Live data from Hacker News

Massachusetts Steamship Authority hit by ransomware attack; ferries delayed

nbcboston.com

11–20 of 267 posts

Re: Massachusetts Steamship Authority hit by ransomware attack; ferries delayed

#11
post #8

Time to ban bitcoin. https://newrepublic.com/article/162589/ban-bitcoin-cryptocur...

Nope, no point banning the thing the criminals use, because they don’t follow the law anyway. Ban paying ransoms, the corporations are much more likely to follow the law.

They don't have to ban BTC, they will just squeeze any company that provides a fiat off-ramp for BTC. The government has done this for decades, just ask the legal MJ business or sex adjacent workers.

Re: Massachusetts Steamship Authority hit by ransomware attack; ferries delayed

#12
post #3

I have to wonder: Are there CTOs or IT heads going into board meetings or other meetings, and telling people that these systems are secure? Because if so, they need to be tried for fraud. If it's on the internet, it is not secure.

So your solution to transient disruptions in availability is to make your services permanently unavailable?

Re: Massachusetts Steamship Authority hit by ransomware attack; ferries delayed

#13

How exactly are the ransoms even paid out? I would assume cryptocurrencies, but before those existed how did they pay out? I'm not sure what it would be called, but has there been any investigation in a sort of "transparent by default" database system? Ideally if this were possible people wouldn't need to care about data being stolen (though in this case it's unclear what the attack did, but many times it's more like…

The ransomware typically replaces your computer screen with a unique crypto address.

The remote server knows to unlock your computer and cleanse it of the ransomware upon receipt of payment.

Many also leave a marker on your system/network preventing reinfection. Most ransomware is from the same vendor rented out which prevents reinfection, for now.

Re: Massachusetts Steamship Authority hit by ransomware attack; ferries delayed

#14
post #3

I have to wonder: Are there CTOs or IT heads going into board meetings or other meetings, and telling people that these systems are secure? Because if so, they need to be tried for fraud. If it's on the internet, it is not secure.

It's not the IT workers saying that their secure, it's us telling the business that we need X dollars to mitigate risk of Y. And then the accounting people are like "But it hasn't happened yet, why would we pay to prevent something that hasn't happened yet!???"

Re: Massachusetts Steamship Authority hit by ransomware attack; ferries delayed

#15
post #8

Time to ban bitcoin. https://newrepublic.com/article/162589/ban-bitcoin-cryptocur...

Nope, no point banning the thing the criminals use, because they don’t follow the law anyway. Ban paying ransoms, the corporations are much more likely to follow the law.

If the victim has no way to pay the ransom, there will be no point in trying to blackmail them.

If you ban paying ransoms, desperate people will just do it in secret, something bitcoin works hard to enable.

Re: Massachusetts Steamship Authority hit by ransomware attack; ferries delayed

#16
post #3

I have to wonder: Are there CTOs or IT heads going into board meetings or other meetings, and telling people that these systems are secure? Because if so, they need to be tried for fraud. If it's on the internet, it is not secure.

So your solution to transient disruptions in availability is to make your services permanently unavailable?

Services can be available, and not reliant on internet connected services.

Imagine if all the hacks we've seen in the last year happened all at once. We'd be screwed.

Re: Massachusetts Steamship Authority hit by ransomware attack; ferries delayed

#17

A federal ban on paying ransomeware would reduce the incentive to commit these attacks.

It would cause companies to pay secretly and illegally instead, something which cryptocurrencies enable.

Ban cryptocurrencies. They are the cause of the ransomware epidemic.

Re: Massachusetts Steamship Authority hit by ransomware attack; ferries delayed

#19

A federal ban on paying ransomeware would reduce the incentive to commit these attacks.

It would cause companies to pay secretly and illegally instead, something which cryptocurrencies enable. Ban cryptocurrencies. They are the cause of the ransomware epidemic.

Unless they were globally banned, companies could secretly and illegally pay ransoms in them anyways.

Re: Massachusetts Steamship Authority hit by ransomware attack; ferries delayed

#20

A federal ban on paying ransomeware would reduce the incentive to commit these attacks.

It would cause companies to pay secretly and illegally instead, something which cryptocurrencies enable. Ban cryptocurrencies. They are the cause of the ransomware epidemic.

> Ban cryptocurrencies.

This is meant sincerely, not glibly: How? How can cryptocurrencies be banned in any meaningful sense?

We can "ban" them in a legal sense ("Use of cryptocurrencies are illegal after 1 Jan 2022"), great. But how can they be practically banned so long as computers themselves are not invaded by governments to observe every detail of their operation and private overlay networks are still technically feasible?

Post reply on HN