W

Whistle Orga

40 members
2017-10-19
NI
NickBurnsAll (Jackson MS)
#WINNING
MA
matt - deaf1 - maine
RE
Rebecca S (PoisonIvy30)
I bet they're all running around "do we know how much they know? Who the hell did it?"
SA
Sara TeslaKoiled (Chicago, USA)
Having WB confirm the time of shutdown may actually be useful
CQ
CQ πŸ›πŸ‘‘ Sarah
Yes do it lol
AR
Arctic Rebel - West TN
I'm at work :(
ER
Erich Bacher (@thePrevaricator WI, US)
I think in light of whats happened, discussing it with opsec people now is fine. Maybe a show of hands?
CQ
CQ πŸ›πŸ‘‘ Sarah
πŸ‘‹
SC
Scott Lykens (@5parkee)
I asked WB if there was chatter in the slack about it yet.
ST
Strandit (Seattle, WA, USA)
I’d wait
ME
Melissa Bailey (PeanutsMom)
🀚
NI
NickBurnsAll (Jackson MS)
πŸ‘‹
CQ
CQ πŸ›πŸ‘‘ Sarah
πŸ‘ they'd be stupid to do that I think
KI
Kim (hardcandy37) Pelletier
I think I'd wait too.
AN
AnAmerican
Let’s wait
SC
Scott Lykens (@5parkee)
Depends if they think only RIOT has been compromised.
ST
Strandit (Seattle, WA, USA)
If someone starts talking about this it says interesting things about their Res contacts.
SA
Sara TeslaKoiled (Chicago, USA)
@theprevaricator define opsec people
MI
Michael Noda [GreatNorthern, PHL πŸ‡ΊπŸ‡Έ]
All ~800 people know is that RIOT is down.
ST
Strandit (Seattle, WA, USA)
No free intel.
CQ
CQ πŸ›πŸ‘‘ Sarah
Fair enough
ER
Erich Bacher (@thePrevaricator WI, US)
that makes it like 50/50
CQ
CQ πŸ›πŸ‘‘ Sarah
Ask WB how often that happens
CA
Cate [Intoku, WA, πŸ‡ΊπŸ‡Έ]
ER
Erich Bacher (@thePrevaricator WI, US)
so lets stay the course.
MI
Michael Noda [GreatNorthern, PHL πŸ‡ΊπŸ‡Έ]
Hasn't happened in a year.
SC
Scott Lykens (@5parkee)
[[Photo]]
ER
Erich Bacher (@thePrevaricator WI, US)
no fucking way
CQ
CQ πŸ›πŸ‘‘ Sarah
MI
Michael Noda [GreatNorthern, PHL πŸ‡ΊπŸ‡Έ]
MA
matt - deaf1 - maine
NI
NickBurnsAll (Jackson MS)
It would be hilarious though
CQ
CQ πŸ›πŸ‘‘ Sarah
::dancing on their graves::
MA
matt - deaf1 - maine
dont fuck with my feels
ER
Erich Bacher (@thePrevaricator WI, US)
no fake news today
RE
Rebecca S (PoisonIvy30)
This would be fantastic!
MA
matt - deaf1 - maine
holy shit
its real
ER
Erich Bacher (@thePrevaricator WI, US)
it is?
dude, thats awesome
CA
Cate [Intoku, WA, πŸ‡ΊπŸ‡Έ]
That's nuts
NI
NickBurnsAll (Jackson MS)
Remember not to poke around right now. They still probably have server logs.
KI
Kim (hardcandy37) Pelletier
it's real
RE
Rebecca S (PoisonIvy30)
Think bans could be following? Too much to hope for
SE
SeaFoamSoul SAS
I've been looking for this and I can't find it. Do have the forward or know how it was marked? I tried pullquote
ER
Erich Bacher (@thePrevaricator WI, US)
so wtf
ST
Strandit (Seattle, WA, USA)
Evidence, please
KI
Kim (hardcandy37) Pelletier
but how could that be?
AN
Aneristic (PHL)
Taking down a server is like a spoofer creating a new account.
ER
Erich Bacher (@thePrevaricator WI, US)
they fold and reopen?
SC
Scott Lykens (@5parkee)
Well is it real that Niantic has control of it or are they playing us now that they know we know.
ER
Erich Bacher (@thePrevaricator WI, US)
load the page. riot.one shows it
niantic cant get control of a url that fast
ST
Strandit (Seattle, WA, USA)
Yes, I believe in the HTML
ER
Erich Bacher (@thePrevaricator WI, US)
someone inside had to do it
ST
Strandit (Seattle, WA, USA)
But yeah
KI
Kim (hardcandy37) Pelletier
SC
Scott Lykens (@5parkee)
Depending on who owned it they could have repointed it today.
ST
Strandit (Seattle, WA, USA)
No evidence that Niantic did it
ER
Erich Bacher (@thePrevaricator WI, US)
i bet it was "you down this now or youre all fucking banned"
KI
Kim (hardcandy37) Pelletier
but it makes it look like Niantic is in control of it and taking action
SC
Scott Lykens (@5parkee)
BUT if they control who owned it it implicates Niantic as complicit.
ST
Strandit (Seattle, WA, USA)
What Kim said
Just buys time
RE
Rebecca S (PoisonIvy30)
Add that to having an employee on the list...
ER
Erich Bacher (@thePrevaricator WI, US)
Yea, it could be show
SC
Scott Lykens (@5parkee)
Anyone have a DNS tracker to see if it has changed?
ST
Strandit (Seattle, WA, USA)
Muddies the waters
MI
Michael Noda [GreatNorthern, PHL πŸ‡ΊπŸ‡Έ]
Niantic didn't have enough information to credibly make this threat.
ER
Erich Bacher (@thePrevaricator WI, US)
Yes, they did.
OL
ollie (@ollietronic)
You want to tell us exactly what happened?
I missed it.
RE
Rebecca S (PoisonIvy30)
Did you give them the files?
ER
Erich Bacher (@thePrevaricator WI, US)
preview access to the site
MA
matt - deaf1 - maine
Charlie will have a hell of a backlog to read.
RE
Rebecca S (PoisonIvy30)
What's done is done. I think I would've given the group here a heads up tho
ER
Erich Bacher (@thePrevaricator WI, US)
NiaOps contacted me yesterday, saying that responsible release of the information to them would be the best way to ensure action. Charlie concurred and we gave them early access.
SC
Scott Lykens (@5parkee)
TTL on the record for riot.one is 5 minutes. Doesn't mean anything itself as I use 5 minutes too but they could change the IP it points to quickly and put up a splash then move the interface to a new URL.
CH
Chris (@vedorian central NJ, USA) Damoci
SC
Scott Lykens (@5parkee)
And it appears to have leaked to the RES...
SE
SeaFoamSoul SAS
WOW. But yeah. I understand why, but I would have liked to know.
JE
Jemstar (15/~PIT πŸ‡ΊπŸ‡Έ)
RE
Rebecca S (PoisonIvy30)
And I assumed when it was said you were contacted, you meant recently as in today. Wow
ER
Erich Bacher (@thePrevaricator WI, US)
I see that. At the least notice that it was happening.
probably a blown call there. im sorry.
SC
SCLori
How did they know to contact you?
ER
Erich Bacher (@thePrevaricator WI, US)
i was the first to message krug
KI
Kim (hardcandy37) Pelletier
THIS is what concerns me
ER
Erich Bacher (@thePrevaricator WI, US)
i believe
SC
SCLori
Ah, ok, true
JE
Jemstar (15/~PIT πŸ‡ΊπŸ‡Έ)
What's TTL?
CH
Chris (@vedorian central NJ, USA) Damoci
If niaops is actually moving on this then that's more than I even expected to happen
SC
Scott Lykens (@5parkee)
I don't know, I think it shows a direct link from Niantic to the RES - something my tinfoil hat has long suspected. Unless it is a legitimate Niantic takedown they'd have to explain how the news got to the RES.
SC
SCLori
Well yes, we should have been told but I'm happy as hell if this means Niantic is actually DOING something
NI
NickBurnsAll (Jackson MS)
Time To Live how long the DNS record should be cached or used without checking back with the server
SC
Scott Lykens (@5parkee)
Speculating entirely, was their employee an admin? If so, they could have demanded it in exchange for keeping him employed?
RE
Rebecca S (PoisonIvy30)
Why give a release time of noon today if you had let Nia in on it? It had to be known they'd blow it before then
ER
Erich Bacher (@thePrevaricator WI, US)
so heres how i see it. Niaops has the list, nia employees are on it, angel investors are on it.
the ppl whose jobs depend on this give it up right away