Howdy, Stranger!

It looks like you're new here. If you want to get involved, click one of these buttons!


Shells Virtual Desktop
BMail.ag - Secure Email Service
Server.net
CPLicense.net
VPS Server
Buy VPN
Vultr
VMs for AI
HostDare
ReliableSite White-Label Dedicated Hosting for Resellers
InterServer VPS
BMail.ag - Secure Email Service
Best VPN
High-Performance Bare Metal Server Solutions
Karvl.com
Server Mania Cloud Hosting
DataWagon Hosting
AlphaVPS Hosting
Evoxt.com
Clouvider
VPS Hosting with NVMe
Residential IPs in the US & 4G Mobile Proxies in EU & US with Unlimited Bandwidth
ReliableSite White-Label Dedicated Hosting for Resellers
Rabisu - Hosting Solutions
Shells Virtual Desktop
New on LowEndTalk? Please Register and read our Community Rules.

All new Registrations are manually reviewed and approved, so a short delay after registration may occur before your account becomes active.

seflow review - stay far away: Scammers and liars

1111214161721

Comments

  • AgaAga Member

    Mun said: @aga in this case the risk makes no sense.

    Agree...

    Mun said: It just doesn't make sense to escalate a situation like this. All techs are meant to remove the escalation of tension, and make the customer feel welcome.

    ... and considering how the handle the initial support I don't really think they care enough about 'remove the escalation of tension, and make the customer feel welcome'.

    Sure doesn't make sense cooking up some story to cover up bad service, specially if you are going to point fingers at some one and make public accusations about some investigation.

    And to be quite frankly, a lot of things that were said by the provider (on this thread and on the support tickets) does not make a whole lot of sense.

    Don't get me wrong I'm not on anyone side here, but I do want to know which one is stating the truth.

  • You mentioned most of your sites were at BandwagonHost / XVM and IT7...

    The day after this went down, I got first downtime alert for two of XVM lab servers, both v702 in LAX...

    Do you have any nodes on v702.sioru.com ?

    If so, I am taking to a metal foil hat. I had to self start from control panel too.

    Thanked by 1vimalware
  • MunMun Member

    @Aga

    Actually if you talk to most detective the truth is in the center of both of their stories. Both want to make themselves look good and not at fault.

    My guess is the investigation is true. I also guess that the service for tr1cky was terrible as he posted.

    I do not know if tr1cky is guilty of doing anything illegal, he may be someone close to those guilty and they are after them and not him. Could also just be abusive government agencies trying to tap something that they think is illegal.

    I think if any of us signed up for service we would most likely get good service. As I think most of this whole mess is simply between these two men.

    Its quick to come to conclusions. I don't think either men are lying. In the end, it's just drama.

    Thanked by 1Mridul
  • @William said:
    Essentially all a relay sees is the entry (or another relay) and the IP of the next relay (or exit, depending on chain and target) - Only the exit can decode it which makes it the ideal point to capture traffic (that is again useless if the client used SSL or another protocol that is encrypted securely end-to-end) but it cannot be traced back to anything useful (only to a relay, then that to a relay etc.). If you control all servers in a chain you get the info where the client connects from (src IP) and where it connects to (target IP) and the content (if not encrypted), with encryption it is still as safe as directly (if you check for MITM and use secure protocol/ciphers). Not really into hidden services, so no idea about that (or rather i don't comment on it because i'm not sure and cba to research now at 03:59)..

    Thanks for the info!

    Thanked by 1netomx
  • Mun said: My guess is the investigation is true. I also guess that the service for tr1cky was terrible as he posted.

    I think so too now, and matteob was told to STFU by an actual lawyer, probably flucked up by even saying anything if it was true.

    On that note, really wondering if @tr1cky has any of his many IT7 / XVM servers on v702 in LA. He said most of his stuff is there. Then v702 went down with no reason, first time ever (and had to self boot 2 systems on it after it came back up) the day after this.

    I've said it once, and say it again...

  • Mun said: I do not know if tr1cky is guilty of doing anything illegal

    Whilst I have no data and therefore can't comment on what he did/didn't do on other services.

    He has openly disclosed that Delimiter provides him services, so I am not breaching any confidentiality. He has also provided me his registered email address which again has allowed me to look into any complaints or issues.

    He is a long-term customer and at this point, he has zero complaints, zero cautions, zero flagged traffic alerts on Delimiter's network.

  • MarkTurner said: He is a long-term customer and at this point, he has zero complaints, zero cautions, zero flagged traffic alerts on Delimiter's network.

    First time I'm reading a provider review of a customer.

  • LowEndCustomerReviews.com

  • Maounique said: Matteo was asked for proof he cannot deliver, it would be like asking tr1cky to prove he did not ddos seflow.

    It wouldn't. Asking somebody to prove an assertion that something is the case, is something very different from proving an assertion made against them that they believe isn't the case.

    Mun said: @Tr1cky doesn't matter. Part of the way that tor can be defeated is if a majority of the nodes are controlled. At least that is what I think I saw as the limitation of it. @joepie91 am I correct on this?

    Not so much a majority, as enough nodes to reliably control the entire circuit for a user. If you just need a direction to search in, then a momentarily controlled circuit is enough. If you want to tap all data for a user, you need near-complete control of the network.

    Seizing servers certainly is not an economically viable strategy for this, nor is it very useful from an intelligence point of view - too much chance of people getting tipped off.

    William said: Would not explain a tap, if they know it is Tor a tap is useless as the traffic over it is always encrypted. It is highly unlikely that someone would tap a middle node, this makes only sense for entry/bridge and exit.

    Controlling makes thus no sense either, even if you have root on it you cannot decrypt the data stream.

    Yes and no. If you control all three nodes in a circuit, you can deanonymize users by connecting their plaintext traffic (from the exit) to their identity (from the entry). You still need the middle node to tie the two together.

    William said: Not really into hidden services, so no idea about that (or rather i don't comment on it because i'm not sure and cba to research now at 03:59)..

    Two circuits that are 'joined' by their respective 'exit' nodes - except all traffic is encrypted using the address of the hidden service (which also refers to / validates its keypair), so the exit node doesn't actually see any plaintext traffic.

    Basically, if I remember correctly:

    you -> your entry -> your middle -> combined exit -> their middle -> their entry -> them
  • @GStanley I only have one server in another location than NL and it's in Florida.

  • tr1cky said: @GStanley I only have one server in another location than NL and it's in Florida.

    Thank you. Tin foils off. First time v702 went down in LA, my squirrels-nest of IPs, and I know you mentioned them.

    Best of luck with dickhead, seems he is all talk. You may want to invest in electromagnet just in case.

  • singsing said: First time I'm reading a provider review of a customer.

    Its not so much that but a good customer needs recognition in situations like this.

  • matteob said: Last Week we received an internation docs by interpol for a sniffing traffic request on 3 IPs that all come from one specific customer. 2 days ago some agents come in datacenter to start the 'silently operations' and sniff the traffic, this is why only that customer was affected by packet loss for some hours (and others one, like @frecyboy was affected only for some minutes on different timeframe because was another issue).

    Since I only had servers with seflow in France, I guess these agents came to France?

    matteob said: When they took all informations we was forced to power off the customer VMs and keep a copy for future investigation. The investigation appears related to cyber attacks & DDoS but we not had lot details on that. The request started from a german police with cooperation with italian Rome cybercrime department.

    Here it is: "The request started from a german police with cooperation with italian Rome cybercrime department."

    Why would Italy be involved in this and why would France not be involved in this, when the location where the servers reside would be France? Why would they contact seflow at all, when the IP addresses seflow uses are OVH IPs?

    I also know that OVH usually only complies to such requests if there is a valid search warrant and it is certainly not seflow's decision what happens since they only rent their hardware and IP space there. The usual behavior of OVH is to suspend the whole physical node when there is a search warant and hand it over to the agency.

    Thanked by 1Falzo
  • MunMun Member

    @tr1cky, depends on how they have their service setup with OVH.

  • tr1cky said: I also know that OVH usually only complies to such requests if there is a valid search warrant and it is certainly not seflow's decision what happens since they only rent their hardware and IP space there. The usual behavior of OVH is to suspend the whole physical node when there is a search warant and hand it over to the agency.

    Look up the IPs on RIPE's whois, what name does it show on there?

  • tr1ckytr1cky Member
    edited October 2015

    @MarkTurner said:
    Look up the IPs on RIPE's whois, what name does it show on there?

    Okay, they are listed there aswell as OVH: https://who.is/whois-ip/ip-address/149.202.238.236

    Still sounds fishy to me that the Italian police would be part of an investigation that would have happened in France.

  • OVH is quite trigger happy, if they had a search/seizure order that box would be down by now. People get shutdown hard for lesser crimes.

    Honestly I think you should just send a certified letter to SEFlow and formally demand a copy of the order; or the contact at the agency the made the 'raid'.

  • XiNiXXiNiX Member, Host Rep

    @tr1cky said:
    Still sounds fishy to me that the Italian police would be part of an investigation that would have happened in France.

    You have almost nailed it.

  • AndreixAndreix Member, Host Rep

    Interesting things are disclosed here. For a moment (just a tiny moment) I thought I am on wikileaks ...

  • @MarkTurner said:
    OVH is quite trigger happy, if they had a search/seizure order that box would be down by now. People get shutdown hard for lesser crimes.

    Honestly I think you should just send a certified letter to SEFlow and formally demand a copy of the order; or the contact at the agency the made the 'raid'.

    Knowing somebody who had an actual server seized from OVH: yes, they shut it down and hand it to the feds, without prior notification. In that case, a search warrant was provided.

  • MunMun Member

    @joepie91 said:
    Knowing somebody who had an actual server seized from OVH: yes, they shut it down and hand it to the feds, without prior notification. In that case, a search warrant was provided.

    What were they doing on that box? I guess since i never have had a server siezed that i don't understand why?

  • Mun said: I guess since i never have had a server siezed that i don't understand why?

    Spam, VPN, CP, Warez, Botnets, (D)DoS, Hacking... all reasons to get it confiscated.

    OVH likely only gives them the HDDs as the servers are watercooled, i guess that is harder to remove.

    Thanked by 1deadbeef
  • MunMun Member

    VPN?? Really ?? Dang . Here i thought you had to be a big boy to get anything confiscated .

  • @Mun said:
    VPN?? Really ?? Dang . Here i thought you had to be a big boy to get anything confiscated .

    Well, VPNs especially in form of public VPNs and VPNs used for criminal interaction much like TOR nodes are prone to being thrown off or getting into investigation.

    Funny fact: Lots of VPN providers people use will sell them out like HideMyAss in order to prevent being shutdown or similar.

  • Hidden_Refuge said: Funny fact: Lots of VPN providers people use will sell them out like HideMyAss in order to prevent being shutdown or similar.

    That's why you don't use these shitty american VPNs like privateinternetaccess but rather good ones like AirVPN or PerfectPrivacy.

  • @tr1cky said:

    How can you ever trust any VPN provider?

  • @deadbeef said:

    perfect privacy survived a raid without anyone getting busted, I think that is as far as trust can go in the industry.

    Thanked by 2deadbeef 4n0nx
  • Sending images as base64 to every single user will surely help majorly with the load issues the "LET cluster" always has....

  • @tr1cky said:
    perfect privacy survived a raid without anyone getting busted, I think that is as far as trust can go in the industry.

    I mean this:

    A public provider is like a cargo ship. A cargo ship is a target for raiders. The ship may or may not get raided but it is an identifiable target. Your container might not be the target but is sitting next to a boatload of others.

  • Mun said: What were they doing on that box? I guess since i never have had a server siezed that i don't understand why?

    Nothing of particular interest. Lauri Love had an account on it, is all.

This discussion has been closed.