5 ms·

Your examples are about spending oversized amounts of resources to send messages to would-be imitators. How are you going to dissuade new hackers popping up whe

by leppr 5y ago

Your examples are about spending oversized amounts of resources to send messages to would-be imitators. How are you going to dissuade new hackers popping up when they have total freedom in where to base their operations and hiding their tracks is so easy (compared to managing militias)? Seems to me in that case, defense is easier than offense. There's now huge financial incentives for extending strict security to more areas than just military/transportation/communication infrastructure systems.

ForHackernews 5y ago
> How are you going to dissuade new hackers popping up? Hackers are subject to economic pressures and cost/benefit/risk analysis just like anyone else. If government puts a heavy thumb on the scale, then maybe you start to think there are easier ways to make a few million bucks that don't run the risk of your ending up dead or in prison for life. As an example, kidnapping used to be a reasonably common crime in the United States (with a high payoff) but in the wake of the Lindburg Kidnapping, the US made kidnapping a federal crime and a capital offence.[0] Instead of dealing with local cops, kidnappers were now facing a dedicated team of FBI agents with substantial resources and the death penalty when they got caught. Suddenly, it makes a lot less economic sense to be a kidnapper and ransom kidnappings have mostly disappeared in America. [0] https://en.wikipedia.org/wiki/Federal_Kidnapping_Act https://en.wikipedia.org/wiki/Federal_Kidnapping_Act
- hetspookjee 5y ago
  It would seem to me that Ransomware attackers coming from Russia or China would have a pretty solid first line of defense. That is, as long as they keep the hands that are feeding them happy in said country.
  - ForHackernews 5y ago
    Yeah, but then you're talking about state-sponsored malware attacks, and into the realm of international diplomacy: sanctions, embargoes, blockades and (theoretically) war.
    - jtbayly 5y ago
      Why do you think that would be the result? They aren’t state sponsored per se, just state turning a blind eye. Plus, it’s already been happening this way for many years. Why would we suddenly start sanctioning China and Russia, risking war?
      - TeMPOraL 5y ago
        Various states were turning a blind eye to ransomware operators on their soil because it was considered a petty crime. It wasn't even a variable considered in international negotiations. But if a superpower like US suddenly views ransomware as terrorism, it becomes diplomatically relevant. Politicians will start asking questions, likely realizing it's not worth it to start pushing the US on this point, leading to law enforcement suddenly being much more interested.
mirekrusin 5y ago
They should be able to fund their efforts from seized crypto assets.

by leppr 5y ago

ForHackernews 5y ago

> How are you going to dissuade new hackers popping up? Hackers are subject to economic pressures and cost/benefit/risk analysis just like anyone else. If government puts a heavy thumb on the scale, then maybe you start to think there are easier ways to make a few million bucks that don't run the risk of your ending up dead or in prison for life. As an example, kidnapping used to be a reasonably common crime in the United States (with a high payoff) but in the wake of the Lindburg Kidnapping, the US made kidnapping a federal crime and a capital offence.[0] Instead of dealing with local cops, kidnappers were now facing a dedicated team of FBI agents with substantial resources and the death penalty when they got caught. Suddenly, it makes a lot less economic sense to be a kidnapper and ransom kidnappings have mostly disappeared in America. [0] https://en.wikipedia.org/wiki/Federal_Kidnapping_Act https://en.wikipedia.org/wiki/Federal_Kidnapping_Act

hetspookjee 5y ago
It would seem to me that Ransomware attackers coming from Russia or China would have a pretty solid first line of defense. That is, as long as they keep the hands that are feeding them happy in said country.
- ForHackernews 5y ago
  Yeah, but then you're talking about state-sponsored malware attacks, and into the realm of international diplomacy: sanctions, embargoes, blockades and (theoretically) war.
  - jtbayly 5y ago
    Why do you think that would be the result? They aren’t state sponsored per se, just state turning a blind eye. Plus, it’s already been happening this way for many years. Why would we suddenly start sanctioning China and Russia, risking war?
    - TeMPOraL 5y ago
      Various states were turning a blind eye to ransomware operators on their soil because it was considered a petty crime. It wasn't even a variable considered in international negotiations. But if a superpower like US suddenly views ransomware as terrorism, it becomes diplomatically relevant. Politicians will start asking questions, likely realizing it's not worth it to start pushing the US on this point, leading to law enforcement suddenly being much more interested.

mirekrusin 5y ago

They should be able to fund their efforts from seized crypto assets.