Live data from Hacker News

DarkSide ransomware gang quits after servers, Bitcoin stash seized

krebsonsecurity.com

601–610 of 623 posts

Re: DarkSide ransomware gang quits after servers, Bitcoin stash seized

#601

Earlier quoted context omitted.

I got downvoted for saying that maybe it's time to treat serious ransomware attacks (infrastructure, security, health, etc.) as terrorism - as in the sense that they're a threat to the national security. But this kinda shows the response I was referencing to. A lot of people like to think of ransomware attacks as the ultimate stress test as far as security goes, and thus a good thing - but let's not get too blinded b…

IMO terrorism is a "waffle word" that doesn't really have any meaning anymore. Originally a use of violence and intimidation against civilians in pursuit of political ideology, it's come to mean "people we don't like, who aren't state actors and don't fit conventional organized crime narratives." I don't think it's necessary to staple the term to the action in order to take it seriously. It should, however, be taken…

It’s a scare word and has always been. Like “conspiracy theory” it’s purpose is to stop thought and prevent thinking. It’s easily replaced with real words with concrete meanings. Are mass shootings terrorism? Since it’s widely used scare word to describe generally “bad acts towards groups of people” I think ransomware fits, but so does a lot of graffiti. Maybe it’s better to quibble over terms than to talk about how Bitcoin is responsible.

Re: DarkSide ransomware gang quits after servers, Bitcoin stash seized

#602
post #558
post #320

Earlier quoted context omitted.

This doesn't really improve the optics. If anything it makes it worse: if very technical people who clearly want to escape government oversight can't, what hope would my 60yo "I think Windows and Word are the same thing" father have to use them correctly? Beyond all the technical discussion about the value of cryptocurrencies I never believed that the idea that everybody would carry their cryptocurrency wallet with t…

Banks are fine if they're optional. The sheer option of being your own bank, forces banks to be more competitive.

I think the point of the parent commenter is that they are not optional for most people.

Re: DarkSide ransomware gang quits after servers, Bitcoin stash seized

#603

Earlier quoted context omitted.

The fact that their coins were apparently easily stolen also debunks another favourite talking point of the crypto people that it secures your money from government access. Clearly, ways and means have been developed to do just that if necessary.

so which is it then? "BTC is bad cause it can be used by drug dealers to launder money" "BTC is not even secure from government access" Surely someone will point out both can be true but the point is the anti-btc folks seem to be talking out both sides of the mouth

> Surely someone will point out both can be true but the point is the anti-btc folks seem to be talking out both sides of the mouth

Can you explain how you reach this conclusion? It doesn’t seem to follow.

Re: DarkSide ransomware gang quits after servers, Bitcoin stash seized

#604
post #603

Earlier quoted context omitted.

so which is it then? "BTC is bad cause it can be used by drug dealers to launder money" "BTC is not even secure from government access" Surely someone will point out both can be true but the point is the anti-btc folks seem to be talking out both sides of the mouth

> Surely someone will point out both can be true but the point is the anti-btc folks seem to be talking out both sides of the mouth Can you explain how you reach this conclusion? It doesn’t seem to follow.

A talking point to the dangers of Bitcoin and cryptocurrency is that it can be hard to trace bad actors using the network to launder money. The comment I replied too was stating "debunks another favourite talking point of the crypto people that it secures your money from government access."

Both of those seem pretty hard to be true at the same time

Re: DarkSide ransomware gang quits after servers, Bitcoin stash seized

#605
post #603

Earlier quoted context omitted.

> Surely someone will point out both can be true but the point is the anti-btc folks seem to be talking out both sides of the mouth Can you explain how you reach this conclusion? It doesn’t seem to follow.

A talking point to the dangers of Bitcoin and cryptocurrency is that it can be hard to trace bad actors using the network to launder money. The comment I replied too was stating "debunks another favourite talking point of the crypto people that it secures your money from government access." Both of those seem pretty hard to be true at the same time

> Both of those seem pretty hard to be true at the same time

That’s what doesn’t seem to follow.

Cash, for example is hard to trace if the serial numbers haven’t already been recorded, and good for money laundering, for example, but it doesn’t secure your money from government access if the government puts resources into it.

Re: DarkSide ransomware gang quits after servers, Bitcoin stash seized

#606

Earlier quoted context omitted.

The fact that their coins were apparently easily stolen also debunks another favourite talking point of the crypto people that it secures your money from government access. Clearly, ways and means have been developed to do just that if necessary.

Or one of the members of the criminal gang ran off with all the cryptocurrency and then made a public post claiming some form of law enforcement seized the crypto.

According to the blog post, they said their payment server had been seized. The payment server must hold or have send-access to a Bitcoin wallet if it can make payments. By seizing their payment server, they also siezed the Bitcoins.

Re: DarkSide ransomware gang quits after servers, Bitcoin stash seized

#607

Earlier quoted context omitted.

If you store your coins on a hard drive there's nothing the government can do to get them right? They would need your private key and your hard drive?

> They would need your private key and your hard drive? Most people serious about cryptocurrencies do not trust computers/harddrives anymore since years. They use "hardware wallets", which are HSMs with a very small attack surface. It's not impossible that hacks happen but there's a gap so wide between "a Windows 10 computer running some Bitcoin software wallet" and "a Ledger Nano S" hardware wallet that it's basical…

How can one trust the hardware keys though? The manufacturer/supplier could have installed a backdoor (very reasonable to do, as people paying for these keys are likely to have sth valuable).

Re: DarkSide ransomware gang quits after servers, Bitcoin stash seized

#608

Earlier quoted context omitted.

Of course I am... if I'm paying 5 million dollars to someone, I'm a customer. What level of support do you get for a 5 million dollar AWS budget?

If someone kidnaps your family member and asks you to pay $5M, do you think you're a customer now? A customer willingly pays to get value in return. Having your resources stolen (even with the option to choose between data or money) just makes you a victim. $5M on AWS gets you $5M of services. If they didn't have to actually provide anything then they could have an entire team to talk to you 24hrs a day. But these co…

> $5M on AWS gets you $5M of services.

$5M on ransomware may have saved you either $10k or $10M on security before you had to pay out.

Re: DarkSide ransomware gang quits after servers, Bitcoin stash seized

#609
post #563

Earlier quoted context omitted.

> A 500k isn't all that unusual in tech I feel like.. > Like a senior engineer at a FANG Becoming a Senior Engineer at FAANG is very unusual, across all tech workers. It's doable with the right amount of work, dedication, and willingness to relocate to the right locations, of course. But it's nowhere near guaranteed or common.

It's not common but all of these aspects are within your control. Luck is surely involved too, but it's not like FAANG uses random() to pick senior engineers. If you get your foot in the door into FAANG and work very hard, you have a decent shot. If you don't want to relocate, that's your problem. There are trade off's in life. If you can't relocate, that's unfortunate.

> If you don't want to relocate, that's your problem.

It's not a problem, it's a choice.

HN some times acts like FAANG is the only acceptable goal for a software engineer, and that all other choices are somehow wrong or inferior. We really need to get past this idea that there's only, single correct decision.

Re: DarkSide ransomware gang quits after servers, Bitcoin stash seized

#610
post #600

Earlier quoted context omitted.

> debunks another favourite talking point of the crypto people that it secures your money from government access In order to seize someone's cryptocurrency, the government has to literally seize the private keys used to sign transactions. This could be as easy as seizing computers containing the key but it could also be as hard as torturing people until they reveal their seed phrase. They can't simply order the banks…

There are other possibilities - for example they can maintain a list of tainted coins, and declare them illegal to transact. This can then be enforced at the level of exchanges.

Doesn't work for privacy coins like Monero. The US treasury tried to sanction a Monero address and ended up blacklisting a transaction hash instead.

https://www.treasury.gov/ofac/downloads/sdnlist.txt

> Digital Currency Address - XMR 5be5543ff73456ab9f2d207887e2af87322c651ea1a873c5b25b7ffae456c320;

Note the lack of the 0x prefix. Here's the transaction on the block explorer:

https://localmonero.co/blocks/search/5be5543ff73456ab9f2d207...

Post reply on HN