Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Coinbase says hackers bribed staff to steal customer data, demanding $20M ransom

cnbc.com

Post reply on HN
Print view View original

411–420 of 550 posts

Re: Coinbase says hackers bribed staff to steal customer data, demanding $20M ransom

#411

Post by ArtTimeInvestor »

Kiro wrote: post #212
ArtTimeInvestor wrote: post #183

Earlier quoted context omitted.

When was the last time your passport was copied in Europe? I don't think that this is still legal under the GDPR.

All KYC processes require copying in Europe. There's nothing that's blanket illegal under GDPR. If you have consent you can collect and store whatever you want.

It's not that easy. The consent has to be freely given. And data collection has to be kept at a minimum.

If hotel staff says "Ok, last step we need to do to check you in is to copy your passport" that would probably neither count as freely given consent nor as keeping data collection to a minimum.

And KYC also does not mean you have to copy the passport of a person.

Re: Coinbase says hackers bribed staff to steal customer data, demanding $20M ransom

#412

Post by conductr »

AStonesThrow wrote: post #373
zbirkenbuel wrote: post #328

Earlier quoted context omitted.

I would have assumed an unknown caller was defined as any number not in your contacts. what is it instead?

In the realm of Caller ID, a phone number may be "PRIVATE" (or "WITHHELD") or "UNKNOWN". An "UNKNOWN" Caller ID cannot display any name nor any number, because... they are not known to the switch. Therefore, an unknown number that can be blocked/ignored by your phone or the app is one that doesn't support Caller ID's name or number functions. It doesn't have anything to do with who's in your Contacts app, because of…

There is a defined type “Unknown” which I think you’re describing but it’s Not exactly how the iOS feature works. It says let’s through those in your contacts or who you’ve had recent conversations with and Siri suggestions. It’s basically a dumb proxy for letting through people you might actually want to talk with. Except sometimes you don’t know who/where/when those calls are coming from and I haven’t spoken to them before.

Re: Coinbase says hackers bribed staff to steal customer data, demanding $20M ransom

#413

Post by bambax »

lm28469 wrote: post #408
mafriese wrote: post #403

> The threat actor appears to have obtained this information by paying multiple contractors or employees working in support roles outside the United States to collect information from internal Coinbase systems to which they had access in order to perform their job responsibilities Based on the information present in the breach, I think it's likely that the source was their customer support in the Philippines. Monthly…

> •Name, address, phone, and email;\ > blackmail each individual user Blackmail would be the least of my worries, in France we had at least five kidnappings/attempted kidnappings related to crypto investors since the beginning of the year.

Yes that's true but it's weird they only focus on crypto investors' families? There are many rich people in France, what's the deal with cryptobros?

Re: Coinbase says hackers bribed staff to steal customer data, demanding $20M ransom

#414

Post by conductr »

bdangubic wrote: post #372
conductr wrote: post #201

Earlier quoted context omitted.

It’s my biggest gripe. They can pretty accurately flag a number as Spam or Telemarketing but in the “Silence Unknown Callers” setting I can only silence every single unknown caller. I can’t silence every single number that’s not in my contacts. When the plumber calls to confirm he’s in route, my phone needs to ring. Stuff like that.

it is super fucking easy. it has been a decade since I answered an unknown number. if plumber calls (and I dont have her/his number stored) it goes to voicemail. I then call known company number. The communication is always one-way, I call you. I never answer. You follow this one very simple rule and you good :)

Glad it works for you, I’m not allergic to the phone like seemingly everyone else so I strive to minimize phone tag BS and would rather answer the calls I get and filter out known spam, it’s not rocket science it’s probably only 2 lines of code in the phone app

If call is spam and ignore spam option enabled, send call to voicemail.

That’s it, a simple line of code. Just make the option selectable and it’s done.

Re: Coinbase says hackers bribed staff to steal customer data, demanding $20M ransom

#415

Post by paranoidrobot »

bambax wrote: post #413
lm28469 wrote: post #408

Earlier quoted context omitted.

> •Name, address, phone, and email;\ > blackmail each individual user Blackmail would be the least of my worries, in France we had at least five kidnappings/attempted kidnappings related to crypto investors since the beginning of the year.

Yes that's true but it's weird they only focus on crypto investors' families? There are many rich people in France, what's the deal with cryptobros?

Because it's easier to move crypto than physical cash.

Re: Coinbase says hackers bribed staff to steal customer data, demanding $20M ransom

#416

Post by rglullis »

bambax wrote: post #413
lm28469 wrote: post #408

Earlier quoted context omitted.

> •Name, address, phone, and email;\ > blackmail each individual user Blackmail would be the least of my worries, in France we had at least five kidnappings/attempted kidnappings related to crypto investors since the beginning of the year.

Yes that's true but it's weird they only focus on crypto investors' families? There are many rich people in France, what's the deal with cryptobros?

It's easier and faster to send the money without having to go to the bank.

Re: Coinbase says hackers bribed staff to steal customer data, demanding $20M ransom

#417

Post by iamacyborg »

lm28469 wrote: post #408
mafriese wrote: post #403

> The threat actor appears to have obtained this information by paying multiple contractors or employees working in support roles outside the United States to collect information from internal Coinbase systems to which they had access in order to perform their job responsibilities Based on the information present in the breach, I think it's likely that the source was their customer support in the Philippines. Monthly…

> •Name, address, phone, and email;\ > blackmail each individual user Blackmail would be the least of my worries, in France we had at least five kidnappings/attempted kidnappings related to crypto investors since the beginning of the year.

And more than one finger sent in the post.

Re: Coinbase says hackers bribed staff to steal customer data, demanding $20M ransom

#418

Post by stringsandchars »

lm28469 wrote: post #408
mafriese wrote: post #403

> The threat actor appears to have obtained this information by paying multiple contractors or employees working in support roles outside the United States to collect information from internal Coinbase systems to which they had access in order to perform their job responsibilities Based on the information present in the breach, I think it's likely that the source was their customer support in the Philippines. Monthly…

> •Name, address, phone, and email;\ > blackmail each individual user Blackmail would be the least of my worries, in France we had at least five kidnappings/attempted kidnappings related to crypto investors since the beginning of the year.

This may seem callous, but isn't a large point of crypto that you are 'free' from the shackles imposed by the State?

And I guess that includes protection from criminals by the oppressive forces of the State (aka the police). In which case being kidnapped and having your fingers sent to your family is an integral part of your 'freedom'.

Re: Coinbase says hackers bribed staff to steal customer data, demanding $20M ransom

#419

Post by lm28469 »

stringsandchars wrote: post #418
lm28469 wrote: post #408

Earlier quoted context omitted.

> •Name, address, phone, and email;\ > blackmail each individual user Blackmail would be the least of my worries, in France we had at least five kidnappings/attempted kidnappings related to crypto investors since the beginning of the year.

This may seem callous, but isn't a large point of crypto that you are 'free' from the shackles imposed by the State? And I guess that includes protection from criminals by the oppressive forces of the State (aka the police). In which case being kidnapped and having your fingers sent to your family is an integral part of your 'freedom'.

The state takes a flat 30% tax on capital gains regardless of the source, I'd say they paid their fair share

Re: Coinbase says hackers bribed staff to steal customer data, demanding $20M ransom

#420

Post by mafriese »

bambax wrote: post #413
lm28469 wrote: post #408

Earlier quoted context omitted.

> •Name, address, phone, and email;\ > blackmail each individual user Blackmail would be the least of my worries, in France we had at least five kidnappings/attempted kidnappings related to crypto investors since the beginning of the year.

Yes that's true but it's weird they only focus on crypto investors' families? There are many rich people in France, what's the deal with cryptobros?

You can easily establish the connection from a bank account to a person. A connection from a crypto wallet to a person is extremely difficult. Money laundering with crypto is also much easier (and cheaper usually).
Post reply on HN