3 ms·
An interesting attack could be executed by an automaton that encrypted the payload such that the victim could trust that if they paid a ransom to some address b
by wyldfire 5y ago
An interesting attack could be executed by an automaton that encrypted the payload such that the victim could trust that if they paid a ransom to some address before $my_fave_cryptocoin hit block #X then the key would never be revealed. If they didn't pay it, the key would be revealed to the attacker.
Pretty funny how important trust is in the existing ransom marketplace. But the current market is about restoring operations by recovering inaccessible data. EA didn't lose anything here but would likely prefer that no one else get access.
- paxys 5y agoIt’s pretty unlikely that a hacker would be able to run write/delete operations on a source control server with a regular employee’s credentials. And even if they did, there are probably enough copies floating around that they wouldn’t really need to pay a ransom for it.
- wyldfire 5y agoYou're correct about your claims, but I think you may have misread my post. I was suggesting that EA might pay a ransom to prevent disclosure, not a ransom to restore lost data. Even if the source control server was lost, EA would likely have backups.