So there's that woman I follow who used to work in hostage and ransom negotiation business, and she's adamant there's no such thing as "no negotiations with terrorists" no matter public rhetoric or legislation. When push comes to shove, side channels and loopholes are inevitably found and third party contractors like her are getting hired. I strongly suspect this too will end up mostly a jurisdiction/accounting nuanc…
Chris Voss, a former FBI hostage negotiator, discussed this policy on Lex Friedman's podcast. Here's the clip: https://www.youtube.com/watch?v=gm4hb5yNxyE The policy has been widely misreported as "we don't negotiate with terrorists", which is wrong. The actual policy is we won't make concessions to terrorists.
Alliance of 40 countries to vow not to pay ransom to cybercriminals, US says
181–190 of 200 posts
Re: Alliance of 40 countries to vow not to pay ransom to cybercriminals, US says
#182Earlier quoted context omitted.
Ayup, another example I can remember of is that swedish professor who went ahead and hired services of a PMC to extract her grad student and his family from Iraq[0]. Background: the student vent to visit his family back in Iraq as his town was under an ISIS attack, which is how he ended up getting stuck there. 0. https://www.nbcnews.com/news/world/how-swedish-professor-hel...
The untold stories from the security department of all the FAANGs from the invasion of Ukraine would take more movies than there are Marvel movies.
There were no “Zero Dark Thirty” style extractions.
Re: Alliance of 40 countries to vow not to pay ransom to cybercriminals, US says
#183Earlier quoted context omitted.
Have fun being the DA who presses charges against a mother of three who paid so their kids could see daddy again instead of watching him get beheaded by terrorists. It's sounds nice in the abstract; in practice it's political suicide.
> It's sounds nice in the abstract; in practice it's political suicide. Depends on how you spin it. I suspect it would be quite easy to spin the narrative on this one. "So you knowingly funded a terrorist group that's likely going to use the money to commit further crimes against US citizens?" or something of the sort. Have some experts testify on that too, preferably ones in officers uniform.
Becoming as inhuman as your opponent is not the answer.
Re: Alliance of 40 countries to vow not to pay ransom to cybercriminals, US says
#184Earlier quoted context omitted.
I know those are traditionally buzz words but are they here? Trying to analyze traditionally anonymous payment methods that are virtual the only way randsomware is paid off seems like not a crazy idea.
It's not crazy, but tracing blockchain transactions has been done since blockchains were invented. I'm not sure if new AI techniques are helpful or not.
Re: Alliance of 40 countries to vow not to pay ransom to cybercriminals, US says
#185Earlier quoted context omitted.
I wish my health provider had paid the ransom. They screwed up and got hacked and wouldn’t or couldn’t pay the ransom, now the entire clinic has no health records for their patients. My doctor can’t see any health info older than a few years. I couldn’t believe what she was telling me.
The randsomware seems like a side issue. Evidently, your health provider doesn't care that much about your health records. Even ignoring security issues, they had no reliable backup. A fire would have produced this result.
Re: Alliance of 40 countries to vow not to pay ransom to cybercriminals, US says
#186Re: Alliance of 40 countries to vow not to pay ransom to cybercriminals, US says
#187Earlier quoted context omitted.
>...there's no such thing as "no negotiations with terrorists" no matter public rhetoric or legislation. I've heard this as well. A professor was flying into a less than stable area or Afghanistan and for some reason they were descending just like a normal commercial flight. "What are you doing, we're going to get shot down!". He was used to a steep descent or a spiral to the runway to minimize the risk of getting hi…
You have to wonder how much of that transaction is saving face? The warlord doesn't have to deal with the messy business of trying to shoot down jets belonging to a well-funded army; the military doesn't have to deal with the difficult business of engaging a warlord with local connections and support. Both sides get to wink and imply that they each got the better end of a "business deal". It's Clausewitz in reverse -…
Re: Alliance of 40 countries to vow not to pay ransom to cybercriminals, US says
#188Earlier quoted context omitted.
> there absolutely will be a legal way that you can't do much about No, that’s what the sanctions threat is for. It may be possible. But now you’re in the company of money launderers and terrorism financiers. To be clear, I don’t think this is necessary. But it’s naïve to imagine it’s beyond D.C.’s capacity.
DC doesn't go after these "security consulting firms located in non-signatory states" just precisely because they want to be able to use them if the need arises.
Also, there have been some enforcement actions on intermediaries for facilitating such payments - e.g. https://home.treasury.gov/news/press-releases/jy0471
Re: Alliance of 40 countries to vow not to pay ransom to cybercriminals, US says
#189Earlier quoted context omitted.
I wish my health provider had paid the ransom. They screwed up and got hacked and wouldn’t or couldn’t pay the ransom, now the entire clinic has no health records for their patients. My doctor can’t see any health info older than a few years. I couldn’t believe what she was telling me.
The randsomware seems like a side issue. Evidently, your health provider doesn't care that much about your health records. Even ignoring security issues, they had no reliable backup. A fire would have produced this result.
Re: Alliance of 40 countries to vow not to pay ransom to cybercriminals, US says
#190So there's that woman I follow who used to work in hostage and ransom negotiation business, and she's adamant there's no such thing as "no negotiations with terrorists" no matter public rhetoric or legislation. When push comes to shove, side channels and loopholes are inevitably found and third party contractors like her are getting hired. I strongly suspect this too will end up mostly a jurisdiction/accounting nuanc…
Chris Voss, a former FBI hostage negotiator, discussed this policy on Lex Friedman's podcast. Here's the clip: https://www.youtube.com/watch?v=gm4hb5yNxyE The policy has been widely misreported as "we don't negotiate with terrorists", which is wrong. The actual policy is we won't make concessions to terrorists.