Slashdot Mirror
The Strange Disappearance of Dancho Danchev
rudy_wayne writes "ZDNet is reporting that Zero Day blogger and malware researcher Dancho Danchev has gone missing since August of last year. Dancho, who was relentless in his pursuit of cyber-criminals, last blogged here on August 18. His personal blog has not been updated since September 11, 2010. 'At ZDNet, we made multiple attempts to contact him, to no avail. Telephone numbers are going to Bulgarian language voicemails and our attempts to reach him via a snail mail address also came up empty. Just recently, a trusted member of the malware research community reached out to us to say he had received a troubling letter from Dancho on September 9, 2010, about the threat of persecution in Bulgaria.'"
What kind of 'trouble' requires him avoiding even public computers and telephones? I mean, are we talking US Government spy satellites? Aliens? Alter-Dimensional invaders?
... this really does sound like a case of paranoid schizophrenia. The business with the photo of the lighting transformer pretty much proves it. :(
Frankly, he'd have been better off being clubbed by mobsters and stuffed into the trunk of a car. I hope they find him before he does serious harm to himself or anyone else.
The banks just push their credit card losses onto their customers. Too bad the tea-partying retards don't take it in their heads to do something about that!
The big issue that I see is that there is not enough pressure on banks to keep their credit card transactions secure (or not make them)!
The malware plague would dry up pretty fast if credit card fraud wasn't so easy to do.
Muslim socialists hate computer hackers.
What a spooky summary. If "malware authors" kidnapped him, maybe we can find Chrome bugs and get a hefty pay out from Google?
Hmm, maybe he is doing some Jason Bourne stuff. Either that or he got arrested and is unable to make any phone calls or make outside contact with anybody. Option 2 sounds more like what happened.
The world is how you make it
Those guys don't normally disappear their enemies, bombs are more their style.
Everyone knows that disappearances only matter if the subject is an attractive, young, blond, female. Preferably from at least an upper middle class background.
Not just yet another less-than-stellar electrical installation? What exactly is supposedly suspiciously spooky about them?
The government installed a lighting fixture! Those bastards! Its dimmable too! Clearly they want him to have mood lighting so he can seduce women in his bathroom, and mate with them. They clearly want an army of Danchev's under government control. He can't use a phone or a computer because the government enrolled him in dozens of online dating sites and posted his phone number in his profile. It all makes sense!
Cyber Jihad blogs YOU
They need to toss this criminal in the slammer and then throw away the key !! Enough of these "malware research" asswipes !!
Some one apparently slipped a 100 herbal Viagra pills in his borscht.
I would not at all blame him... Just think of this this way. He has piid off one heck of a lot of East European bot net (read Russian Mafia) guys. And the crooked internet providers that they support.
What are his options? Go to the Bulgarian Police and hope they are not crooked?...not a good idea. Try to deal with the mob?...very unlikely. One of two things he is either dead already or in hiding. It is that simple. The governments of Eastern Europe are not in a financial position to fight organized crime and one place that organized crime is really into high tech is Eastern Europe. Tin foil hats be damned!
Anonymous Coward
But who would bug... a bathroom?
Who would prosecute a pro-western guy in a pro-western country?
I fear as if his own email points to a rather trivial explanation, that afflicts some people in the field of exact sciences...
As in: http://en.wikipedia.org/wiki/Steganography
Well at least try, who knows what method (if any) he may have used.
He seems to have been active on his twitter until the 20th of October:
http://twitter.com/danchodanchev
thus invalidating the September 9's menace hypothesis.
He may simply have found a new job, and lost interest in updating his blog, or he may be paranoid and is hiding himself, by stopping all his online activities.
Using Twitter is not really the best way to stay discreet and anonymous.
He found one of those girlfriends that everybody talks about.
At Ruxcon there was a speaker from the Aussie Feds talking about how real criminals don't have a problem hurting or killing people. If you have been in jail for 10 years for hurting someone in a robbery and your new cell mate tells you he is in there for making $50,000 in 20 minutes by hacking, guess what the old school criminal is going to look into when he gets out? Since he will have no skills, he will find a geek and try to convince them to help him make money using whatever persuasion techniques he knows which boils down to "do this or you get hurt"
He also mentioned that other officers have been asked about their overseas holidays by criminals in interrogation rooms.
His body's decomposing in my locker.
Maybe one of the cybercriminals he was chasing stole his identity and went into hiding
It's easy to forget how tenuous life can be in other countries, especially under his circumstances.
Maybe he found the secret to the digital world. He is making his own digital world.
you say you never heard of him, then you have proceeded to conclude a full psychological profile from guy's pictures in a linked in profile. 'he has crazy look'.
please explain the concept of 'crazy look' to us.
Read radical news here
"He's been researching cyber jihadists for 3 years. Those guys don't normally disappear their enemies, bombs are more their style" - by kiore (734594) on Friday January 14, @08:29PM (#34886096) Homepage
Per my subject-line above: I used his page @ ZDNet for that ENTIRE 3 yrs. in populating a custom HOSTS file here vs. known bad sites/servers:
http://ddanchev.blogspot.com/
As proof of that statement, I even cited that page as one of my MAIN sources for that type of data, here:
http://www.pcreview.co.uk/forums/thread-3511888-8.php
In my last post of a security guide I did years ago for PC users of Microsoft Windows Operating Systems, which was about how & why to use custom HOSTS files for defense against malware etc..
One day, the article series was no longer updating & I figured:
"Ok, the guy has done this for the last 3 yrs. now, & either his contract is up, or he's onto other things... too bad - was a great article series & VERY informative!"
Was all, from MY end of things as one of the readers of his articles' series on malware. I guess that's not all there was to that... "mystery solved" from MY end @ least - but not on his end...
In any event - He did a 1st class job of an article series on malware making sites/sites that "bushwhack" users, & what you could do about them (one was is my method of placing the article data on hosts/domain names of known bad sites/servers into a custom HOSTS file (to wall off known bad sites &/or servers from infecting you)).
APK
P.S.=> I just truly hope the guy's ok... apk
"I am Bulgarian... I read his self-proclaimed security researches and I find nothing interesting in them." - by Anonymous Coward on Friday January 14, @10:44PM (#34886754)
Then you didn't read them closely, or you didn't know HOW to apply the material he was putting out!
E.G.-> His articles on malware or malscripted sites were EXTREMELY USEFUL to myself & others!
For myself, his articles' material was great for my populating a custom HOSTS file with blocked off entries vs. known bad sites/servers his articles put data out for, & I used it, for fortifying my systems' HOSTS file vs. said known bad sites &/or servers his articles listed for 3++ yrs. online here:
http://ddanchev.blogspot.com/
I.E.-> It was so good, that I even listed that for others to use in a security guide I did for users of Microsoft's Windows Operating systems, here:
http://www.pcreview.co.uk/forums/thread-3511888-8.php
In my last post there (& on the 15 other forums that SAME guide for securing Windows I wrote is featured on)...
APK
P.S.=>
"First of all I had a long history working with Bulgarian ISPs and Bulgarian authorities and I have never heard of him." - by Anonymous Coward on Friday January 14, @10:44PM (#34886754)
Then you must not have been working with them from a SECURITY PERSPECTIVE then, because Mr. Danchev's site was a good source for data on various botnets, &/or known bad host/domain names, which is useful not only in HOSTS files as I used said data for, but also for DNS Block Lists &/or Firewall rules tables!
Additionally/lastly - Sure, there are other sites like it, & I use 8 more in total for my purposes (I can list them IF you wish, I have here on /. before), but his data was different usually from theirs, so I used it also... apk
that some of the posters jere may actually be Russion mob/Blugarian mob/Bulgarian police.
Remember the Aruban police/judiciary assisted van der Sloot. and Aruba is a lot more domesticated.then Bulgaria. All it takes is a few officials and the other officials not wanting to cross the "thin blue line" and the "thin blue line" is a lot thicker there then it is here.
Yes the guy sounds paranoid but to paraphrase Jim Butcher "Just because your paranoid doesn't mean there isn't an invisible demon about to eat your face." It is entirely possible that someone may have been slipping small amounts of a pranoia inducing hallucinogen into his food.
In the US we don't find it hard to believe that a person threatening a billion dollar industry is attacvked and/or assassinated, why do we find it hard to believe of Bulgaria?
First you write of chinese bloggers, because it is not a free country/
Then you write of a bulgarian blogger, becuase it used to be russian (even now it is a part of the EU and NATO)
Then you write of a frech blogger because of "french military victories"
Then you dismiss a English blogger, because he does not use the Englisch language correct and he is at the other side of the ocean,
Then you let go of a Texan blogger, because of the texan patent enforcement and you did not like Bush.
And when they knock on your door.... there is no-one left to turn to...
Maybe he is just paranoid and disappeared himself. If you've read his blog over the years, he quite often mentions how hackers have singled him out.
I think I'm also lost. It could be that I've never existed since I don't have a blog nor do I have a twitter account. I was last spotted making a post on /.
*update*
I have now been seen logging into my Steam account and playing CS:S.
Looks like somebody needs to check their local news.
you had me at #!
probably dead.
you had me at #!
He emigrated to Brazil?
(Oh crap, now that's the world's best kept secret, um, blown.)
you had me at #!
I read the article. Why didn't they notify the police in Bulgaria?
If he is missing since months ago, why alert zdnet only now ?
All looks like a bad joke to me.
Or, as he worked once for an advertising agency, a stupid advertisement.
GTV Electronic Equipment Co., Ltd is a Sino-America joint-venture company and it was established in 1986 in Chengdu, China
The company is a high-tech enterprise which concentrates on the research, manufacturing, sale and service of CATV products. Jie Xun is building up both domestic and overseas markets while making a good contribution to the CATV industry.
Jie Xun' s products including: Digital system equipments: Encoder 4 in 1, MPEG -2 multiplexer, QAM modulator, QPSK modulator, standard alone Scrambler, QPSK demodulator, TS distributor, STB-C/ S, optical transmitter optical receiver and different types of amplifier etc network equipment and CATV addressable billing system series products, analog TV scramble system products, etc.
He has been found according to this http://www.dnevnik.bg/tehnologii/2011/01/17/1026425_ekspertut_po_it_sigurnost_dancho_danchev_e_nastanen_v/