6 ms·
Cryptocurrency continues to improve security by polluting attackers with short-sighted incentives that prevent real damage from occurring.
by some_furry 6y ago
Cryptocurrency continues to improve security by polluting attackers with short-sighted incentives that prevent real damage from occurring.
- nailer 6y agoI don't think cryptocurrency has changed much in that regard. Before CC mining the default use for an owned box was warez servers, IRC or jump hosts.
- gruez 6y agoThose are much harder to detect, especially the latter two.
- nailer 6y agoI'm not sure. Most crackers don't use port knocking or other obfuscation techniques, so something that shouldn't be listening on a box and a large amount of bandwidth being used is normally a good indicator.
- gruez 6y agoI think there's great overlap between servers that aren't monitored and servers that are vulnerable to exploits. If you're monitoring your servers for unknown listening ports, chances are you're keeping your systems up to date. Same with bandwidth, although if bandwidth is expensive (eg. cloud providers), your accounting dept might notice.
- nailer 6y ago> I think there's great overlap between servers that aren't monitored and servers that are vulnerable to exploits. Agreed. CC mining would be CPU on most servers, and go undetected for the same reasons. Some servers and gaming rigs would have GPUs, but not many vs CPUs.
- cordite 6y ago3 max-expensive "analytics" servers were how my company discovered a breach. "Why is our cost projected to go up so significantly?" They were of course mining on GPUs.