does this mean suspects of hacking and ransomware will now join suspected terrorists in Guantanamo?
U.S. to give ransomware hacks similar priority as terrorism, official says
491–500 of 591 posts
Re: U.S. to give ransomware hacks similar priority as terrorism, official says
#492Earlier quoted context omitted.
nope but we also demand some due diligence from private entities. When you leave the garage, the windows and the front door open with a "here's the money" sign pointing at your safe you might have a problem if someone steals your customers stuff. Company private security and protection against these attacks is more than abysmal. Just take the pipeline hack as an example. There should be no way at all that infrastruct…
I don’t think that’s a fair comparison. I think a fair comparison would be 80,000 companies buy the same vault door from supplier X. But suddenly one criminal group has found a universal key to the vault that no one else knows about, and can now access all 80,000 vaults nearly simultaneously and clandestinely even though they still look closed and secure from outside observers.
80,000 planes use the same bolts to secure the engine pylons to the wing. It is found that the bolt can sheer in cold weather due to a casting defect. This does not cause a catastrophic failure because the aircraft are designed in such a way that an individual compromise will not bring down the entire system. Bank vault doors don’t open to the street for a reason. If your entire system is relying on the security of that one vault door, you have already failed. If you are storing sensitive data on millions of users in plaintext, you have already failed.
Re: U.S. to give ransomware hacks similar priority as terrorism, official says
#493Earlier quoted context omitted.
We're not outlawing math. You can still run your little calculations on your machine. You just can't exchange them for dollars. That's what we're proposing here. Currency control. Are you confusing this with the debate around encryption? That wouldn't surprise me coming from someone who uses the phrase "nocoiner".
Sure, the people who aren't proposing to outlaw mathematics are the confused ones...
If you honestly believe shutting down the likes of Coinbase and Kraken requires "outlawing math", you're gonna be real disappointed.
Re: U.S. to give ransomware hacks similar priority as terrorism, official says
#494Earlier quoted context omitted.
Do you know how absurd that would be? Crypto like Bitcoin are just a database in essence. Throwing someone in prison for running a database on their computer would probably spell the end of general purpose computers. You will not be allowed to run databases anymore unless they are approved.
> Do you know how absurd that would be? Bitcoin is just a database in essence It’s really bot unusual for the law to treat things differently based on the purpose for which they are used when they are “just a database, in essence”.
I assume you'd have no issue taking down a database full of child pornography? You know there are some who argue that CP is just "bits on disk".
What if society determines that cryptocurrency also has negative externalities? You're free to disagree but I just stuck my finger in the air and it's pretty clear which way the wind is blowing.
Re: U.S. to give ransomware hacks similar priority as terrorism, official says
#495Earlier quoted context omitted.
> For example, software is still stuck in the dark ages where the idea is better training / better programmers / more punishment will prevent these sorts of failures. What is your source on this? This goes against what anyone at any company where I have worked at ever believed. No-fault root cause analysis, process improvements, inherently safer practices, languages, libraries is what every place aimed for. I don’t e…
> What is your source on this? See "Trust the programmer" https://beza1e1.tuxen.de/articles/spirit_of_c.html Also, a general belief among C++ programmers that better training is the answer to programming bugs. This belief is slowly fading, but it's got a long way to go. Scott Meyers' books on Effective C++ represent a lot of effort to educate programmers out of making mistakes. For example, from the table of contents…
I think the work of the people operating a system is just as important as the one of the programmer. You can build the very solid plane or software and then have it fail due to being operated in the wrong fashion.
The question is whether both sides are doing their best, within reason, to mitigate issues. The programmer doing everything right while the admins forget to patch for years won't change a thing. The opposite is true, patching or configuring correctly won't do a thing if the system is full of "built-in" holes.
It's not a stretch to think of a setup where specific conditions that define this "within reason" are established for software developers and administrators. It's what an audit should normally uncover: weaknesses in the process, points for improvement, etc. Only this time it would be in the form of general and specific guidelines that get progressively stronger as time passes. It's not a sure thing but it raises the bar enough for most ransomware attacks to become cost prohibitive for the attacker.
Re: U.S. to give ransomware hacks similar priority as terrorism, official says
#496Earlier quoted context omitted.
Agreed. I'm a bit tired of the victim blaming with security. It's physically impossible to build a house that can't be broken in to, and even harder for computer systems. Crime is a social problem, we can't rely on a dream world of mathematically perfect zero trust security.
It's surprising and disappointing to see this point of view here, particularly with so little evident dissent. Of course you can "break into" a typical computer system by gaining physical access to it, for example by breaking into the house that it's in and unscrewing the computer's case; but that's only metaphorically connected to what's going on here, which is that criminals are sending data over the internet to th…
> The problem is that our systems are architected so that even one exploitable bug anywhere in hundreds of millions of lines of code enables total and irreversible subversion of the system
A modern jet airliner uses about 1,500,000 bolts and screws. Imagine if they were designed so that a failure of any one of them could cause a catastrophic failure of the entire aircraft. Then imagine if people were defending it by saying “This is a metallurgy problem. There will always be the occasional improperly cast bolt or over tightened screw. To expect that to never happen is victim blaming”.
Re: U.S. to give ransomware hacks similar priority as terrorism, official says
#497Earlier quoted context omitted.
> Yes, building a safe airplane is doable. It didn't start out that way. And now only FAA/EASA etc. certified companies and individuals can build a commercial aircraft. And they can only build the aircraft they are certified to, using the same certified components, and the same certified tools. They cannot change any aspect of the construction without another round with the authorities. Let me know when the CIOs of l…
Certification/regulation is something orthogonal to the design methods used.
I disagree, mandated certification ensures that the budget required for certain design (and testing) methods is available.
And its precisely those methods that keep the planes in the sky.
Its not orthogonal, is a necessary prerequisite.
Re: U.S. to give ransomware hacks similar priority as terrorism, official says
#498Earlier quoted context omitted.
The US very much decides who, where, and what can be bought or sold in USD. Worldwide.
So if I give 10$ cash to buy something, the US government is right above my right shoulder approving that transaction? You realize that doesn't make any sense right.
This is the only scenario in which you will be able to exchange BTC for $. Literally in person.
If you don't see how this mean the price will crash, I don't know what to tell you.
Re: U.S. to give ransomware hacks similar priority as terrorism, official says
#499Earlier quoted context omitted.
Let's just hope it won't be the same kind of priority as "terrorist" was after 9/11, with useless wars, TSA and all the security theater.
> Let's just hope Is that the best USians have at this point? Hope? After "useless wars, TSA and all the security theater" the best you have is hope it will not repeat itself?
Delusions that it will not.
Re: U.S. to give ransomware hacks similar priority as terrorism, official says
#500Would a nationalized bug bounty program help here? Along with some compliance enforcement that the bounty is actually addressed, fulfilled, and payed by the vulnerable entity or the government (funded through some form of corporate tax). I haven't really thought out the details, but likely some kind of practical and effective threshold exists where a business entity in the US enters into mandatory participation. Genu…
Insiders can then defraud it without harming their own company much. Find bug, tell your "friend", friend reports it, money comes from communal pool.