Live data from Hacker News

Bitcoin trail, Google cookies and Uber Eats orders help tie man to Steam malware

theverge.com

1–10 of 47 posts

Re: Bitcoin trail, Google cookies and Uber Eats orders help tie man to Steam malware

#3

Criminals should have used Monero. Victims should have not keep crypto on desktops. They are much less secure than Mobile.

> Victims should have not keep crypto on desktops. They are much less secure than Mobile.

Unless it's Qubes OS.

Re: Bitcoin trail, Google cookies and Uber Eats orders help tie man to Steam malware

#4
post #3

Criminals should have used Monero. Victims should have not keep crypto on desktops. They are much less secure than Mobile.

> Victims should have not keep crypto on desktops. They are much less secure than Mobile. Unless it's Qubes OS.

True. How viable is steam on Qubes?

Re: Bitcoin trail, Google cookies and Uber Eats orders help tie man to Steam malware

#6
post #5

He was smart/determined enough to risk it all. Why didn't he just try find a job that pays $200k/year ? Why play into the stereotypes ?

> He was smart/determined enough to risk it all.

Desperate people are willing to risk it all, and usually smart people aren't desperate.

Re: Bitcoin trail, Google cookies and Uber Eats orders help tie man to Steam malware

#7
I heard Monero can help against blockchain analysis (though less so if you buy from adversaries). Unfortunately it looks like blockchain analysis was not the attack vector here, but rather buying gift cards through an incompetent intermediary.

Re: Bitcoin trail, Google cookies and Uber Eats orders help tie man to Steam malware

#8

Criminals should have used Monero. Victims should have not keep crypto on desktops. They are much less secure than Mobile.

Modern macOS devices have a secure element just as good as iOS devices. Almost nobody makes use of it, though.

(I haven't seen anything yet that uses the secure element to control access to a wallet. Are there any technical obstacles to keeping the keys out of main memory?)

Re: Bitcoin trail, Google cookies and Uber Eats orders help tie man to Steam malware

#9
post #5

He was smart/determined enough to risk it all. Why didn't he just try find a job that pays $200k/year ? Why play into the stereotypes ?

> didn't he just try find a job that pays $200k/year ?

you really think it's that easy?

Re: Bitcoin trail, Google cookies and Uber Eats orders help tie man to Steam malware

#10
This underscores a major issue with commercial software like Steam and games obtained therein. You cannot trust that software not to maliciously scan your device for secrets such as crypto wallets or other information. Ideally, you want to run apps like Steam, Discord, Zoom and whatever else does not come from a trusted distribution repo as a separate user. This is not always convenient however, and the compromise I adopted on my gaming PC is to bubblewrap Steam. Do not mount things like /home and devices games should not be using in the sandbox.
Post reply on HN