Live data from Hacker News

The Looting of ShapeShift

news.bitcoin.com

71–80 of 95 posts

Re: The Looting of ShapeShift

#71

Earlier quoted context omitted.

Whole article tl;dr: randian libertarian idealist buttcoin people are extremely surprised to discover that a black market economy turns out to actually contain real blackhats.

And that the banks aren't so dumb after all. Through centuries of experience, they have learned the secret that you need more than one employee. BTW, currently looking for an Senior Infrastructure and Security Engineer/Manager position at a company that handles large amounts of money.

Is your name Bob?

Re: The Looting of ShapeShift

#72

Earlier quoted context omitted.

Idk, I'm so tired of NewYorker-style liberal's attempt at humor about other political groups. It's disrespectful because they don't show that they've attempted to actually think about the issues, they're just knee-jerking with their emotions. Their treatment of Trump is similarly ridiculous. They're just waving their blueTribe flag as hard as they can. And when liberals talk about Ayn Rand? It's like she's the worst…

"I'm so tired of NewYorker-style liberal's attempt at humor about other political groups." Too soon? From Rubin's wikipedia page https://en.wikipedia.org/wiki/Dave_Rubin "regressive left" The regressive what? According to Rubin, there's a bunch of liberals defending atrocities done in the name of Islam. I'm just about the most left-wing person I know, very involved in politics, and no one I've met is an apologist for…

Your tone seems pretty strong. Have you ever heard of Anwar al-Alwaki? Do you ever read the New York Times?

http://www.nytimes.com/2001/10/19/us/nation-challenged-ameri...

"Imam Anwar Al-Awlaki, spiritual leader at the Dar al-Hijra mosque in Virginia, one of the nation's largest, which draws about 3,000 worshipers for communal prayers each Friday, said: ''In the past we were oblivious. We didn't really care much because we never expected things to happen. Now I think things are different. What we might have tolerated in the past, we won't tolerate any more.''

''There were some statements that were inflammatory, and were considered just talk, but now we realize that talk can be taken seriously and acted upon in a violent radical way,'' said Mr. Al-Awlaki, who at 30 is held up as a new generation of Muslim leader capable of merging East and West: born in New Mexico to parents from Yemen, who studied Islam in Yemen and civil engineering at Colorado State University."

https://en.wikipedia.org/wiki/Anwar_al-Awlaki

A new generation! Of course, as you would probably say, in 2001 al-Awlaki was a good-Muslim but by 2003 he had become a bad-Muslim. You may also believe that you decide who is a Muslim, and the new al-Alwaki was not a Muslim at all...

The line between these categories seems pretty thin, however. For instance, the US taxpayer funds the Palestinian Authority, and one wing of the PA is the Al-Aqsa Martyrs Brigade, which blows up buses and stuff. Al-Aqsa is an "unofficial" arm of Fatah, however, and the PA is "officially" distinct from Fatah. So while many on the far left endorse the PA, few on the far left endorse Al-Aqsa.

  https://en.wikipedia.org/wiki/Al-Aqsa_Martyrs%27_Brigades
  https://en.wikipedia.org/wiki/Fatah
  https://en.wikipedia.org/wiki/Palestinian_National_Authority
Imagine if rightists got to let themselves be wilfully taken in by this transparent game of three-card monte. Any fascist who didn't send any Jews to Auschwitz, personally, himself, could claim to be totally in the clear. Perhaps the SS is just the "armed wing" of the Third Reich, etc, etc. And if you're Petain or Franco, you had nothing to do with that at all. Etc, etc, etc.

[Edit: spacing.]

Re: The Looting of ShapeShift

#73
When things are handled professionally, you'll have a lot less drama.

Why is the author being so nice to the theif over and over again? Even the last sentence!

Eric brought this all on himself. Obviously 'scared' and intimidated to discuss important things WHEN they need to be discussed.

Doing everything out of order -- like the background checks -- is a classic rookie move.

You are basically running an Online Banking Website. You need to be aware of immense risks...

...it just goes on and on. But its clear why there is so much drama, crime and corruption and this company.

Sad really. Who is to blame?

Re: The Looting of ShapeShift

#74

Man, calling a social security number a "social serfdom number" is really dumb and off putting. So is the continual reference to 'fiat money' constantly. I always love the irony of people so against the basic social contract are always so quick to turn to authorities when things predictably go wrong.

At least he can laugh during calamities. Takes courage to do that.

Re: The Looting of ShapeShift

#75
post #56

Earlier quoted context omitted.

One of the striking things in this article was when he said they might have been compromised by their "CloudCo" (Cloud Provider). If I'm going to build any systems that handle money or bitcoin in a cloud provider, I will make damn sure I don't trust the cloud provider with anything. Everything should be fully encrypted such that even a breach of trust from the hosting provider would not compromise your data/funds. I…

Encryption won't protect you - the cloud provider has access to executables (in ram and perhaps on disc), your keys (ram and disc) and the data both pre and post encryption (in ram). Because they control the hypervisor, they control everything. That means they have as much access and authority as the code that you are running on their servers have. So the only way to protect yourself from them is to limit what your s…

In a limited way, this is what Apple does with iCloud. The customer data is encrypted and stored at AWS and Azure, and presumably decrypted on servers Apple runs and controls.

Re: The Looting of ShapeShift

#76
post #47

It seems odd to me that "Bob" hasn't been outed. It almost makes me suspect that someone isn't sure how much of "Bob's" role as portrayed in TFA is true and how much is a frame-job by an untouchable hacker [EDIT:] or wishful thinking by a frustrated executive.

> It seems odd to me that "Bob" hasn't been outed. Since Bob hasn't been criminally charged with anything, "outing" him is legally "libel". He could sue, and win.

It's not libel if it's true, and they'd only need to prove that to civil standard.

Re: The Looting of ShapeShift

#77
post #11

Am I the only one to think that all this narrative to blame Bob is pathetic ? This is pure and simple Mr. Voorhees (CEO) incompetency. After all, Bob is a criminal and he was just doing his "job".

Are you really saying that criminals can't be blamed because "thieves gonna thieve"? Sure ShapeShift can take some blame for bad security, which he readily admits in the post, but the bulk of the blame is owed to the person who did the crime.

Re: The Looting of ShapeShift

#78
post #11

Am I the only one to think that all this narrative to blame Bob is pathetic ? This is pure and simple Mr. Voorhees (CEO) incompetency. After all, Bob is a criminal and he was just doing his "job".

No. There are Bobs everywhere. Do your job, and Bob doesn't rip you off. Leave Bob to the courts - blaming Bob is like blaming your dog for stealing your lunch, or a wave for soaking you on the shore. You will not hurt Bob's feelings. edit: Bob didn't betray you. Your friends and family betray you. Bob stole from you.

The Russian hacker didn't betray them, but Bob did. They trusted him enough to hire him. He betrayed their trust.

Re: The Looting of ShapeShift

#79

Man, calling a social security number a "social serfdom number" is really dumb and off putting. So is the continual reference to 'fiat money' constantly. I always love the irony of people so against the basic social contract are always so quick to turn to authorities when things predictably go wrong.

You might appreciate http://www.newyorker.com/humor/daily-shouts/l-p-d-libertaria...

That's only funny until you realize that's exactly how health care in the US works.

Re: The Looting of ShapeShift

#80
For those interested in security engineering in the financial industry a good reading source is the banking section of: http://www.cl.cam.ac.uk/~rja14/book.html One interesting and relevant take away (of many) -- The greatest fraud threat to a financial firm are insiders. About 1% of staff across the industry is fired every year due to fraud. Within the fraud incidents, the most damaging fraud is perpetrated by senior and trusted individuals.
Post reply on HN