No need to get that fancy. If they're in the cloud, they're most likely on Xen, which natively supports full memory dumps. LE goes to the cloud provider with a warrant, they run "sudo xm dump-core", LE walks away with a memory dump without the client ever knowing anything.
Even if they are able to do that, they still need to shutdown 21 other VM, probably on 21 other hosting provider in different countries, all that in the same time. I'm sure they can but I'm also pretty sure TPB can start new ones faster then authorities can stop them.
Comments
No need to get that fancy. If they're in the cloud, they're most likely on Xen, which natively supports full memory dumps. LE goes to the cloud provider with a warrant, they run "sudo xm dump-core", LE walks away with a memory dump without the client ever knowing anything.
Even if they are able to do that, they still need to shutdown 21 other VM, probably on 21 other hosting provider in different countries, all that in the same time. I'm sure they can but I'm also pretty sure TPB can start new ones faster then authorities can stop them.