "no comment, I need my lawyer present" but I'm not convinced this would make one immune to their Jedi mind tricks when the day comes to exercise it
Re:Former Ubiquiti employee charged with stealing data and e... by sneak on Thursday December 02, 2021 @02:54AM (#29413592)
You are right: Having watched the "don't talk to the police" video over a half dozen times, I unwillingly volunteered information to a cop when in the moment. It's really hard to put into practice when someone domineering and armed is implicitly threatening you with arrest/violence for not doing precisely what they want you to do.

I actually rehearse now, because police in the USA are so corrupt and unreliable.

Something along the lines of "I know you are just doing your job, but, respectfully, I must consult with my attorney before answering any questions."

Then (to their dismay and annoyance) I repeat the exact same thing over and over again when they inevitably ask me other, follow up questions, trying to work around my initial refusal. (It's so disrespectful, as well as illegal, for them to keep going at that point.)

Re:Former Ubiquiti employee charged with stealing data and e... by novok on Thursday December 02, 2021 @11:02PM (#29426484)
How about the border when entering a country? What should you do in that case?
Re:Former Ubiquiti employee charged with stealing data and e... by sneak on Friday December 03, 2021 @12:09PM (#29432335)
Oh, I have a long history of telling the border guards in the USA (where they have to let me in by law) "none of your business" when re-entering.

I have also semi-successfully appealed their FOIA denials covering the incident.

It has resulted in the sexual assault of some of my traveling companions by US CBP (full and thorough body search, simply as punishment for remaining silent). CBP is lousy with criminal pigs.

You can't refuse to answer questions when entering most countries you aren't a citizen of, if you wish to be permitted entry.

Re:Former Ubiquiti employee charged with stealing data and e... by stjohnswarts on Thursday December 02, 2021 @07:47AM (#29415430)
Well since they can lie to you and say anything they like bordering on blackmail, you need to know that. You have to be smart enough to guess what they know and have the fortitude to refuse to answer and ask for a lawyer continuously, sometimes possibly for hours. Always be respectful but resolute on getting that lawyer, no reason to piss them off any more than you are by refusing to answer their question. Police can be quite violent and volatile just like any human perhaps more so since they have almost all the power and guns in a given situation.
Re:Former Ubiquiti employee charged with stealing data and e... by influx on Thursday December 02, 2021 @02:34AM (#29413491)
I recommend watching this videos on how to talk to police (hint don't):

https://www.youtube.com/watch?v=d-7o9xYp7eE

Re:Former Ubiquiti employee charged with stealing data and e... by xwolfi on Thursday December 02, 2021 @07:24AM (#29415234)
I have a silly idea. Say the truth, admit you made a lapse of judgment, offer to repair your victims. Silly I know, but maybe you d be surprised this would go a long way in getting out of this shit situation eventually instead of turning everyone into predatory "we ll crush him for eternity" mode ?
Re:Former Ubiquiti employee charged with stealing data and e... by tsimionescu on Thursday December 02, 2021 @08:35AM (#29415883)
It's good that you know it's a silly idea, not sure why you felt the need to share it. Essentially pleading guilty without a lawyer is one of the worse things you could possibly do. It's hard to even know what you are admitting to!
Re:Former Ubiquiti employee charged with stealing data and e... by yardstick on Thursday December 02, 2021 @08:04AM (#29415582)
I think it’s useful to know how to handle yourself when being interrogated and also innocent. I don’t think the op was asking how if they are guilty.
Re:Former Ubiquiti employee charged with stealing data and e... by dagw on Thursday December 02, 2021 @05:15AM (#29414416)
This man was a senior developer yet this quote sounds like it comes from a nine year-old.

I knew a senior developer doing advanced R&D at a big tech company, who also kept getting suckered into MLM scams.

Re:Former Ubiquiti employee charged with stealing data and e... by felipemnoa on Thursday December 02, 2021 @08:31AM (#29415856)
MLM=Multi Level Marketing
Re:Former Ubiquiti employee charged with stealing data and e... by _pplp on Thursday December 02, 2021 @01:42AM (#29413221)
> This man was a senior developer

Dude, let's not be generous. Could he write code? Yes. But this is a guy who wrote everything in Node, but absolutely _refused_ to use any existing libraries except for ones he personally wrote. He didn't "trust" them.

He wasn't even hired on as a dev, he was hired to be the "Cloud guy", essentially a sysadmin for AWS, and basically spooked the CEO into giving him the keys to the castle.

Re:Former Ubiquiti employee charged with stealing data and e... by throwuxiytayq on Thursday December 02, 2021 @01:50AM (#29413271)
> wrote everything in Node, but absolutely _refused_ to use any existing libraries except for ones he personally wrote. He didn't "trust" them.

Sounds like the single sensible thing he did. Have you seen the npm ecosystem?

Re:Former Ubiquiti employee charged with stealing data and e... by kabes on Thursday December 02, 2021 @02:26AM (#29413463)
Are node apps getting way more hacked than say php or java servers? Was his code any better?
Re:Former Ubiquiti employee charged with stealing data and e... by Thorrez on Thursday December 02, 2021 @03:31AM (#29413791)
There are frequently posts on HN about NPM packages getting compromised.

Of the top 10 posts on HN about NPM in the past 30 days[1], 9 are about security problems, and last 1 is about package spam.

[1] https://hn.algolia.com/?dateRange=pastMonth&page=0&prefix=fa...

Re:Former Ubiquiti employee charged with stealing data and e... by danielheath on Thursday December 02, 2021 @05:57AM (#29414659)
Node apps tend to depend on a far, far wider pool of maintainers.

To illustrate: A new Ruby on Rails app has 1/10th the number of maintainers in its dependency list than a new create-react-app codebase.

Re:Former Ubiquiti employee charged with stealing data and e... by dragonwriter on Thursday December 02, 2021 @06:07AM (#29414716)
A create-react-app app is not a node app (It has a node dev server, but it's a front-end JS app), so its a weird thing to reach for to illustrate a point about node apps.
Re:Former Ubiquiti employee charged with stealing data and e... by the_gipsy on Thursday December 02, 2021 @03:37AM (#29413828)
Why would you use node, if it wasn’t for the vast package exosystem?
Re:Former Ubiquiti employee charged with stealing data and e... by bborud on Thursday December 02, 2021 @05:02AM (#29414346)
Path of least resistance?

Picking a language (and possibly runtime) is a pretty huge investment if you intend to become proficient. A lot of people like to think that they are polyglot programmers and that language doesn't really matter. But it does. It takes a few years to become a decent programmer in a given language. And if people claim it takes just weeks or a couple of months, it really only tells you that they have very low standards.

If you are familiar with a given language, ecosystem and runtime, and you care about productivity and quality, the path of least resistance is to stick to what you know. Taking on a major project in a language you don't know is a risky proposition. In terms of quality, time, and even in terms of being able to deliver something acceptable.

I tend to have a main workhorse language. It typically takes 2-3 years to reach an acceptable level of comfortable familiarity with a new language. If history is any guide I tend to stick to the same language for 5-10 years. 5 years ago I switched from Java to Go. I mostly worked mostly as a manager at the time, which is why it took longer to reach what I think is an acceptable level. I'd say it is only in the last 18 months or so I've started feeling sufficiently competent in Go to call myself a Go programmer.

That being said: I think the JS space is both a poor technical choice and a poor career choice. The whole ecosystem is janky as fuck, you have to spend a lot of time dealing with silly complexity that tries to fix the jankiness, and the type of work you get isn't very attractive.

Re:Former Ubiquiti employee charged with stealing data and e... by tsimionescu on Thursday December 02, 2021 @08:30AM (#29415835)
It takes years to become acquianted with the library ecosystem of a given language. If you're going to write everything from scratch (especially in a language with an extremely bare-bones standard library), it takes maybe months to become proficient with any language in a paradigm you already know, save a few extremes (C++).
Re:Former Ubiquiti employee charged with stealing data and e... by millzlane on Thursday December 02, 2021 @07:49AM (#29415448)
Which is why everyone knows you give an addict $100 and they will go and reload a green dot card for you.
Re:Former Ubiquiti employee charged with stealing data and e... by nathanvanfleet on Thursday December 02, 2021 @02:17AM (#29413421)
That's not a quote it's a summary of what he said