4 ms·
Of course, the conspiracy theorist might say that it's a bit too convenient to suppose the hitherto extremely clever criminals helpfully and stupidly copied the
by xxxmadraxxx 12y ago
Of course, the conspiracy theorist might say that it's a bit too convenient to suppose the hitherto extremely clever criminals helpfully and stupidly copied their private keys across to computers controlled by 'the feds'. A bit like those supposedly 'random' police stopping of vehicles which turn out to be full of drugs or explosives.
Maybe public/private key pairs aren't as secure as we've been lead to believe.
- sillysaurus3 12y agoRSA-2048 is fundamentally broken, only they know about the flaw, and rather than exploit that advantage in any of the innumerable ways it could be advantageous, they decided to make a web service?
- MasterScrat 12y agoOr maybe they got their hands on the keys some other way they're not willing to disclose.
- enneff 12y agoIt is likely that they were able to compromise the bad guys' systems and steal the private keys, which in itself is against the law.
- obitoo 12y agoTechnically yes, but in practice only if the bad guys file charges and/or assist the authorities with evidence, ie their machines.
- runeks 12y agoThat would be interesting. Especially the discussion of whether this is morally acceptable (ie. doing illegal things to obtain the private keys from the malware designers).
- deleted 12y ago[deleted]
- a2tech 12y agoOr maybe FoxIT was behind cryptolocker all along and once the ransom money stopped pouring in they released their database to look like good guys..tinfoil hat