Why do cyber criminals get convicted in court? If their IP is found, I don't get how enough proof is gathered by the authorities. The suspect can just physically destroy their drive, delete the the entire encrypted Linux partition and blame the suspicious traffic on endless things. More in the body.

on

I'm just going into detail a bit more in this body text. I'm no expert in this field when it comes to opsec etc. . So I'm elaborating a lot. But I do have years of experience in programming low level and high level software. So I guess I have fundamental knowledge to rely on, plus intuition? Otherwise, you can just roast me and laugh at this for fun. My ego can take it. Or I might come up with some genius ideas that save a harmless homosexual person from getting executed in some super religious dictator state for having harmless kinky gay porn on their PC?

Let's say a criminal does any illegal thing and their IP is found by the authorities. In their next step, the authorities try to gather as much evidence as possible to get the new suspect convicted in court.

What I can't wrap my head around, is how it's possible to prove that the suspect was the person who physically sat there in front of that device doing those illegal things.

Things the suspect could do:

  • Destroy the device and drive physically until it's broken into small pieces, to a point where not even some top-notch magical wizard FBI tech savant can extract any data.\  
  • Burn all surfaces of the device to remove fingerprints and remove DNA traces. Why not drench it in isopropyl also while they're at it.

You're obviously going to argue now that their device might be taken from the suspect before they get a chance to do those things I mention above. Well, don't they have these backup options then?:

  • Encrypt the entire partition with a 50-100 character long password. Not even a super computer can bruteforce that shit in years, right?\ \  
  • Install a software that deletes or just corrupts every byte on the drive when it's started, unless it's started under very specific circumstances. Let's say they have a startup a software that does the following (simplified): "Unless this device was started between 12:12-12:17 AM earlier today, or the first incorrect password entered wasn't "000111222" delete the entire OS or mess up every byte on the drive now". Or even have a home alarm. Once the alarm goes off because anybody broke into the home, that alarm sends a signal to the device via the network, internet, bluetooth, a wire or whatever "Someone broke in. Delete the entire drive or mess with every byte of the drive ASAP! Shit just hit the fan!". This alarm can be any kind of trigger(s). A cheap camera, motion detector, a switch that get's triggered if the device is lifted of a button it's placed on or the switch gets triggered when someone opens the cupboard hiding the device, without setting some database flag beforehand, that the suspect always sets (via bluetooth and/or wifi) to true/false before opening the cupboard. This switch can send the signal via bluetooth or even a wire if the authorities for any reason removed the router, disabled the wifi or has some weird bluetooth jamming thingy-ma-jig (hence, using a physical wire ).\  
  • Or why not even have a high power external battery/device that fries the circuitry, preferrably the drive? I guess you don't need that much electric power to fry the circuitry of an SSD? Once someone opens the cupboard or triggers the switch in any other optional way, the drive gets fried. I guess the pain here is connecting it correcty and getting it set up properly in some custom way.\  
  • Use a login password that is like 50-100 characters long. Not even a super computer can bruteforce that shit in years, right?  

Let's say though that the suspect is super naive, ignorant and was not cautious and the authorities got their hands on their device with all readable data. Couldn't the suspect just blame it on bots, their device getting hacked, someone using their router or VPN, someone spoofing their IP, someone tinkering with their packets, malware they weren't aware of or that someone had physical access to that device without the suspect knowing when out and about?

Just some interesting thoughts and things I wonder about.

Thanks all and have a great rest of the weekend all!

submitted by /u/ChonkyKitty0
[link] [comments]

from hacking: security in practice https://ift.tt/b3GMr0E

Comments

Post a Comment