Forgot your password?
typodupeerror

Comment Re:hmm (Score 1) 35

ResiP apps are highly problematic. While the premise of having easy access to a nearly infinite number of residential IPs for super cheap is appealing for all sorts of reasons and may even have some legitimate uses such as for anti-circumvention campaigns that would route traffic from activists in democracy challenged environments through residential IP exit points thus mitigating the abuse penalty incurred by commercial or Tor gateways, abuse of ResiP systems is rife, likely dominant.

Servers used to see script kiddies attack via abuse tolerant VPNs or colo/virtual host tenant farms and so were easily managed by detecting a pattern of malicious attacks coming from a finite number of IPs or C-classes or domains and against this reactive intrusion detection tools and IPBLs have been useful. Someone attempting credential stuffing might get a few guesses down the most common password/account list combos before being locked out and then move on to the next target in their list. Now logs are filled with the same sort of attacks: password:toor@server.com, pasSSword:toor@... etc but each sequential try comes from a different IP, often a different country. Dynamic block lists exploded from dozens (my Fail2Ban list ran 50-200 or so IPs) to thousands of IPs (today 8,065 IPs and 514 C-classes, most listed for one obviously malicious connection attempt).

Tor exit nodes do carry some of the same issues and running one will result in reputational consequences for your IP, just as running a ResIP app will for every connection you pair with.

A difference in practical implementations that matters is that setting up a Tor exit node isn't trivial and the consequences are well documented; the people capable of doing so generally also competent to comprehend those consequences. ResiP apps require no particular competence and are often marketed in deceptive ways. Further, the "exit point" moves with the user-device. Everywhere they go, they spew malicious traffic and criminal activities over whatever end point they connect with: home, friends, LTE, coffee shops. Every hotspot the device pairs with becomes a victim of the crimes enabled by the app.

ISPs need to look for indicators of ResiP exit nodes (if you block the command and control domains, you'll see traffic move to direct DNS across all commercial DNS providers, block those and traffic moves to DoT and then DoH, at which point the ISP should blacklist the client until they clean up their proxyware infection.

Comment Re:Actively stalking is a different behavior ... (Score 1) 254

But the purpose of the stop was not enforcement of the vehicle code.

"When there is not probable cause to believe that a driver is violating any one of the multitude of applicable traffic and equipment regulations 24 -- or other articulable basis amounting to reasonable suspicion that the driver is unlicensed or his vehicle unregistered -- we cannot conceive of any legitimate basis upon which a patrolman could decide that stopping a particular driver for a spot check would be more productive than stopping any other driver." Delaware v. Prouse, 440 U.S. 648, 661, 99 S. Ct. 1391, 1400 (1979)

Comment Re:Actively stalking is a different behavior ... (Score 2) 254

In California, as I suspect in most states, the driver is required to produce a license and registration when being pulled over for a traffic stop.

California Vehicle Code 12951(b) states: "The driver of a motor vehicle shall present his or her license for examination upon demand of a peace officer enforcing the provisions of this code."

Since the vehicle was not involved, the stop would not require a license to of produced. Of course, the cop would lie and make up a reason.

Comment Re:Actively stalking is a different behavior ... (Score 1) 254

Part of the job of the police is to prevent crime. They don't have to wait for the angry ex-boyfriend stalker to hurt someone, they can have a conversation before that to prevent things from going too far. It absolutely is not. Courts have ruled again and again that the police have no duty to protect. No, you falsely conflate the officers actual intentions with the cover your ass policies that exist for when they do not show up in time.

No, when they decide not to show up or release someone that they should have detained.

If you are not suspected of a criminal act, the police have no business detaining you, full stop. Absolutely untrue, if there is a public safety concern no specific crime is necessary to have an interview.

Read Terry v. Ohio | 392 U.S. 1 (1968) and Hiibel v. Sixth Judicial District Court of Nevada (2004) 542 U.S. 177

Comment Re:Actively stalking is a different behavior ... (Score 2) 254

In many states, there is no requirement to show ID unless arrested. In other cases, there still has to be reasonable suspicion (the Terry standard).

Detaining someone for 1 second without reasonable suspicion violates the 4th amendment. Pulling someone over is not a consentual encounter, but the officer is probably trained to turn it into one. Extending the stop is unconstitutional. See Rodriguez v. United States, 575 U.S. 348, 135 S. Ct. 1609, 191 L. Ed. 2d 492 (2015),. I suspect that even a diminimus extension would be unconstitutional. So, a false report could be argued a civil wrong, even when causing a deminimus delay.

Comment Might be armed (Score 1) 254

The "might be armed?" might not be a crime. The defense would argue that there is a possibility and argue that it might not meet the standard of reasonable doubt. But in a civil case, it could meet the preponderance of the evidence.

How much would you like to bet that Flock's lawyers told them what exactly to say when calling the police?

Comment Re:BS Disney/ABC are establishment shills (Score 3, Insightful) 137

None of that is true. Grow up and learn how to understand and rate journalism. Start with Appling the spj code of ethics to media.
" Anyone who defends that is off the deep end self-deluding and in full on denial of reality. "
So you post a factual incorrect statement then call anyone with facts delusional. JFC, take some actual media course. Like, in a class room.

Slashdot Top Deals

Machines that have broken down will work perfectly when the repairman arrives.

Working...