Hackers gaining power of subpoena via fake “emergency data requests”

Re:Hackers gaining power of subpoena via fake “emergency dat... by qbasic_forever on Tuesday March 29, 2022 @03:52PM (#30847524)

Yes, which is why just set the bar at responding to any request for any data with "Sorry we do not respond to requests for data that aren't court ordered warrants. Please come back with a warrant we can verify."

The problem here is that companies have a policy of trusting some government email address for little one-off, no warrant needed requests. Don't have that policy.

[ Parent | on HN ]

Re:Hackers gaining power of subpoena via fake “emergency dat... by rosndo on Tuesday March 29, 2022 @04:39PM (#30848079)

> Please come back with a warrant we can verify

The problem is that it might not be easy to verify a real warrant, but that’s not grounds for noncompliance.

[ Parent | on HN ]

Re:Hackers gaining power of subpoena via fake “emergency dat... by macksd on Tuesday March 29, 2022 @04:47PM (#30848157)

>> Please come back with a warrant we can verify

Ok. Now how do I verify one, assuming the information in this article is accurate?

[ Parent | on HN ]

Re:Hackers gaining power of subpoena via fake “emergency dat... by qbasic_forever on Tuesday March 29, 2022 @06:13PM (#30849052)

You check the court records. These are easy to find with a digital records search, or you call the court clerk. The phone number is listed on the warrant. This is not hard, but it's not an automated process by design.

[ Parent | on HN ]

Re:Hackers gaining power of subpoena via fake “emergency dat... by account42 on Wednesday March 30, 2022 @04:28AM (#30852672)

> The phone number is listed on the warrant.

You should not rely on any information on the document you want to verify - look it up yourself.

[ Parent | on HN ]