Oh I think I did something similar by chance. I was seeing which websites were associated with some entities, and I found the ones of the Italian defense ministry. In italian defense is "difesa". I found one that had "bifesa" in the link, and when opened told me that I had to be more careful to links I open because it could have been a dangerous website. Flash forward to a year later and it didn't work anymore
Sounds like something used by phishing awareness training. If so, then presumably it didn’t work anymore because they ended that or use a different one.
When I was first poking around with Tor, I wondered how many of the "Get guns in Europe", "Hard Drugs here", "Credit Card Numbers for sale" and such links were honeypots. Luckily, not being interested in any of those things, I didn't have to find out.
When I was younger I tried to buy a gun on one of those sites for a planned shooting but it just resulted in me losing my money and not any law enforcement action
"I guess they saw my email address that greeted them. They probably received logs of someone "falling for it", and saw someone was poking around their secret website, and knew who was behind it. They completely panicked."
I doubt it. I think the author of this page is giving himself way too much credit. The only evidence that anyone "panicked" is the author's own statements that they must have. More likely someone put in a WAF rule that 401'd for his IP.
"By running these honeypots, the police create suspicion and paranoia in the community. If you want to buy a DDoS attack, you now have to wonder if the website is real or just a police honeypot logging your IP. They want people to stop trusting these services entirely."
Well, good, right? What "community" is this diabolical suspicion and paranoia being created in? The community kids who want to DDoS some other kids' game servers? OK, again, that's good, right?
"But it really just feels more like feds jerking themselves off on how cool they are."
Pot, kettle.
"Does this video and the honeypot have any real impact? Let's be honest: probably not."
How does the author know? According to Wikipedia, the larger operation has shut down 4 dozen sites offering DDoS services.
Sure, gov't is often clueless and maybe this is effective or maybe it isn't. Maybe it's an experiment. Maybe it's actually intercepted a fair number of potential customers.
If clueless teens are signing up for booters and it's actually LEO who contacts them and says "you know, that's illegal" then that's a good thing.
> Does this video and the honeypot have any real impact? Let's be honest: probably not. It feels like they are just redistributing wealth from the average taxpayer to AI video slop corporations.
I feel like this describes roughly 75% of all government initiatives.
Stress testing your own site like the article shows isn't criminal intent. There is legitimate market demand to understand if a service you are running can properly withstand and filter out either large mounts of legitimate and illegitimate traffic.
I'm not a teenager anymore but I thoroughly enjoyed it, a lot better than some random dev breathlessly talking about how they haven't written a line of code in 6 months, or an article talking about how LLMs lead to the end of programming/the economy/the world, etc etc.
Why is this particular phrasing; "fake honeypot" triggering déjà vu for me? And is it fake déjà vu or legit?
Genuinely asking if anyone recalls this being in an HN in the last two yearsish.
Oh I think I did something similar by chance. I was seeing which websites were associated with some entities, and I found the ones of the Italian defense ministry. In italian defense is "difesa". I found one that had "bifesa" in the link, and when opened told me that I had to be more careful to links I open because it could have been a dangerous website. Flash forward to a year later and it didn't work anymore
Sounds like something used by phishing awareness training. If so, then presumably it didn’t work anymore because they ended that or use a different one.
When I was first poking around with Tor, I wondered how many of the "Get guns in Europe", "Hard Drugs here", "Credit Card Numbers for sale" and such links were honeypots. Luckily, not being interested in any of those things, I didn't have to find out.
When I was younger I tried to buy a gun on one of those sites for a planned shooting but it just resulted in me losing my money and not any law enforcement action
Is a fake honeypot ... real?
Is een nep-honeypot ... echt?
Forgive my pedantry.
"I guess they saw my email address that greeted them. They probably received logs of someone "falling for it", and saw someone was poking around their secret website, and knew who was behind it. They completely panicked."
I doubt it. I think the author of this page is giving himself way too much credit. The only evidence that anyone "panicked" is the author's own statements that they must have. More likely someone put in a WAF rule that 401'd for his IP.
"By running these honeypots, the police create suspicion and paranoia in the community. If you want to buy a DDoS attack, you now have to wonder if the website is real or just a police honeypot logging your IP. They want people to stop trusting these services entirely."
Well, good, right? What "community" is this diabolical suspicion and paranoia being created in? The community kids who want to DDoS some other kids' game servers? OK, again, that's good, right?
"But it really just feels more like feds jerking themselves off on how cool they are."
Pot, kettle.
"Does this video and the honeypot have any real impact? Let's be honest: probably not."
How does the author know? According to Wikipedia, the larger operation has shut down 4 dozen sites offering DDoS services.
Sure, gov't is often clueless and maybe this is effective or maybe it isn't. Maybe it's an experiment. Maybe it's actually intercepted a fair number of potential customers.
If clueless teens are signing up for booters and it's actually LEO who contacts them and says "you know, that's illegal" then that's a good thing.
>More likely someone put in a WAF rule that 401'd for his IP.
Why make this assumption when you could just visit the website yourself and see the same 401?
Technically it would classify as a real honeypot site I'd think
> Does this video and the honeypot have any real impact? Let's be honest: probably not. It feels like they are just redistributing wealth from the average taxpayer to AI video slop corporations.
I feel like this describes roughly 75% of all government initiatives.
Stress testing your own site like the article shows isn't criminal intent. There is legitimate market demand to understand if a service you are running can properly withstand and filter out either large mounts of legitimate and illegitimate traffic.
One of those articles that has an interesting anecdote but written with a mundane lulz mentality. If it’s for teenagers, by teenagers. All is well.
I'm not a teenager anymore but I thoroughly enjoyed it, a lot better than some random dev breathlessly talking about how they haven't written a line of code in 6 months, or an article talking about how LLMs lead to the end of programming/the economy/the world, etc etc.
It’s a little shitposty but i had fun.
I, too, hate it when people discuss hacking on my Claude News homepage.
I know. This was not a helpful comment. Sorry.