3 ms·
While I think that's probably true for many of them, Coinbase is the most prominent crypto company, obviously a major target, and yet we haven't seen any real m
by actinium226 1y ago
While I think that's probably true for many of them, Coinbase is the most prominent crypto company, obviously a major target, and yet we haven't seen any real meaningful hacks of them. I think that says something.
- lucideer 1y ago> I think that says something. I've worked on the triaging side of large corporate bug bounty programmes & trust me when I say that security-by-obscurity is far more impactful in keeping our world (incidentally) secure than any active measure. Absence of exploit does not equal absence of vulnerability.
- actinium226 1y agoI think it's unfair to say that Coinbase has effectively "gotten lucky" in not being hacked. Security by obscurity makes sense when you have a low traffic low stakes site, but a place like Coinbase can't rely on that. They are a huge target, they have to take into account the possibility of disgruntled/bribed ex-or-current-employees abusing their knowledge of CB's security systems. They host coins like Monero and others which can obscure where the money is sent.