Hacker News Reader

Is this a new precedent, that "legal" hackers that operate in two countries can be forced to divulge their vulns?

I hope so, the fact that attackers can hide behind international borders is an eternal thorn in the side of us blue teamers. Anyone who commits a crime in another country should be subject to that country seeking legal redress.

That is typically the case. If you commit a crime and flee to a different country, where you go will arrest you and turn you over to the country that you did the crime in.

there are many treaties on this. It gets complex, some countries will not turn criminals over if the death pentalty is would be used for example. However in general if you commit a crime you can't flee to a different country.

countries like north Korea and Russia are exceptions. Which is why malware so often comes from them. Anyone else and you are likely to be caught.

The one that gets me is when someone does something on the internet that is legal in their country, but not in another, and the other tries to extradite and charge the person as a criminal.

If I run an Internet-facing server, where is it deemed to be? Everywhere?

That generally doesn’t happen. https://en.wikipedia.org/wiki/Double_criminality

If an extradition treaty would mean recognizing the judgments of Russian kangaroo courts in the US, I’d rather not

Reply on news.ycombinator.com