Coinbase: Responding to Firefox 0-days in the wild

Post by ggg3 » Sat, Aug 10, 2019, 2:11 AM UTC

ryacko wrote: post #10

londons_explore wrote: post #8

Coinbase should be hiring pentesters and giving them employee level access - even access to commit and deploy code. Any insider shouldn't be able to steal more than the hot wallet, and even that should be hard. I actually wouldn't put much effort into border security. At coinbases level of risk, evildoers will have no qualms bribing an employee to install a backdoor in their machine.

The trouble is finding someone to bribe who won’t suddenly start buying new things.

Post by wyldfire » Sat, Aug 10, 2019, 2:46 AM UTC

arcticbull wrote: post #25

notriddle wrote: post #24

Earlier quoted context omitted.

"We didn't literally start out with trading cards."

That's not a great one, Nintendo started out as a playing card company after all. Where you start is quite irrelevant. It's where you end up that matters, and I think MtGox demonstrates that quite clearly.

Post by TylerE » Sat, Aug 10, 2019, 3:11 AM UTC

hollerith wrote: post #54

wmf wrote: post #50

Earlier quoted context omitted.

BCH is and will be mined proportionately to its price; since its price is far lower than BTC it also has far lower security.

OK, but I would've guessed that the reward for hijacking BCH's blockchain would be proportionally lower. And please keep in mind the context of my first comment: I was replying to the assertion that the mere fact that Coinbase continues to let its customers trade in BCH is evidence that Coinbase is run by idiots.

Post by nostrademons » Sat, Aug 10, 2019, 3:46 AM UTC

grubles wrote: post #59

nostrademons wrote: post #51

Earlier quoted context omitted.

Much of this is because of forks - since they offered Bitcoin before the BCH fork (and presumably ETH before the ETC fork), all of their customers who owned one of these before the fork also own the new currency. So they have to support custody for the currencies anyway (unless they want to deal with angry customers saying "What happened to my BCH! Rightfully I own it"), and if they don't support trading they'll get…

That doesn't explain the favoritism for BCH over the multitude of other forks (some worth $50-$100 per token) though. Why no Bitcoin Gold listing?

Post by johnisgood » Sat, Aug 10, 2019, 4:14 AM UTC

ryacko wrote: post #20

bravoetch wrote: post #19

Earlier quoted context omitted.

To follow through on that though, what makes you think that would be anything noticeable? Suddenly a coinbase employee buys a cool car or other new toy... So what? Nobody would think that was exceptional.

I think this is why investigations require low levels of evidence to start, but high levels of evidence to end. Just because it isn’t exceptional doesn’t mean that it isn’t worth looking into. People who are greedy are impulsive and are unlikely to hide an inflow of cash.