Re: Final Solution to Chinese Break in
If credit card fraud was involved you might check with the Secret Service. At least in the mid 80s credit card fraud was investigated by the Secret Service. I've no freaking idea why; but, during an investigation about some online stalking featuring me as one of the victims credit card fraud was involved. I was interviewed about it by a Secret Service agent and an FBI agent concurrently. Both were just a touch out of their depth. Sigi Kluger was ultimately prosecuted for the CC fraud, not the stalking, not the death threats, not the bodily harm (chop me up and feed me to his dog) but CC fraud that was small amounts over a full year. VERY few women stayed with McGraw-Hill's BIX or Byte Information eXchange through that year. I was too damn stubborn to be run out. But - damn - CC fraud was the Secret Service's domain? Washington DC was hopelessly screwed up even then. {^_^} Joanne On 2014-10-04 21:26, Paul Robert Marino wrote: you may be right Interpol's economic crimes division might be the right way to go Ive never considered that before. On Sat, Oct 4, 2014 at 8:56 PM, Nico Kadel-Garcia nka...@gmail.com wrote: On Sat, Oct 4, 2014 at 9:26 PM, Bill Maidment b...@maidment.me wrote: There used to be an organisation called Interpol to deal with international crime. I haven't heard anything recent about them; do they still exist? Regards Bill Maidment Interpol still exists, they've a web site hat https://www.interpol.int/. Since we've gone way off this mailing list's announced purpose, I'll stop here.
Re: Final Solution to Chinese Break in
If your loss is less than $50K, the FBI is unlikely to help you unless your case can be included in another investigation. You should still Report it. Or you'll never know. According to requirements put in place by our current administration, if you call the FBI on the phone, someone will take your report regardless of loss.So, if you call the FBI, they may not be able to do anything for you, but they should take your statement and give you a case number. This is a change from previous years. Let us all know if this is not the case.This is my understanding of the laws and procedures as they exist. They're still unlikely to do anything for you unless you can demonstrate damages in excess of $50k. Report your attack to your local police department. Do not call 911 unless you are currently under physical threat. Call your local police department directly, they are who you pay taxes to. If possible, go to your local PD in person and don't leave until you have a copy of the report you filed. Bring print-outs of your pertinent logs. Bring all logs you can w/o compromising information that is private to your users. Your local PD will file the report and if they can help you they will. If you want to know how to get your federal and local law involved, that's how. I won't speak to efficacy, or willingness to act, that's up to the LEO's in question, the case at hand, and how low all tax payers set the bar. But if you can bring any amount of information regarding crimes against your company to any LEO, that's likely a good thing. At least then, it's on the books and statistics will be updated. If you don't report it... you aren't even statistics. If you don't report your loss and the attacks, I guarantee you that nothing will happen. --J
No public key on bash and NetworkManager updates for SL7
Hi When running yum update on SL7rc2 i got the following warnings: warning: /misc/yum/7x/x86_64/updates/fastbugs/NetworkManager-0.9.9.1-26.git20140326.4dba720.el7_0.x86_64.rpm: Header V4 DSA/SHA1 Signature, key ID 192a7d7d: NOKEY Public key for NetworkManager-0.9.9.1-26.git20140326.4dba720.el7_0.x86_64.rpm is not installed Public key for bash-4.2.45-5.el7_0.4.x86_64.rpm is not installed Regards Bill Maidment
Re: Final Solution to Chinese Break in
And yes, some of mine have had their physical safety threatened by griefers and extortionists (we'll swat you if you don't pay constitutes a physical threat) online. They reported it to local and national law-enforcement. It's been ugly. But if no one reports these asshats, nothing _CAN_ be done. Feel free to report the IPs of anyone involved in your attacks. We can all ban them. On Sun, Oct 5, 2014 at 5:47 AM, James Rogers wa...@preternatural.net wrote: If your loss is less than $50K, the FBI is unlikely to help you unless your case can be included in another investigation. You should still Report it. Or you'll never know. According to requirements put in place by our current administration, if you call the FBI on the phone, someone will take your report regardless of loss.So, if you call the FBI, they may not be able to do anything for you, but they should take your statement and give you a case number. This is a change from previous years. Let us all know if this is not the case.This is my understanding of the laws and procedures as they exist. They're still unlikely to do anything for you unless you can demonstrate damages in excess of $50k. Report your attack to your local police department. Do not call 911 unless you are currently under physical threat. Call your local police department directly, they are who you pay taxes to. If possible, go to your local PD in person and don't leave until you have a copy of the report you filed. Bring print-outs of your pertinent logs. Bring all logs you can w/o compromising information that is private to your users. Your local PD will file the report and if they can help you they will. If you want to know how to get your federal and local law involved, that's how. I won't speak to efficacy, or willingness to act, that's up to the LEO's in question, the case at hand, and how low all tax payers set the bar. But if you can bring any amount of information regarding crimes against your company to any LEO, that's likely a good thing. At least then, it's on the books and statistics will be updated. If you don't report it... you aren't even statistics. If you don't report your loss and the attacks, I guarantee you that nothing will happen. --J
Re: Final Solution to Chinese Break in
Interpol is not so much an org as an agreement between LEOs in different countries. Not an LEO so much as a way of sharing information. The FBI, according to presentations they've given, is very interested in crimes in all countries even if they cannot pursue or prosecute. And are more than willing to interdict criminals in any country that allows their shoes on the ground. --James On Sat, Oct 4, 2014 at 9:26 PM, Bill Maidment b...@maidment.me wrote: There used to be an organisation called Interpol to deal with international crime. I haven't heard anything recent about them; do they still exist? Regards Bill Maidment -Original message- From:Paul Robert Marino prmari...@gmail.com Sent: Sunday 5th October 2014 9:14 To: Nico Kadel-Garcia nka...@gmail.com; Larry Linder larry.lin...@micro-controls.com Cc: SCIENTIFIC-LINUX-USERS@FNAL.GOV scientific-linux-users@fnal.gov Subject: Re: Final Solution to Chinese Break in One other problem is the FBI can only investigate criminals operating within the united states they really can't do any thing if the criminal is operating out of an other country due to their mandated scope of enforcement. In fact internet crimes are really difficult for any law enforcement because they are usually international and there for exceed their jurisdiction. The laws that limit jurisdiction are ment to protect our rights and prevent any one law enforcement agency from having enough power to threaten the government; however this makes it nearly impossible for any one of them to truly investigate internet crimes. What is needed is a new agency who's jurisdiction is international internet crimes; however that also presents its own risks because if you think the NSA is bad about respecting our rights just wait to see what an international agency tasked with tracking internet crimes would do. -- Sent from my HP Pre3
Re: Final Solution to Chinese Break in
FBI Contact US page: http://www.fbi.gov/contact-us And hey, give us IPs for your attackers so that we can block them at our routers. On Sun, Oct 5, 2014 at 6:16 AM, James Rogers wa...@preternatural.net wrote: -- Forwarded message -- From: James Rogers wa...@preternatural.net Date: Sun, Oct 5, 2014 at 6:09 AM Subject: Re: Final Solution to Chinese Break in To: Bill Maidment b...@maidment.me Cc: Paul Robert Marino prmari...@gmail.com, Nico Kadel-Garcia nka...@gmail.com, Larry Linder larry.lin...@micro-controls.com, SCIENTIFIC-LINUX-USERS@FNAL.GOV scientific-linux-users@fnal.gov Interpol is not so much an org as an agreement between LEOs in different countries. Not an LEO so much as a way of sharing information. The FBI, according to presentations they've given, is very interested in crimes in all countries even if they cannot pursue or prosecute. And are more than willing to interdict criminals in any country that allows their shoes on the ground. --James On Sat, Oct 4, 2014 at 9:26 PM, Bill Maidment b...@maidment.me wrote: There used to be an organisation called Interpol to deal with international crime. I haven't heard anything recent about them; do they still exist? Regards Bill Maidment -Original message- From:Paul Robert Marino prmari...@gmail.com Sent: Sunday 5th October 2014 9:14 To: Nico Kadel-Garcia nka...@gmail.com; Larry Linder larry.lin...@micro-controls.com Cc: SCIENTIFIC-LINUX-USERS@FNAL.GOV scientific-linux-users@fnal.gov Subject: Re: Final Solution to Chinese Break in One other problem is the FBI can only investigate criminals operating within the united states they really can't do any thing if the criminal is operating out of an other country due to their mandated scope of enforcement. In fact internet crimes are really difficult for any law enforcement because they are usually international and there for exceed their jurisdiction. The laws that limit jurisdiction are ment to protect our rights and prevent any one law enforcement agency from having enough power to threaten the government; however this makes it nearly impossible for any one of them to truly investigate internet crimes. What is needed is a new agency who's jurisdiction is international internet crimes; however that also presents its own risks because if you think the NSA is bad about respecting our rights just wait to see what an international agency tasked with tracking internet crimes would do. -- Sent from my HP Pre3
Re: Final Solution to Chinese Break in
I don't block China and NK, but for the most part, my decision is automatic when I see IP's out of those countries. I kill OUTPUT and INPUT. It might not solve your problem, but it can't hurt. I kill OUTPUT and INPUT on every IP I can with the assumption that if people really have problems I'll notice, and if users have problems, I'll be called. If you see issues from an IP, you don't want to talk to it anymore, ever. On Sun, Oct 5, 2014 at 6:32 AM, James Rogers wa...@preternatural.net wrote: I also highly recommend running a whois on the IP's used in the attacks, and then creating DROP rules for the entire ASIN for your attackers if you don't have any legit reason for talking to that range. I keep whole /8's and /16's in my iptables DROP list. If you can limit the people you want to talk to, then only talk to those IP's.A small positive list if often more useful than sections of the rest of the world. On Sun, Oct 5, 2014 at 6:19 AM, James Rogers wa...@preternatural.net wrote: FBI Contact US page: http://www.fbi.gov/contact-us And hey, give us IPs for your attackers so that we can block them at our routers. On Sun, Oct 5, 2014 at 6:16 AM, James Rogers wa...@preternatural.net wrote: -- Forwarded message -- From: James Rogers wa...@preternatural.net Date: Sun, Oct 5, 2014 at 6:09 AM Subject: Re: Final Solution to Chinese Break in To: Bill Maidment b...@maidment.me Cc: Paul Robert Marino prmari...@gmail.com, Nico Kadel-Garcia nka...@gmail.com, Larry Linder larry.lin...@micro-controls.com, SCIENTIFIC-LINUX-USERS@FNAL.GOV scientific-linux-users@fnal.gov Interpol is not so much an org as an agreement between LEOs in different countries. Not an LEO so much as a way of sharing information. The FBI, according to presentations they've given, is very interested in crimes in all countries even if they cannot pursue or prosecute. And are more than willing to interdict criminals in any country that allows their shoes on the ground. --James On Sat, Oct 4, 2014 at 9:26 PM, Bill Maidment b...@maidment.me wrote: There used to be an organisation called Interpol to deal with international crime. I haven't heard anything recent about them; do they still exist? Regards Bill Maidment -Original message- From:Paul Robert Marino prmari...@gmail.com Sent: Sunday 5th October 2014 9:14 To: Nico Kadel-Garcia nka...@gmail.com; Larry Linder larry.lin...@micro-controls.com Cc: SCIENTIFIC-LINUX-USERS@FNAL.GOV scientific-linux-users@fnal.gov Subject: Re: Final Solution to Chinese Break in One other problem is the FBI can only investigate criminals operating within the united states they really can't do any thing if the criminal is operating out of an other country due to their mandated scope of enforcement. In fact internet crimes are really difficult for any law enforcement because they are usually international and there for exceed their jurisdiction. The laws that limit jurisdiction are ment to protect our rights and prevent any one law enforcement agency from having enough power to threaten the government; however this makes it nearly impossible for any one of them to truly investigate internet crimes. What is needed is a new agency who's jurisdiction is international internet crimes; however that also presents its own risks because if you think the NSA is bad about respecting our rights just wait to see what an international agency tasked with tracking internet crimes would do. -- Sent from my HP Pre3
my drop list
These are my drops. I prune them regularly.I add to it rarely. DROP ALL ACCESS OF ALL KINDS FROM FOLLOWING IP's # 61.174.51.192/26 -j DROP 113.96.0.0/12 -j DROP 61.147.0.0/16 -j DROP 116.8.0.0/14 -j DROP 62.31.19.0/24 -j DROP 82.38.232.0/29 -j DROP 74.184.4.184 -j DROP 91.143.83.104 -j DROP 219.66.171.247 -j DROP 216.30.40.0/24 -j DROP 194.85.104.0/21 -j DROP 217.107.218.0/24 -j DROP 62.60.128.0/17 -j DROP 62.193.0.0/19 -j DROP 62.217.64.0/18 -j DROP 62.220.96.0/19 -j DROP 80.66.176.0/20 -j DROP 80.71.112.0/20 -j DROP 80.75.0.0/20 -j DROP 80.82.224.0/20 -j DROP 80.191.0.0/16 -j DROP 80.242.0.0/20 -j DROP 80.242.16.0/20 -j DROP 80.253.128.0/20 -j DROP 80.253.144.0/20 -j DROP 81.12.0.0/17 -j DROP 81.23.160.0/20 -j DROP 81.28.32.0/20 -j DROP 81.28.48.0/20 -j DROP 81.31.160.0/20 -j DROP 81.31.176.0/20 -j DROP 81.90.144.0/20 -j DROP 81.91.128.0/20 -j DROP 81.91.144.0/20 -j DROP 81.93.32.0/20 -j DROP 82.99.192.0/18 -j DROP 82.115.0.0/19 -j DROP 82.132.0.0/17 -j DROP 83.169.0.0/18 -j DROP 84.47.192.0/18 -j DROP 84.241.0.0/18 -j DROP 85.9.64.0/18 -j DROP 85.15.0.0/18 -j DROP 85.133.128.0/17 -j DROP 85.185.0.0/16 -j DROP 85.198.0.0/18 -j DROP 86.109.32.0/19 -j DROP 87.107.0.0/16 -j DROP 87.247.160.0/19 -j DROP 89.144.128.0/18 -j DROP 89.165.0.0/17 -j DROP 89.221.80.0/20 -j DROP 89.235.64.0/18 -j DROP 91.98.0.0/15 -j DROP 91.184.64.0/19 -j DROP 91.186.192.0/19 -j DROP 193.189.122.0/23 -j DROP 194.165.0.0/19 -j DROP 194.225.0.0/16 -j DROP 195.146.32.0/19 -j DROP 213.155.32.0/19 -j DROP 213.165.96.0/19 -j DROP 213.176.0.0/19 -j DROP 213.176.32.0/19 -j DROP 213.176.64.0/18 -j DROP 213.207.192.0/18 -j DROP 213.217.32.0/19 -j DROP 213.233.160.0/19 -j DROP 217.11.16.0/20 -j DROP 217.24.144.0/20 -j DROP 217.25.48.0/20 -j DROP 217.66.192.0/20 -j DROP 217.66.208.0/20 -j DROP 217.116.208.0/20 -j DROP 217.146.208.0/20 -j DROP 217.172.96.0/19 -j DROP 217.174.16.0/20 -j DROP 217.218.0.0/15 -j DROP 203.151.0.0/16 -j DROP 121.8.0.0/13 -j DROP 58.48.0.0/13 -j DROP 59.32.0.0/11 -j DROP 59.64.0.0/13 -j DROP 59.72.0.0/13 -j DROP 60.0.0.0/13 -j DROP 60.8.0.0/15 -j DROP 60.10.0.0/16 -j DROP 60.160.0.0/11 -j DROP 61.28.0.0/18 -j DROP 61.48.0.0/13 -j DROP 61.128.0.0/10 -j DROP 61.232.0.0/14 -j DROP 61.236.0.0/15 -j DROP 61.240.0.0/14 -j DROP 202.0.110.0/24 -j DROP 202.0.160.0/20 -j DROP 202.0.176.0/22 -j DROP 202.4.128.0/19 -j DROP 202.4.252.0/22 -j DROP 202.14.235.0/24 -j DROP 202.14.236.0/23 -j DROP 202.14.238.0/24 -j DROP 202.14.88.0/24 -j DROP 202.20.120.0/24 -j DROP 202.22.248.0/21 -j DROP 202.38.0.0/20 -j DROP 202.38.128.0/17 -j DROP 202.38.32.0/19 -j DROP 202.38.64.0/18 -j DROP 202.90.0.0/22 -j DROP 202.90.252.0/22 -j DROP 202.91.0.0/22 -j DROP 202.91.128.0/22 -j DROP 202.92.0.0/22 -j DROP 202.92.252.0/22 -j DROP 202.93.0.0/22 -j DROP 202.93.252.0/22 -j DROP 202.94.0.0/19 -j DROP 202.95.0.0/19 -j DROP 202.95.252.0/22 -j DROP 202.96.0.0/12 -j DROP 202.112.0.0/13 -j DROP 202.120.0.0/15 -j DROP 202.122.0.0/19 -j DROP 202.122.128.0/24 -j DROP 202.122.32.0/21 -j DROP 202.127.0.0/18 -j DROP 202.127.128.0/17 -j DROP 202.130.0.0/19 -j DROP 202.130.224.0/19 -j DROP 202.131.160.0/19 -j DROP 202.131.192.0/19 -j DROP 202.136.252.0/22 -j DROP 202.192.0.0/12 -j DROP 203.81.16.0/20 -j DROP 203.87.224.0/19 -j DROP 203.88.0.0/18 -j DROP 203.89.0.0/18 -j DROP 203.90.0.0/18 -j DROP 203.91.0.0/18 -j DROP 203.92.0.0/18 -j DROP 203.93.0.0/16 -j DROP 203.94.0.0/19 -j DROP 203.95.0.0/21 -j DROP 203.100.96.0/19 -j DROP 203.128.128.0/19 -j DROP 203.184.0.0/19 -j DROP 203.192.0.0/19 -j DROP 203.196.0.0/19 -j DROP 203.207.128.0/17 -j DROP 203.207.64.0/18 -j DROP 203.208.0.0/18 -j DROP 203.212.0.0/20 -j DROP 203.222.192.0/18 -j DROP 203.223.0.0/20 -j DROP 210.5.0.0/17 -j DROP 210.5.128.0/19 -j DROP 210.12.0.0/15 -j DROP 210.14.160.0/19 -j DROP 210.14.192.0/18 -j DROP 210.15.0.0/17 -j DROP 210.15.128.0/18 -j DROP 210.21.0.0/16 -j DROP 210.22.0.0/16 -j DROP 210.25.0.0/16 -j DROP 210.26.0.0/15 -j DROP 210.28.0.0/14 -j DROP 210.32.0.0/12 -j DROP 210.51.0.0/16 -j DROP 210.52.0.0/15 -j DROP 210.72.0.0/14 -j DROP 210.76.0.0/15 -j DROP 210.78.0.0/16 -j DROP 210.79.224.0/19 -j DROP 210.82.0.0/15 -j DROP 210.192.96.0/19 -j DROP 210.211.0.0/18 -j DROP 211.64.0.0/13 -j DROP 211.80.0.0/12 -j DROP 211.96.0.0/13 -j DROP 211.136.0.0/13 -j DROP 211.144.0.0/12 -j DROP 211.160.0.0/13 -j DROP 218.0.0.0/11 -j DROP 218.56.0.0/255.248.0.0 -j DROP 218.64.0.0/11 -j DROP 218.96.0.0/14 -j DROP 218.104.0.0/255.252.0.0 -j DROP 218.108.0.0/255.255.0.0 -j DROP 218.109.0.0/255.255.0.0 -j DROP 218.192.0.0/12 -j DROP 218.240.0.0/14 -j DROP 218.244.0.0/14 -j DROP 219.72.0.0/16 -j DROP 219.128.0.0/11 -j DROP 219.224.0.0/12 -j DROP 219.242.0.0/15 -j DROP 219.244.0.0/14 -j DROP 220.160.0.0/11
Re: Final Solution to Chinese Break in
That is because the secret service is part of the treasury department oddly enough. Even though they are most know for protecting the president they are actually a law enforcement agency.-- Sent from my HP Pre3On Oct 5, 2014 2:54 AM, jdow j...@earthlink.net wrote: If credit card fraud was involved you might check with the Secret Service. At least in the mid 80s credit card fraud was investigated by the Secret Service. I've no freaking idea why; but, during an investigation about some online stalking featuring me as one of the victims credit card fraud was involved. I was interviewed about it by a Secret Service agent and an FBI agent concurrently. Both were just a touch out of their depth. Sigi Kluger was ultimately prosecuted for the CC fraud, not the stalking, not the death threats, not the bodily harm (chop me up and feed me to his dog) but CC fraud that was small amounts over a full year. VERY few women stayed with McGraw-Hill's "BIX" or "Byte Information eXchange" through that year. I was too damn stubborn to be run out. But - damn - CC fraud was the Secret Service's domain? Washington DC was hopelessly screwed up even then. {^_^} Joanne On 2014-10-04 21:26, Paul Robert Marino wrote: you may be right Interpol's economic crimes division might be the right way to go Ive never considered that before. On Sat, Oct 4, 2014 at 8:56 PM, Nico Kadel-Garcia nka...@gmail.com wrote: On Sat, Oct 4, 2014 at 9:26 PM, Bill Maidment b...@maidment.me wrote: There used to be an organisation called Interpol to deal with international crime. I haven't heard anything recent about them; do they still exist? Regards Bill Maidment Interpol still exists, they've a web site hat https://www.interpol.int/. Since we've gone way off this mailing list's announced purpose, I'll stop here.
Re: Final Solution to Chinese Break in
Well it looks like in 2003 it was transfered to the new at that tim DHS. It originally was not a waste of money because the FBI didn't exist yet so it was vital at the time. Can it be consolidated now? Yes; but that doesn't mean a new conglomerate agency would do a good job.All things said and done outside of the protection of the president and other dignitaries the secret service has a long history of being very good and efficient at their originally mandated job even in the internet age which is to really with finance related crimes originally meaning preventing the circulation of fake currency.I think a new agency needs to be developed with a strict mandate of international internet crimes; however I don't trust modern politicians to do a great job of designing it to work in our best interests. Honestly I don't think they know enough about the subject to even know if they are or are not doing the right thing.-- Sent from my HP Pre3On Oct 5, 2014 2:04 PM, Jason Bronner jason.bron...@gmail.com wrote: Its under DHS now and has been under DHS for quite a while. Initially thats who is tasked with investigating counterfeiting US currency and is why they were a division of the Treasury Dept. Had a nice chat with one of their reps when I was still in management and someone shot a fake 100 through my safe and i filled out the paperwork on it at the bank. On Sun, Oct 5, 2014 at 11:54 AM, jdow j...@earthlink.net wrote:Like I say, our government is totally disorganized and overbloated. Law enforcement should be part of DoJ not Treasury. But, we gotta waste money somehow so we get a mishmash of a hodgepodge. nuff said - except to note that I wanted a chance to live enough that I illegally carried a .38 special for most of that year and slept with it under the pillow. Surrender is for victims. I gave up being a victim and liked the feeling. {o.o} On 2014-10-05 06:27, Paul Robert Marino wrote: That is because the secret service is part of the treasury department oddly enough. Even though they are most know for protecting the president they are actually a law enforcement agency. -- Sent from my HP Pre3 On Oct 5, 2014 2:54 AM, jdow j...@earthlink.net wrote: If credit card fraud was involved you might check with the Secret Service. At least in the mid 80s credit card fraud was investigated by the Secret Service. Ive no freaking idea why; but, during an investigation about some online stalking featuring me as one of the victims credit card fraud was involved. I was interviewed about it by a Secret Service agent and an FBI agent concurrently. Both were just a touch out of their depth. Sigi Kluger was ultimately prosecuted for the CC fraud, not the stalking, not the death threats, not the bodily harm (chop me up and feed me to his dog) but CC fraud that was small amounts over a full year. VERY few women stayed with McGraw-Hills BIX or Byte Information eXchange through that year. I was too damn stubborn to be run out. But - damn - CC fraud was the Secret Services domain? Washington DC was hopelessly screwed up even then. {^_^} Joanne On 2014-10-04 21:26, Paul Robert Marino wrote: you may be right Interpols economic crimes division might be the right way to go Ive never considered that before. On Sat, Oct 4, 2014 at 8:56 PM, Nico Kadel-Garcia nka...@gmail.com wrote: On Sat, Oct 4, 2014 at 9:26 PM, Bill Maidment b...@maidment.me wrote: There used to be an organisation called Interpol to deal with international crime. I havent heard anything recent about them; do they still exist? Regards Bill Maidment Interpol still exists, theyve a web site hat https://www.interpol.int/. Since weve gone way off this mailing lists announced purpose, Ill stop here.