3 ms·

My point was about those agencies catching ransomware authors.

rl3 9y ago
Theoretically there's nothing legally stopping a NSA/GCHQ tag team from mercilessly hunting down and destroying ransomware operations. NSA only has red tape when it comes to U.S. citizens, but GCHQ doesn't. GCHQ's mandate also includes serious organized crime. Moreover, considering the damage ransomware can do to critical government infrastructure (for example NHS), it's not a stretch to imagine that targeting ransomware operations would fall under legitimate national security grounds. Personally I'm surprised they don't just completely fuck these people up to set an example. On the other hand, there's always the possibility WannaCry could be a mud slinging attempt from a state actor, given the much-publicized fact it uses leaked NSA vulns.
- Freak_NL 9y ago
  > […] fuck these people up to set an example. I don't think it would be very effective. There are three reasons for hunting down and persecuting perpetrators of crime: vengeance, setting an example, and undoing the damage. Only the last reason makes any practical sense here. This attack works, so there will be others in the future, but it will happen regardless of the threat of punishment. Sure, if you set an example some people might be deterred, but surely not the bright hacker in a basement in Yekaterinburg, or the determined gang in Nigeria, or the mobsters in Chengdu City; i.e., anyone, anywhere without much to lose?
  - walshemj 9y ago
    Its also put presure on govemnets that in the past dont coperate with extrdaitions. Puting 50% of your diplomats on a plane with 48 hours notice sends a message - you can also start having the IRS / HMRC invstigate rich expats friedly to the regime.
  - rl3 9y ago
    >Only the last reason makes any practical sense here. Admittedly there's only so much damage SIGINT agencies can do, but if you get other intelligence agencies involved that have a more human side about them, that changes.
- nol13 9y ago
  At least within the realm of possibility (as far as I'm naively aware) that whoever did this didn't fuck up too badly and they're simply unable to track them.

rl3 9y ago

Theoretically there's nothing legally stopping a NSA/GCHQ tag team from mercilessly hunting down and destroying ransomware operations. NSA only has red tape when it comes to U.S. citizens, but GCHQ doesn't. GCHQ's mandate also includes serious organized crime. Moreover, considering the damage ransomware can do to critical government infrastructure (for example NHS), it's not a stretch to imagine that targeting ransomware operations would fall under legitimate national security grounds. Personally I'm surprised they don't just completely fuck these people up to set an example. On the other hand, there's always the possibility WannaCry could be a mud slinging attempt from a state actor, given the much-publicized fact it uses leaked NSA vulns.

Freak_NL 9y ago
> […] fuck these people up to set an example. I don't think it would be very effective. There are three reasons for hunting down and persecuting perpetrators of crime: vengeance, setting an example, and undoing the damage. Only the last reason makes any practical sense here. This attack works, so there will be others in the future, but it will happen regardless of the threat of punishment. Sure, if you set an example some people might be deterred, but surely not the bright hacker in a basement in Yekaterinburg, or the determined gang in Nigeria, or the mobsters in Chengdu City; i.e., anyone, anywhere without much to lose?
- walshemj 9y ago
  Its also put presure on govemnets that in the past dont coperate with extrdaitions. Puting 50% of your diplomats on a plane with 48 hours notice sends a message - you can also start having the IRS / HMRC invstigate rich expats friedly to the regime.
- rl3 9y ago
  >Only the last reason makes any practical sense here. Admittedly there's only so much damage SIGINT agencies can do, but if you get other intelligence agencies involved that have a more human side about them, that changes.
nol13 9y ago
At least within the realm of possibility (as far as I'm naively aware) that whoever did this didn't fuck up too badly and they're simply unable to track them.