Earlier quoted context omitted.
I never answer my phone, also turned off sound except alarms a couple years ago
What about while job hunting?
Email or voice mail
Coinbase says hackers bribed staff to steal customer data, demanding $20M ransom
391–400 of 550 posts
Re: Coinbase says hackers bribed staff to steal customer data, demanding $20M ransom
#392Earlier quoted context omitted.
Can you show us that? Where the consumer is left with no money at all and bank does not take the loss.
Go Zelle someone and try to get the money back.
When I was "hacked" two years ago, their final hurrah before I finally got everything offline for a time, they sent zelles as much as they could and was able to recover it without any loss on my end.
Re: Coinbase says hackers bribed staff to steal customer data, demanding $20M ransom
#393Earlier quoted context omitted.
If you had any significant assets on Coinbase at any time prior to this breach, spear phishing is the least of your worries. Coinbase not only leaked your full name and address, they also gave up your balances, your transaction history, and images of your government identification. People with "significant" crypto balances are being assaulted on the street and in their own homes, and family members are being kidnappe…
Companies should seriously consider implementing GDPR even in the US, it certainly made taking data dumps of customer data a lot harder and certainly private images like Government IDs were encrypted on disk. I’m surprised at the lack of security if I’m honest, at Yahoo! almost nobody had access to prod user data. Essentially you cannot trust Coinbase IMO, might move the few hundred dollars of BTC out of there :-)
> Companies should seriously consider implementing GDPR even in the US
... and save the data in US cloud where everybody can access it.
It is really funny how FAANG can get away with data colkection in spite of GDPR.
Re: Coinbase says hackers bribed staff to steal customer data, demanding $20M ransom
#394Earlier quoted context omitted.
If you had any significant assets on Coinbase at any time prior to this breach, spear phishing is the least of your worries. Coinbase not only leaked your full name and address, they also gave up your balances, your transaction history, and images of your government identification. People with "significant" crypto balances are being assaulted on the street and in their own homes, and family members are being kidnappe…
And yet, Coinbase goes Scott free Someone, someone at that company should be going to prison for negligence
> Someone, someone at that company should be going to prison for negligence
That's not how capitalism works. /s
Re: Coinbase says hackers bribed staff to steal customer data, demanding $20M ransom
#395Earlier quoted context omitted.
That problem is trivially solved by backups.
Backups don't solve seed phrase phishing for example.
As opposed to the bank's ...? Or your other account's ..., what exactly, passwords? Phising is everywhere. How many times have you heard the elderly have their money stolen, both online and in real life? It happened to my grandma. The mailman is bringing her own pension as cash, and guess what, he has scammed my grandma for years! The food delivery guy who has been delivering lunch for my grandma, guess what he did? He scammed my grandma out of her money! We are talking about cash, right now, and no phising involved, just good old "lying".
Re: Coinbase says hackers bribed staff to steal customer data, demanding $20M ransom
#396Earlier quoted context omitted.
Watching crypto enthusiasts run into every problem that society already tackled with in the past when developing currency and its controls, and then coming up with solutions that look exactly the same as what dirty fiat currency uses, has been a source of much entertainment the past few years
> every problem that society already tackled with in the past More KYC creates more problems while solving some others. Why didn't the same society despite KYC/AML tackle the problem pointed at in a previous comment? "Florida teens kidnap Las Vegas man, drive him to Arizona desert, steal $4M in cryptocurrency"[1] Why is there this crime? Without mandatory KYC laws, this particular attack would be near pointless. No n…
> Without mandatory KYC laws, this particular attack would be near pointless. No name tied to account, bookkeeping doesn't archive wire transaction details for the past 10 years.
But this attack is already fully pointless with traditional finance. You can't steal someone's bank account at gun point.
Conversely, even without KYC, blockchain based currencies paint a huge target on anyone who uses a small number of wallets to store a large amount of money. Dedicated criminals and even state actors can figure out who owns the wallets by tracking transaction patterns, getting information from vendors, etc. As long as you're actually using your crypto wallets (unlike, say, Satoshi), you can quite easily be tracked. Anyone who you order a pizza from in BTC knows the address of whoever has that wallet. Sure, you can take a lot of steps to protect yourself from it, but it's hard, and one slip-up is all it takes. Opsec is not for the careless.
Also, crypto's reliance on secrets instead of legal personhood to ascertain ownership fundamentally makes it prone to stealing money in this way. Since the money doesn't belong to a legal person, but to whoever knows some secret key, that key can be stolen from whoever has it through simple violence. Even if you're extremely careful not to leak details of your accounts, use XMR for untraceable payments, etc - someone who is physically close to you could see that you're rich and decide to attack just on the chance that you may have crypto, without knowing anything specific.
Re: Coinbase says hackers bribed staff to steal customer data, demanding $20M ransom
#397Earlier quoted context omitted.
so, the part that makes bitcoin useful to 99% of the people is the non-decentralized part. Sounds like an appendix.
Only because of US law. It didn't have to be this way; the US wanted to destroy Bitcoin as a currency because it threatened their surveillance state, and they effectively have.
No entity is obligated to enforce contracts in BTC. The real reason what makes a currency valuable.
Re: Coinbase says hackers bribed staff to steal customer data, demanding $20M ransom
#398I have been receiving regular spear phishing calls from these guys, or someone who bought the leaked data, with classic tactics like claiming that I need to confirm a potentially fraudulent transaction. They speak perfect English with an American accent, sound very friendly, and have knowledge of your account balance. Thankfully on the first call I realized it was a scam right away, and Google's call screening featur…
If you had any significant assets on Coinbase at any time prior to this breach, spear phishing is the least of your worries. Coinbase not only leaked your full name and address, they also gave up your balances, your transaction history, and images of your government identification. People with "significant" crypto balances are being assaulted on the street and in their own homes, and family members are being kidnappe…
[dead]
Re: Coinbase says hackers bribed staff to steal customer data, demanding $20M ransom
#399> the Company has preliminarily estimated expenses to be within the range of approximately $180 million to $400 million relating to remediation costs
Hopefully companies take this as a lesson about bottom dollar outsourcing your CS.
For those amounts, they could afford to have hired regionally local support agents, and paid them well over industry standard...
Re: Coinbase says hackers bribed staff to steal customer data, demanding $20M ransom
#400The problem is that it seems like the data that leaked is also the data that would be used to do account recovery. And what that means is that 1) If you lose access to your account (through either your own fault, or coinbases fault) that the process of recovering it may not be so straightforward anymore. 2) Hackers can try to “recover” accounts now using this leaked info. This is a huge problem. What coinbase needs a…
If you ever sent money to or from a wallet you control, I'd think a reliable recovery factor would be to use that key to sign a message that Coinbase can verify with the address in their records. Cryptocurrency after all is just another PKI.
And dumb-dumb me just realized how trivial that would be to break. Social engineer someone into sending/receiving money to/from your wallet then pretend to be them requesting an account recovery.
Coinbase would have to make you sign a challenge ahead of time that would mark the wallet as the authorized public key for your account.