Live data from Hacker News

FTX stored private keys to crypto assets in plaintext, without access controls

twitter.com

1–10 of 222 posts

Re: FTX stored private keys to crypto assets in plaintext, without access controls

#2
Wait, what? Private keys were stored in unprotected plaintext files regularly opened by multiple people at the company? WTF?

That crosses the line and goes deep into "willful negligence" territory, in my view.

The physical equivalent would be stacking customer assets like dollar bills and gold bars in big piles inside a heavily trafficked room that has no lock.

The term "irresponsible" doesn't quite do justice to it.

Unbelievable.

Re: FTX stored private keys to crypto assets in plaintext, without access controls

#4
I get such an incredible volume of malicious crypto spam on Discord and Twitter every single day. They're constantly creating new sites as things get banned, new accounts with legitimate-looking traffic, custom art and even videos for the fake "airdrops" they're planning. And FTX is just keeping their billions of dollars unencrypted in S3 buckets. Hey scammers, wouldn't hacking into that be a better use of your time???

Re: FTX stored private keys to crypto assets in plaintext, without access controls

#5
When reading crypto clownworld stories like this, it is easy and fun to observe that cryptocurrency is a satire of the real (or "fiat", if you prefer) financial system.

Less fun, but far more important, is to note how incredibly (infinitely?) subtle this satire is: https://news.ycombinator.com/item?id=22352840

Re: FTX stored private keys to crypto assets in plaintext, without access controls

#7
post #2

Wait, what ? Private keys were stored in unprotected plaintext files regularly opened by multiple people at the company? WTF? That crosses the line and goes deep into "willful negligence" territory, in my view. The physical equivalent would be stacking customer assets like dollar bills and gold bars in big piles inside a heavily trafficked room that has no lock. The term "irresponsible" doesn't quite do justice to it…

Yet FTX wasn’t hacked. Their own irresponsible bets lost it all instead.

Re: FTX stored private keys to crypto assets in plaintext, without access controls

#10
post #2

Wait, what ? Private keys were stored in unprotected plaintext files regularly opened by multiple people at the company? WTF? That crosses the line and goes deep into "willful negligence" territory, in my view. The physical equivalent would be stacking customer assets like dollar bills and gold bars in big piles inside a heavily trafficked room that has no lock. The term "irresponsible" doesn't quite do justice to it…

Personally I believe there's a strong correlation between how crazy you act on social media and how competent your internal security is.
Post reply on HN