News for hackers. Stuff that matters.

A comment on U.S. Army Soldier Arrested in AT&T, Verizon Extortions. Parent comment

Re:U.S. Army Soldier Arrested in AT&T, Verizon Extortions by oefrha on Tuesday December 31, 2024 @04:59AM (#42557689)
The main takeaway for me is the following. Everything you post online will end up in a public archive. That includes everything you post to supposedly private or semi-private venues, like Telegram channels. Everything you posted when you were a dumb kid will be there too, however long ago that was. So, if you’re gonna be a cybercrminal, make absolutely sure that you start with a clean slate. No one can know the connections to your past, because even if you’re careful, other idiots can let slip (like using your old moniker to address you) at any time. And don’t post fucking photos, ever.
[ Parent | on HN ]
Re:U.S. Army Soldier Arrested in AT&T, Verizon Extortions by potato3732842 on Tuesday December 31, 2024 @08:17AM (#42558514)
I'm worried this new "level up" of communication and record keeping technology at a time when fundamental ideological differences between groups in the western world are causing problems is going to result in a repeat of 1500s europe.
[ Parent | on HN ]
Re:U.S. Army Soldier Arrested in AT&T, Verizon Extortions by rscho on Tuesday December 31, 2024 @06:08AM (#42557981)
Hilarious case in point

https://www.cbsnews.com/news/carl-stewart-drug-dealer-identi...

[ Parent | on HN ]
Re:U.S. Army Soldier Arrested in AT&T, Verizon Extortions by bandrami on Tuesday December 31, 2024 @06:43AM (#42558139)
Remember when the NYT published a high-res, straight-on photo of the TSA luggage master key? Good times.
[ Parent | on HN ]
Re:U.S. Army Soldier Arrested in AT&T, Verizon Extortions by malfist on Tuesday December 31, 2024 @10:03AM (#42559069)
It's not like you can't find them on Amazon for cheap. There's also more than one master key it's a whole set. That said, when the lock picking lawyer bought a bunch of TSA locks, they all used master key #7 I think.
[ Parent | on HN ]
Re:U.S. Army Soldier Arrested in AT&T, Verizon Extortions by Aloisius on Tuesday December 31, 2024 @01:58PM (#42560914)
Eh. Wasn’t a big deal honestly.

It takes little effort to reproduce the key by disassembling the lock to get access to the plug.

[ Parent | on HN ]
Re:U.S. Army Soldier Arrested in AT&T, Verizon Extortions by eterm on Tuesday December 31, 2024 @06:52AM (#42558168)
I assume the original was a lot higher resolution, else that stinks of parallel reconstruction.
[ Parent | on HN ]
Re:U.S. Army Soldier Arrested in AT&T, Verizon Extortions by hnuser123456 on Tuesday December 31, 2024 @03:20PM (#42561528)
The article also mentioned the whole platform he was using was cracked by police. They might have been able to get the metadata but not want to explain that to others still using that platform.
[ Parent | on HN ]
Re:U.S. Army Soldier Arrested in AT&T, Verizon Extortions by meigwilym on Tuesday December 31, 2024 @07:35AM (#42558345)
The BBC made a good podcast about the busting of Enchrochat.

https://www.bbc.co.uk/programmes/m001v9ds

Possibly/probably only available to UK IP addresses.

[ Parent | on HN ]
Re:U.S. Army Soldier Arrested in AT&T, Verizon Extortions by frereubu on Tuesday December 31, 2024 @07:57AM (#42558424)
I think most audio-only BBC programmes are available globally, even if they sometimes have ads inserted into them which aren't present if you're in the UK.
[ Parent | on HN ]
Re:U.S. Army Soldier Arrested in AT&T, Verizon Extortions by af78 on Tuesday December 31, 2024 @07:54AM (#42558408)
Plays fine in France.
[ Parent | on HN ]
Re:U.S. Army Soldier Arrested in AT&T, Verizon Extortions by coryfklein on Tuesday December 31, 2024 @03:40PM (#42561675)
Here's a direct podcast URL you can add via your favorite podcast app:

https://podcasts.apple.com/ca/podcast/gangster/id1562843329

[ Parent | on HN ]
Re:U.S. Army Soldier Arrested in AT&T, Verizon Extortions by Zambyte on Tuesday December 31, 2024 @06:32AM (#42558095)
The ads under that article are about as funny as the article itself. Lots of hilariously bad AI generated images and stuff
[ Parent | on HN ]
Re:U.S. Army Soldier Arrested in AT&T, Verizon Extortions by pavel_lishin on Tuesday December 31, 2024 @07:38AM (#42558350)
You don't run an adblocker?
[ Parent | on HN ]
Re:U.S. Army Soldier Arrested in AT&T, Verizon Extortions by hluska on Tuesday December 31, 2024 @08:25AM (#42558554)
Clearly they don’t.
[ Parent | on HN ]
Re:U.S. Army Soldier Arrested in AT&T, Verizon Extortions by chatmasta on Tuesday December 31, 2024 @08:48AM (#42558682)
Maybe his comment is an opsec deflection strategy.
[ Parent | on HN ]
Re:U.S. Army Soldier Arrested in AT&T, Verizon Extortions by mvdtnz on Tuesday December 31, 2024 @06:21AM (#42558047)
I don't buy that they got his fingerprints and palm prints from that photo.
[ Parent | on HN ]
Re:U.S. Army Soldier Arrested in AT&T, Verizon Extortions by wongarsu on Tuesday December 31, 2024 @06:31AM (#42558093)
Why not? Seems like a pretty clear shot of three of his fingers and a good partial print of his thumb. I assume the original was higher resolution than the version in the article.

The CCC made a point a couple years ago by publishing finger prints of high ranking German government officials extracted from photos

[ Parent | on HN ]
Re:U.S. Army Soldier Arrested in AT&T, Verizon Extortions by machine_coffee on Tuesday December 31, 2024 @06:38AM (#42558119)
I think they went even further and 3d printed their thumbprint and unlocked their phone with it, if I remember correctly.
[ Parent | on HN ]
Re:U.S. Army Soldier Arrested in AT&T, Verizon Extortions by GoblinSlayer on Tuesday December 31, 2024 @07:30AM (#42558321)
Just change your thumbprint after a leak, no problem.
[ Parent | on HN ]
Re:U.S. Army Soldier Arrested in AT&T, Verizon Extortions by dylan604 on Tuesday December 31, 2024 @01:16PM (#42560591)
A dedicated criminal wouldn’t have fingerprints.
[ Parent | on HN ]
Re:U.S. Army Soldier Arrested in AT&T, Verizon Extortions by datavirtue on Tuesday December 31, 2024 @09:31AM (#42558887)
Fingerprint tech is ridiculously advanced. I saw a documentary where they lifted a print off a pillow case decades later.
[ Parent | on HN ]
Re:U.S. Army Soldier Arrested in AT&T, Verizon Extortions by Kostchei on Tuesday December 31, 2024 @07:08AM (#42558250)
I did fingerprints from a digital photo in 2012 maybe earlier. Old mate was holding up drugs to be photographed. Bit of contrast, blew it up, sent it to fingerprint bureau and what would you know, we had those prints on file. Not the crime of the century and not absolute proof, but a damn good start for a case from a simple post on socials. More useful than most intel/hearsay that ends up in crimestoppers or similar channels.
[ Parent | on HN ]
Re:U.S. Army Soldier Arrested in AT&T, Verizon Extortions by normie3000 on Tuesday December 31, 2024 @10:06AM (#42559092)
No longer a friend?
[ Parent | on HN ]
Re:U.S. Army Soldier Arrested in AT&T, Verizon Extortions by wipash on Tuesday December 31, 2024 @01:21PM (#42560618)
"Old mate" is an Australian/NZ colloquial term for someone who you either don't know or don't want to name.
[ Parent | on HN ]
Re:U.S. Army Soldier Arrested in AT&T, Verizon Extortions by Y_Y on Tuesday December 31, 2024 @08:12AM (#42558492)
But how are they to be tied together? If you don't use the same name, or talk about very specific or correlateable things, then it's hard for me to imagine how you're tying my old IRC chats to my facebooks groups to my Telegram conspiracies. As far as I'm aware the really useful metadata is rarely available since only the site operator had that and most likely deleted it or threw it in a drawer.
[ Parent | on HN ]
Re:U.S. Army Soldier Arrested in AT&T, Verizon Extortions by sjsdaiuasgdia on Tuesday December 31, 2024 @09:44AM (#42558967)
You might want to give the prior Krebs post on this guy a read - https://krebsonsecurity.com/2024/11/hacker-in-snowflake-exto...

It shows how small bits of information from several sources are used to tie this guy's aliases together.

[ Parent | on HN ]
Re:U.S. Army Soldier Arrested in AT&T, Verizon Extortions by Y_Y on Tuesday December 31, 2024 @02:26PM (#42561108)
Thanks, that's exactly what I was looking for.
[ Parent | on HN ]
Re:U.S. Army Soldier Arrested in AT&T, Verizon Extortions by gorbachev on Tuesday December 31, 2024 @05:54AM (#42557916)
And don't brag about your crimes after the fact online, or anywhere else either.
[ Parent | on HN ]
Re:U.S. Army Soldier Arrested in AT&T, Verizon Extortions by oefrha on Tuesday December 31, 2024 @09:03AM (#42558759)
Boasting is required in his line of work, that's how they build street rep, sell their products/services, and recruit people. (Contrast this to spycraft where the acceptable amount of boasting is zero.)

What did him in was boasting from a non-clean slate identity among other things. He needed strict separation between big time jobs which require an absolute clean slate because all the attention will be there, small time jobs that are likely numerous and sloppier but no one will bother to investigate, and pleasure. He didn't have that.

[ Parent | on HN ]
Re:U.S. Army Soldier Arrested in AT&T, Verizon Extortions by Arrath on Tuesday December 31, 2024 @01:15PM (#42560582)
Remember kids, only break one law at a time. And once you're done, shut the hell up!!
[ Parent | on HN ]
Re:U.S. Army Soldier Arrested in AT&T, Verizon Extortions by jasdi on Tuesday December 31, 2024 @07:25AM (#42558309)
That's not enough. Even the best people and teams, can make mistakes and they do so all the time.
[ Parent | on HN ]
Re:U.S. Army Soldier Arrested in AT&T, Verizon Extortions by grecy on Tuesday December 31, 2024 @06:15AM (#42558017)
That is exactly how the Silk Road guy was finally identified and caught.
[ Parent | on HN ]
Re:U.S. Army Soldier Arrested in AT&T, Verizon Extortions by avidiax on Wednesday January 01, 2025 @03:33PM (#42569066)
I once read a detailed account of how he was caught. It seemed like the kind of clues that you could only connect post-hoc.

It seemed like parallel construction [1] to me. Considering that the NSA is known to give the DEA "tips" [2], and has a division specifically to start parallel construction investigations [3], and this was a high profile drug case, it would be odd that they didn't use parallel construction techniques.

[1] https://en.wikipedia.org/wiki/Parallel_construction

[2] https://arstechnica.com/tech-policy/2013/08/us-drug-agency-g...

[3] https://www.reuters.com/article/world/exclusive-u-s-directs-...

[ Parent | on HN ]
Re:U.S. Army Soldier Arrested in AT&T, Verizon Extortions by grecy on Wednesday January 01, 2025 @03:38PM (#42569098)
I read the book about it, and it was actually an IRS agent who found a super old forum post where the guy announced he had created the Silk Road using a username that was easily linked to his real name.

The IRS guy figured it out and nobody would act on it because they all figured the FBI would know better and they should wait for the FBI to do it right. ... but actually he nailed it.

[ Parent | on HN ]
Re:U.S. Army Soldier Arrested in AT&T, Verizon Extortions by warner25 on Tuesday December 31, 2024 @11:44AM (#42559849)
This reminds me of things that I've read about intelligence agencies increasingly finding it impossible to give agents fake identities for cover; everyone now has just left too much of a trail of data behind them. And if you find or create someone with no such trail, that stands out as being suspicious[1].

[1] As an aside, this is a paradox that has fascinated me for a while. Potentially any step that we take to be more private or anonymous makes us stand out more, thus easier to track and re-identify, because we end up in a smaller crowd (i.e. anonymity set).

[ Parent | on HN ]
Re:U.S. Army Soldier Arrested in AT&T, Verizon Extortions by qingcharles on Tuesday December 31, 2024 @09:58PM (#42563616)
I would imagine they just buy old accounts on black hat sites and reuse them? Or use leaked login credentials for abandoned accounts.
[ Parent | on HN ]