Hacker News Reader

Comment by mkl95 | Hacker News Reader

TIL https://en.wikipedia.org/wiki/Maia_arson_crimew

> In March 2021, crimew was indicted by a grand jury in the United States on criminal charges related to her alleged hacking activity between 2019 and 2021. The charges were unrelated to the hack of Verkada. Her home and her parents' home were raided by the Swiss police at the request of United States authorities, and her electronic devices were seized. People used the hashtag "#freetillie" to express support for her in the aftermath of the raid, and the Swiss magazine Republik compared her to Jeremy Hammond and Aaron Swartz.

View on HN

Laws are written to protect multibillion corporations and billionaires. Prove me wrong.

If we truly lived in a sane society, companies with lax security and god awful security policies would be punished.

Depends on the country.

Mine was founded by some overseas family that can still come over and start telling us what to do as they please.

So uhhh, yeah, can confirm, Canada’s laws basically revolve around keeping old money wealthy without providing any value to anyone.

The British Crown hasn't had real power since 1649, but please continue complaining about nothing.

No you just (by constitution) have to swear allegiance to the crown to become a lawmaker, which makes you a perjurer if you don't acknowledge their power.

Also is the monarch not commander in chief their armed forces? I thought being under the command of the queen / monarch was part of their oath. If your soldiers are sworn to do what the queen says that seems like a lot of potential power.

Yeah, it's crazy to me that the UK has no armed forces, the military are all personally bound to the monarch. The king has interfered in politics too, so arguments based on royalty not being active are off to a bad start.

It's hilarious that even though I think my comment was misread, it turns out I think we both are right.

You read it as me talking about the military in the UK.

No I was talking about the Canadian military. They are bound to the queen and swear an oath to such, you know the one that lives in the UK.

It really illustrates the absurdity of the situation.

Ah, I suspected you were talking about Canada, but wasn't sure if it might be Australia. I guess your situation is more absurd.

There's still a 10% difference in wealth on average between people with noble Norman family names and everyone else in UK.

So if I leave my front door unlocked, I should go to jail when someone steals from me? What nonsense.

Probably not. But if you owned a warehouse and you left it unlocked without security, and someone steels from it stuff that is owned by somebody else, then maybe you are liable somewhat.

Your front door and the items in your house are not analogous to having sensitive information on a machine connected to the internet.

Fiduciary responsibility [1] is closer to the concept that applies here in my opinion. Companies have a fiduciary responsibility to protect the company and thus the investment in the company for the investors and shareholders.

[1] - https://en.wikipedia.org/wiki/Fiduciary_responsibility

Surely this comment does not fit HN comment guidelines: https://news.ycombinator.com/newsguidelines.html

> Eschew flamebait. Avoid generic tangents. Omit internet tropes.

> Please don't use Hacker News for political or ideological battle. That tramples curiosity.

> Please don't complain that a submission is inappropriate. If a story is spam or off-topic, flag it. Don't feed egregious comments by replying; flag them instead. If you flag, please don't also comment that you did.

If you feel it's appropriate, flag the comment.

So it’s OK for individual vigilantes to punish them, am I right?

Yes, punish the victims is the best policy.

There is very little if anything similar between the subject and Aaron Swartz

Exactly. There is a whole infrastructure of sympathizer-nuts, similar to US politics.

“Jan 19, 2023” — OP article date.

Wonder if she's on the no-fly list now.

Doubt it. The US would very much love it to fly pretty much anywhere outside Switzerland so it can be extradited.

What a Wally. What purpose did it serve doing this?

Are you asking, what purpose was there in bringing the hammer of the American Justice Department and down onto a random grey hat hacker? The same as always: enforce rigid authoritarianism and blind bureaucratic SOP.

Remember kids, clicking the "next page" button on court document websites is legal, doing it with javascript is a felony, off to jail with you, join the rapists and murderers!

> doing it with javascript is a felony

Wut

I suspect they're talking about circumvention of technical DRM measures.

https://www.law.cornell.edu/uscode/text/17/1201

They could also be talking about the Apple email leak caused by incrementing an UUID.

There's probably other notable cases with the same failure mode.

One of the things you learn working in computer security: history doesn't repeat itself, but it does rhyme.

> history doesn't repeat itself, but it does rhyme.

I do like Mark Twain

Ah, yeah, that's where I heard it from first. Thanks!

weev and AT&T as well.

Nah history in information security repeats daily. How many unsecured mongodb databases exposed to the internet and unsecured S3 buckets did we see? Credentials have been committed to github so often that Github chose to build an automated alert system on their own dime that you don't even have to sign up for. How many times have lastpass and Experian been breached? How often do we STILL see sql injection attacks, a problem that has been actually solved for decades?

Perhaps in reference to the judyrecords fiasco:

https://www.judyrecords.com/what-happened-with-tyler-technol...

No one was actually sent to jail, but the proprietor of the site was dragged through the media as a dangerous hacker and felon.

you should do it with Typescript

How such supposedly talented hacker end up to be doxxed? It's not that hard to become 99.99% anonymous online...

Technically easy, operationally virtually impossible - everyone will slip up eventually.

Also, the need for recognition often drives any human endeavour - and that leads hackers, criminals, etc to boast of their exploits to at least someone … who might be under observation, or under pressure to give up information to escape severe punishment for their own activities.

Prolly the need for recognition because if you hack from public wifi with tails tor mullvad, brand new laptop with specific hardware and so on I don't see how you can get caught up

Don't forget the time machine to go back to warn past self about the one time they slip up just prior to when they decide to really go all in on the haxoring.

Some parts of the internet never forget, and the anonymous graph is only anonymous if all of it is anonymous. 99.999% isn't good enough.

No doxxing was necessary, Tillie did it all publically, publishing on a home server, making announcements on Telegram under their real name. I don't quite get it either, but they specifically didn't want to hide in (pseudo)anonymity.

Can Confirm. I was big into telegram communities at that time and joined when her group was public. I have nothing to prove because I delete all my stuff but the indictment shows screenshots and transcripts from the group. She literally posted selfies on Twitter sometimes.

I don't agree with most of her more radical views and find her methods to be too extreme, but she clearly stood behind them and didn't hide

crimew's stated viewpoint and goals are "radical transparency". Hiding her legal name would go against this goal. It has nothing to do with competency and everything to do with her worldview.

Reply on news.ycombinator.com