Thu Dec 10 20:24:59 +0000 2020

_{[tweet] [link]}
I don’t know who needs to hear this, but Ramsland and ASOG do not have any knowledge that can verify a server was confiscated from Frankfurt. The “proof” I’ve seen so far is not actually proof of anything, other than, at one point, Scytl was using the Frankfurt AWS region

_{[tweet] [link]}
There’s no possible way that anyone other than AWS would know which individual hardware server hosted a specific instance for a given time frame. You don’t just walk into an AWA data center and see a sign that says “SCYTL WAS HERE”

_{[tweet] [link]}
AWS’ main selling point is that their compute is transitive. A single IP could be assigned to multiple instances belonging to entirely different customers in a given time frame. Someone would have had to subpoena AWS to know what server did what at a given time.

_{[tweet] [link]}
Not to mention encryption is used regularly throughout AWS infra, so even if it was seized, they’d need to be able to decrypt it. In the olden days, maybe just saying a “server was seized” would make sense, but that doesn’t fly now that everything’s in the cloud