Live data from Hacker News

Casa Client Case Study: The Tinder Trap

blog.keys.casa

81–90 of 211 posts

Re: Casa Client Case Study: The Tinder Trap

#81
post #22

Earlier quoted context omitted.

But one point of the article was that he did have MFA - and it's no use in this scenario (attacker had physical access to second factor)

It's not really MFA if it's all done on your phone.

Fair point! The article mentioned his laptop but it's unclear to me.

Aside: It's something I worry about sometimes too on phones...

Re: Casa Client Case Study: The Tinder Trap

#82

I've been working in the payments industry on and off for 15 years. I am yet to work with a payment method that does not support reversal (except for physical cash). As a last resort victims can file chargeback with their issuers or police. To begin with there are several layers of protection built in at acquirer, issuer, network and so on. Almost at each step there's an option to reverse the payment (or issue a comp…

> I am yet to work with a payment method that does not support reversal Is CHAPS reversible? I don’t think it is. Or is it just not exposed as an option to institutions?

Most of these systems are not actually reversible at the protocol level. They sometimes offer cancellation at stages prior to settlement. When needed, transactions are most often "reversed" at the governance level.

Re: Casa Client Case Study: The Tinder Trap

#83
post #75
post #41

Earlier quoted context omitted.

>I am yet to work with a payment method that does not support reversal (except for physical cash). As a last resort victims can file chargeback with their issuers or police. What about the stories of companies being scammed via wire transfer?

Wire transfers can be reversed in some cases but it's not as simple as filing a chargeback; AFAIK it requires cooperation between law enforcement and the recipient bank.

Definitely have been cases where they have not been able to reverse transfers of this type, even for huge sums, where they know exactly where the money went ie. the bank and the specific accounts:

https://en.wikipedia.org/wiki/Bangladesh_Bank_robbery

Re: Casa Client Case Study: The Tinder Trap

#84

I've been working in the payments industry on and off for 15 years. I am yet to work with a payment method that does not support reversal (except for physical cash). As a last resort victims can file chargeback with their issuers or police. To begin with there are several layers of protection built in at acquirer, issuer, network and so on. Almost at each step there's an option to reverse the payment (or issue a comp…

Yeah, this is the part of the cryptocurrency I don’t understand… i feel most people are way more likely to need to have a charge reversed because of fraud than to have some payment to them reversed in fraud…why would we want to make the more likely situation impossible to protect against the more rare situation?

Re: Casa Client Case Study: The Tinder Trap

#85
post #24
post #7

Earlier quoted context omitted.

I prefer to use security by obesity. Meaning I won't get any Tinder dates so my accounts are safe.

Overweight people are worthy of, and capable of, finding love. I know your comment is in jest but it also propagates negativity in a way that is corrosive to others’ self-worth. For those who read your comment and feel bad that the humorous angle is reality to them… it isn’t. Don’t let the world make you feel bad about yourself. For those who read it and get a chuckle about fat people… your world view may benefit fro…

I'm going to get downvoted to hell for saying this, but instead of "not letting the world make you feel bad about yourself" you could also harness that negative feeling as a motivation to do something about it.

Because being overweight is not you being the best version of yourself. Your health, energy, romantic life, and likely even career would improve if you did something about the problem. It is something that's entirely within your control to do something about.

Life is short, it's too short to spend it fat. The best time to take action is now.

Re: Casa Client Case Study: The Tinder Trap

#86

I've been working in the payments industry on and off for 15 years. I am yet to work with a payment method that does not support reversal (except for physical cash). As a last resort victims can file chargeback with their issuers or police. To begin with there are several layers of protection built in at acquirer, issuer, network and so on. Almost at each step there's an option to reverse the payment (or issue a comp…

> I am yet to work with a payment method that does not support reversal (except for physical cash). I'm not sure I get your objection: Physical cash is exactly the use case for bitcoin. There will be financial services and other layers built on top of bitcoin, just as it is done for the dollar, and we are seeing the nascent industry now. (Whoever provides insured services first is going to make a mint.)

I thought Bitcoin was more a store of value (e.g. analogous to gold) than a currency similar to physical cash?

If so the problem becomes, is your personal security up to defending attackers who want to take your pile of digital gold.

Re: Casa Client Case Study: The Tinder Trap

#87

Earlier quoted context omitted.

You're free to believe that I (the author) made up this story. I'm not a fiction writer; the Bitcoin security space is exciting enough without needing to waste time making stories up. I'll note that we have seen several folks report being victims of similar attacks since we published this article. https://twitter.com/Disruptepreneur/status/14131498654759075... https://twitter.com/jayzalowitz/status/141316518720545588…

FYI this comment actually had the effect of confirming that the story is all but made up - there is nothing remotely resembling evidence anywhere, including in this ostensibly defensive comment.

Our client's privacy is more important than your curiosity; it's as simple as that.

Re: Casa Client Case Study: The Tinder Trap

#88
This is such an interesting account. I wonder to what scale this happens.

Surely after you get roofied after a tinder date with an attacker draining your crypto accounts, you'd file a police report and maybe we'd hear about it in the media?

Re: Casa Client Case Study: The Tinder Trap

#89

Earlier quoted context omitted.

> I am yet to work with a payment method that does not support reversal Is CHAPS reversible? I don’t think it is. Or is it just not exposed as an option to institutions?

Most of these systems are not actually reversible at the protocol level. They sometimes offer cancellation at stages prior to settlement. When needed, transactions are most often "reversed" at the governance level.

Bitcoin is reversible on the same level then.

Re: Casa Client Case Study: The Tinder Trap

#90
post #71

Cryptocurrencies offer a single property that is both good and bad: there is no authority who can reverse or block a transaction against the will of the participants. Lawsuits and criminal proceedings can cause government authority to direct banks and financial institutions to do what they say. Government can set rules to block transactions, or to demand more identification to be tied to a transaction. Even cash can…

Government can also seize your crypto but that’s besides the point.

When does non-reversal ever benefit the average Joe?

The only scenarios I can think of is when you transact with non-trustable sources. E.g. buying “stuff” off the darknet (and even here you usually have an escrow).

And that’s just not a use case in most people’s everyday life.

Post reply on HN