xylogx comments on It Turns Out Binance's $6 Billion Hack Happened Because Its Employees Were Vibe Coding

Technology

89,597 readers

13,778 active

2,336 users here now

This is a most excellent place for technology news and articles.

Our Rules

Follow the lemmy.world rules.
Only tech related news or articles.
Be excellent to each other!
Mod approved content bots can post up to 10 articles per day.
Threads asking for personal tech support may be deleted.
Politics threads may be removed.
No memes allowed as posts, OK to post as comments.
Only approved bots from the list below, this includes using AI responses and summaries. To ask if your bot can be added please contact a mod.
Check for duplicates before posting, duplicates may be removed
Accounts 7 days and younger will have their posts automatically removed.

Approved Bots

founded 3 years ago

moderators

[–] xylogx@lemmy.world 15 points 1 day ago (3 children)

How is it that wallet developers had access to customers crypto? This seems like bad security and a breach of trust.

permalink

fedilink

source

hideshow 3 child comments

[–] ParlimentOfDoom@piefed.zip 6 points 1 day ago (2 children)

These big brokerages offer wallet services. And need wallets of their own to store what's being held/traded on their site. Someone has to maintain that stuff.

permalink

fedilink

source

parent

hideshow 2 child comments

[–] GreenKnight23@lemmy.world 11 points 1 day ago (1 child)

you know. I've worked at large corporations that were required to be HIPAA and PCI compliant. the big database with millions of records of sensitive information was limited access. who had access to it?

the application
the DBAs who managed it
me, who managed the application and was backup for the DBAs

not even the execs had access to it.

my point is, it sounds like they aren't following compliance requirements and should probably face a class action suit at the least.

permalink

fedilink

source

parent

hideshow 1 child comment

[–] Buckshot@programming.dev 3 points 1 day ago

Yeah i write financial software now and we're PCI compliant. Devs can't access prod or its very limited and read only with no access to encryption keys. Those who do have prod access, don't have write access to the code. No one has both.

All software installs on any company device are reported to ops.

I'm not saying this couldn't happen but i think it would be way more difficult. Also, we're a company of 15 people.

permalink

fedilink

source

parent