3 ms·

I think the bar for "heist" keeps getting lowered.

• cjbprime 14y ago
  Yes, this seems smaller than previous large bitcoin thefts by an order of magnitude or two.
• csense 14y ago
  What about the bar for "hacker"? You don't really need technical skills to convince a service provider to give you access you shouldn't have, when the original signup's security answer was publicly available information. This attack vector was exactly how Sarah Palin's Yahoo mail account was "hacked" in the 2008 presidential campaign. So you'd think people would be more careful nowadays...
  • xyzzy123 14y ago
    Good question... It's interesting to me, because "socialing" DNS and other providers generally isn't in-scope during pentesting. Would be interested to know if there are any pentesters / firms who have this in their "standard" methodology, for webapp or external network testing.