News for hackers. Stuff that matters.
Re:Former Ubiquiti employee charged with stealing data and e... by jeroenhd on Wednesday December 01, 2021 @11:10PM (#29412479)
He could've prevent all of this by a) making sure his traffic was blackholed when the VPN went down and b) adding another layer from a free service (like TOR or a proxy or another VPN). He also should've been actively using the VPN so his traffic patterns wouldn't stand out as much, and so his purchase would be justifiable. If he really did buy the VPN 6 months ahead then he was a fool to leave the subscription dormant. If he wanted a fire and forget VPN subscription, he also could've bought the subscription with stolen credit cards. He would've had to make sure to only connect to the VPN through something like TOR, but credit card fraud is pretty difficult to trace if you do it right.

Had he put in a little more thought and preparation then I still don't know if he would've gotten away with it, but at least he'd be in a better position. He wouldn't have to lie to the FBI agents and they probably would've had to catch him by going after the source of the place where the data was leaked instead.

Opsec is hard, but this is just embarrassing for someone in the know trying to steal 50 bitcoin. I'm also not sure why he did it. Suddenly owning a few million in crypto would be noticed, unless he didn't spend any of it, ever. What was his plan, just quit his job and move away right after the hack?

Re:Former Ubiquiti employee charged with stealing data and e... by stef25 on Thursday December 02, 2021 @03:27AM (#29413767)
> he also could've bought the subscription with stolen credit cards

Now they're looking at you from two angels.

Instead of all this jumping through hoops with anonymous VPN and payment methods, why not just do it from Starbucks?

Re:Former Ubiquiti employee charged with stealing data and e... by blitzar on Thursday December 02, 2021 @05:57AM (#29414654)
Because the youtube videos I watch / podcasts I listen to say I NEED a VPN to keep my IP safe from being spied on.

But also starbucks / any shop / cafe / restraunt / apple store - or going for a drive and finding an open WiFi. Kinda wondering now how these places all handle their wifi being abused for crimes ...

Re:Former Ubiquiti employee charged with stealing data and e... by miyuru on Thursday December 02, 2021 @02:50AM (#29413577)
I really dislike theses kinds of comments in theses kind of posts. This is just bragging.

I would like the bad people to be caught and you are just giving away free advice to any future thief like him and also kind of encouraging other people which is kind of worrisome.

Privacy is a double edge sword and this is case that I happy that he was caught because of his lack of knowledge.

Re:Former Ubiquiti employee charged with stealing data and e... by jeroenhd on Thursday December 02, 2021 @08:31AM (#29415841)
I don't think I'm saying anything the criminals don't already know. This guy was the head of cloud operations, he knew what a VPN is, how TOR works and how crypto works.

If you're a criminal reading my comments and learning anything new from them, let me tell you this: if you needed this info, you're not smart enough to evade the FBI. Go find a real job or something.

I'm glad the ass got caught and I hope he'll get what he deserves. However, I believe that the common modus operandi for criminals shouldn't be a secret because it will get out anyway. The "solutions" I propose are obvious and basically handed to criminals by the FBI analysis.

Good opsec for crime is incredibly hard, which is great in cases like these. I don't think I've heard of some super smart hacker that's managed to stay away from the authorities unless they live outside the relevant jurisdiction. Even then the FBI will find ways to get you into a country where they can arrest you, legally or otherwise.

A lot of "crime" in some countries, like China or Russia, is just doing the right thing in my opinion. You might very well need this kind of opsec if your goal is to help teenagers learn about homosexuality in many of the more bigoted countries, for example, or get the truth out about COVID without suddenly finding yourself falling out of a window.

I don't think the "true crime" style comments help criminals in any way. Documentaries about how murdered got caught aren't very good manuals and the advice of random people who've been in contact with the police aren't either. If they're dumb enough to follow the advice of some random guy here on orange reddit, their criminal career won't last very long.

Re:Former Ubiquiti employee charged with stealing data and e... by ramcle on Thursday December 02, 2021 @07:48AM (#29415436)
But such information can also serve as an advice for potential victims. For example, many people don't think about the fact that if they credit card info gets stolen, it not only may lead to losing money (which may be not much if a card has access to little funds), but may also allow someone to use it in a criminal context. Demonstrating a scenario where it can be used in a serious crime can increase awareness.
Re:Former Ubiquiti employee charged with stealing data and e... by charcircuit on Thursday December 02, 2021 @06:52PM (#29424700)
Victims don't care about that because it doesn't effect them. Losing money on the other hand does.
Re:Former Ubiquiti employee charged with stealing data and e... by arcticfox on Thursday December 02, 2021 @06:35AM (#29414903)
This information can all be easily found or derived, Mr. Sharp wasn't lacking resources to learn opsec if he cared.

He was probably just overconfident in his knowledge; you kind of have to be somewhat nuts to try to pull this off so it's not too surprising.

Re:Former Ubiquiti employee charged with stealing data and e... by stjohnswarts on Thursday December 02, 2021 @07:57AM (#29415523)
Good people also need to hide their presence on the internet especially political dissidents in hostile countries. Knowledge is just knowledge.
Re:Former Ubiquiti employee charged with stealing data and e... by adrr on Thursday December 02, 2021 @12:03AM (#29412724)
Why a stolen credit card? Just buy gift visa card with cash.
Re:Former Ubiquiti employee charged with stealing data and e... by OverlordXenu on Thursday December 02, 2021 @12:20AM (#29412812)
they take your ID. you could get someone else to buy it for you, but they'll be easy to flip when looking at time.
Re:Former Ubiquiti employee charged with stealing data and e... by LinuxBender on Thursday December 02, 2021 @09:36AM (#29416614)
For what its worth, most online sites will not accept gift visa/mastercard cards any more. It would be nice if there was a site that listed all the sites that do still accept them.
Re:Former Ubiquiti employee charged with stealing data and e... by charcircuit on Thursday December 02, 2021 @04:20AM (#29414073)
It might be better to just get at account from an account reseller for a few pennies.