Live data from Hacker News

The push to ban ransom payments is gaining momentum

socket.dev

11–20 of 173 posts

Re: The push to ban ransom payments is gaining momentum

#14

Good. as someone who works in cybersecurity, I think hackers should get $0 from the victim, possibly get caught by police, and I think companies that get hacked should have to sit with their actions and DO BETTER for their customers.

Does that extend to makers of buggy software, rather than those who often have little choice in what they use.

Re: The push to ban ransom payments is gaining momentum

#15
post #5

I thought ransomware was a crime already? What would banning a crime do?

Read the title or any of the article: banning payments. In other words, if you’re a victim of ransomware you’re not allowed to pay off the attackers.

I see, I read it as banning the practice of "asking for ransom payments"

Re: The push to ban ransom payments is gaining momentum

#16
How about a push to mandate 2fa for any entity holding data covered by GDPR or at the very least medical records.

The United health care exploit was a password compromise as was the British library.

The EPA just released a report saying 70% of the water infrastructure has laughable vulnerabilities like default passwords: https://www.newsweek.com/drinking-water-warning-issued-natio...

Re: The push to ban ransom payments is gaining momentum

#17
post #2

Once companies are held accountable for the weapons and whatever else the money they paid in ransom gets spent on, things will finally change. Until then, we use the word "victim" with too much lenience. The secondary victims, the ones getting bombed, or the ones that will be targeted and threatened with the nukes that just got paid for with the ransom money, shouldn't be left out of the equation as they have been th…

Nukes? Not to hyperfixate lol i get your point but whyd you throw that in there?

It could work if we’re talking state-sponsored hackers.

North Korea is well-known for that, although I’m not sure about ransomware, and I wouldn’t be surprised if Russia were into it too now.

Re: The push to ban ransom payments is gaining momentum

#18
post #5

I thought ransomware was a crime already? What would banning a crime do?

Read the title or any of the article: banning payments. In other words, if you’re a victim of ransomware you’re not allowed to pay off the attackers.

heh, how long before state based attackers use this as a strategic tool to force supply line issues etc.

I mean they do already but now when they get paid they can "dob in" a payer for a secondary attack vector.

Re: The push to ban ransom payments is gaining momentum

#19
post #3

Does banning ransom payments really work? It just seems to create a service industry to pay on ransomed’s behalf.

Bing Bing Bing!!! We have a winner!

Legalized them, the FBI has to pay them for you, you have to give them 3x the cost of the payment. 1x to payment. 1x to finding people who committed the crime 1x to pay off everyone impacted.

Increasing the cost of not being secure is the only way the problem will be addressed.

Re: The push to ban ransom payments is gaining momentum

#20
post #2

Once companies are held accountable for the weapons and whatever else the money they paid in ransom gets spent on, things will finally change. Until then, we use the word "victim" with too much lenience. The secondary victims, the ones getting bombed, or the ones that will be targeted and threatened with the nukes that just got paid for with the ransom money, shouldn't be left out of the equation as they have been th…

Why not hold tax payers responsible as well?
Post reply on HN