Live data from Hacker News

Massachusetts Steamship Authority hit by ransomware attack; ferries delayed

nbcboston.com

81–90 of 267 posts

Re: Massachusetts Steamship Authority hit by ransomware attack; ferries delayed

#81

Earlier quoted context omitted.

Would it? For some businesses, the reality is going to be that paying is necessary to continue to exist. What happens when that option, as crappy as it is, is off the table?

> the reality is going to be that paying is necessary to continue to exist. What happens when that option, as crappy as it is, is off the table? Insurance. Back-ups. Bail outs. Go out of business. That ransom paid has negative externalities that manifest nationally.

[deleted]

Re: Massachusetts Steamship Authority hit by ransomware attack; ferries delayed

#82
post #27

A federal ban on paying ransomeware would reduce the incentive to commit these attacks.

You can imagine it just being easier to code indiscriminate attacks where they only review the results to pick who it is worth collecting the ransom from. Unencrypting for vicitims in the US that couldn't pay would just add more exposure risk to them of getting caught, so they would have no incentive to actually do it. It would take a large bit of money out of the system, but it seems like you need all countries to c…

They used to target individuals, but have moved to larger institutions with likely big insurance payouts. Schools, companies, government agencies.

Re: Massachusetts Steamship Authority hit by ransomware attack; ferries delayed

#83
post #24

Earlier quoted context omitted.

It's not the IT workers saying that their secure, it's us telling the business that we need X dollars to mitigate risk of Y. And then the accounting people are like "But it hasn't happened yet, why would we pay to prevent something that hasn't happened yet!???"

Can we go after these decision makers for negligence, then?

Probably not. We can't even go after businesses when they do something that's clearly awful. Much less when the thing they most hurt is their bottom line.

Re: Massachusetts Steamship Authority hit by ransomware attack; ferries delayed

#84
post #72

Earlier quoted context omitted.

I saw a badly written headline yesterday that combined the meat industry hack with something about colonial pipeline, and it briefly brought to mind a mental image of a liquefied meat slurry/pink goo pipeline.

https://xkcd.com/1649/

imagine the retail value in dollars per liter of an HP inkjet printer ink pipeline

Re: Massachusetts Steamship Authority hit by ransomware attack; ferries delayed

#86

A federal ban on paying ransomeware would reduce the incentive to commit these attacks.

It wouldn't reduce the incentive for state-level or state-funded attackers to target foreign infrastructure, though.

Re: Massachusetts Steamship Authority hit by ransomware attack; ferries delayed

#87

A federal ban on paying ransomeware would reduce the incentive to commit these attacks.

It would cause companies to pay secretly and illegally instead, something which cryptocurrencies enable. Ban cryptocurrencies. They are the cause of the ransomware epidemic.

I have a better idea, we should make ransomwaring illegal. That'll definitely stop it from happening.

Re: Massachusetts Steamship Authority hit by ransomware attack; ferries delayed

#88

Earlier quoted context omitted.

It would cause companies to pay secretly and illegally instead, something which cryptocurrencies enable. Ban cryptocurrencies. They are the cause of the ransomware epidemic.

> Ban cryptocurrencies. This is meant sincerely, not glibly: How? How can cryptocurrencies be banned in any meaningful sense? We can "ban" them in a legal sense ("Use of cryptocurrencies are illegal after 1 Jan 2022"), great. But how can they be practically banned so long as computers themselves are not invaded by governments to observe every detail of their operation and private overlay networks are still technicall…

> This is meant sincerely, not glibly: How? How can cryptocurrencies be banned in any meaningful sense?

The only way to buy or sell cryptocurrency for the vast majority of people is through exchange companies that have the blessing of the US to continue operating. Even LocalBitcoins goes out of their way to follow KYC laws.

Re: Massachusetts Steamship Authority hit by ransomware attack; ferries delayed

#89
post #18

Time to ban bitcoin. https://newrepublic.com/article/162589/ban-bitcoin-cryptocur...

Isn't this like banning cash to stop muggings?

It is, and it has proven very effective. Robberies against banks and stores have been cut in half during the last ten years, as cash is getting harder to access.

Many store open after 19:00 don't have much cash on hand so robbing them is not really attractive any more. There are almost no bank robberies, as even banks doesn't actually have cash.

The people who get mugged are normally forced to go to an ATM to withdraw cash.

I'm not suggesting we just randomly ban stuff to avoid the criminals from exploiting it, but it is working.

Post reply on HN