Catch up on stories from the past week (and beyond) at the Slashdot story archive

 



Forgot your password?
typodupeerror
×
Security News

Argentinian Security Researcher Arrested After Tweeting About Government Hack (zdnet.com) 48

Argentinian police briefly detained and raided the home of a well-known security researcher last week on suspicion of hacking and leaking data from government systems. From a report: Following his release, Javier Smaldone, the security researcher, obtained and published court documents pertaining to his arrest on Twitter. The documents showed that authorities arrested and raided the security expert just for tweeting about a recent government hack, with no tangible evidence that he was involved. Smaldone claimed the entire affair was a witch-hunt, describing his arrest and raid as "political persecution." The researcher is a well-known cyber-security activist, previously testified in front of the Argentinian Senate against the use of electronic voting machines, and regularly publishes blog posts criticizing the government's plans to use such devices. Smaldone believes this is the government's revenge for past criticism.
This discussion has been archived. No new comments can be posted.

Argentinian Security Researcher Arrested After Tweeting About Government Hack

Comments Filter:
  • cry for me, Argentia

  • by jellomizer ( 103300 ) on Tuesday October 15, 2019 @02:13PM (#59310914)

    Arrest the guy who budgets the IT security, not the guy who finds the hole.

    • I once worked for an arms manufacturer. One of our customer was the Indian SPG [wikipedia.org]. Each time they would buy a batch of products from us, their QA rep would come over and check everything 5 times. And I mean CHECK EVERY-SINGLE-THING. They paid us extra for the privilege of doing such an extensive reception too.

      One day I asked him why his organization bothered to spend so much money, and why he himself was so keen on doing QC, where all our other customers were happy enough to sample and pay less. He answered si

      • Most IT security comes from companies with stacks of unapproved quotes for products/services and man power to protect the data.

        The problem is security done right is expensive, and this covers a lot of the benefit advertised by the computer sellers who says their product will make your company run so much cheaper.

        Because the companies don't have much personal risk if there is a big flaw, it means they will run as cheaply as they can get away with. Taking security incidents seriously, and finding and hitting

        • Someone needs to mod this up... it's so on target!

          Fundamentally Information Security is misunderstood, mismanaged, and generally missing sanity.

          If it "looks good" on paper then it MUST be the gold standard and be enforced asap!

    • Arrest the guy who budgets the IT security, not the guy who finds the hole.

      Just arrest? That's pretty wimpy by Argentine standards. Back in the day they used to arrest folks like these, and them give them free plane rides on Death flights [wikipedia.org].

  • Never attribute to malice that which can be adequately explained by stupidity

    • I hate this quote, it should be entirely the opposite.

      Never attribute to stupidity, what can be adequately explained by malice.

      You have to be more than just stupid to go out of your way to fuck someones day up with your stupidity!

      Stupidity just is, it is infinite and never ending. Humans are 80% stupid, 80% of the times. No one is immune from this problem, not me, not you, not anyone. Professionals say stupid shit all the time, they do stupid shit all the time. Government is a monument to human stupidit

  • about these types of things in which someone puts something out there online (in any of its various forms: websites, twitter, blogs, facebook, etc.) and then are brought to task over it by 'authorities'....

    I've wondered about what happens between the moment the info is released to when some g-man come banging on your door. Does one of your 12 followers snitch? And to whom? Would I find that info in the blue pages (yeah blue pages punk, look it up)? do they receive some silver for snitching?

    or mayb
  • by cachimaster ( 127194 ) on Tuesday October 15, 2019 @07:13PM (#59312138)

    I'm very close to Smaldone, we worked on the same group of e-voting vulnerability research.

    From the 4 initial group members, 3 of them were already raided, only I remain un-raided and un-arrested. Yeah I don't feel very safe in here.

    This is obviously a payback for the government, not unlike Chinese arrests. But this is happening in a western country, and using modern cyber tools. Let me explain this part: Basically the police have software that analyze social networks, mainly twitter. So the software tracks your tweets and the detective try to solve the case that way. You might thing, this is a stupid way to solve a crime, and you will be correct. Add to this, the utter ineptitude of police agents using this software, and you have a ridiculous case like this. Smaldone is obviously innocent and you cannot assume someone is a hacker because he tweets about python and java.

    Persecution to e-voting researchers is not new. All researchers from Brazil had to go into exile. Gov don't like hackers messing with the elections, and much less, publishing bugs.

    But look forward to a future (very near future) where all your social network posts are actively monitored by, not one, but several government groups, that make inept use of analysis software to make life-altering decisions. This is why anonymity is so fundamental.

Some people manage by the book, even though they don't know who wrote the book or even what book.

Working...