2017-10-19
NI
NickBurnsAll (Jackson MS)
#WINNING
MA
matt - deaf1 - maine
This
RE
Rebecca S (PoisonIvy30)
I bet they're all running around "do we know how much they know? Who the hell did it?"
SA
Sara TeslaKoiled (Chicago, USA)
Having WB confirm the time of shutdown may actually be useful
CQ
CQ ππ Sarah
Yes do it lol
AR
Arctic Rebel - West TN
I'm at work :(
ER
Erich Bacher (@thePrevaricator WI, US)
I think in light of whats happened, discussing it with opsec people now is fine. Maybe a show of hands?
CQ
CQ ππ Sarah
π
SC
Scott Lykens (@5parkee)
I asked WB if there was chatter in the slack about it yet.
ST
Strandit (Seattle, WA, USA)
Iβd wait
ME
Melissa Bailey (PeanutsMom)
π€
NI
NickBurnsAll (Jackson MS)
π
CQ
CQ ππ Sarah
π they'd be stupid to do that I think
KI
Kim (hardcandy37) Pelletier
I think I'd wait too.
AN
AnAmerican
Letβs wait
SC
Scott Lykens (@5parkee)
Depends if they think only RIOT has been compromised.
ST
Strandit (Seattle, WA, USA)
If someone starts talking about this it says interesting things about their Res contacts.
SA
Sara TeslaKoiled (Chicago, USA)
@theprevaricator define opsec people
MI
Michael Noda [GreatNorthern, PHL πΊπΈ]
All ~800 people know is that RIOT is down.
ST
Strandit (Seattle, WA, USA)
No free intel.
CQ
CQ ππ Sarah
Fair enough
ER
Erich Bacher (@thePrevaricator WI, US)
that makes it like 50/50
CQ
CQ ππ Sarah
Ask WB how often that happens
CA
Cate [Intoku, WA, πΊπΈ]
Wait
ER
Erich Bacher (@thePrevaricator WI, US)
so lets stay the course.
MI
Michael Noda [GreatNorthern, PHL πΊπΈ]
Hasn't happened in a year.
SC
Scott Lykens (@5parkee)
[[Photo]]
ER
Erich Bacher (@thePrevaricator WI, US)
no fucking way
CQ
CQ ππ Sarah
HA
MI
Michael Noda [GreatNorthern, PHL πΊπΈ]
what
MA
matt - deaf1 - maine
wait
NI
NickBurnsAll (Jackson MS)
It would be hilarious though
CQ
CQ ππ Sarah
::dancing on their graves::
MA
matt - deaf1 - maine
dont fuck with my feels
RE
Rebecca S (PoisonIvy30)
This would be fantastic!
CA
Cate [Intoku, WA, πΊπΈ]
That's nuts
NI
NickBurnsAll (Jackson MS)
Remember not to poke around right now. They still probably have server logs.
KI
Kim (hardcandy37) Pelletier
it's real
RE
Rebecca S (PoisonIvy30)
Think bans could be following? Too much to hope for
SE
SeaFoamSoul SAS
I've been looking for this and I can't find it. Do have the forward or know how it was marked? I tried pullquote
ER
Erich Bacher (@thePrevaricator WI, US)
so wtf
ST
Strandit (Seattle, WA, USA)
Evidence, please
KI
Kim (hardcandy37) Pelletier
but how could that be?
AN
Aneristic (PHL)
Taking down a server is like a spoofer creating a new account.
ER
Erich Bacher (@thePrevaricator WI, US)
they fold and reopen?
SC
Scott Lykens (@5parkee)
Well is it real that Niantic has control of it or are they playing us now that they know we know.
ER
ST
Strandit (Seattle, WA, USA)
Yes, I believe in the HTML
ER
Erich Bacher (@thePrevaricator WI, US)
someone inside had to do it
ST
Strandit (Seattle, WA, USA)
But yeah
KI
Kim (hardcandy37) Pelletier
yeah
SC
Scott Lykens (@5parkee)
Depending on who owned it they could have repointed it today.
ST
Strandit (Seattle, WA, USA)
No evidence that Niantic did it
ER
Erich Bacher (@thePrevaricator WI, US)
i bet it was "you down this now or youre all fucking banned"
KI
Kim (hardcandy37) Pelletier
but it makes it look like Niantic is in control of it and taking action
SC
Scott Lykens (@5parkee)
BUT if they control who owned it it implicates Niantic as complicit.
RE
Rebecca S (PoisonIvy30)
Add that to having an employee on the list...
ER
Erich Bacher (@thePrevaricator WI, US)
Yea, it could be show
SC
Scott Lykens (@5parkee)
Anyone have a DNS tracker to see if it has changed?
ST
Strandit (Seattle, WA, USA)
Muddies the waters
MI
Michael Noda [GreatNorthern, PHL πΊπΈ]
Niantic didn't have enough information to credibly make this threat.
ER
Erich Bacher (@thePrevaricator WI, US)
Yes, they did.
RE
Rebecca S (PoisonIvy30)
Did you give them the files?
ER
Erich Bacher (@thePrevaricator WI, US)
preview access to the site
MA
matt - deaf1 - maine
Charlie will have a hell of a backlog to read.
RE
Rebecca S (PoisonIvy30)
What's done is done. I think I would've given the group here a heads up tho
ER
Erich Bacher (@thePrevaricator WI, US)
NiaOps contacted me yesterday, saying that responsible release of the information to them would be the best way to ensure action. Charlie concurred and we gave them early access.
SC
Scott Lykens (@5parkee)
TTL on the record for riot.one is 5 minutes. Doesn't mean anything itself as I use 5 minutes too but they could change the IP it points to quickly and put up a splash then move the interface to a new URL.
CH
Chris (@vedorian central NJ, USA) Damoci
Ah
SC
Scott Lykens (@5parkee)
And it appears to have leaked to the RES...
SE
SeaFoamSoul SAS
WOW. But yeah. I understand why, but I would have liked to know.
JE
Jemstar (15/~PIT πΊπΈ)
Same
RE
Rebecca S (PoisonIvy30)
And I assumed when it was said you were contacted, you meant recently as in today. Wow
ER
SC
SCLori
How did they know to contact you?
ER
Erich Bacher (@thePrevaricator WI, US)
i was the first to message krug
KI
Kim (hardcandy37) Pelletier
THIS is what concerns me
ER
Erich Bacher (@thePrevaricator WI, US)
i believe
SC
SCLori
Ah, ok, true
JE
Jemstar (15/~PIT πΊπΈ)
What's TTL?
CH
Chris (@vedorian central NJ, USA) Damoci
If niaops is actually moving on this then that's more than I even expected to happen
SC
Scott Lykens (@5parkee)
I don't know, I think it shows a direct link from Niantic to the RES - something my tinfoil hat has long suspected. Unless it is a legitimate Niantic takedown they'd have to explain how the news got to the RES.
SC
SCLori
Well yes, we should have been told but I'm happy as hell if this means Niantic is actually DOING something
NI
NickBurnsAll (Jackson MS)
Time To Live how long the DNS record should be cached or used without checking back with the server
SC
Scott Lykens (@5parkee)
Speculating entirely, was their employee an admin? If so, they could have demanded it in exchange for keeping him employed?
RE
Rebecca S (PoisonIvy30)
Why give a release time of noon today if you had let Nia in on it? It had to be known they'd blow it before then