Am I the only one to think that all this narrative to blame Bob is pathetic ?
This is pure and simple Mr. Voorhees (CEO) incompetency. After all, Bob is a criminal and he was just doing his "job".
The Looting of ShapeShift
11–20 of 95 posts
Re: The Looting of ShapeShift
#12Am I the only one to think that all this narrative to blame Bob is pathetic ? This is pure and simple Mr. Voorhees (CEO) incompetency. After all, Bob is a criminal and he was just doing his "job".
Are you suggesting that the criminal should not be blamed for his criminal actions or the losses that he knowingly and willingly incurred?
Re: The Looting of ShapeShift
#13Man, calling a social security number a "social serfdom number" is really dumb and off putting. So is the continual reference to 'fiat money' constantly.
I always love the irony of people so against the basic social contract are always so quick to turn to authorities when things predictably go wrong.
Re: The Looting of ShapeShift
#14Am I the only one to think that all this narrative to blame Bob is pathetic ? This is pure and simple Mr. Voorhees (CEO) incompetency. After all, Bob is a criminal and he was just doing his "job".
The article seemed pretty open about major mistakes that ShapeShift made and lessons learned. It's a good postmortem to learn from, and far more open than most would have posted.
Re: The Looting of ShapeShift
#15We learn some more things. Bob has prior police records in Florida, where he’s from. So they didn't even do a background check before hiring "Bob"? For a position where he would have access to systems that handled financial data? That's just grossly incompetent, in my book. I've worked for 5-man startups and Fortune 500 companies. In every case, the offer letter has stated that the offer is conditional on the success…
That's sort of boilerplate though, isn't it? They reserve the right to do all sorts of terrible shit, but because most of that shit costs money they don't actually do it.
There are few positions that merit a hiring background check more than ones directly involving the financial transactions of a company. Even if it costs a lot of money, it is absolutely money well spent.
Re: The Looting of ShapeShift
#16We learn some more things. Bob has prior police records in Florida, where he’s from. So they didn't even do a background check before hiring "Bob"? For a position where he would have access to systems that handled financial data? That's just grossly incompetent, in my book. I've worked for 5-man startups and Fortune 500 companies. In every case, the offer letter has stated that the offer is conditional on the success…
They don't do the background check.
Background checks are a common requirement on insurance policies and such, so the background checks usually aren't fake.
If you're counting on them being fake, expect a nasty surprise.
Re: The Looting of ShapeShift
#17Man, calling a social security number a "social serfdom number" is really dumb and off putting. So is the continual reference to 'fiat money' constantly. I always love the irony of people so against the basic social contract are always so quick to turn to authorities when things predictably go wrong.
Indeed. Using tribal signaling when trying to reach a wider audience requires at least a small amount of skill.
Re: The Looting of ShapeShift
#18Am I the only one to think that all this narrative to blame Bob is pathetic ? This is pure and simple Mr. Voorhees (CEO) incompetency. After all, Bob is a criminal and he was just doing his "job".
Are you suggesting that the criminal should not be blamed for his criminal actions or the losses that he knowingly and willingly incurred?
Not quite. I suggest that a CEO should assume his responsibilities. He is quick to trash Bob[1] several times, but I see assumption of any responsibility at all.
[1]
Despite our note to all employees to come into the office urgently, Bob, our head IT guy, the one responsible for security and infrastructure, arrives at 11:30am.
Soon after, Bob decides it’s time for his lunch break, and we don’t see him for an hour, during the worst incident in ShapeShift’s history
Re: The Looting of ShapeShift
#19Man, calling a social security number a "social serfdom number" is really dumb and off putting. So is the continual reference to 'fiat money' constantly. I always love the irony of people so against the basic social contract are always so quick to turn to authorities when things predictably go wrong.
Would you call a communist a hypocrite for buying food at a grocery store?
Re: The Looting of ShapeShift
#20This is certainly the worst case scenario - your security officer installing remote access software on developers machines, stealing bitcoins from production, then selling the company source code, access credentials and access to the internal network to a Russian hacker. Building a security system to handle this level of attack is a whole level beyond stopping even determined external attackers. Are there any best pr…
To partially answer my own question, there's a Crypto Currency Security Standard, with Level 2 claiming on preventing solo internal attacks.