ryanlol

> Apparently the appeals court also released the hacker

The court of appeals found me guilty, despite the evidence clearly not supporting that conclusion.

I rather doubt it's because they're for sale, rather it would have been too damaging for the government to admit that they had framed me.

I don't know. I just had a break for approx 3 years with very limited access to the internet. Absolutely nothing has changed. AI is now useful, but it doesn't operate differently than before.

Two different things:

Linked to this investigation? Of course it was.

Linked to the crime? No, not really.

The cryptocurrency analysis in this case reaches absurd conclusions and doesn't stand up to the slightest scrutiny. At best their analysis establishes a low-confidence link between me and the hacker, as it's impossible to tell what if any transactions took place between us. Just that an unknown amount of money may have traveled between our wallets.

One thing is certain though, the relevant sum in this case was 0.1 BTC paid by the police. Their analysis shows me receiving significantly more than that, with no explanation as to where the rest of the money originated. Coincidentally, the other person who was later charged in this case received pretty much exactly the 0.1 BTC according to the police report.

For sure, just goes to show how important it is to really carefully consider your threat model.

>But the thing about not having any devices seized, is that real?

It's real and just as bizarre as it sounds. You'd think that'd be the #1 thing you'd want in any serious investigation.

I doubt such a thing exists, it's a difficult world for outsiders to penetrate.

I don't think we'll ever get to see it, these stories get less and less relevant as time passes.

Someone else leaked a copy of a shared throwaway VM used for hacks. Akin to https://www.thc.org/segfault/, but longer lived and potentially tens of people with access.

The leaked home folder data doesn't really tie that VM to anyone, which is natural given that it seems to have mostly been used to run headless hacking tools and inspect their output.

The idea that I'm linked to this VM comes from the ridiculous idea that lazy hackers would not share SSH key files in order to control access to groups of virtual machines. I.e. if a SSH key fingerprint is at one point tied to me, that key must also still belong to me even when used from a internet connection belonging to another person in another country with a similar track record as me.

In court we had long debates about whether or not hackers could actually be so lazy as to violate best practices by sharing private key material, the lower court rejected such an idea as incredible and found me guilty.

A LLM chatbot trained to deliver and debate the denials might be more on trend?

>Isn't it a hacker raging at the management that refuses to pay?

Nope

Yes, I'm sure my comments here are just full of terribly damaging stuff.

Not sure what the theory here is. Am I supposed to worry about the judges stalking me online and reading my HN comments professing innocence?

The prosecutors couldn't, and wouldn't even want to use anything I've written here, especially considering the trial is over and they can't just file new evidence.

I was 17 at the time :) And FWIW, the whole joke there was that neither me nor the other guy being interviewed had anything at all to do with the attacks on PSN and XBL.

I doubt it. I think it's just cops doing shitty work under pressure and then trying to cover it up.

I do have access to excellent legal advice, strive to live by it.

The big problem with this video is that it's basically entirely based on google translated tabloid articles.

The results are what you might expect if you decided to just use dailymail.co.uk as a source, similar to the creator of malicious trojan virus Python being arrested https://www.dailymail.co.uk/news/article-2124114/Computer-ha...

>Pearson coded trojan viruses, called Zeus, SpyEye and Python, to automatically scour the internet in search of personal details.

No, that did not actually happen.

>I'd bet good money that this dude has some sort of antisocial personality disorder, and really can't be "cured", so to speak.

I'm happy to take you up on this, but I feel like the stakes will need to be pretty high to justify all the effort involved.

>Something tells me he'll try to sneak out of Finland (which is easy due to Schengen), purchase a new passport, and leave Europe.

Why would I do that? I hold a valid Finnish passport, haven't had any trouble entering or exciting Schengen zone lately.

The queries appear to have been looking for me specifically, filtering by date of birth. That wouldn't be a good way to find my relatives.

I am indeed the guy in the article. My side of the story is fairly boring, didn't do crime but got blamed for it anyway by desperate cops. The whole investigation has been bizarre, for example, no-one has ever searched my homes, or even attempted to seize my personal devices.

Should find out within the next couple of months if the appeals court decides to acquit.

Unfortunately that relies on Joe Tidy as the source.

I tend to refrain from being overly critical of journalists who write about me, but Joe Tidy is a special kind of idiot who wrote an entire book about me based mostly around interviews of people who aren't actually the people they claim to be.

>The opsec is shocking

If you choose to blindly believe what the prosecution claims, sure.

So, would it be better if I feigned remorse for a crime I didn't even commit in the first place?

It’s important to understand that “middle class” has a very different meaning in the UK than the US. In the UK “middle class” generally means “posh”, you could see it as a shorthand for “upper middle class”.

> I know a Korean asylum seeker who has had a pending case for literally years

I’m curious, what do Koreans need to seek asylum from? Doesn’t South Korea have a pretty good human rights record? Presumably those coming from the North have a very easy time in the South?

Oh yeah, I’d assume that most people hate calling restaurants :)

It’s been a loong time since I last phoned in a pizza order, but for restaurant reservations it’s a daily thing (lots of places do have tables even though online booking says “full”).

But why would you care if the pizza place gets your name right? My name is difficult too, but I just don’t give restaurants my real name.

Did “woke” actually originate in AAVE instead of whatever the technical term for twitter-speak is?

Wouldn’t that be the other way around if anything?

Nobody reports this stuff, but exploit kits like blackhole have completely disappeared. (Sure, maybe technically not “0click” even if delivered via an ad on nytimes.com)

The situation has dramatically improved during the past 30 years, but so has reporting. It’s the improved reporting that makes it sound like as if the world is on fire.

Of course not, the situation is already far better than it was 5 or 10 years ago. If anything, we’re slowly exiting the 0-click era, not entering it.

But you’re just playing games with meanings of words.

> "We did not have concrete evidence that data was exfiltrated from the DNC"

They did not have pcaps of exfil traffic but did recover the compressed files that had been prepared for exfiltration. Without pcaps there can be no “concrete evidence” that those files were exfiltrated, but we do know that the intruders did prepare data for exfiltration and had nothing stopping them from doing so.

This is basically as good as it ever gets. How about you name examples of some better investigations?