3 ms·

That was fascinating, does anyone know where I can read more reports like this?

• joshstrange 11y ago
  I doubt there is a central repository of things like this as most (this one included) are eyes-only and normally, in an effort to present the raw facts and point out the failures, is not something that makes the company it's about look good (Lax security or bad practices, I'm not saying that was the case here one way or the other just that normally that's what they are going to cover). I think the most telling line (in regards to your comment) is: > ...we need to be very careful not to educate other criminal hackers about how we safeguard our assets and information. Accordingly, no part of this report may be made public or given to a third party without the prior express written permission of Bitstamp Ltd Well I was going to quote it but it's been taken down already, wish I still had it open in a tab. The line was something to effect of "This document should not ever be made public as it outlines our weaknesses and we don't want to give future attackers any more tools to attack us" Edit: I've updated the above with the quote, I found it after all Edit 2: All of that said I too would love to read more in-depth post-mortems on hacks/breaches/thefts. I knew phising like this was possible but I would have fallen prey to some of that probably. Now I don't use a windows computer so I might have been marginally safer but there is nothing to say that the attacker didn't have linux/osx tricks up his/her sleeve. The graphic that shows the different avenues of attack and the one that finally succeeded was a really cool way to visualize the attack as well.