6 ms·
World’s Biggest Bank Forced to Trade Via USB Stick After Hack
- brudgers 3y agohttps://archive.ph/JOQ8E https://archive.ph/JOQ8E
- CoolGuySteve 3y agoThis just gave me infinite captcha challenges like some kind of practical joke.
- brudgers 3y agoMaybe it would be better to report the issue the issue to archive.org because I can’t fix it…as much as I would like to. Or maybe to your ISP? Or VPN host if that’s involved?
- sonicanatidae 3y agoThat's quitter talk friend. pushed up sleeves and starts editing code on archive.org
- lcnPylGDnU4H9OF 3y agoI have the image of someone opening up the browser's dev tools to write JS in the console tab. I'll just leave them to it!
- sonicanatidae 3y agoVB6 all the way, baby!
- deleted 3y ago[deleted]
- zenexer 3y agoarchive.today isn’t associated with archive.org. It’s run by one guy who has a grudge against Cloudflare and gets angry when you use their DNS or anything that proxies your requests through Cloudflare, include iCloud Private Relay. You end up on a page that looks vaguely like a Cloudflare challenge, even though it’s his own doing and has nothing to do with Cloudflare. If you’re on iOS, just open it in any browser other than Safari. Other browsers don’t get provided through iCloud Private Relay.
- fragmede 3y agoto be fair, I'd block visitors to my site if serving those visitors could result in legal action that would force me to take the site down. I hope I'd be a bit less juvenile about it, but it's not my site.
- zenexer 3y agoHis gripe has to do with EDNS ECS (or lack thereof), not takedowns.
- brudgers 3y agoNevertheless reporting the problem to archive.org would still be at least as effective as reporting the problem to me. Anyway, for what it's worth it works fine on my iPhone using iOS Safari.
- zenexer 3y agoYou would need iCloud Private Relay enabled to encounter the issue. Even then, you don’t get a say in which edge provider you get routed through: it may be Cloudflare, or it may be someone else (e.g., Akamai). It’s up to Apple.
- brudgers 3y agoSorry for being confused, I didn’t realize I would need to make things complicated in order to give myself problems to complain about.
- ryanschaefer 3y agoThis is a known issue with using 1.1.1.1 as a DNS
- misja111 3y agoSo it's Russians hacking Chinese now, that's an unexpected development.
- thrawa8387336 3y ago"Russians"
- 1-6 3y agoWhich country has the more talented group of hackers?
- lawlessone 3y agoReminds me of an anecdote/joke about Russian hackers in the 90's doing all their compiling in their head while they wait for access to limited computing resources.
- walterbell 3y agoYesterday, https://securelist.com/modern-asia-apt-groups-ttp/111009/ https://securelist.com/modern-asia-apt-groups-ttp/111009/ > In this report, we share the most valuable intelligence that we gathered on Asian APT groups. Over the course of our work, we noticed that these groups attacked the greatest number of countries and industries. Most importantly, our analysis of hundreds of attacks revealed a similar pattern among various groups. They achieve specific objectives at various stages of the Cyber Kill Chain using a common but limited number of techniques encountered by security professionals all over the world. Unfortunately, security teams often have difficulty detecting these attacks in their own infrastructure.
- Terretta 3y agoSo the report shows these APT groups attack more countries and industries using similar methods at different stages of cyber attacks that security teams struggle to detect. Is that new?
- zharknado 3y agoIs falling back to USB a good idea? It seems like if it’s public knowledge that they’ll use removable media as a backup transfer system, it’d open a whole new attack vector for other systems.
- vincnetas 3y agoI assume they would fall back to paper if needed. Anything that gets things done. Anything else is just implementation details.
- dboreham 3y agoRFC 1149
- seanw444 3y agoThat has to be a joke.
- brink 3y agoIt started as a joke.
- phone8675309 3y agoLook at the date of publication
- bobsmooth 3y agohttps://en.wikipedia.org/wiki/April_Fools%27_Day_Request_for_Comments https://en.wikipedia.org/wiki/April_Fools%27_Day_Request_for...
- eli 3y agoWhat would you suggest instead?
- jabroni_salad 3y agoThere are ways to do it safely. I support regional banks and our procedure is to whitelist the drive by uuid in our antivirus (requires a decent drive, not whatever bargain bin marketing object you have banging around) and also using bitlocker to encrypt it. So when you connect the drive for the first time, bitlocker reformats it and encrypts the partition, making it clean for business data and preventing you from bringing it to a non-bank computer. It is not ideal, but ** batch processing must happen daily OR ELSE ** even if that means driving a flash drive or an emergency uhaul rental's worth of paper across the state at a moment's notice. Every bank has progressively subgrade procedure sets depending on how bad their emergency is to ensure that this work is done.
- yafetn 3y agoThis is interesting for several reasons. 1. It happened during the Treasury auction, and if the timing was intentional, a case could be made about it being a national security issue. The hackers disrupted the largest, and possibly most important, auction in the financial world. 2. The hackers may have unintentionally provoked an entity you definitely don’t want on your bad side: the People’s Liberation Army’s cyber arm. 3. I wonder if ICBC used a specialized courier service to send the USB stick, or if such a thing even exists. Or did they just use any old messenger service in Manhattan? If the latter, it’s funny to think that there was somebody biking across the city carrying billions of dollars worth of liquidity and settlement data and he/she would’ve been none the wiser.
- pavlov 3y agoI bet there's a specialized courier service in Manhattan who only deliver small and boring envelopes that just happen to be extremely valuable to financial companies. No idea what that company might be, but I'd imagine they don't use bikes just for the "bus factor" risk of that person getting into an accident and the envelope lost.
- barkingcat 3y agoThere are thousands of these kinds of services. Almost all would be bonded, some would offer armed security escorts to go with the courier (of course, for a fee).
- codetrotter 3y agoImagine a bicycle messenger in lime green sports clothes with a dark green box on his back, followed by two guard motorbikes all black, carrying big guns. And the motorbikes riding comically slow in order to stay with the bicyclist. Even struggling to not tip over, because of how slow they are going at times.
- barkingcat 3y agoMore like a motorcade of motorcycles, 3 at the front in arrow formation pushing out the traffic, the forward section not shy about using their guns to move people away - these would be real NYPD with badges hired during their off-duty hours, they would be carrying NYPD weapons. Then you have the main security cordon, a quad / box. They would be on motorbikes, but it would be like guards, and since the traffic is already cleared by the forward section, it would just go at the fastest speed the cyclist courier can go. The cyclist is in the middle of the quad/box. Then at the back you have a rear section (also 3 NYPD off duty cops on motorbikes with firearms licenses and authorized to shoot with no consequence because they are union protected), which will block traffic from coming too close to the courier.
- chollida1 3y agoScore one for a distributed system. A large player in the US Treasury auction goes off line during the auction and it turns out to be a big nothing burger. It had no impact on the auction but ICBC is a decent sized player in the repo market so it could have a slight impact on the over night rate, but again, there are so many banks involved in the repo market that the impact was not noticeable. So far the hack is attributed to Lockbit, who is supposedly associated with the Russians, which is the first time I've heard of the Russians directly trying to interfere with a US treasury auction. The hack seems to have affected China more than the US so maybe you can squint and say this is Russia attacking China more than Russian attacking the US here?
- Muromec 3y agoI bet more on the usual inability to predict obvious indirect consequences than on intent to harm China. For sure it’s not the right time to do so.
- 1-6 3y agoPerhaps going forward, it’s better to create an Ai gap as opposed to a real Air gap