no comments (yet)

sorted by: hot top controversial new old
there doesn't seem to be anything here
69 comments in c/technology@lemmy.world view that post
[–] 58 points 4 days ago (5 children)

They took a job interview from their work machine… 🤦

  • source
  • hideshow 5 child comments
  • [–] 24 points 4 days ago (2 children)

    I've seen people set up interviews with their work email.

  • source
  • parent
  • hideshow 2 child comments
  • [–] [S] 88 points 4 days ago* (last edited 4 days ago) (7 children)

    It appears the Binance hack was a social engineering stunt. Can't say I'm surprised. Often the biggest weaknesses in any system is the people running it.

  • source
  • hideshow 7 child comments
  • [–] 20 points 4 days ago (5 children)

    Still, who the heck takes a job interview call on their office laptop??

  • source
  • parent
  • hideshow 5 child comments
  • [–] 5 points 4 days ago* (last edited 3 days ago)

    A Finance company which has its production systems in the same network as worker computers which aren't locked-down tight is basically amateur hour every hour of the day every day of the month every month of the year.

    You can never assume that workers won't do stupid shit like downloading random software into their work computers even when its a fuckingly obvious bad idea for most people to do such stupid shit - it only takes one idiot, naive fool or even momentary distraction of somebody who should've known better to end up with your network hacked, so you always treat such devices as possibly contaminated.

  • source
  • parent
  • [–] 5 points 4 days ago* (2 children)

    I assumed they were doing the interview and sent the employee an updated cv or similar, but I was wrong

    The Pyongyang-backed crew is also highly adept at job market scams - both posing as IT workers, who are then hired by Western companies, and as potential employers to lure software engineers into downloading malware and infecting corporate devices.

    Fr, why use your current work laptop?

  • source
  • parent
  • hideshow 2 child comments
  • [–] 6 points 4 days ago (1 child)

    Because you are trying to get a new job so fuck your current employer :D

    But for real, I admit I actually did this since the interview time was during working hours and I am then, well, at work.

    I don't like taking a whole or half day off for an interview, so yeah. But I get that this is not possible for everyone.

  • source
  • parent
  • hideshow 1 child comment
  • [–] 5 points 4 days ago

    I guess there is a point of giving no fucks you reach at some point, yeah. I’ve used the parking lot, but I was connected to different wifi.

    The last time I had a work laptop, I did have to make an appointment with IT for them to install Firefox, because we couldn’t download any programs and it only came with chrome. It was incredibly annoying, but I guess I can appreciate it a little more now (but for real, why the appointment?).

    Thinking about it more thoroughly though, I downloaded probably about 30k lawsuit filings over the course of my job there. Most were from trustworthy sources, but sometimes they were just in document repositories arranged by law firms.

    I hope they have some way of securing that 🙃

  • source
  • parent
  • [–] 33 points 4 days ago (1 child)

    People scoff at the mandatory infosec training for SOC II and ISO 27001 compliance, then download garbage to their work computer and lose $6B.

  • source
  • hideshow 1 child comment
  • [–] 25 points 4 days ago (3 children)

    FBI alleges that it's North Korea, North Korea publishes a proclamation that it's not them.

    https://www.bbc.com/news/articles/c6rey4v53exgo

    I'd like to see at least some detail that goes into attributing it.

  • source
  • hideshow 3 child comments
  • [–] 18 points 4 days ago (1 child)

    I've been listening to old "Darknet Diaries" episodes recently, and stumbled on this episode about NK crypto heists and laundering which is very relevant for the topic

  • source
  • hideshow 1 child comment
  • [–] 17 points 3 days ago (3 children)

    I work in HR. I am getting emails DAILY from data thieves pretending to be an actual employee asking I change their direct deposit account. Luckily I have access to each employee's personal email info, so if what I get isn't from their personal email I ignore it.

  • source
  • hideshow 3 child comments
  • [–] 4 points 3 days ago* (1 child)

    Well, you just call to confirm. Like, yes, that address is fine, but any financial changes out to have a human confirmation process. A simple: did you…? Yes/no?

    If they start spoofing, what’s the protocol?

    Emails are nice because the messages often tack on routing, which is traceable so I hope you have a good IT team willing to filter.

  • source
  • parent
  • hideshow 1 child comment
  • [–] 4 points 3 days ago

    If the email seems like it could be legit, I call the employee to confirm. We have a form the employee fills out to make the change that needs sensitive information, like their SSN and employee ID. For the stuff that's obvious phishing I delete without responding.

  • source
  • parent
  • [–] 8 points 3 days ago

    Finally, some consequences for having a convoluted interview process.

  • source
  • [–] 6 points 3 days ago

    On the bright side they were already looking for a new job. Since they definitely don't have that old one anymore lol.

  • source
  • [–] 7 points 3 days ago (2 children)

    But I thought all regulations were bad and just the govenrment stealing your money? Are you telling me they might have a purpose???

  • source
  • hideshow 2 child comments
  • [–] 8 points 4 days ago (3 children)
  • [–] 19 points 4 days ago (11 children)

    Why is the FBI investigating? Bitcoin is deliberately untraceable (ish), private (ish), tax free currency, free from meddlesome government regulation and intererence. So why should tax funded law enfrcement for any country expend reaources investigating bitcoin related theft? These billionaires are all libertarians until they get fucked by hostile state actors and then it’s big government to the rescue.

  • source
  • hideshow 11 child comments
  • [–] 21 points 4 days ago (2 children)

    Bitcoin is far from untraceable. In fact, it's one of the most traceable currencies that's ever existed.

    After all, you can see exactly what address sent exactly what amount to exactly what other address. All you have to do is compromise the addresses and then you know the people. And KYC from Exchanges does an incredibly good job at that.

  • source
  • parent
  • hideshow 2 child comments
  • [–] 1 point 3 days ago (1 child)

    ish. North Korea is still denying the hack, and I don't think any of us can really prove it.

  • source
  • parent
  • hideshow 1 child comment
  • [–] 15 points 4 days ago (5 children)

    So many reasons. The company is American and it is holding value for Americans, so it's beholden to the SEC and a thousand compliance laws in the US.

    Crypto as you know it is anonymous, but exchanges to operate in the US have so much scrutiny and compliance. They've had Id verification for years.

    So in this case yes, it was the largest heist on currency in history, and a massive chunk was Americans'. I'd be shocked if they didn't investigate.

    Not to mention if it's happening with crypto, it's happening g with standard banks too. Not investigating would leave everyone else vulnerable to it.

  • source
  • parent
  • hideshow 5 child comments
  • [–] 11 points 4 days ago (3 children)

    What happened to be your own bank? I thought having your bitcoin transactions being irreversible was a feature.

    Only dirty fiat currency and banks let you reverse transactions or retrieve stolen dollars.

  • source
  • parent
  • hideshow 3 child comments
  • [–] 5 points 4 days ago (2 children)

    It is. Only idiots leave their crypto on an exchange.

    Exchanges are a lot like public toilets. You should go in, do your business, and get the fuck out. But a lot of people decide that they like the public toilet, and they'll just stick around and chat about the weather.

  • source
  • parent
  • hideshow 2 child comments
  • "The attackers also took steps to hide the malicious script and evade detection,"

    But also, script contains comment "replace it with a malicious version"

  • source
  • [–] 2 points 3 days ago (4 children)

    So, is it still a hot take to say that all cryptocurrency does is fund North Korea?

  • source
  • hideshow 4 child comments
  • [–] 1 point 4 days ago

    They got the idea to do a fake interview and fuck the person up the ass from porn

  • source
  • [–] -1 points 4 days ago* (13 children)

    At least nothing of any real value was lost. Bitcoins are not really better than NFT, and those are worthless today. It's just that bitcoin can be used for illegal activities, otherwise they have no use, but that's apparently enough for some people to still believe they are worth something.

  • source
  • hideshow 13 child comments
  • [–] 39 points 4 days ago (2 children)

    I mean apparently it's a good way to irreversibly move $6.3 billion very quickly, if you're into that.

  • source
  • parent
  • hideshow 2 child comments
  • [–] [S] 8 points 4 days ago (4 children)

    Some use crypto for illegal activities yes, but some just like their privacy, and it's good that we have a means for people to continue to maintain their privacy in their financial dealings. Especially now that Donald has normalized the surveillance state to a formerly unimaginable degree.

    And besides, the fees for transferring crypto internationally are significantly lower than transacting internationally through a bank, so saying there's not utility for it isn't exactly true.

  • source
  • parent
  • hideshow 4 child comments
  • [–] 10 points 4 days ago (2 children)

    Aren't distributed ledgers public? Once someone's ID has been determined, aren't their transactions publicly visible?

  • source
  • parent
  • hideshow 2 child comments
  • [–] [S] 3 points 4 days ago* (last edited 4 days ago)

    I think so. I'm not an expert in crypto, but I know that there are ways to connect identities to transactions, though my understanding is that it's not a simple thing. You have to have enough data to connect a wallet to an ID, IIRC.

    I read a really good book about it earlier this year: Tracers in the Dark. (Which I highly recommend. EXCELLENT book.)

  • source
  • parent
  • [–] 3 points 4 days ago

    Bitcoin has Layer-2 (aka Lightning) transactions which happen off chain. The off chain transactions aren't recorded individually, just the gross amounts to set up funds to go off the chain and then to record the funds coming back onto the chain. Its possible to infer transaction information from timing of amounts going off chain to reconstruct the history, but I;m not sure how practical that is in a real world situation. Other crypto like Monero was designed with more privacy in mind, and is more immune to these types of forensics.

  • source
  • parent
  • [–] 1 point 4 days ago

    Bitcoin does not protect privacy, that was a claim when it was new, but has been thoroughly debunked. Bitcoins are as traceable as any other digital payment.
    Using it illegally is reserved for people or nations that are out of reach of the law.

  • source
  • parent
  • [–] 2 points 4 days ago (4 children)

    Considering Bitcoin is almost entirely traceable, it is a really, really bad idea to use Bitcoin for illegal activity.

  • source
  • parent
  • hideshow 4 child comments
  • [–] 1 point 4 days ago (3 children)

    Except if you are a country like Russia or North Korea.

  • source
  • parent
  • hideshow 3 child comments
  • [–] 2 points 4 days ago (2 children)

    Yeah, a nation state actor can get away with using Bitcoin for illegal activity. Regular people, though, cannot.

  • source
  • parent
  • hideshow 2 child comments
  • [–] 1 point 4 days ago (1 child)

    Exactly. But the independence from government control was a HUGE selling point originally.
    But it only works if you are legally immune from consequences. Like for instance Russia and North Korea.
    And guess who has been using bitcoin to circumvent sanctions? 😋

  • source
  • parent
  • hideshow 1 child comment
  • [–] 0 points 4 days ago

    North Korea do so many scams and cyber thefts mostly aimed at America.

  • source
  • 3 comments in c/pulse_of_truth@infosec.pub view that post
    [–] 8 points 5 days ago (1 child)

    The dumbass engineer did job interview work on his company laptop.

  • source
  • hideshow 1 child comment
  • [–] 3 points 5 days ago

    Interesting read. They really meant business for that heist.

  • source