I had a quick peak at the web server log, it's tiny. The typical legitimate egress from this network is likely somewhere well under 1gb/day, yet somehow these people managed to upload at least 2TB without being noticed In a well-maintained network an upload like this should have paged someone as it was happening, probably sometime in the first 5-10 minutes. Say your outbound pipe was 100mbit, if it is pegged for 15 m…
Hacker Publishes 2TB of Data from Cayman National Bank
191–200 of 491 posts
Re: Hacker Publishes 2TB of Data from Cayman National Bank
#192Earlier quoted context omitted.
A recent piece in The Guardian argues that South Dakota and other US states are actually becoming the go-to place to store anonymously your illicit cash and make sure that your heirs can inherit it without taxes forever: https://www.theguardian.com/world/2019/nov/14/the-great-amer... Partly because the US has compelled other countries to provide more transparency without joining that transparency organization itself.…
> place to store anonymously your illicit cash What if I just want a place to anonymously store my legally gained cash? Unfortunately, it seems the normal people lost their privacy nowadays at the expense of the criminals and the "If you've got nothing to hide, you've got nothing to fear" argument has taken a stronghold in the financial sector.
Re: Hacker Publishes 2TB of Data from Cayman National Bank
#193Earlier quoted context omitted.
but maybe in ten years, you'll regret your choice or maybe you won't because you won't even know what you are missing out not judging you, I program and sit in an office, but I can understand the magic of being in the middle of the pulse of the world. It is a world that I only look at as a bystander. perhaps being a journalist is paid little because it is you are more alive, instead of programming the next punch-the-…
Even in a hundred years he wouldn’t regret the choice. Nothing you described sounds appealing. Journalists see most technology like a black box that does mysterious things and produces an output, just like a bystander. If you don’t want to be a bystander to those processes, you become a programmer.
What I specifically referred to is that programming a computer as a day job (for example as the poster said their job is optimizing ads for a website) is probably far less fulfilling than following and analyzing world events and doing journalism. That's all.
Re: Hacker Publishes 2TB of Data from Cayman National Bank
#194Earlier quoted context omitted.
Because the social contract of most countries is that your legally gained cash is to be taxed in one form or another and thus has to be known by the tax authorities? You can argue that your assets are to be private to the general public but some countries do not have that assumption (Norway comes to mind).
By "legally gained cash" I mean that taxes have already been paid for it.
Re: Hacker Publishes 2TB of Data from Cayman National Bank
#195Earlier quoted context omitted.
Our first pen test, before I took over as CTO... We had a JSON file with admin credentials on a shared drive. IT company needed it there so some tool could log in as admin and do some robot work. Fired them, and good riddance. But... STUPID SIMPLE things can get overlooked for years until you have someone else come in and test. +1 for pentests.
So after firing the vendor, who on your side got fired for allowing it in the first place?
That is no longer the case. To answer your question though, you know how hard it is to fire a CFO? Let me know if you have any tips.
Re: Hacker Publishes 2TB of Data from Cayman National Bank
#196I had a quick peak at the web server log, it's tiny. The typical legitimate egress from this network is likely somewhere well under 1gb/day, yet somehow these people managed to upload at least 2TB without being noticed In a well-maintained network an upload like this should have paged someone as it was happening, probably sometime in the first 5-10 minutes. Say your outbound pipe was 100mbit, if it is pegged for 15 m…
Maybe. Do we know how they exfiltrated it? They may have done it in a rate-limited fashion.
Re: Hacker Publishes 2TB of Data from Cayman National Bank
#197Is there a forum/IM where someone has already found out any interesting parts? I am unable to download 2TB of data
Re: Hacker Publishes 2TB of Data from Cayman National Bank
#198Earlier quoted context omitted.
By "legally gained cash" I mean that taxes have already been paid for it.
It's a trust but verify thing I believe. If the cash is anonymized, how can they know if the owner of this cash did in fact pay their taxes on it? Either they blindly trust everyone to properly declare all of their income, or they need to have some form of traceability.
Re: Hacker Publishes 2TB of Data from Cayman National Bank
#199Earlier quoted context omitted.
A recent piece in The Guardian argues that South Dakota and other US states are actually becoming the go-to place to store anonymously your illicit cash and make sure that your heirs can inherit it without taxes forever: https://www.theguardian.com/world/2019/nov/14/the-great-amer... Partly because the US has compelled other countries to provide more transparency without joining that transparency organization itself.…
> place to store anonymously your illicit cash What if I just want a place to anonymously store my legally gained cash? Unfortunately, it seems the normal people lost their privacy nowadays at the expense of the criminals and the "If you've got nothing to hide, you've got nothing to fear" argument has taken a stronghold in the financial sector.
One of the executives in that bank is the older brother to a star witness in the Presidential impeachment inquiry. Yet no one really cares about crimes committed by corporations.
Re: Hacker Publishes 2TB of Data from Cayman National Bank
#200Earlier quoted context omitted.
A recent piece in The Guardian argues that South Dakota and other US states are actually becoming the go-to place to store anonymously your illicit cash and make sure that your heirs can inherit it without taxes forever: https://www.theguardian.com/world/2019/nov/14/the-great-amer... Partly because the US has compelled other countries to provide more transparency without joining that transparency organization itself.…
> forcing foreign financial institutions to tell the US government about any American-owned assets on their books This is another interesting part. How can the US "force" a sophisticated wealthy sovereign nation that culturally and morally values banking privacy (not only for the profits), like Switzerland? It cannot be understated how much power, control and ownership the US has of the world financial system. If Swi…
Of course they could try to pressure SWIFT, but there’s no guarantee that would work.