SkunkWorkz comments on It Turns Out Binance's $6 Billion Hack Happened Because Its Employees Were Vibe Coding

Technology

89,543 readers

13,839 active

2,408 users here now

This is a most excellent place for technology news and articles.

Our Rules

Follow the lemmy.world rules.
Only tech related news or articles.
Be excellent to each other!
Mod approved content bots can post up to 10 articles per day.
Threads asking for personal tech support may be deleted.
Politics threads may be removed.
No memes allowed as posts, OK to post as comments.
Only approved bots from the list below, this includes using AI responses and summaries. To ask if your bot can be added please contact a mod.
Check for duplicates before posting, duplicates may be removed
Accounts 7 days and younger will have their posts automatically removed.

Approved Bots

founded 3 years ago

moderators

[–] SkunkWorkz@lemmy.world 12 points 14 hours ago* (1 child)

Yeah but a secure system should have stopped them. And even if that first safety net failed another one should have stopped the hackers from accessing the client’s crypto accounts. Why does a software dev’s computer need access to the live accounts.

Also why can they just access any website? Shit should’ve been locked down. They should’ve only be able to access whitelisted websites.

permalink

fedilink

source

parent

hideshow 1 child comment

[–] Aceticon@lemmy.dbzer0.com 1 point 6 hours ago*

Indeed.

Any half way decent software designer, systems designer or IT security specialist always assumes at least some people are idiots, or naive, or make mistakes even though they know better.

And it only takes one of those doing their thing once for an attacker to get in.

So they design their stuff taking that into account, which in this case means DESIGNING THE FUCKING NETWORK TOPOLOGY SO THAT THE FUCKING PRODUCTION MACHINES DEALING WITH FUCKING BILLIONS OF DOLLARS AREN'T EXPOSED TO PCs WHERE USERS CAN INSTALL ANY SHIT FROM THE INTERNET!

(Sorry, got a bit pissed of with the tremendous incompetence displayed by whomever is their systems designer or whomever didn't hire a fucking senior systems designer to setup the IT infrastructure of a Finance company)

Mind you, in my career I've also worked in Startups and they think somebody who has 5 years experience is senior and put them in charge of shit they really shouldn't be in charge of or probably even touch, so this isn't surprising to me, even if it's still infuriating.

permalink

fedilink

source

parent