[flux_w42]

A Dutch tech news site [1] published the news on their site and got in contact with the ISP Snel:

The ISP told Tweakers that the account of Thomas White was blocked due to a security policy of the company. The customer let a deadline for verification accidentally expire and logged in through KVM. "Some KVM's generate a USB event when you use it to set up a connection to the server, this is what the customer just notified." - according to the ISP Snel. Meanwhile, the man's account is released.

[1] https://tweakers.net/nieuws/100388/beheerder-verliest-contro...

[tripzilch]

The article also links to an update Thomas White has posted:

https://lists.torproject.org/pipermail/tor-talk/2014-Decembe...

Few quick points (that I found most interesting, click link to read everything):

"The likelihood of this being the work of law enforcement seems to be lower than originally anticipated. This is good in many ways but asks more questions than it solves right now."

"Support staff at the ISP have confirmed to me there has been unauthorised access to my account. This could be down to the fact I access the control panel often via Tor (yes, using TLS before anybody asks), however it does raise the prospect of a non-LE person(s) being behind this but does not explain why a chassis intrusion was detected for example or anything else to do with on-board sensors."

"Again, at this moment in time I am under no gagging orders or unreasonably withholding information under orders."

[osivertsson]

I don't really buy it. This doesn't explain why a chassis intrusion alarm was triggered, nor why a large chunk of logs are now missing.

[spacefight]

So much about ISP <> customer confidentiality then!?

[psykovsky]

Especially when the media has better information than the customer.

[yourad_io]

I need closure, and that wasn't it. I'm hoping this wasn't the last we hear about this incident.