Live data from Hacker News

US travel firm $4.5M ransom negotiation open chat

twitter.com

311–320 of 480 posts

Re: US travel firm $4.5M ransom negotiation open chat

#311
post #144

Earlier quoted context omitted.

https://en.wikipedia.org/wiki/Cryptocurrency_tumbler

What happens when crypto tumblers run away with the money

Tumble it in small amounts at a time. Maybe the tumbler runs away with a few hundred thousand but you are still left with millions.

Re: US travel firm $4.5M ransom negotiation open chat

#312

Earlier quoted context omitted.

Do you not tie yourself to your Bitcoin when you try to use it for something physical like turning it into cash or buying a physical asset? Can you not track all Bitcoins going in and out of a mixer?

When you use a mixer, there’s a delay between when you put your money in and when it comes back out. The mixing service randomly splits up the transaction into batches and sends them out at different times. So even if you know that somebody sent to a mixer (perhaps as an investigator you could find out mixer addresses by sending lots of transactions to the mixer service yourself), you wouldn’t be able to associate th…

>you could find out mixer addresses

Why would the mixer need to reuse addresses when you could create a brand new one each time.

Re: US travel firm $4.5M ransom negotiation open chat

#313
post #309
post #299

Earlier quoted context omitted.

The main one I know of is international money transfers (remittances). Usually these have to go through an oligopoly that sets the fees and exchange rates to be favorable to itself. This is the kind of market that's pretty big on the international scale, but it's completely boring and non-sensational to read about a bunch of people who are sending $400 to their moms on a regular basis.

As far as I know, nearly everyone uses Western Union (Transferwise etc. etc.) for that. Bitcoin is too costly* and complicated for most people. * Two set of fees to exchange crypto to fiat + transfer fee compared to one set of fiat currency exchange + transfer fee.

I recall these services used to be pretty crap, bitcoin added a bit of much needed competition

Re: US travel firm $4.5M ransom negotiation open chat

#314
How about good offline back ups? Then you don't have to pay and hope you get your data back. Of course you still need to to figure out how they got in and lock it down so it doesn't happen again and there will be downtime as things are restored. However your are already down at that point so that doesn't really make a difference and by paying you are encouraging the behavior.

Re: US travel firm $4.5M ransom negotiation open chat

#315
post #205

Earlier quoted context omitted.

1. Passing keys around risks the original sender (or anyone listening in) grabbing the money after 'payment', and voids any guarantees Bitcoin etc. might be able to make - the transaction isn't even listed on the chain. This would turn a 'trustless blockchain' to a 'non-blockchain relying on trust'. Assuming this transition can even be done (what would be the point of cryptocurrency in that case?), the result would b…

That implementation of offline transactions is a poor one, so the rebuttal would be too, but the reality is that bitcoin can work with offline transactions. You can create the transaction object and hand that over. Transferrable literally as a file. Instead of having over notes with the private key on them. Eventually that transaction will need to be settled onchain. This can work in a world without a familiar lookin…

If you only upload your transactions infrequently how do you prevent double spend attacks?

Re: US travel firm $4.5M ransom negotiation open chat

#316
post #135

Earlier quoted context omitted.

I'm just looking at how it is currently used. If after all these years there isn't a positive use-case to offset it, there might not be one at all.

That's because you live in a country with a functioning currency.

There are simpler solutions, such as dollar bills, or a centralised digital banking system in a trusted currency.

Re: US travel firm $4.5M ransom negotiation open chat

#317
post #17

Whilst paying the ransom is often advisable in specific cases like these, it’s absolutely a bad thing for society as a whole. Seeing successes like this will encourage organised crime to keep doing this, as they know there’s gonna be a big reward. It’s like the prisoners dilemma. If people didn’t pay the ransom, there wouldn’t be ransomware. But people don’t take precautions, so they have to pay the ransom, leading t…

To be honest, just how bad of a thing is this? It’s a direct financial punishment for a company with lax security practices. It encourages greater security practices. The money is funnelled to a criminal group, but what difference does it make? Some people consider the USG to be a criminal group; many people are out on the streets for that. My tax dollars directly go to corrupt crooks and nonexistent companies claimi…

It sucks for the people who got their personal information caught up in this. They do more than just encrypt your files, they typically siphon as much data as possible from the companies before they execute the ransom part.

Re: US travel firm $4.5M ransom negotiation open chat

#318

Earlier quoted context omitted.

Can you really not follow the trail from the mixers?

CipherTrace says they lost the trail on the twitter hackers when they threw the btc they scammed into mixers. On the other hand, the Feds arrested a kid in Florida, so my question is... how did they find him?

4chan. He wrote it there, afaik from a Twitter comment with screenshot posted many days ago before the Feds announced the kid.

Then bragged about it and went for more accounts. His friends left him when he went for the high profile accounts. I think it was organized on discord.

Re: US travel firm $4.5M ransom negotiation open chat

#319
post #120

Let this be a lesson to those that say bitcoin and other cryptocurrency has no real value outside of speculation. This kind of attack would be almost impossible in the pre-bitcoin era. The difficulty of receiving that volume of money in that short of a period of time in a difficult to trace manner is a new thing. We are entering a new era where crime can pay in very large sums with orders of magnitude less complexity…

>Let this be a lesson to those that say bitcoin and other cryptocurrency has no real value outside of speculation. >This kind of attack would be almost impossible in the pre-bitcoin era.... Instead democratizing currency, we're democratizing large scale crime. Just wanted to make this same point - right now, cryptocurrency has negative value for society. Perhaps this is a justification for banning the current impleme…

Speculative holding of Bitcoin is the answer to a simple question: "How do I profit from crime, without doing crime?"

Re: US travel firm $4.5M ransom negotiation open chat

#320

Earlier quoted context omitted.

Do you not tie yourself to your Bitcoin when you try to use it for something physical like turning it into cash or buying a physical asset? Can you not track all Bitcoins going in and out of a mixer?

500 unrelated accounts all deposit money into a single shared account. From that shared account, payments are made to 1,000 other accounts. None of the amounts match the original deposits, even when summed. Whose money is whose? This is an oversimplification, but it should give you a rough idea of how difficult it is to trace Bitcoin.

> This is an oversimplification, but it should give you a rough idea of how difficult it is to trace Bitcoin.

You'd be surprised. The feds have very advanced taint analysis if they have reason to go after you.

Post reply on HN