531–540 of 550 posts
Earlier quoted context omitted.
I would be very happy to do this. Fine, make it optional. I actually would love a version of cold storage that is: never release this money unless I personally travel to an office if NYC and authorize it.
Just buy sone gold bars, and bury them in your yard.
Earlier quoted context omitted.
If you had any significant assets on Coinbase at any time prior to this breach, spear phishing is the least of your worries. Coinbase not only leaked your full name and address, they also gave up your balances, your transaction history, and images of your government identification. People with "significant" crypto balances are being assaulted on the street and in their own homes, and family members are being kidnappe…
Why is this such an issue with crypto? Wealth status is often very well known for public figures and entrepreneurs. People are driving around in $200k cars. Is it due to the liquidity of cryptocurrencies that $5 wrench attacks work better?
> The threat actor appears to have obtained this information by paying multiple contractors or employees working in support roles outside the United States to collect information from internal Coinbase systems to which they had access in order to perform their job responsibilities Based on the information present in the breach, I think it's likely that the source was their customer support in the Philippines. Monthly…
I suspect to see America in chaos from these disruptions in the very near future.
Earlier quoted context omitted.
Can you show us that? Where the consumer is left with no money at all and bank does not take the loss.
Go Zelle someone and try to get the money back.
Earlier quoted context omitted.
They main defense against internal attacks is bookkeeping. Banks have been dealing with this for thousands of years. I recommend the corresponding chapter in Security Engineering by Ross Anderson: https://www.cl.cam.ac.uk/archive/rja14/Papers/SEv3-ch12.pdf
Bookkeeping will alert you to employees stealing your money. It won't alert you to employees selling information.
Earlier quoted context omitted.
How long do you think it takes to create an account, get your KYC documents verified, get your trading and withdrawal limits raised to a million or more, transfer funds from your brokerage account, buy tokens and then re-verify when you try to transfer the tokens out of the exchange? You'd be lucky to complete this in less than a week.
It takes about 3 days on kraken. Much less than a week.
Earlier quoted context omitted.
I just switched to iPhone from a pixel device and I’m shook by all the spam calls. How do iPhone users deal with this?
It’s my biggest gripe. They can pretty accurately flag a number as Spam or Telemarketing but in the “Silence Unknown Callers” setting I can only silence every single unknown caller. I can’t silence every single number that’s not in my contacts. When the plumber calls to confirm he’s in route, my phone needs to ring. Stuff like that.
We'd have hundreds of enshittification-ready VC-backed apps to fix spam calls overnight.
Instead, we got STIR/SHAKEN mandates, which is just a soft way of having the legacy telcos "promise to fix it for you."
Earlier quoted context omitted.
Why do you see this as the fault of Coinbase? Do other companies somehow have employees that are immune to bribes and blackmail? This is due to US Government KYC laws that forced Coinbase to associate government identification with all accounts. No crypto company required ID until they were forced to.
The US Government didn't provide high-volume, bulk access to this extremely sensitive information to contractors in foreign countries with no controls over their ability to mass-exfiltrate the data. Coinbase is the entity that set up this dangerous system. Coinbase did it because it was cheap for them, not because they were being trustworthy custodians of information that put their customers at risk. Sure, yes, obvio…