6 ms·
Hackers infect ISPs with malware that steals customers' credentials
- 2OEH8eoCRo0 2y agoWhen are we going to start taking this seriously?
- fsflover 2y agoCould you be more specific? What are you suggesting to do?
- SoftTalker 2y agoHire more competent technical people and rely less on opaque "dashboard" management software for button-clickers.
- bink 2y agoI work in the security field and hiring competent technical people is harder than it sounds for businesses with small profit margins.
- krageon 2y agoIt's hard because your security department probably sucks. And so does your company culture. Do not take it personally, it's certainly why my employers can't find people fit for the space. A large part of the problem is political cronyism and the incredibly tedious culture that develops when you get a lot of people with very few skills together to talk about something they know nothing about. I'd legitimately take less money if I could somehow be convinced an employer isn't a piece of shit. If I'm going to work for an asshole, I will be well paid. I think this is a reasonable stance most people in the space take. That, or retiring and having a communal garden.
- dijksterhuis 2y agoFrom the parent > for businesses with small profit margins. … > It's hard because your security department Dude, we barely have money for an engineering team, let alone enough people to call it a department. The security department is me when I’m not being inundated with five other things, all at the same time. It’s not like anyone else has a department either, there’s like, 12 people working here in total man. ^ parent, probably. I know it was true for me in “cash strapped” environment
- 2OEH8eoCRo0 2y agoI don't know but I think current course is unsustainable.
- drdaeman 2y agoNot until post-scarcity (if it's even achievable). Until then, Gresham's Law is at work, and cheaper products and services that are of barely acceptable quality along their happy paths are going to dominate markets.
- dv_dt 2y agoWhen they steal money from someone wealthy enough to have connections.
- deleted 2y ago[deleted]
- HeatrayEnjoyer 2y agoIs it even possible to steal truly massive sums of money? The largest assets are not liquid, and laundering requires an even larger sum of loosely monitored funds to mix with.
- tazu 2y agoIt became even harder once Ethereum became non-fungible thanks to Tornado Cash and OFAC.
- Dibby053 2y ago>Ethereum became non-fungible What do you mean by this? I haven't been following this space for a long time and searching only brings up NFT stuff.
- hughesjj 2y agoI don't understand how Tornado Cash (DPRK tool to evade sanctions) + Office of Foreign Assets control made Etherum non-fungible either, sounds like rambling to me
- tazu 2y agoEthereum (+tokens) that go through Tornado Cash are "tainted" and sometimes censored [1]. This means not all Ethereum are equal. Btw, calling Tornado Cash a "DPRK tool" is disingenuous. It's a privacy tool. [1]: https://www.mevwatch.info/ https://www.mevwatch.info/
- 2y ago
- corytheboyd 2y agoBeen feeling like it’s the beginning of the end for a while now… I have good security hygiene, but I am sure enough of my sensitive info has been leaked by various “trusted authorities” (I mean, fucking Equifax) that someone could ruin my life if they wanted to. You just stay vigilant and hope that doesn’t happen I guess.
- deveac 2y agoJust a roll of the dice at this point. The USG has basically mandated that all of your most private identity information be turned over to global bad actors via their AML/KYC regime. They're fine with that price.
- yieldcrv 2y agoNorth Koreans are currently funding their nuclear program by…. passing interviews at US tech companies and … actually doing the work KYC is a joke when everybody’s ID can be used to make a valid account and receive payments reminds me of this bank heist skit, where they just get employed at a bank for 30 years https://youtu.be/jgYYOUC10aM?si=RqdLuyuNOn3bEhfF https://youtu.be/jgYYOUC10aM?si=RqdLuyuNOn3bEhfF
- Jach 2y agoI hear about lives being ruined or even just "identity theft" happening less often than it seemed to, but perhaps it's just my filtering is better. Still, given that to a first approximation the full details necessary for a fraudulent line of credit to be opened in the name of every US adult have been out there multiple times for years, and yet this hasn't happened to everyone, indicates something in the system works against it. Maybe something as simple as physical mail delivery/verification cuts down a lot of avenues of abuse for the average person.
- a5withtrrs 2y agoMy speculation on this is that China/Russia/whoever targets ISP's in order to identify people by IP that have come to their attention somehow. Your credentials aren't the only point of interest, your credentials gives up subscriber information name/email/address/etc. That's pretty valuable from an intelligence standpoint.
- ChrisArchitect 2y ago[dupe] More discussion: https://news.ycombinator.com/item?id=41367964 https://news.ycombinator.com/item?id=41367964
- ikekkdcjkfke 2y agoRising discord and worshipping money