Hacker News new | past | comments | ask | show | jobs | submit login
How a carding kingpin got caught (capitolhillseattle.com)
87 points by bradford on May 9, 2019 | hide | past | favorite | 34 comments



Darknet diaries has a great episode on this if you want an audio version of this story: https://podcasts.apple.com/us/podcast/darknet-diaries/id1296...


Darknet Diaries is in general a great podcast. I sometimes struggle when otherwise good podcasts do security stuff because it's too high level for me to be entertained. I think Jack does a good job of being accessible to n00bs and interesting to experts.


Enjoy the podcast but wish the host would cease impersonating Ira Glass’ speaking patterns. It’s kind of creepy. Cannot imagine that it’s accidental.


Thanks, high quality production here!


Note that if Visa/MasterCars were to force two-factor (or 3DS how they call it) the cardster business would be severely hampered, as one could not simply copy dumb credit card numbers around.

But they do not so, because the fraud cost is paid by merchants (fines, fraud buffer in fee %) and ultimately the consumers as higher prices. Fraud does not hurt Visa/MasterCard bottom line.


> were to force two-factor...

Q: How secure is the "forgot 3DS password" functionality on 3DS-enabled cards?


It depends on a bank. It can be a mobile app based, but is often SMS based.

Still orders of magnitude safer than without.


This is about to happen in the EU due to a regulation called PSD2. It's started to be phased in but will kick in properly in September.


If you have some time, the linked presentation is worth watching: https://www.youtube.com/watch?v=6Chp12sEnWk


Were there not enough vacation destinations in Russia or something? I don't get why you would willingly travel internationally if the US wants you and your home country doesn't care.


As the article notes:

> Seleznev likely suspected an atoll in the Maldives, a tropical South Asia nation that does not have an extradition treaty with the U.S

and

> Before he traveled, Seleznev used to search the PACER database for his own name and nicknames, to see if there were any arrests warrants.


International flight booking records are bordering on being a public record. Remember that when you fly around.

SITA and GDS providers are giving away flight data left and right — this is one of ways how US gets hold of people traveling to Cuba despite them flying through 3rd countries, and China books Uighurs who fly to Saudi Arabia or Turkey

For when some non-US national overflies US, or files a pre-flight form to US, many don't know that such forms are purely symbolic, US government already had hand on this data the moment the ticket was booked.


> International flight booking records are bordering on being a public record. Remember that when you fly around

Also remember that when someone with your last name, first initial and DOB flies around.


Few years ago Russia introduced a bill allowing officials and people with "special needs" (people under foreign sanctions) to get "legal fake passports" — apparently just for cases like that.

I haven't been to Russia much since I left in 2006, but even back then there was some kind of contention in between Kremlin's desire to crack down on fake passports as part of attack on dissidents, and the boheme wanting to access fake or blue/diplomatic passports (and accompanying immunity.)


You can’t do a tropical beach vacation in Russia. But you’re right that if he thought he’d spend 27 years in jail he would probably have forewent it.


Russia helpfully keeps annexing beach front territory like Crimea and Abkhazia so future bond villains have more vacation options.


> You can’t do a tropical beach vacation in Russia

A small price to pay for the freedom to operate an international criminal business with impunity.


The article clearly states that his home country did care, albeit only through family connections to the top.


I remember watching the talk about this- it was a lot more interesting when I realized that it was a recent event and not something from ten years ago.


FYI: The title is copied as-is from the article, but it doesn't do a very good job of selling the content.

Capitolhillseattle.com is a neighborhood blog, the 'Broadway Grill' is one of the diners in that neighborhood, and it was merely one of many businesses that got caught up in carding fraud. The scope of the article is much wider, shedding some light on credit card theft, dark markets for stolen cards, and the duel that goes on between the criminals and the authorities.


Maybe we can widen the scope by dropping the diner.


> and the duel that goes on between the criminals and the authorities.

With a bit of a hint of Russian governmental corruption.


"carding" is apparently the trafficking in stolen credit cards and banking information.

https://en.wikipedia.org/wiki/Carding_(fraud)


I clicked on the link wondering how a title like that could be about wool: https://en.wikipedia.org/wiki/Carding


> Russian officials were not pleased. They accused the U.S. of “kidnapping” Seleznev in an attempt to trade him for whistleblower Edward Snowden, which the U.S. denied.

Wow, that's kind of a bombshell.


Only if it's true, which seems unlikely given that this was two years ago.


He was arrested in 2014, so possibly true however it's common for US to do this for high level carders https://www.wired.com/2010/07/maksik-lured-to-arrest/


What makes you think it's unlikely?

It strikes me as unsurprising that Russia would be willing to trade someone who was once a PR coup (but is now mostly irrelevant) for someone who is currently politically very connected. Snowden's asylum has always been on the sufferance of the Russian government.


What kind of burden is he? It’s not like he’s living in their embassy like a pariah.


In confess, I don't understand the question. I did not seek or choose to imply in any way, shape, form, or manner that Snowden is a burden on the Russian government. Indeed I have no reason to think he is.

Is it clearer if I say that Snowden's asylum was convenient for Russia, but they today derive no clear benefit from his presence and thus apparently tolerate him from lack of reason to disapprove?


Sufferance implies tolerating something despite a burden, so yes.

It would be quite an accusation to imply the Russians use people as pawns like that, by the way. I hope it’s not that bad.


Is it possible you and I might be operating under different definitions? I am using this one:

> absence of objection rather than genuine approval; toleration.

Of note is that this does not imply any suffering or burden. I understand that other people might personally choose to subscribe to different definitions of any given word.

As for the rest, I don't think it's at all difficult to believe the Russians would use people as pawns that way. Especially when someone the ruling autocracy likes (and has some obligation they care about to defend) is concerned.


Russia is like "ve trade agents!" and USA is like "dude, the cold war ended 30 years ago"


In what way?




Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: