Well since we’re guessing it’s also possible this is the tip of the iceberg and that it’s also possible only amateurs do it in plain sight. I’d imagine agencies who tackle this issue have more insight into that realm than an amateur sleuth of online commenters.
Maybe. Or maybe child molesters, like most criminals, are criminals because they have a pattern of making poor life decisions and hence it’s perfectly normal for them to make “amateur” mistakes.
Or, as Zoz explained in his DEFCON 22 talk "Don't Fuck It Up!"[1], OPSEC is really REALLY hard. Even people that have the necessary technical background are human and make mistakes. To stay secure in the "dark web" you need to never make a mistake and e.g. forget to turn on your VPN/Tor before logging in somewhere important. I doubt anybody - even people that made the "best" life decisions - could do this successfully without a LOT of very specific, very technical training.
>> "OPSEC is a 24/7 job."
>> "... a lot of OPSEC fails ... [from] the folly of only using privacy tools when you’re up to no good."
>> "For example, investigators could look at who went and downloaded the Tor Browser Bundle right before the bomb threat got called in; or look at everyone who connected to a known Tor entry node at that time, or who accessed the Tor directory servers. [...] no compromise of Tor necessary."
Absolutely. I assume that (as horrible as what the people quoted are doing) someone who doesn't predate in the open commits even more disgusting and damaging acts. Given the number of creeps that show up for "level 1" abuse, it seems likely that there are also huge numbers of people doing even worse things.
