Comment by red_admiral
17 days ago
After the Hezbullah pagers incident, the basic assumption has to be that every possible supply chain attack you can think of is realistic.
17 days ago
After the Hezbullah pagers incident, the basic assumption has to be that every possible supply chain attack you can think of is realistic.
It’s always been said that if Mossad is your adversary you are already fucked. But for a some crypto thieves to operate at this level this early is a bit surprising to me. If you had asked me last year to predict when this would happen I probably would have given this year significantly less than 50% probability.
Buying your hardware wallet from random 3rd party no-name distributors in China is kinda asking for trouble, isn't it?
Likewise from a big coorp US or Swiss company.
The difference is that the western attackers go free, whilst the Chinese attackers will very likely be executed.
1 reply →
I’m referring more to the sophistication of the attack.
I think you're vastly underestimating the sophistication of players that target this scale of theft when you make it easy by using an infrastructure designed to be preyed upon.
Banking systems exist such as they do with the regulations that they do for a reason.
I thought it was Israel who did the pager bomb attack, not Hezbollah?
Israeli attack on Hezbollah.
I consider my phone compromised and will not do banking on it at all. The rest of the world is living in blissful ignorance that will burn them some day.
They are liable to the consumer but they can get their money back from their supplier in turn. As long as you only sell stuff sold to you by someone reputable you can get money from, it should be mostly fine.
Please explain the process for reimbursing stolen money from a vendor which will disavow any responsibility as soon as they're on the hook for *illions.
3 replies →
Why don't we see more theft using banking apps on compromised phones in highly developed countries? Also, if you online banking, what platform is safe enough for you?
I guess they will list anything from cash to crypto to bartering with or just using some sort of precious metal. Or quite possibly a more solemn "but do you need money at all?".
There's tons of it, it's just not reported on very well. For corporate it just becomes an insurance matter
Hezbullah and a few innocent civilians. It was pretty messy.
And yet, you could point that out to lots of people that place hardware in extremely sensitive locations and they most likely won't believe you because to do so would require a lot of prepwork. And right next door sits a few hundred million worth of gear...
[dead]