Live data from Hacker News

Coinbase says hackers bribed staff to steal customer data, demanding $20M ransom

cnbc.com

541–550 of 550 posts

Re: Coinbase says hackers bribed staff to steal customer data, demanding $20M ransom

#542
post #384

Earlier quoted context omitted.

> every problem that society already tackled with in the past More KYC creates more problems while solving some others. Why didn't the same society despite KYC/AML tackle the problem pointed at in a previous comment? "Florida teens kidnap Las Vegas man, drive him to Arizona desert, steal $4M in cryptocurrency"[1] Why is there this crime? Without mandatory KYC laws, this particular attack would be near pointless. No n…

Yea see the problem is that you are arguing under some implicit idea that you’ll just accept the results of the system. Every single crypto property I’ve talked to has ended up at a point where they believes that someone cheated them outside the bounds of the system and then look to authority figures to rectify the situation, like the government. If you are someone who actually believes that crypto transactions shoul…

> unmodifiable by any third party then what you said makes sense.

You are right, I do. The same reason I don't think the cryptocurrency is for everyone. And the reason I accept this, is because "traditional institutions" still can be "easily" gamed: enough cases of social engineering around to be considered a norm. Where law enforcement won't try enough or can't do enough to return the money transferred to a hostile account. Following this, if someone smart enough to avoid the banking scams, they are probably smart enough to manage their own wallet safely.

Re: Coinbase says hackers bribed staff to steal customer data, demanding $20M ransom

#543

Earlier quoted context omitted.

> every problem that society already tackled with in the past More KYC creates more problems while solving some others. Why didn't the same society despite KYC/AML tackle the problem pointed at in a previous comment? "Florida teens kidnap Las Vegas man, drive him to Arizona desert, steal $4M in cryptocurrency"[1] Why is there this crime? Without mandatory KYC laws, this particular attack would be near pointless. No n…

> Without mandatory KYC laws, this particular attack would be near pointless. No name tied to account, bookkeeping doesn't archive wire transaction details for the past 10 years. But this attack is already fully pointless with traditional finance. You can't steal someone's bank account at gun point. Conversely, even without KYC, blockchain based currencies paint a huge target on anyone who uses a small number of wall…

> the address of whoever has that wallet.

Good points overall, thank you. This one could be managed by wallet software that'd do its own account tracing in order to separate your histories by generating new addresses for incoming transfers.

> physically close to you could see that you're rich and decide to attack just on the chance

The wearers of premium watches or smartphones don't seem to be concerned for their safety. For an increased payout they could be followed to their home. I think https://xkcd.com/538/ strucks either way.

... I think this is a good counterargument: what's the difference between a wallet and a banking account when everyone today can issue a wire transfer from the comfort of their home. Instant payments and all that. It just adds an extra step of waiting a couple more minutes for the transaction to come through. I assume the money laundering step is figured out by the criminals doing this to you.

Re: Coinbase says hackers bribed staff to steal customer data, demanding $20M ransom

#544

Earlier quoted context omitted.

It’s my biggest gripe. They can pretty accurately flag a number as Spam or Telemarketing but in the “Silence Unknown Callers” setting I can only silence every single unknown caller. I can’t silence every single number that’s not in my contacts. When the plumber calls to confirm he’s in route, my phone needs to ring. Stuff like that.

This could have been solved with regulation. Mandate delivery of all available phone call metadata to every digital telephone. Mandate that mobile phone operating systems must expose that data to apps approved by the user. We'd have hundreds of enshittification-ready VC-backed apps to fix spam calls overnight. Instead, we got STIR/SHAKEN mandates, which is just a soft way of having the legacy telcos "promise to fix i…

I believe there are Phone app alternatives, I just don’t trust them

I feel like Apples M.O. on software is to build the lowest passable set of features in their apps, never enhance them, allow third parties to delve into the high functionality/spec software. Mail is horrible, Camera good enough for most people, for me personally even Safari is in this camp; I’d swap any of those for a third party solution without much thought. Phone app becomes a bit to much of a security risk to use a third party, such that I’d never even consider leaving the default Phone app.

Re: Coinbase says hackers bribed staff to steal customer data, demanding $20M ransom

#545

Earlier quoted context omitted.

Taxi cab dispatchers will do this for sure. They do callbacks to “confirm” your ride, especially when busy, because if you don’t answer, they simply drop your request on the sticky office floor.

this is a loss of business for them, not my problem. it is 2025, if they do not have map where i can track where they are etc.. imma not going to be using that service...

So this app that millions of people use, probably most of the ~1.4 billion iPhone users… instead of making some minor edits to the settings to make it better for a lot of people, the solution is we all just need to use the app the way you do?

Not even going to consider that some people are more phone dependent and not just fielding an occasional call from their lost dasher or uber driver. Overly simplistic view on the world, you need to think beyond your use cases and make software that is beneficial to the entire user base. It’s the whole point of having a settings section of the app, to allow some custom behaviors tailored to your needs and some you won’t use because they are tailored towards someone else’s needs

Re: Coinbase says hackers bribed staff to steal customer data, demanding $20M ransom

#546

Earlier quoted context omitted.

> •Name, address, phone, and email;\ > blackmail each individual user Blackmail would be the least of my worries, in France we had at least five kidnappings/attempted kidnappings related to crypto investors since the beginning of the year.

This may seem callous, but isn't a large point of crypto that you are 'free' from the shackles imposed by the State? And I guess that includes protection from criminals by the oppressive forces of the State (aka the police). In which case being kidnapped and having your fingers sent to your family is an integral part of your 'freedom'.

It's simply about separating money and state. It's imperative that this happens.

Re: Coinbase says hackers bribed staff to steal customer data, demanding $20M ransom

#549
post #361

Earlier quoted context omitted.

Did the employee ship the feature this against their employer's will? 'Cause if so, I'm not sure we would say the company shipped it.

If an Amazon Delivery driver murders someone in their home while working would we say "Amazon Murdered an Old Lady" ?

? No...we wouldn't. No US paper would use that headline, anyway. Maybe it's different in other countries.
Post reply on HN