Live data from Hacker News

Bitcoin trail, Google cookies and Uber Eats orders help tie man to Steam malware

theverge.com

11–20 of 47 posts

Re: Bitcoin trail, Google cookies and Uber Eats orders help tie man to Steam malware

#11
post #5

He was smart/determined enough to risk it all. Why didn't he just try find a job that pays $200k/year ? Why play into the stereotypes ?

Yeah, clearly risking it all wasn't the smart play here, as evidenced by the fact he got caught.

A lot of people are willing to tolerate risk, that hardly makes them useful. Frequently the opposite.

Re: Bitcoin trail, Google cookies and Uber Eats orders help tie man to Steam malware

#12
post #9
post #5

He was smart/determined enough to risk it all. Why didn't he just try find a job that pays $200k/year ? Why play into the stereotypes ?

> didn't he just try find a job that pays $200k/year ? you really think it's that easy?

Claude get me a job that pays $200k/yr. Make no mistakes.

Re: Bitcoin trail, Google cookies and Uber Eats orders help tie man to Steam malware

#14
post #5

He was smart/determined enough to risk it all. Why didn't he just try find a job that pays $200k/year ? Why play into the stereotypes ?

It is honestly much easier to spread malware or hack companies than it is to make 200k/year from a company.

Now with AI, you can accelerate this so much. The only thing holding back thousands of new threat actors from doing the same is Opsec, its hard.

Re: Bitcoin trail, Google cookies and Uber Eats orders help tie man to Steam malware

#15

I heard Monero can help against blockchain analysis (though less so if you buy from adversaries). Unfortunately it looks like blockchain analysis was not the attack vector here, but rather buying gift cards through an incompetent intermediary.

Not really an "incompetent intermediary", Bitrefill, the company used for buying gift cards with Bitcoin received legal requests to identify the user. Bitrefill doesn't proclaim insane privacy protections, they are based out of Sweden but aren't immune to being requested to provide the information.

Monero could of helped, although its not easy to transfer BTC to Monero without P2P trades, as effectively every exchange requires KYC. Those source and destination wallet addresses are tainted, you wouldn't be able to deposit on any mainstream exchange and if they do, its for a honey pot purpose.

Re: Bitcoin trail, Google cookies and Uber Eats orders help tie man to Steam malware

#16
post #5

He was smart/determined enough to risk it all. Why didn't he just try find a job that pays $200k/year ? Why play into the stereotypes ?

>Why didn't he just try find a job that pays $200k/year ?

Probably was not able to get into MIT or another prestigious school that many of those companies look for on a resume.

Re: Bitcoin trail, Google cookies and Uber Eats orders help tie man to Steam malware

#17
post #5

He was smart/determined enough to risk it all. Why didn't he just try find a job that pays $200k/year ? Why play into the stereotypes ?

>Why didn't he just try find a job that pays $200k/year ? Probably was not able to get into MIT or another prestigious school that many of those companies look for on a resume.

None of my peers went to any school of note, nor did I. A fair bit of community college, some lower ranked state unis, and one guy did a bootcamp.

All well above 200k.

Re: Bitcoin trail, Google cookies and Uber Eats orders help tie man to Steam malware

#18
post #10

This underscores a major issue with commercial software like Steam and games obtained therein. You cannot trust that software not to maliciously scan your device for secrets such as crypto wallets or other information. Ideally, you want to run apps like Steam, Discord, Zoom and whatever else does not come from a trusted distribution repo as a separate user. This is not always convenient however, and the compromise I…

This is what my Steam Deck is for. There's no gap like air gap.

Re: Bitcoin trail, Google cookies and Uber Eats orders help tie man to Steam malware

#19
post #10

This underscores a major issue with commercial software like Steam and games obtained therein. You cannot trust that software not to maliciously scan your device for secrets such as crypto wallets or other information. Ideally, you want to run apps like Steam, Discord, Zoom and whatever else does not come from a trusted distribution repo as a separate user. This is not always convenient however, and the compromise I…

In theory you could change the steam command line fpr each game and have them launch in bubblewrap. Though I'm not sure how well that would play with graphics drivers. It might be friendly with AMD, but my experience is that NVIDIA is a pain to have play nice with containers.

Re: Bitcoin trail, Google cookies and Uber Eats orders help tie man to Steam malware

#20
post #18
post #10

This underscores a major issue with commercial software like Steam and games obtained therein. You cannot trust that software not to maliciously scan your device for secrets such as crypto wallets or other information. Ideally, you want to run apps like Steam, Discord, Zoom and whatever else does not come from a trusted distribution repo as a separate user. This is not always convenient however, and the compromise I…

This is what my Steam Deck is for. There's no gap like air gap.

Dedicated hardware is definitely the most secure option, but realistically it is even less convenient than a separate user. You can't realistically play graphically intensive games on a Deck, and separate workstations are very unaffordable at the moment.
Post reply on HN