3 ms·
This might work for your personal system, but in the corporate environment, what's to keep someone with legitimate system access from emptying the wallets perio
by ravel-bar-foo 5y ago
This might work for your personal system, but in the corporate environment, what's to keep someone with legitimate system access from emptying the wallets periodically and blaming an advanced persistent threat? It would be better to do the same system with standard bank transactions, and just provide a promise to not prosecute people who make contact after pwning your company.
- prepend 5y agoSince the wallets are canaries the rooted hosts will have to be rebuilt. Also make the dollar amounts relatively low so an insider is unlikely to risk their position. $1000 is a lot to someone who doesn’t care but is foolish for someone who passed a security check to get access.
- whimsicalism 5y agoI think you substantially underestimate how much these ransomware companies make once they've gained access. If they've gained access, they'll just do their normal thing and then right as s they're doing it empty out the wallets. $1000 is not going to deter them from a multi million payday
- cwkoss 5y agoWell, presumably the rest of the team would push for increased monitoring and access control until coworker was no longer confident they could steal the bonus without getting caught, at which point your systems have been hardened and risk from outside attackers is also probably reduced. But, I'm definitely getting into 'hand wavy' territory here.