Brazil Arrests 'USDoD' Hacker in FBI Infragard Breach

krebsonsecurity.com

45 points·codewiz··10 comments

For those who remember Lulzsec days there was a core member called Avunit who was the only one never apprehended. I wonder if he was a fed or just lucky

or maybe he didnt used his private email registered 10 years ago with socials related (and profile pic uploaded)

He was the Bitcoin treasurer of the group so its doubtful.

His name was mentioned in Mr Robot as well.

If you want to play that game or the darknets game you may need to keep changing your alias which could be a problem as you will have to start from 0 again growing contacts and respect.

Do new groups and users have kick ass ASCII logos in their t-files these days? I’m glad the 90s era of incorrect capitalisation is gone.

Sam Bent gave a talk on Darknet opsec in which he recommends what you suggest, regularly changing alias and starting from 0. Quite an interesting talk.

https://www.youtube.com/watch?v=01oeaBb85Xc

You could publish a key as each of these personas and then, when reestablishing a contact using a new persona, prove your identity to that one contact by using the private key of the old (known) persona.

Am I missing something?

defeats the whole point of changing identity if you reveal who you were

You reveal it to a single (trustworthy) party that you want to reestablish contact with.

Of course, this assumes you wouldn't want to reestablish contact with a non-trustworthy party.

A trail of evidence is still a trail of evidence.

https://news.ycombinator.com/item?id=41878832

https://news.ycombinator.com/item?id=41888449

Reply on news.ycombinator.com