You are viewing a single comment's thread.

view the rest of the comments →

0
4

[–] collegetoker [S] 0 points 4 points (+4|-0) ago 

A state, a city, and GPS coordinates. That's what I think I have. Did you even read all the way down?

0
2

[–] turn-down-for-what 0 points 2 points (+2|-0) ago 

Dreamhost has hundreds of thousands of clients. Worldcorpo is just one of them. If we run under the assumption that Dreamhost puts customer's websites on the data center closest to the customers billing address (not a crazy assumption) then we know the operator lives in the VA/DC area. That's it.

Sure, go storm Dreamhosts's castle for the 50mb of Worldcorpo data stored on a hard drive on a server on a rack in a cage. I'm not sure what you'll accomplish though.

I think the most effective attack vector would be to call Dreamhost pretending to have forgotten your password or whatever and do a little social engineering to try and get an email address or name associated with the account.

0
0

[–] collegetoker [S] ago 

> Sure, go storm Dreamhosts's castle for the 50mb of Worldcorpo data stored on a hard drive on a server on a rack in a cage. I'm not sure what you'll accomplish though.

We have physical evidence of a crime taking place and we know where that evidence is. Was getting the police involved ever part of the plan?

> If we run under the assumption that Dreamhost puts customer's websites on the data center closest to the customers billing address (not a crazy assumption) then we know the operator lives in the VA/DC area. That's it.

I'd need to know how many datacenters there are to make an assumption like that.

> I think the most effective attack vector would be to call Dreamhost pretending to have forgotten your password or whatever and do a little social engineering to try and get an email address or name associated with the account.

> Asking a literal autist to do social engineering.

I can see what I can do, but you're leaving my skillset. It would be better to do a dry run first on one's own account so that they know what questions to expect.